last executing test programs: 3.411867674s ago: executing program 3 (id=8124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 3.351370009s ago: executing program 3 (id=8125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, 0x0) 3.172981253s ago: executing program 3 (id=8129): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 896.810058ms ago: executing program 2 (id=8132): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4800) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 747.08044ms ago: executing program 3 (id=8134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 731.316271ms ago: executing program 2 (id=8135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 716.416532ms ago: executing program 4 (id=8136): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x42100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 683.063325ms ago: executing program 4 (id=8138): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) unshare(0x2040400) syz_open_dev$evdev(0x0, 0x3, 0x500) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) syz_open_dev$evdev(&(0x7f00000006c0), 0x9, 0x50000) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4}, &(0x7f0000044000)) 567.164385ms ago: executing program 3 (id=8141): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e810982db44b9452d85820211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c8bd987800815ca4d683f5aeb4edbb57a5025ccca9e00360db701000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef49835a14d66db87215199dde938161", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x214, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e4, 0x2, {{0x0, 0x0, 0x57b2, 0x0, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x7, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x214}}, 0x0) 566.621425ms ago: executing program 2 (id=8142): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xee00, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(r0, 0x0, 0x20000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001c00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000, 0xffcb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) 558.402115ms ago: executing program 4 (id=8143): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='w\xde\x06\x00\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\x0f>') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 520.111848ms ago: executing program 3 (id=8144): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000003c0)="5e6eb006f9b283e40084d4610132fbf7f6097b37aa7b8872eee065713e49c348ea4cdcda384f4039afb35137049068106a365cc2880e360224d5ffbbfadcf8773a3ca1bf78818b8bb0a117e5e88a8ed6ded661ecb32f06803ce721f49e33fc5f442de4f7ab17ebbe13f2f03838daea8b029ef64de80a3178fd55798e90c4c6b35a36f306a97beb7e8554eba9f07c5165a88969c35f661486ad486f3a366743aa", 0xa0}, {&(0x7f00000001c0)="fd0a5294638f5232ed96d50ffdc85e2b163aec479880dbf2", 0x18}], 0x2, &(0x7f0000000480)="73f1058049e52b2695e05700e17e477eeab6b41b9c60e0e1ad7a4a45", 0x1c, 0x4040041}, 0x11) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x11) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 519.280538ms ago: executing program 0 (id=8145): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4800) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 478.875561ms ago: executing program 4 (id=8146): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1e}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8002}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "586f52268dfc63fbcf"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='ext4_fc_track_inode\x00', 0xffffffffffffffff, 0x0, 0x7ffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000186dd5f1000048edf2067b83ec2bc0e5f1d1a8ad15efd59fa45d47fbcdf985229c4ef4be3557cba5adf0aea59975bd3adf35f651cba9244d5491dd9185f519559dacfaa773dc4e81a6c618018ab75210071b89e3d6746c35ee3341379023040a08d0572102b6f530a2e4731ab1e10c5635cfe888663e783acd3e5561b7ffd7d9b0f44c49e3f119ea7e81e26a93c0ee186b9179c8ee4aeb52b5c9aefeb661bf5100"/197], 0x50) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x5000) close(r5) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r6) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000440)={0x80, 0xd, 0xf03, 0x1, 0x0, 0x40, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='br_fdb_external_learn_add\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r9, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r9, 0x26, &(0x7f00000031c0)={0x0, 0x0, 0x100000000000}) close_range(r8, 0xffffffffffffffff, 0x0) 457.286773ms ago: executing program 1 (id=8147): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) setresgid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 454.152864ms ago: executing program 0 (id=8148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) 410.405577ms ago: executing program 1 (id=8149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x60}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 381.605909ms ago: executing program 2 (id=8150): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7}) ftruncate(r2, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000001340)=ANY=[@ANYRES32=r1, @ANYBLOB="d6695a6c9e5a", @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="171ecf835a045258a83759d6f3e33791653a6689bafb14d5d714ca81c0dcb902e8534fd48148d674e4bcb5c71815dec4ae754b6ac2bbea4a28b7ca331383c838ee034dfe711869dbade670c30d5082538fe0fb55e7d156a88216561717afd8adf3e9c03c7079624fd0b39104d2b5d42feec190ba4978c1c84bdec50d4e34d99870b18d474ba0a625f503b07fd640495f", @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="01f9"], 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000480)={[{@errors_continue}, {@discard}, {@stripe={'stripe', 0x3d, 0x7fffffff}}, {@user_xattr}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000c0000000000000000fa00006100"], 0x0, 0x28}, 0x20) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000000000000070000000200000000000000"], 0x18}, 0x4840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000008aa4800950f00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r5, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="a8bd8a70ec5e03804e95c578b8c1006e93245049be5289a4d091c4beeb865c4b130e67afe3ee52b2b7022801b40dc0f4ef5bce00ed7d6539c1c60a68c6a8d7a94086bae0b92f9a52c75b76204a9e551dbb458220", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) 348.689482ms ago: executing program 0 (id=8151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 320.487374ms ago: executing program 0 (id=8152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc0260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x5, 0x50, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0, r0], 0x0, 0x10, 0x1}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000400)=0x1) socketpair(0x2c, 0x3, 0x6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) 300.339456ms ago: executing program 1 (id=8153): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) unshare(0x2040400) syz_open_dev$evdev(0x0, 0x3, 0x500) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) syz_open_dev$evdev(&(0x7f00000006c0), 0x9, 0x50000) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4}, &(0x7f0000044000)) 296.278616ms ago: executing program 0 (id=8154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 281.097427ms ago: executing program 1 (id=8155): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) chdir(&(0x7f0000000000)='./file0\x00') 256.627009ms ago: executing program 1 (id=8156): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='w\xde\x06\x00\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\x0f>') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 249.4355ms ago: executing program 2 (id=8157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 225.452292ms ago: executing program 4 (id=8158): openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4800) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 191.149655ms ago: executing program 1 (id=8159): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000003c0)="5e6eb006f9b283e40084d4610132fbf7f6097b37aa7b8872eee065713e49c348ea4cdcda384f4039afb35137049068106a365cc2880e360224d5ffbbfadcf8773a3ca1bf78818b8bb0a117e5e88a8ed6ded661ecb32f06803ce721f49e33fc5f442de4f7ab17ebbe13f2f03838daea8b029ef64de80a3178fd55798e90c4c6b35a36f306a97beb7e8554eba9f07c5165a88969c35f661486ad486f3a366743aa", 0xa0}, {&(0x7f00000001c0)="fd0a5294638f5232ed96d50ffdc85e2b163aec479880dbf2", 0x18}], 0x2, &(0x7f0000000480)="73f1058049e52b2695e05700e17e477eeab6b41b9c60e0e1ad7a4a45", 0x1c, 0x4040041}, 0x11) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x11) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 169.258477ms ago: executing program 4 (id=8160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_emit_ethernet(0x76, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60fec00000403a0020010000000000000000000000000002ff020000000000000000000000000001020090780000a546128ae054fcf721bf00006018b08800002c0000000000000000000000000000000000ff0100000000000000000000000000013a00000000000000fafb17c133d11e59"], 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYBLOB="b2f8c8b14fc8059b74784c6fb707b92dc2285f2fd35aaa016e2a61e7ddd664a6941f6300a8e1aab6230dc250cf195ed8477d56ed22bd30b1874cf85388cdefc39c475cdeabe86f47d8e2416ccb500e45dbd109ec1a95d0bcadf7d97f39b5d258bd2f917b90262002203af75896ca8ed7b4941b0d265cabb52ff427ffeb4a805d8bf07fb53ea688dc38702912ce8ee604be2c7893473a", @ANYRESOCT=r2, @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000380)={0x1, 0x0, 0x17, 0x6, 0x10c, &(0x7f0000000c00)}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r8, @ANYBLOB, @ANYRESDEC=r8, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) keyctl$set_reqkey_keyring(0xe, 0x1) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 149.767808ms ago: executing program 0 (id=8161): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xee00, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(r0, 0x0, 0x20000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001c00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000, 0xffcb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) 0s ago: executing program 2 (id=8162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x4, 0x4}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x34}}, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0xfffffff7}, {0xfffffffd, 0x2}]}, 0x14, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r9 = socket(0x10, 0x3, 0x9) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r9, r10, 0x0, 0x7fffffffffffffff) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): 10 RSI: 0000200000000180 RDI: 0000000000000003 [ 560.488772][T24892] RBP: 00007f56562cf090 R08: 0000000000000000 R09: 0000000000000000 [ 560.488785][T24892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.488836][T24892] R13: 00007f5657a96038 R14: 00007f5657a95fa0 R15: 00007ffdf42b1b88 [ 560.488857][T24892] [ 560.768517][T24904] program syz.3.6834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.784277][T24908] 9p: Unknown Cache mode or invalid value n [ 560.884799][T24911] netlink: 'syz.0.6837': attribute type 23 has an invalid length. [ 561.427042][T24938] program syz.2.6848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.542240][T24944] __nla_validate_parse: 4 callbacks suppressed [ 561.542266][T24944] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6851'. [ 561.618054][T24946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6852'. [ 561.734868][T24946] netlink: 'syz.3.6852': attribute type 21 has an invalid length. [ 561.759506][T24950] program syz.0.6854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.778741][T24946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6852'. [ 562.145953][T24969] 9pnet_fd: Insufficient options for proto=fd [ 562.470303][T24978] netlink: 'syz.1.6864': attribute type 23 has an invalid length. [ 562.737701][T24988] netlink: 'syz.2.6868': attribute type 13 has an invalid length. [ 562.797556][T24997] dummy0: entered allmulticast mode [ 562.806690][T24997] dummy0: left allmulticast mode [ 563.705573][T25040] 9pnet_fd: Insufficient options for proto=fd [ 563.892043][T25044] netlink: 'syz.3.6890': attribute type 13 has an invalid length. [ 564.002624][T25053] netlink: 'syz.0.6891': attribute type 23 has an invalid length. [ 564.389731][T25059] FAULT_INJECTION: forcing a failure. [ 564.389731][T25059] name failslab, interval 1, probability 0, space 0, times 0 [ 564.402688][T25059] CPU: 1 UID: 0 PID: 25059 Comm: syz.2.6893 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 564.402729][T25059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.402747][T25059] Call Trace: [ 564.402755][T25059] [ 564.402762][T25059] __dump_stack+0x1d/0x30 [ 564.402792][T25059] dump_stack_lvl+0xe8/0x140 [ 564.402819][T25059] dump_stack+0x15/0x1b [ 564.402895][T25059] should_fail_ex+0x265/0x280 [ 564.403076][T25059] should_failslab+0x8c/0xb0 [ 564.403104][T25059] __kvmalloc_node_noprof+0x123/0x4e0 [ 564.403213][T25059] ? traverse+0x9d/0x3a0 [ 564.403244][T25059] ? bcmp+0x2e/0x90 [ 564.403275][T25059] traverse+0x9d/0x3a0 [ 564.403315][T25059] ? _parse_integer_limit+0x170/0x190 [ 564.403376][T25059] seq_read_iter+0x853/0x940 [ 564.403416][T25059] ? kstrtoull+0x111/0x140 [ 564.403483][T25059] seq_read+0x1f7/0x240 [ 564.403519][T25059] ? __pfx_seq_read+0x10/0x10 [ 564.403604][T25059] proc_reg_read+0x128/0x1c0 [ 564.403647][T25059] ? __pfx_proc_reg_read+0x10/0x10 [ 564.403689][T25059] vfs_read+0x1a0/0x6f0 [ 564.403716][T25059] ? __rcu_read_unlock+0x4f/0x70 [ 564.403789][T25059] ? __fget_files+0x184/0x1c0 [ 564.403819][T25059] __x64_sys_pread64+0xfd/0x150 [ 564.403853][T25059] x64_sys_call+0x29e2/0x2ff0 [ 564.403889][T25059] do_syscall_64+0xd2/0x200 [ 564.403922][T25059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 564.404030][T25059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 564.404060][T25059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.404090][T25059] RIP: 0033:0x7f5adeeaebe9 [ 564.404110][T25059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.404129][T25059] RSP: 002b:00007f5add90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 564.404163][T25059] RAX: ffffffffffffffda RBX: 00007f5adf0d5fa0 RCX: 00007f5adeeaebe9 [ 564.404181][T25059] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000003 [ 564.404198][T25059] RBP: 00007f5add90f090 R08: 0000000000000000 R09: 0000000000000000 [ 564.404215][T25059] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 564.404229][T25059] R13: 00007f5adf0d6038 R14: 00007f5adf0d5fa0 R15: 00007ffccb86cad8 [ 564.404298][T25059] [ 564.812620][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 564.812638][ T29] audit: type=1326 audit(1754690966.051:48474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 564.843421][ T29] audit: type=1326 audit(1754690966.051:48475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 564.867808][ T29] audit: type=1326 audit(1754690966.051:48476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 564.891510][ T29] audit: type=1326 audit(1754690966.051:48477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 564.916109][ T29] audit: type=1326 audit(1754690966.051:48478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 564.940054][ T29] audit: type=1326 audit(1754690966.061:48479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc06dcd550 code=0x7ffc0000 [ 564.963810][ T29] audit: type=1326 audit(1754690966.061:48480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbc06dd0417 code=0x7ffc0000 [ 564.987603][ T29] audit: type=1326 audit(1754690966.061:48481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 565.011666][ T29] audit: type=1326 audit(1754690966.061:48482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbc06dd0417 code=0x7ffc0000 [ 565.035524][ T29] audit: type=1326 audit(1754690966.061:48483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbc06dcd84a code=0x7ffc0000 [ 565.530796][T25084] 9pnet_fd: Insufficient options for proto=fd [ 565.912941][T25094] netlink: 'syz.4.6906': attribute type 23 has an invalid length. [ 566.329700][T25102] netlink: 'syz.3.6910': attribute type 13 has an invalid length. [ 567.164774][T25112] program syz.0.6913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 567.567705][T25138] netlink: 'syz.0.6925': attribute type 21 has an invalid length. [ 567.595239][T25138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6925'. [ 567.730470][T25149] program syz.1.6929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.136999][T25167] 9pnet_fd: Insufficient options for proto=fd [ 568.323601][T25175] program syz.2.6940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.508871][T25181] netlink: '+}[@': attribute type 13 has an invalid length. [ 568.548424][T25198] FAULT_INJECTION: forcing a failure. [ 568.548424][T25198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.561909][T25198] CPU: 1 UID: 0 PID: 25198 Comm: syz.3.6950 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 568.561977][T25198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.561995][T25198] Call Trace: [ 568.562005][T25198] [ 568.562017][T25198] __dump_stack+0x1d/0x30 [ 568.562048][T25198] dump_stack_lvl+0xe8/0x140 [ 568.562147][T25198] dump_stack+0x15/0x1b [ 568.562170][T25198] should_fail_ex+0x265/0x280 [ 568.562216][T25198] should_fail_alloc_page+0xf2/0x100 [ 568.562253][T25198] __alloc_frozen_pages_noprof+0xff/0x360 [ 568.562330][T25198] alloc_pages_mpol+0xb3/0x250 [ 568.562407][T25198] vma_alloc_folio_noprof+0x1aa/0x300 [ 568.562498][T25198] handle_mm_fault+0xec2/0x2c20 [ 568.562524][T25198] ? __rcu_read_lock+0x37/0x50 [ 568.562616][T25198] ? __pte_offset_map_lock+0x1d4/0x230 [ 568.562662][T25198] __get_user_pages+0x102e/0x1fa0 [ 568.562700][T25198] __gup_longterm_locked+0x8f4/0xe60 [ 568.562735][T25198] ? security_ptrace_access_check+0x69/0x80 [ 568.562761][T25198] ? __ptrace_may_access+0x2c3/0x340 [ 568.562795][T25198] pin_user_pages_remote+0x7e/0xb0 [ 568.563043][T25198] process_vm_rw+0x484/0x960 [ 568.563165][T25198] __x64_sys_process_vm_writev+0x78/0x90 [ 568.563218][T25198] x64_sys_call+0x2a7c/0x2ff0 [ 568.563248][T25198] do_syscall_64+0xd2/0x200 [ 568.563282][T25198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 568.563382][T25198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 568.563413][T25198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.563442][T25198] RIP: 0033:0x7f660e12ebe9 [ 568.563464][T25198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.563492][T25198] RSP: 002b:00007f660cb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 568.563513][T25198] RAX: ffffffffffffffda RBX: 00007f660e355fa0 RCX: 00007f660e12ebe9 [ 568.563588][T25198] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000003aa [ 568.563606][T25198] RBP: 00007f660cb8f090 R08: 0000000000000001 R09: 0000000000000000 [ 568.563622][T25198] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 568.563635][T25198] R13: 00007f660e356038 R14: 00007f660e355fa0 R15: 00007ffe5a539a98 [ 568.563656][T25198] [ 569.814667][T25209] program syz.4.6953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.281074][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 571.281092][ T29] audit: type=1326 audit(1754690971.451:48784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.311180][ T29] audit: type=1326 audit(1754690971.451:48785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.335236][ T29] audit: type=1326 audit(1754690971.551:48786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.359134][ T29] audit: type=1326 audit(1754690971.551:48787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.383777][ T29] audit: type=1326 audit(1754690971.551:48788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.407607][ T29] audit: type=1326 audit(1754690971.651:48789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.431618][ T29] audit: type=1326 audit(1754690971.651:48790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.455304][ T29] audit: type=1326 audit(1754690971.651:48791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.479123][ T29] audit: type=1326 audit(1754690971.851:48792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 571.503097][ T29] audit: type=1326 audit(1754690971.851:48793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.2.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 572.125420][T25243] pim6reg1: entered promiscuous mode [ 572.131027][T25243] pim6reg1: entered allmulticast mode [ 572.211295][T25245] Falling back ldisc for ttyS3. [ 573.116922][T25287] netlink: 'syz.1.6982': attribute type 23 has an invalid length. [ 573.277906][T25289] netlink: '+}[@': attribute type 13 has an invalid length. [ 573.696437][T25301] netlink: 'syz.2.6987': attribute type 13 has an invalid length. [ 574.144775][T25317] netlink: 'syz.1.6990': attribute type 23 has an invalid length. [ 574.238221][T25327] 9pnet_fd: Insufficient options for proto=fd [ 576.814459][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 576.814487][ T29] audit: type=1326 audit(1754690977.361:49448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.844947][ T29] audit: type=1326 audit(1754690977.361:49449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.868802][ T29] audit: type=1326 audit(1754690977.461:49450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.882904][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7005'. [ 576.892499][ T29] audit: type=1326 audit(1754690977.461:49451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.925011][ T29] audit: type=1326 audit(1754690977.461:49452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.948901][ T29] audit: type=1326 audit(1754690977.561:49453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.972661][ T29] audit: type=1326 audit(1754690977.561:49454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 576.996743][ T29] audit: type=1326 audit(1754690977.561:49455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 577.020503][ T29] audit: type=1326 audit(1754690977.761:49456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 577.044386][ T29] audit: type=1326 audit(1754690977.761:49457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.2.7004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 577.793592][T25390] netlink: 'syz.2.7015': attribute type 23 has an invalid length. [ 577.823969][T25394] netlink: 'syz.1.7016': attribute type 21 has an invalid length. [ 577.832653][T25394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7016'. [ 578.069038][T25402] netlink: '+}[@': attribute type 13 has an invalid length. [ 578.308650][T25421] netlink: '+}[@': attribute type 13 has an invalid length. [ 578.383906][T25433] FAULT_INJECTION: forcing a failure. [ 578.383906][T25433] name failslab, interval 1, probability 0, space 0, times 0 [ 578.396690][T25433] CPU: 1 UID: 0 PID: 25433 Comm: syz.4.7034 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 578.396778][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.396792][T25433] Call Trace: [ 578.396800][T25433] [ 578.396856][T25433] __dump_stack+0x1d/0x30 [ 578.396882][T25433] dump_stack_lvl+0xe8/0x140 [ 578.396903][T25433] dump_stack+0x15/0x1b [ 578.396925][T25433] should_fail_ex+0x265/0x280 [ 578.397028][T25433] should_failslab+0x8c/0xb0 [ 578.397116][T25433] kmem_cache_alloc_noprof+0x50/0x310 [ 578.397154][T25433] ? sctp_get_port_local+0x438/0xae0 [ 578.397197][T25433] sctp_get_port_local+0x438/0xae0 [ 578.397231][T25433] sctp_do_bind+0x398/0x4b0 [ 578.397272][T25433] sctp_connect_new_asoc+0x153/0x3a0 [ 578.397323][T25433] sctp_sendmsg+0xf10/0x18d0 [ 578.397410][T25433] ? selinux_socket_sendmsg+0x141/0x1b0 [ 578.397451][T25433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 578.397487][T25433] inet_sendmsg+0xc2/0xd0 [ 578.397524][T25433] __sock_sendmsg+0x102/0x180 [ 578.397609][T25433] __sys_sendto+0x268/0x330 [ 578.397652][T25433] __x64_sys_sendto+0x76/0x90 [ 578.397741][T25433] x64_sys_call+0x2d05/0x2ff0 [ 578.397850][T25433] do_syscall_64+0xd2/0x200 [ 578.397896][T25433] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 578.397925][T25433] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 578.397956][T25433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.397997][T25433] RIP: 0033:0x7f565786ebe9 [ 578.398018][T25433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.398042][T25433] RSP: 002b:00007f56562cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.398063][T25433] RAX: ffffffffffffffda RBX: 00007f5657a95fa0 RCX: 00007f565786ebe9 [ 578.398076][T25433] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 578.398166][T25433] RBP: 00007f56562cf090 R08: 0000200000000140 R09: 000000000000001c [ 578.398182][T25433] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 578.398199][T25433] R13: 00007f5657a96038 R14: 00007f5657a95fa0 R15: 00007ffdf42b1b88 [ 578.398226][T25433] [ 578.664469][T25439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7038'. [ 578.692084][T25439] netlink: 'syz.0.7038': attribute type 21 has an invalid length. [ 578.700070][T25439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7038'. [ 578.727738][T25447] 9pnet_fd: Insufficient options for proto=fd [ 579.275152][T25472] netlink: 'syz.0.7046': attribute type 13 has an invalid length. [ 579.426811][T25478] netlink: 'syz.1.7047': attribute type 23 has an invalid length. [ 580.096212][T25494] netlink: 'syz.3.7051': attribute type 13 has an invalid length. [ 580.143633][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7054'. [ 580.180906][T25498] netlink: 'syz.2.7054': attribute type 21 has an invalid length. [ 580.233697][T25498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7054'. [ 580.329576][T25506] 9pnet_fd: Insufficient options for proto=fd [ 580.654884][T25530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7065'. [ 580.842718][T25542] netlink: '+}[@': attribute type 13 has an invalid length. [ 581.669522][T25581] program syz.0.7081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.015374][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 582.015390][ T29] audit: type=1326 audit(1754690983.271:49670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.086837][ T29] audit: type=1326 audit(1754690983.301:49671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.110598][ T29] audit: type=1326 audit(1754690983.301:49672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.134502][ T29] audit: type=1326 audit(1754690983.301:49673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.158568][ T29] audit: type=1326 audit(1754690983.301:49674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.182374][ T29] audit: type=1326 audit(1754690983.301:49675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.206523][ T29] audit: type=1326 audit(1754690983.301:49676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.230243][ T29] audit: type=1326 audit(1754690983.301:49677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.253968][ T29] audit: type=1326 audit(1754690983.301:49678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.278186][ T29] audit: type=1326 audit(1754690983.301:49679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.3.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 582.733979][T25620] vlan2: entered allmulticast mode [ 582.778971][T25622] netlink: 'syz.4.7096': attribute type 23 has an invalid length. [ 582.820231][T25627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7099'. [ 582.830978][T25627] netlink: 'syz.2.7099': attribute type 21 has an invalid length. [ 582.839365][T25627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7099'. [ 582.926504][T25631] netlink: 'syz.0.7101': attribute type 1 has an invalid length. [ 583.189511][T25656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7112'. [ 583.202157][T25656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7112'. [ 583.239164][T25658] 9pnet_fd: Insufficient options for proto=fd [ 583.404613][T25667] validate_nla: 1 callbacks suppressed [ 583.404700][T25667] netlink: 'syz.3.7117': attribute type 13 has an invalid length. [ 583.418506][T25667] netlink: 'syz.3.7117': attribute type 27 has an invalid length. [ 583.760542][T25672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7118'. [ 584.050346][T25685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7124'. [ 584.158270][T25689] netlink: 'syz.0.7124': attribute type 21 has an invalid length. [ 584.197712][T25689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7124'. [ 584.386442][T25701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7128'. [ 584.398064][T25702] netlink: 'syz.4.7129': attribute type 13 has an invalid length. [ 584.406113][T25702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7129'. [ 584.791459][T25712] netlink: 'syz.0.7132': attribute type 4 has an invalid length. [ 584.799246][T25712] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7132'. [ 584.994315][T25719] netlink: 'syz.4.7136': attribute type 21 has an invalid length. [ 585.400428][T25730] netlink: 'syz.1.7140': attribute type 21 has an invalid length. [ 585.517379][T25738] program syz.3.7143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.994280][T25767] program syz.3.7155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.060858][T25771] serio: Serial port ptm0 [ 586.961751][T25790] Falling back ldisc for ttyS3. [ 587.319957][T25798] tipc: Started in network mode [ 587.324999][T25798] tipc: Node identity ac14140f, cluster identity 4711 [ 587.342930][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 587.342951][ T29] audit: type=1400 audit(1754690988.601:49836): avc: denied { create } for pid=25799 comm="syz.4.7168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.380052][T25798] tipc: New replicast peer: 255.255.255.83 [ 587.386048][T25798] tipc: Enabled bearer , priority 10 [ 587.453529][ T29] audit: type=1400 audit(1754690988.631:49837): avc: denied { connect } for pid=25799 comm="syz.4.7168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.591808][ T23] tipc: Node number set to 2886997007 [ 589.393500][ T29] audit: type=1326 audit(1754690990.201:49838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.417478][ T29] audit: type=1326 audit(1754690990.201:49839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.441175][ T29] audit: type=1326 audit(1754690990.331:49840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.464927][ T29] audit: type=1326 audit(1754690990.331:49841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.488780][ T29] audit: type=1326 audit(1754690990.331:49842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.512497][ T29] audit: type=1326 audit(1754690990.471:49843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.536686][ T29] audit: type=1326 audit(1754690990.471:49844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.560449][ T29] audit: type=1326 audit(1754690990.471:49845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25803 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 589.868016][T25818] __nla_validate_parse: 5 callbacks suppressed [ 589.868120][T25818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7172'. [ 590.047857][T25827] bridge_slave_1: left allmulticast mode [ 590.053769][T25827] bridge_slave_1: left promiscuous mode [ 590.059777][T25827] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.068190][T25827] bridge_slave_0: left allmulticast mode [ 590.074161][T25827] bridge_slave_0: left promiscuous mode [ 590.080219][T25827] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.158843][T25839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7181'. [ 590.173579][T25839] netlink: 'syz.0.7181': attribute type 21 has an invalid length. [ 590.186392][T25839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7181'. [ 590.327979][T25853] netlink: 'syz.0.7185': attribute type 23 has an invalid length. [ 590.347088][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7186'. [ 590.444917][T25871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7193'. [ 590.521500][T25869] Falling back ldisc for ttyS3. [ 590.551322][T25879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7196'. [ 590.558394][T25876] netlink: '+}[@': attribute type 13 has an invalid length. [ 590.562867][T25879] netlink: 'syz.1.7196': attribute type 21 has an invalid length. [ 590.576613][T25879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7196'. [ 590.721721][T25891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7201'. [ 590.803692][T25899] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7204'. [ 590.840096][T25903] tmpfs: Bad value for 'mpol' [ 590.855955][T25905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7207'. [ 590.867411][T25905] netlink: 'syz.2.7207': attribute type 21 has an invalid length. [ 591.154905][T25930] netlink: 'syz.0.7219': attribute type 21 has an invalid length. [ 591.192022][T25934] 9pnet_fd: Insufficient options for proto=fd [ 591.201627][T25924] Falling back ldisc for ttyS3. [ 591.240839][T25939] program syz.1.7223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.254361][T25943] 9p: Unknown Cache mode or invalid value n [ 591.308464][T25949] Invalid option length (0) for dns_resolver key [ 591.412530][T25964] netlink: 'syz.1.7227': attribute type 23 has an invalid length. [ 591.415163][T25965] netlink: 'syz.4.7232': attribute type 21 has an invalid length. [ 591.482102][T25973] program syz.4.7237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.596839][T25987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.605844][T25987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.656622][T25997] netlink: 'syz.3.7247': attribute type 21 has an invalid length. [ 591.694273][T26000] program syz.4.7249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.751577][T26008] ALSA: seq fatal error: cannot create timer (-19) [ 591.900345][T26028] netlink: 'syz.4.7261': attribute type 21 has an invalid length. [ 591.951213][T26032] FAULT_INJECTION: forcing a failure. [ 591.951213][T26032] name failslab, interval 1, probability 0, space 0, times 0 [ 591.963926][T26032] CPU: 0 UID: 0 PID: 26032 Comm: syz.4.7263 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 591.964006][T26032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.964024][T26032] Call Trace: [ 591.964041][T26032] [ 591.964053][T26032] __dump_stack+0x1d/0x30 [ 591.964083][T26032] dump_stack_lvl+0xe8/0x140 [ 591.964162][T26032] dump_stack+0x15/0x1b [ 591.964184][T26032] should_fail_ex+0x265/0x280 [ 591.964228][T26032] should_failslab+0x8c/0xb0 [ 591.964312][T26032] kmem_cache_alloc_node_noprof+0x57/0x320 [ 591.964354][T26032] ? __alloc_skb+0x101/0x320 [ 591.964393][T26032] __alloc_skb+0x101/0x320 [ 591.964442][T26032] ? audit_log_start+0x365/0x6c0 [ 591.964482][T26032] audit_log_start+0x380/0x6c0 [ 591.964525][T26032] audit_seccomp+0x48/0x100 [ 591.964617][T26032] ? __seccomp_filter+0x68c/0x10d0 [ 591.964646][T26032] __seccomp_filter+0x69d/0x10d0 [ 591.964677][T26032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.964714][T26032] ? vfs_write+0x75e/0x8e0 [ 591.964755][T26032] ? __rcu_read_unlock+0x4f/0x70 [ 591.964858][T26032] ? __fget_files+0x184/0x1c0 [ 591.964935][T26032] __secure_computing+0x82/0x150 [ 591.965011][T26032] syscall_trace_enter+0xcf/0x1e0 [ 591.965052][T26032] do_syscall_64+0xac/0x200 [ 591.965086][T26032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 591.965153][T26032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 591.965184][T26032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.965213][T26032] RIP: 0033:0x7f565786ebe9 [ 591.965233][T26032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.965256][T26032] RSP: 002b:00007f56562cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 591.965280][T26032] RAX: ffffffffffffffda RBX: 00007f5657a95fa0 RCX: 00007f565786ebe9 [ 591.965348][T26032] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 591.965364][T26032] RBP: 00007f56562cf090 R08: 0000000000000000 R09: 0000000000000000 [ 591.965381][T26032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.965397][T26032] R13: 00007f5657a96038 R14: 00007f5657a95fa0 R15: 00007ffdf42b1b88 [ 591.965423][T26032] [ 591.989719][T26034] program syz.4.7265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.395388][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 592.395406][ T29] audit: type=1326 audit(1754690993.651:50274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 592.396678][T26067] FAULT_INJECTION: forcing a failure. [ 592.396678][T26067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.405379][ T29] audit: type=1326 audit(1754690993.651:50275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 592.425573][T26067] CPU: 0 UID: 0 PID: 26067 Comm: syz.2.7278 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 592.425610][T26067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.425626][T26067] Call Trace: [ 592.425695][T26067] [ 592.425708][T26067] __dump_stack+0x1d/0x30 [ 592.425745][T26067] dump_stack_lvl+0xe8/0x140 [ 592.425770][T26067] dump_stack+0x15/0x1b [ 592.425796][T26067] should_fail_ex+0x265/0x280 [ 592.425895][T26067] should_fail+0xb/0x20 [ 592.426002][T26067] should_fail_usercopy+0x1a/0x20 [ 592.426032][T26067] _copy_from_user+0x1c/0xb0 [ 592.426075][T26067] sg_write+0x1ed/0x750 [ 592.426115][T26067] ? skb_put+0xa9/0xf0 [ 592.426257][T26067] vfs_writev+0x403/0x8b0 [ 592.426300][T26067] ? __pfx_sg_write+0x10/0x10 [ 592.426386][T26067] do_writev+0xe7/0x210 [ 592.426435][T26067] __x64_sys_writev+0x45/0x50 [ 592.426472][T26067] x64_sys_call+0x1e9a/0x2ff0 [ 592.426633][T26067] do_syscall_64+0xd2/0x200 [ 592.426669][T26067] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 592.426705][T26067] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 592.426812][T26067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.426844][T26067] RIP: 0033:0x7f5adeeaebe9 [ 592.426868][T26067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.426895][T26067] RSP: 002b:00007f5add90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 592.426940][T26067] RAX: ffffffffffffffda RBX: 00007f5adf0d5fa0 RCX: 00007f5adeeaebe9 [ 592.426959][T26067] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 592.426977][T26067] RBP: 00007f5add90f090 R08: 0000000000000000 R09: 0000000000000000 [ 592.427001][T26067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.427019][T26067] R13: 00007f5adf0d6038 R14: 00007f5adf0d5fa0 R15: 00007ffccb86cad8 [ 592.427049][T26067] [ 592.546093][T26073] program syz.1.7279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.550001][ T29] audit: type=1326 audit(1754690993.651:50276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5adeead550 code=0x7ffc0000 [ 592.686615][ T29] audit: type=1326 audit(1754690993.651:50277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 592.710358][ T29] audit: type=1326 audit(1754690993.651:50278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5adeead550 code=0x7ffc0000 [ 592.734179][ T29] audit: type=1326 audit(1754690993.651:50279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5adeead69f code=0x7ffc0000 [ 592.758037][ T29] audit: type=1326 audit(1754690993.651:50280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 592.783542][ T29] audit: type=1326 audit(1754690993.701:50281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5adeead5fc code=0x7ffc0000 [ 592.807264][ T29] audit: type=1326 audit(1754690993.701:50282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5adeead69f code=0x7ffc0000 [ 592.830803][ T29] audit: type=1326 audit(1754690993.701:50283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.2.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5adeead84a code=0x7ffc0000 [ 593.010357][T26096] 9pnet_fd: Insufficient options for proto=fd [ 593.114057][T26103] program syz.0.7295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.315029][T26128] 9pnet_fd: Insufficient options for proto=fd [ 593.353989][T26133] program syz.0.7308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.575389][T26158] FAULT_INJECTION: forcing a failure. [ 593.575389][T26158] name failslab, interval 1, probability 0, space 0, times 0 [ 593.588177][T26158] CPU: 0 UID: 0 PID: 26158 Comm: syz.0.7317 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 593.588293][T26158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.588310][T26158] Call Trace: [ 593.588318][T26158] [ 593.588327][T26158] __dump_stack+0x1d/0x30 [ 593.588355][T26158] dump_stack_lvl+0xe8/0x140 [ 593.588380][T26158] dump_stack+0x15/0x1b [ 593.588402][T26158] should_fail_ex+0x265/0x280 [ 593.588583][T26158] should_failslab+0x8c/0xb0 [ 593.588610][T26158] kmem_cache_alloc_noprof+0x50/0x310 [ 593.588668][T26158] ? getname_flags+0x80/0x3b0 [ 593.588707][T26158] getname_flags+0x80/0x3b0 [ 593.588745][T26158] user_path_at+0x28/0x130 [ 593.588789][T26158] __se_sys_mount+0x25b/0x2e0 [ 593.588869][T26158] ? fput+0x8f/0xc0 [ 593.588913][T26158] __x64_sys_mount+0x67/0x80 [ 593.588946][T26158] x64_sys_call+0x2b4d/0x2ff0 [ 593.588973][T26158] do_syscall_64+0xd2/0x200 [ 593.588999][T26158] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 593.589087][T26158] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 593.589120][T26158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.589153][T26158] RIP: 0033:0x7fc69540ebe9 [ 593.589175][T26158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.589213][T26158] RSP: 002b:00007fc693e4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 593.589234][T26158] RAX: ffffffffffffffda RBX: 00007fc695636090 RCX: 00007fc69540ebe9 [ 593.589246][T26158] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 593.589259][T26158] RBP: 00007fc693e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.589271][T26158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.589287][T26158] R13: 00007fc695636128 R14: 00007fc695636090 R15: 00007ffc61e73e98 [ 593.589345][T26158] [ 593.799080][T26167] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 593.831241][T26169] program syz.1.7323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.975295][T26184] FAULT_INJECTION: forcing a failure. [ 593.975295][T26184] name failslab, interval 1, probability 0, space 0, times 0 [ 593.988117][T26184] CPU: 0 UID: 0 PID: 26184 Comm: syz.2.7330 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 593.988150][T26184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.988164][T26184] Call Trace: [ 593.988174][T26184] [ 593.988183][T26184] __dump_stack+0x1d/0x30 [ 593.988293][T26184] dump_stack_lvl+0xe8/0x140 [ 593.988320][T26184] dump_stack+0x15/0x1b [ 593.988388][T26184] should_fail_ex+0x265/0x280 [ 593.988433][T26184] should_failslab+0x8c/0xb0 [ 593.988494][T26184] kmem_cache_alloc_node_noprof+0x57/0x320 [ 593.988535][T26184] ? __alloc_skb+0x101/0x320 [ 593.988578][T26184] __alloc_skb+0x101/0x320 [ 593.988666][T26184] netlink_alloc_large_skb+0xba/0xf0 [ 593.988713][T26184] netlink_sendmsg+0x3cf/0x6b0 [ 593.988781][T26184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.988831][T26184] __sock_sendmsg+0x142/0x180 [ 593.988867][T26184] ____sys_sendmsg+0x31e/0x4e0 [ 593.988912][T26184] ___sys_sendmsg+0x17b/0x1d0 [ 593.989050][T26184] __x64_sys_sendmsg+0xd4/0x160 [ 593.989181][T26184] x64_sys_call+0x191e/0x2ff0 [ 593.989203][T26184] do_syscall_64+0xd2/0x200 [ 593.989229][T26184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 593.989263][T26184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 593.989347][T26184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.989375][T26184] RIP: 0033:0x7f5adeeaebe9 [ 593.989391][T26184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.989410][T26184] RSP: 002b:00007f5add90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.989430][T26184] RAX: ffffffffffffffda RBX: 00007f5adf0d5fa0 RCX: 00007f5adeeaebe9 [ 593.989443][T26184] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 593.989460][T26184] RBP: 00007f5add90f090 R08: 0000000000000000 R09: 0000000000000000 [ 593.989569][T26184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.989582][T26184] R13: 00007f5adf0d6038 R14: 00007f5adf0d5fa0 R15: 00007ffccb86cad8 [ 593.989609][T26184] [ 594.252329][T26195] program syz.4.7337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.520150][T26239] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 594.527149][T26239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.534763][T26239] vhci_hcd vhci_hcd.0: Device attached [ 594.556128][T26243] vhci_hcd: connection closed [ 594.558459][T20323] vhci_hcd: stop threads [ 594.567772][T20323] vhci_hcd: release socket [ 594.572246][T20323] vhci_hcd: disconnect device [ 595.715505][T26274] __nla_validate_parse: 42 callbacks suppressed [ 595.715530][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7367'. [ 595.731218][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7367'. [ 595.959282][T26279] validate_nla: 8 callbacks suppressed [ 595.959307][T26279] netlink: 'syz.1.7369': attribute type 13 has an invalid length. [ 595.973147][T26279] netlink: 'syz.1.7369': attribute type 27 has an invalid length. [ 595.992904][T26277] Falling back ldisc for ttyS3. [ 596.910784][T26304] netlink: 'syz.4.7379': attribute type 4 has an invalid length. [ 596.918579][T26304] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7379'. [ 599.803027][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 599.803048][ T29] audit: type=1326 audit(1754691000.961:50593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26313 comm="syz.2.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 599.833880][ T29] audit: type=1326 audit(1754691000.961:50594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26313 comm="syz.2.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 599.857597][ T29] audit: type=1326 audit(1754691000.961:50595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26313 comm="syz.2.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 599.881414][ T29] audit: type=1326 audit(1754691000.961:50596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26313 comm="syz.2.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 599.905408][ T29] audit: type=1326 audit(1754691000.961:50597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26313 comm="syz.2.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 599.929188][ T29] audit: type=1326 audit(1754691001.001:50598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.1.7385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 599.952959][ T29] audit: type=1326 audit(1754691001.001:50599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.1.7385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 599.976892][ T29] audit: type=1326 audit(1754691001.011:50600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.1.7385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 600.000454][ T29] audit: type=1326 audit(1754691001.011:50601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.1.7385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 600.084874][T26317] loop0: detected capacity change from 0 to 512 [ 600.118922][T26317] EXT4-fs: Ignoring removed nobh option [ 600.270336][T26323] netlink: '+}[@': attribute type 13 has an invalid length. [ 600.296634][T26338] program syz.2.7395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.392773][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7387: corrupted inode contents [ 600.454665][T26348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7399'. [ 600.464320][T26317] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.7387: mark_inode_dirty error [ 600.477921][ T29] audit: type=1326 audit(1754691001.421:50602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 600.544118][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7387: corrupted inode contents [ 600.608983][T26317] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.7387: mark_inode_dirty error [ 600.724598][T26317] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7387: Failed to acquire dquot type 0 [ 600.752614][T26364] program syz.2.7407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.781761][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7387: corrupted inode contents [ 600.851527][T26360] Falling back ldisc for ttyS3. [ 600.922388][T26317] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.7387: mark_inode_dirty error [ 600.966547][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7387: corrupted inode contents [ 601.002548][T26317] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.7387: mark_inode_dirty error [ 601.042299][T26370] netlink: '+}[@': attribute type 13 has an invalid length. [ 601.210711][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7387: corrupted inode contents [ 601.663128][T26317] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 601.734403][T26317] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7387: corrupted inode contents [ 602.041367][T26317] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.7387: mark_inode_dirty error [ 602.070654][T26317] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 602.099377][T26317] EXT4-fs (loop0): 1 truncate cleaned up [ 602.152034][T26317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.215154][T26317] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.342351][T21420] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.799348][T26424] netlink: 'syz.3.7429': attribute type 4 has an invalid length. [ 602.807333][T26424] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7429'. [ 603.400978][T26440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 603.407554][T26440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 603.415069][T26440] vhci_hcd vhci_hcd.0: Device attached [ 603.441208][T26441] vhci_hcd: connection closed [ 603.441557][ T31] vhci_hcd: stop threads [ 603.451001][ T31] vhci_hcd: release socket [ 603.455457][ T31] vhci_hcd: disconnect device [ 603.568131][T26448] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 603.574699][T26448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 603.582456][T26448] vhci_hcd vhci_hcd.0: Device attached [ 603.605520][T26449] vhci_hcd: connection closed [ 603.606032][T20330] vhci_hcd: stop threads [ 603.615258][T20330] vhci_hcd: release socket [ 603.619689][T20330] vhci_hcd: disconnect device [ 603.768799][T26459] program syz.4.7445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.175890][T26483] program syz.1.7456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.193436][T26485] loop0: detected capacity change from 0 to 512 [ 604.218156][T26485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.253176][T26485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.292788][T26485] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.338214][T26485] EXT4-fs (loop0): shut down requested (0) [ 604.405076][T26485] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 604.426284][T26485] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 604.455348][T26485] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 604.641311][T26495] Falling back ldisc for ttyS3. [ 604.711358][T21420] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.754575][T26507] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 604.761234][T26507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 604.768736][T26507] vhci_hcd vhci_hcd.0: Device attached [ 604.809249][T26508] vhci_hcd: connection closed [ 604.809610][ T2596] vhci_hcd: stop threads [ 604.818760][ T2596] vhci_hcd: release socket [ 604.823212][ T2596] vhci_hcd: disconnect device [ 605.023319][T26516] netlink: 'syz.1.7468': attribute type 13 has an invalid length. [ 605.031488][T26516] netlink: 'syz.1.7468': attribute type 27 has an invalid length. [ 605.039696][T26517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7470'. [ 605.332866][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 605.332882][ T29] audit: type=1326 audit(1754691006.591:50839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26527 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 605.427264][ T29] audit: type=1326 audit(1754691006.631:50840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26527 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 605.451046][ T29] audit: type=1326 audit(1754691006.631:50841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26527 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 605.474703][ T29] audit: type=1326 audit(1754691006.631:50842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26527 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 605.498470][ T29] audit: type=1326 audit(1754691006.631:50843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26527 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 605.648381][T26543] 9pnet_fd: Insufficient options for proto=fd [ 605.709550][ T29] audit: type=1326 audit(1754691006.801:50844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 605.732942][ T29] audit: type=1326 audit(1754691006.801:50845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 605.756265][ T29] audit: type=1326 audit(1754691006.801:50846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 605.779974][ T29] audit: type=1326 audit(1754691006.801:50847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 605.803428][ T29] audit: type=1326 audit(1754691006.801:50848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 606.156483][T26558] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7486'. [ 606.178683][T26558] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7486'. [ 606.521553][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7491'. [ 606.581140][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7494'. [ 606.613397][T26578] netlink: 'syz.4.7494': attribute type 21 has an invalid length. [ 606.646768][T26578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7494'. [ 606.718843][T26583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7497'. [ 607.730467][T26599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.739367][T26599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.347841][T26622] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 608.371746][T26619] Falling back ldisc for ttyS3. [ 608.398932][T26622] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 608.713687][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7517'. [ 608.725973][T26633] netlink: 'syz.0.7517': attribute type 21 has an invalid length. [ 608.734206][T26633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7517'. [ 608.992814][T26651] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7525'. [ 609.002711][T26651] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7525'. [ 609.040313][T26649] netlink: 'syz.2.7524': attribute type 13 has an invalid length. [ 609.048406][T26649] netlink: 'syz.2.7524': attribute type 27 has an invalid length. [ 609.172419][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7529'. [ 609.195686][T26661] netlink: 'syz.4.7529': attribute type 21 has an invalid length. [ 609.217953][T26661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7529'. [ 609.254350][T26669] 9pnet_fd: Insufficient options for proto=fd [ 609.362781][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7537'. [ 609.589431][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7545'. [ 609.602833][T26697] netlink: 'syz.4.7545': attribute type 21 has an invalid length. [ 610.112451][T26736] netlink: 'syz.1.7559': attribute type 21 has an invalid length. [ 610.227375][T26745] program syz.1.7562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.441878][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 610.441898][ T29] audit: type=1326 audit(1754691011.691:51245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc69540d69f code=0x7ffc0000 [ 610.520387][ T29] audit: type=1326 audit(1754691011.741:51246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc69540ec77 code=0x7ffc0000 [ 610.544234][ T29] audit: type=1326 audit(1754691011.741:51247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69540d550 code=0x7ffc0000 [ 610.568200][ T29] audit: type=1326 audit(1754691011.741:51248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc69540d84a code=0x7ffc0000 [ 610.592110][ T29] audit: type=1326 audit(1754691011.751:51249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 610.615880][ T29] audit: type=1326 audit(1754691011.751:51250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26748 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 611.189263][T26770] netlink: 'syz.0.7573': attribute type 21 has an invalid length. [ 611.308789][ T29] audit: type=1326 audit(1754691011.901:51251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 611.332545][ T29] audit: type=1326 audit(1754691011.901:51252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 611.356590][ T29] audit: type=1326 audit(1754691011.901:51253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 611.380363][ T29] audit: type=1326 audit(1754691011.901:51254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 611.504887][T26776] program syz.3.7576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.409945][T26819] netlink: 'syz.3.7590': attribute type 21 has an invalid length. [ 612.555742][T26826] netlink: 'syz.3.7593': attribute type 23 has an invalid length. [ 613.127578][T26856] netlink: '+}[@': attribute type 13 has an invalid length. [ 613.574845][T26877] __nla_validate_parse: 12 callbacks suppressed [ 613.574923][T26877] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7613'. [ 614.063846][T26884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7615'. [ 614.604957][T26903] netlink: 'syz.2.7622': attribute type 4 has an invalid length. [ 614.613138][T26903] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7622'. [ 614.711386][T26908] netlink: 'syz.1.7623': attribute type 23 has an invalid length. [ 615.599529][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 615.599611][ T29] audit: type=1326 audit(1754691016.851:51663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.612502][ T29] audit: type=1326 audit(1754691016.891:51664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.636327][ T29] audit: type=1326 audit(1754691016.891:51665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.660341][ T29] audit: type=1326 audit(1754691016.891:51666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.684620][ T29] audit: type=1326 audit(1754691016.891:51667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.708756][ T29] audit: type=1326 audit(1754691016.891:51668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.732500][ T29] audit: type=1326 audit(1754691016.891:51669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.756817][ T29] audit: type=1326 audit(1754691016.891:51670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.780762][ T29] audit: type=1326 audit(1754691016.891:51671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 616.804695][ T29] audit: type=1326 audit(1754691016.891:51672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26933 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 618.592601][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7641'. [ 618.623857][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7643'. [ 618.664044][T26955] netlink: 'syz.4.7643': attribute type 21 has an invalid length. [ 618.690265][T26955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7643'. [ 618.752082][T26963] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7647'. [ 618.794687][T26963] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7647'. [ 619.082224][T26978] Falling back ldisc for ttyS3. [ 619.171339][T26987] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 619.183191][T26987] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 619.200518][T26994] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 619.211904][T26993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7659'. [ 619.224805][T26994] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 619.307718][T26997] netlink: 'syz.2.7661': attribute type 13 has an invalid length. [ 619.315732][T26997] netlink: 'syz.2.7661': attribute type 27 has an invalid length. [ 619.484318][T27016] netlink: 'syz.3.7666': attribute type 23 has an invalid length. [ 619.514771][T27020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 619.521376][T27020] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.528977][T27020] vhci_hcd vhci_hcd.0: Device attached [ 619.536325][T27021] vhci_hcd: connection closed [ 619.540203][T20327] vhci_hcd: stop threads [ 619.549696][T20327] vhci_hcd: release socket [ 619.554305][T20327] vhci_hcd: disconnect device [ 620.530110][T27076] netlink: 'syz.4.7693': attribute type 23 has an invalid length. [ 620.542453][T27070] Falling back ldisc for ttyS3. [ 620.614673][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 620.614694][ T29] audit: type=1326 audit(1754691021.871:51887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.0.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc69540d69f code=0x7ffc0000 [ 620.661670][T27082] Falling back ldisc for ttyS3. [ 620.677693][ T29] audit: type=1326 audit(1754691021.931:51888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.0.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc69540ec77 code=0x7ffc0000 [ 620.702216][ T29] audit: type=1326 audit(1754691021.931:51889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27081 comm="syz.2.7697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 620.726054][ T29] audit: type=1326 audit(1754691021.931:51890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27081 comm="syz.2.7697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 620.750475][ T29] audit: type=1326 audit(1754691021.931:51891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.0.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69540d550 code=0x7ffc0000 [ 620.774779][ T29] audit: type=1326 audit(1754691021.951:51892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.0.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc69540d84a code=0x7ffc0000 [ 620.798343][ T29] audit: type=1326 audit(1754691021.971:51893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.0.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 620.842545][ T29] audit: type=1326 audit(1754691022.081:51894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27084 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 620.866210][ T29] audit: type=1326 audit(1754691022.081:51895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27084 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 620.890101][ T29] audit: type=1326 audit(1754691022.081:51896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27084 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 622.147596][T27146] netlink: 'syz.3.7719': attribute type 13 has an invalid length. [ 622.155533][T27146] netlink: 'syz.3.7719': attribute type 27 has an invalid length. [ 622.417373][T27158] netlink: 'syz.2.7723': attribute type 23 has an invalid length. [ 622.551107][T27156] Falling back ldisc for ttyS3. [ 622.712382][T27175] netlink: 'syz.4.7732': attribute type 13 has an invalid length. [ 622.720366][T27175] netlink: 'syz.4.7732': attribute type 27 has an invalid length. [ 624.064620][T27211] netlink: 'syz.3.7743': attribute type 13 has an invalid length. [ 624.072563][T27211] netlink: 'syz.3.7743': attribute type 27 has an invalid length. [ 624.281172][T27213] Falling back ldisc for ttyS3. [ 624.391160][T27230] netlink: 'syz.4.7747': attribute type 23 has an invalid length. [ 624.518828][T27242] FAULT_INJECTION: forcing a failure. [ 624.518828][T27242] name failslab, interval 1, probability 0, space 0, times 0 [ 624.531829][T27242] CPU: 1 UID: 0 PID: 27242 Comm: syz.1.7754 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 624.531865][T27242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.531882][T27242] Call Trace: [ 624.531889][T27242] [ 624.531896][T27242] __dump_stack+0x1d/0x30 [ 624.531922][T27242] dump_stack_lvl+0xe8/0x140 [ 624.531944][T27242] dump_stack+0x15/0x1b [ 624.531966][T27242] should_fail_ex+0x265/0x280 [ 624.532007][T27242] ? hugetlb_vm_op_open+0x218/0x390 [ 624.532048][T27242] should_failslab+0x8c/0xb0 [ 624.532079][T27242] __kmalloc_cache_noprof+0x4c/0x320 [ 624.532120][T27242] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 624.532162][T27242] hugetlb_vm_op_open+0x218/0x390 [ 624.532211][T27242] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 624.532253][T27242] __split_vma+0x355/0x650 [ 624.532292][T27242] ? __rcu_read_unlock+0x4f/0x70 [ 624.532323][T27242] vma_modify+0x3f2/0xc80 [ 624.532353][T27242] ? avc_has_perm+0xf7/0x180 [ 624.532384][T27242] vma_modify_flags+0x101/0x130 [ 624.532424][T27242] mprotect_fixup+0x2cc/0x570 [ 624.532461][T27242] do_mprotect_pkey+0x6d6/0x980 [ 624.532513][T27242] __x64_sys_mprotect+0x48/0x60 [ 624.532547][T27242] x64_sys_call+0x274e/0x2ff0 [ 624.532575][T27242] do_syscall_64+0xd2/0x200 [ 624.532606][T27242] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 624.532638][T27242] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 624.532667][T27242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.532695][T27242] RIP: 0033:0x7fbc06dcebe9 [ 624.532716][T27242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.532735][T27242] RSP: 002b:00007fbc05837038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 624.532755][T27242] RAX: ffffffffffffffda RBX: 00007fbc06ff5fa0 RCX: 00007fbc06dcebe9 [ 624.532768][T27242] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 624.532781][T27242] RBP: 00007fbc05837090 R08: 0000000000000000 R09: 0000000000000000 [ 624.532794][T27242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.532811][T27242] R13: 00007fbc06ff6038 R14: 00007fbc06ff5fa0 R15: 00007ffd3e57d948 [ 624.532834][T27242] [ 624.532842][T27242] HugeTLB: unable to allocate vma specific lock [ 624.780777][T27248] __nla_validate_parse: 7 callbacks suppressed [ 624.780799][T27248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7756'. [ 624.797802][T27248] netlink: 'syz.2.7756': attribute type 21 has an invalid length. [ 624.805768][T27248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7756'. [ 625.422927][T27256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27256 comm=syz.4.7759 [ 627.391909][T27278] netlink: 'syz.2.7765': attribute type 4 has an invalid length. [ 627.399829][T27278] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7765'. [ 627.487242][T27276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7766'. [ 627.520310][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7768'. [ 627.566721][T27282] netlink: 'syz.4.7768': attribute type 21 has an invalid length. [ 627.625301][T27285] netlink: 'syz.3.7769': attribute type 23 has an invalid length. [ 627.641117][T27282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7768'. [ 628.129839][T27301] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7774'. [ 628.938407][T27310] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 628.973893][T27310] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 629.932263][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 629.932292][ T29] audit: type=1326 audit(1754691030.871:52148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 629.962307][ T29] audit: type=1326 audit(1754691030.871:52149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 629.986123][ T29] audit: type=1326 audit(1754691031.041:52150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.010040][ T29] audit: type=1326 audit(1754691031.041:52151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.033815][ T29] audit: type=1326 audit(1754691031.041:52152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.058009][ T29] audit: type=1326 audit(1754691031.181:52153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.081979][ T29] audit: type=1326 audit(1754691031.181:52154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.106181][ T29] audit: type=1326 audit(1754691031.181:52155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.934126][ T29] audit: type=1326 audit(1754691031.481:52156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 630.958111][ T29] audit: type=1326 audit(1754691031.481:52157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27302 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69540ebe9 code=0x7ffc0000 [ 631.003216][T27314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7780'. [ 631.210802][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7785'. [ 631.235862][T27328] netlink: 'syz.3.7785': attribute type 21 has an invalid length. [ 631.254748][T27328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7785'. [ 632.812032][T27349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7793'. [ 632.865692][T27356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 632.872255][T27356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 632.879761][T27356] vhci_hcd vhci_hcd.0: Device attached [ 632.889637][T27359] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7794'. [ 632.900343][T27357] vhci_hcd: connection closed [ 632.900601][ T58] vhci_hcd: stop threads [ 632.909692][ T58] vhci_hcd: release socket [ 632.914166][ T58] vhci_hcd: disconnect device [ 632.923396][T27352] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7794'. [ 633.085288][T27370] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7801'. [ 633.147892][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 633.177240][T27375] FAULT_INJECTION: forcing a failure. [ 633.177240][T27375] name failslab, interval 1, probability 0, space 0, times 0 [ 633.189972][T27375] CPU: 1 UID: 0 PID: 27375 Comm: syz.1.7803 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 633.190012][T27375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.190030][T27375] Call Trace: [ 633.190101][T27375] [ 633.190111][T27375] __dump_stack+0x1d/0x30 [ 633.190148][T27375] dump_stack_lvl+0xe8/0x140 [ 633.190176][T27375] dump_stack+0x15/0x1b [ 633.190195][T27375] should_fail_ex+0x265/0x280 [ 633.190241][T27375] should_failslab+0x8c/0xb0 [ 633.190275][T27375] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 633.190361][T27375] ? sidtab_sid2str_get+0xa0/0x130 [ 633.190426][T27375] kmemdup_noprof+0x2b/0x70 [ 633.190458][T27375] sidtab_sid2str_get+0xa0/0x130 [ 633.190527][T27375] security_sid_to_context_core+0x1eb/0x2e0 [ 633.190571][T27375] security_sid_to_context+0x27/0x40 [ 633.190605][T27375] selinux_lsmprop_to_secctx+0x67/0xf0 [ 633.190714][T27375] security_lsmprop_to_secctx+0x43/0x80 [ 633.190743][T27375] audit_log_task_context+0x77/0x190 [ 633.190789][T27375] audit_log_task+0xf4/0x250 [ 633.190841][T27375] audit_seccomp+0x61/0x100 [ 633.190869][T27375] ? __seccomp_filter+0x68c/0x10d0 [ 633.190898][T27375] __seccomp_filter+0x69d/0x10d0 [ 633.190929][T27375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 633.191037][T27375] ? vfs_write+0x75e/0x8e0 [ 633.191072][T27375] __secure_computing+0x82/0x150 [ 633.191103][T27375] syscall_trace_enter+0xcf/0x1e0 [ 633.191168][T27375] do_syscall_64+0xac/0x200 [ 633.191195][T27375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 633.191291][T27375] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 633.191357][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.191384][T27375] RIP: 0033:0x7fbc06dcebe9 [ 633.191402][T27375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.191507][T27375] RSP: 002b:00007fbc05837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 633.191533][T27375] RAX: ffffffffffffffda RBX: 00007fbc06ff5fa0 RCX: 00007fbc06dcebe9 [ 633.191547][T27375] RDX: 0000200000000d40 RSI: 0000000000000031 RDI: 00000000000003bd [ 633.191560][T27375] RBP: 00007fbc05837090 R08: 0000000000000000 R09: 0000000000000000 [ 633.191651][T27375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.191664][T27375] R13: 00007fbc06ff6038 R14: 00007fbc06ff5fa0 R15: 00007ffd3e57d948 [ 633.191684][T27375] [ 633.432117][T27377] netlink: 'syz.3.7802': attribute type 21 has an invalid length. [ 633.439983][T27377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7802'. [ 633.450261][T27370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7801'. [ 633.476827][T20330] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.496137][T20330] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.518614][T20330] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.535135][T20330] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.593480][T27387] FAULT_INJECTION: forcing a failure. [ 633.593480][T27387] name failslab, interval 1, probability 0, space 0, times 0 [ 633.606326][T27387] CPU: 0 UID: 0 PID: 27387 Comm: syz.1.7808 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 633.606359][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.606374][T27387] Call Trace: [ 633.606384][T27387] [ 633.606396][T27387] __dump_stack+0x1d/0x30 [ 633.606428][T27387] dump_stack_lvl+0xe8/0x140 [ 633.606454][T27387] dump_stack+0x15/0x1b [ 633.606490][T27387] should_fail_ex+0x265/0x280 [ 633.606537][T27387] should_failslab+0x8c/0xb0 [ 633.606569][T27387] kmem_cache_alloc_noprof+0x50/0x310 [ 633.606600][T27387] ? security_inode_alloc+0x37/0x100 [ 633.606729][T27387] security_inode_alloc+0x37/0x100 [ 633.606760][T27387] inode_init_always_gfp+0x4b7/0x500 [ 633.606787][T27387] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 633.606887][T27387] alloc_inode+0x58/0x170 [ 633.606909][T27387] new_inode+0x1d/0xe0 [ 633.606972][T27387] shmem_get_inode+0x244/0x750 [ 633.607004][T27387] __shmem_file_setup+0x113/0x210 [ 633.607053][T27387] shmem_file_setup+0x3b/0x50 [ 633.607163][T27387] __se_sys_memfd_create+0x2c3/0x590 [ 633.607195][T27387] __x64_sys_memfd_create+0x31/0x40 [ 633.607224][T27387] x64_sys_call+0x2abe/0x2ff0 [ 633.607263][T27387] do_syscall_64+0xd2/0x200 [ 633.607297][T27387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 633.607409][T27387] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 633.607501][T27387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.607527][T27387] RIP: 0033:0x7fbc06dcebe9 [ 633.607548][T27387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.607571][T27387] RSP: 002b:00007fbc05836e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 633.607591][T27387] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fbc06dcebe9 [ 633.607650][T27387] RDX: 00007fbc05836ef0 RSI: 0000000000000000 RDI: 00007fbc06e527e8 [ 633.607664][T27387] RBP: 0000200000000180 R08: 00007fbc05836bb7 R09: 00007fbc05836e40 [ 633.607681][T27387] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000900 [ 633.607695][T27387] R13: 00007fbc05836ef0 R14: 00007fbc05836eb0 R15: 0000200000000980 [ 633.607721][T27387] [ 633.833498][T27389] netlink: 'syz.4.7809': attribute type 13 has an invalid length. [ 633.841601][T27389] netlink: 'syz.4.7809': attribute type 27 has an invalid length. [ 636.069393][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 636.069418][ T29] audit: type=1400 audit(1754691036.061:52347): avc: denied { recv } for pid=27408 comm="syz.2.7817" saddr=10.128.0.163 src=43664 daddr=10.128.1.73 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 636.128579][T27418] __nla_validate_parse: 8 callbacks suppressed [ 636.128599][T27418] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7820'. [ 636.145980][T27418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7820'. [ 636.155316][T27418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7820'. [ 636.174966][T27422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7822'. [ 636.330130][T27435] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7828'. [ 636.331775][ T29] audit: type=1400 audit(1754691037.581:52348): avc: denied { write } for pid=27430 comm="syz.1.7826" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 636.340823][T27435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7828'. [ 636.405005][ T29] audit: type=1326 audit(1754691037.651:52349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.428827][ T29] audit: type=1326 audit(1754691037.651:52350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.452514][ T29] audit: type=1326 audit(1754691037.651:52351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.476312][ T29] audit: type=1326 audit(1754691037.651:52352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.500261][ T29] audit: type=1326 audit(1754691037.651:52353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.524198][ T29] audit: type=1326 audit(1754691037.651:52354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.548176][ T29] audit: type=1326 audit(1754691037.651:52355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.571824][ T29] audit: type=1326 audit(1754691037.651:52356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27431 comm="syz.2.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f5adeeaebe9 code=0x7ffc0000 [ 636.633355][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7826'. [ 636.642595][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7826'. [ 636.651630][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7826'. [ 636.664064][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7826'. [ 636.701713][T27432] Falling back ldisc for ttyS3. [ 638.669766][T27460] FAULT_INJECTION: forcing a failure. [ 638.669766][T27460] name failslab, interval 1, probability 0, space 0, times 0 [ 638.682916][T27460] CPU: 1 UID: 0 PID: 27460 Comm: syz.1.7835 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 638.682949][T27460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.682972][T27460] Call Trace: [ 638.682980][T27460] [ 638.682990][T27460] __dump_stack+0x1d/0x30 [ 638.683053][T27460] dump_stack_lvl+0xe8/0x140 [ 638.683080][T27460] dump_stack+0x15/0x1b [ 638.683148][T27460] should_fail_ex+0x265/0x280 [ 638.683184][T27460] should_failslab+0x8c/0xb0 [ 638.683225][T27460] kmem_cache_alloc_noprof+0x50/0x310 [ 638.683255][T27460] ? security_inode_alloc+0x37/0x100 [ 638.683285][T27460] security_inode_alloc+0x37/0x100 [ 638.683437][T27460] inode_init_always_gfp+0x4b7/0x500 [ 638.683472][T27460] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 638.683502][T27460] alloc_inode+0x58/0x170 [ 638.683540][T27460] new_inode+0x1d/0xe0 [ 638.683573][T27460] shmem_get_inode+0x244/0x750 [ 638.683606][T27460] __shmem_file_setup+0x113/0x210 [ 638.683648][T27460] shmem_file_setup+0x3b/0x50 [ 638.683691][T27460] __se_sys_memfd_create+0x2c3/0x590 [ 638.683727][T27460] __x64_sys_memfd_create+0x31/0x40 [ 638.683758][T27460] x64_sys_call+0x2abe/0x2ff0 [ 638.683780][T27460] do_syscall_64+0xd2/0x200 [ 638.683860][T27460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 638.683956][T27460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 638.683978][T27460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.684144][T27460] RIP: 0033:0x7fbc06dcebe9 [ 638.684161][T27460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.684179][T27460] RSP: 002b:00007fbc05836e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 638.684202][T27460] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fbc06dcebe9 [ 638.684216][T27460] RDX: 00007fbc05836ef0 RSI: 0000000000000000 RDI: 00007fbc06e527e8 [ 638.684228][T27460] RBP: 0000200000000180 R08: 00007fbc05836bb7 R09: 00007fbc05836e40 [ 638.684241][T27460] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000900 [ 638.684252][T27460] R13: 00007fbc05836ef0 R14: 00007fbc05836eb0 R15: 0000200000000980 [ 638.684305][T27460] [ 638.943220][T27458] netlink: 'syz.4.7834': attribute type 10 has an invalid length. [ 638.952126][T27458] dummy0: entered promiscuous mode [ 638.958187][T27458] batman_adv: batadv0: Interface activated: dummy0 [ 638.964849][T27458] batadv0: mtu less than device minimum [ 638.970976][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 638.981809][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 638.992626][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.003391][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.014144][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.025058][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.036183][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.047148][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.058000][T27458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.061590][T27474] netlink: 'syz.3.7839': attribute type 13 has an invalid length. [ 639.074324][T27458] batman_adv: batadv0: Interface deactivated: dummy0 [ 639.076300][T27474] netlink: 'syz.3.7839': attribute type 27 has an invalid length. [ 639.091107][T27458] batman_adv: batadv0: Removing interface: dummy0 [ 639.222116][T27479] Falling back ldisc for ttyS3. [ 639.396514][T27509] netlink: 'syz.1.7853': attribute type 13 has an invalid length. [ 639.404568][T27509] netlink: 'syz.1.7853': attribute type 27 has an invalid length. [ 640.201801][T27528] Falling back ldisc for ttyS3. [ 640.481470][T27548] infiniband syz!: set down [ 640.486097][T27548] infiniband syz!: added team_slave_0 [ 640.584525][T27548] RDS/IB: syz!: added [ 640.593838][T27548] smc: adding ib device syz! with port count 1 [ 640.600483][T27548] smc: ib device syz! port 1 has pnetid [ 640.809681][T27574] FAULT_INJECTION: forcing a failure. [ 640.809681][T27574] name failslab, interval 1, probability 0, space 0, times 0 [ 640.822516][T27574] CPU: 0 UID: 0 PID: 27574 Comm: syz.2.7877 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 640.822555][T27574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.822570][T27574] Call Trace: [ 640.822577][T27574] [ 640.822584][T27574] __dump_stack+0x1d/0x30 [ 640.822609][T27574] dump_stack_lvl+0xe8/0x140 [ 640.822693][T27574] dump_stack+0x15/0x1b [ 640.822794][T27574] should_fail_ex+0x265/0x280 [ 640.822830][T27574] should_failslab+0x8c/0xb0 [ 640.822862][T27574] kmem_cache_alloc_noprof+0x50/0x310 [ 640.822900][T27574] ? security_inode_alloc+0x37/0x100 [ 640.822998][T27574] security_inode_alloc+0x37/0x100 [ 640.823116][T27574] inode_init_always_gfp+0x4b7/0x500 [ 640.823152][T27574] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 640.823183][T27574] alloc_inode+0x58/0x170 [ 640.823267][T27574] new_inode+0x1d/0xe0 [ 640.823294][T27574] shmem_get_inode+0x244/0x750 [ 640.823325][T27574] __shmem_file_setup+0x113/0x210 [ 640.823362][T27574] shmem_file_setup+0x3b/0x50 [ 640.823462][T27574] __se_sys_memfd_create+0x2c3/0x590 [ 640.823489][T27574] __x64_sys_memfd_create+0x31/0x40 [ 640.823519][T27574] x64_sys_call+0x2abe/0x2ff0 [ 640.823549][T27574] do_syscall_64+0xd2/0x200 [ 640.823598][T27574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 640.823639][T27574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 640.823668][T27574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.823691][T27574] RIP: 0033:0x7f5adeeaebe9 [ 640.823758][T27574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.823817][T27574] RSP: 002b:00007f5add90ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 640.823843][T27574] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f5adeeaebe9 [ 640.823860][T27574] RDX: 00007f5add90eef0 RSI: 0000000000000000 RDI: 00007f5adef327e8 [ 640.823878][T27574] RBP: 0000200000000600 R08: 00007f5add90ebb7 R09: 00007f5add90ee40 [ 640.823972][T27574] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 640.824001][T27574] R13: 00007f5add90eef0 R14: 00007f5add90eeb0 R15: 0000200000000380 [ 640.824027][T27574] [ 641.101446][T27572] Falling back ldisc for ttyS3. [ 641.106793][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 641.106808][ T29] audit: type=1326 audit(1754691042.361:52730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27571 comm="syz.3.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 641.140144][ T29] audit: type=1326 audit(1754691042.381:52731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27571 comm="syz.3.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 641.226901][ T29] audit: type=1326 audit(1754691042.481:52732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.250861][ T29] audit: type=1326 audit(1754691042.481:52733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.274774][ T29] audit: type=1326 audit(1754691042.481:52734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.298723][ T29] audit: type=1326 audit(1754691042.481:52735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.322910][ T29] audit: type=1326 audit(1754691042.481:52736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.347060][ T29] audit: type=1326 audit(1754691042.481:52737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.371126][ T29] audit: type=1326 audit(1754691042.481:52738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.395352][ T29] audit: type=1326 audit(1754691042.481:52739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27585 comm="syz.4.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 641.472641][T27593] __nla_validate_parse: 14 callbacks suppressed [ 641.472663][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7884'. [ 641.888979][T27617] FAULT_INJECTION: forcing a failure. [ 641.888979][T27617] name failslab, interval 1, probability 0, space 0, times 0 [ 641.901688][T27617] CPU: 1 UID: 0 PID: 27617 Comm: syz.1.7893 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 641.901798][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.901815][T27617] Call Trace: [ 641.901823][T27617] [ 641.901833][T27617] __dump_stack+0x1d/0x30 [ 641.901864][T27617] dump_stack_lvl+0xe8/0x140 [ 641.901913][T27617] dump_stack+0x15/0x1b [ 641.901941][T27617] should_fail_ex+0x265/0x280 [ 641.901987][T27617] should_failslab+0x8c/0xb0 [ 641.902014][T27617] kmem_cache_alloc_noprof+0x50/0x310 [ 641.902048][T27617] ? sctp_get_port_local+0x438/0xae0 [ 641.902107][T27617] sctp_get_port_local+0x438/0xae0 [ 641.902154][T27617] sctp_do_bind+0x398/0x4b0 [ 641.902256][T27617] sctp_connect_new_asoc+0x153/0x3a0 [ 641.902301][T27617] sctp_sendmsg+0xf10/0x18d0 [ 641.902395][T27617] ? selinux_socket_sendmsg+0x141/0x1b0 [ 641.902445][T27617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 641.902491][T27617] inet_sendmsg+0xc2/0xd0 [ 641.902537][T27617] __sock_sendmsg+0x102/0x180 [ 641.902623][T27617] ____sys_sendmsg+0x345/0x4e0 [ 641.902675][T27617] ___sys_sendmsg+0x17b/0x1d0 [ 641.902777][T27617] __sys_sendmmsg+0x178/0x300 [ 641.902814][T27617] __x64_sys_sendmmsg+0x57/0x70 [ 641.902841][T27617] x64_sys_call+0x1c4a/0x2ff0 [ 641.902915][T27617] do_syscall_64+0xd2/0x200 [ 641.902941][T27617] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 641.902967][T27617] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 641.903007][T27617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.903037][T27617] RIP: 0033:0x7fbc06dcebe9 [ 641.903059][T27617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.903084][T27617] RSP: 002b:00007fbc05837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 641.903117][T27617] RAX: ffffffffffffffda RBX: 00007fbc06ff5fa0 RCX: 00007fbc06dcebe9 [ 641.903135][T27617] RDX: 0000000000000002 RSI: 0000200000001080 RDI: 0000000000000003 [ 641.903192][T27617] RBP: 00007fbc05837090 R08: 0000000000000000 R09: 0000000000000000 [ 641.903209][T27617] R10: 0000000020040810 R11: 0000000000000246 R12: 0000000000000001 [ 641.903226][T27617] R13: 00007fbc06ff6038 R14: 00007fbc06ff5fa0 R15: 00007ffd3e57d948 [ 641.903248][T27617] [ 642.302207][T27613] Falling back ldisc for ttyS3. [ 642.439990][T27634] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 642.459062][T27634] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 642.480410][T27633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7899'. [ 642.510371][T27637] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7900'. [ 642.534971][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7900'. [ 642.549851][T27639] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7901'. [ 642.562634][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7901'. [ 642.891688][T27656] infiniband Œyz1: RDMA CMA: cma_listen_on_dev, error -98 [ 642.920847][T27662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7909'. [ 642.968096][T27668] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7912'. [ 642.981822][T27665] Falling back ldisc for ttyS3. [ 643.131343][T27680] netlink: 'syz.1.7916': attribute type 13 has an invalid length. [ 643.148415][T27680] erspan0: refused to change device tx_queue_len [ 643.503943][T27698] Falling back ldisc for ttyS3. [ 643.739715][T27719] FAULT_INJECTION: forcing a failure. [ 643.739715][T27719] name failslab, interval 1, probability 0, space 0, times 0 [ 643.752720][T27719] CPU: 0 UID: 0 PID: 27719 Comm: syz.2.7931 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 643.752752][T27719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.752774][T27719] Call Trace: [ 643.752782][T27719] [ 643.752792][T27719] __dump_stack+0x1d/0x30 [ 643.752824][T27719] dump_stack_lvl+0xe8/0x140 [ 643.752850][T27719] dump_stack+0x15/0x1b [ 643.752867][T27719] should_fail_ex+0x265/0x280 [ 643.752942][T27719] should_failslab+0x8c/0xb0 [ 643.752971][T27719] kmem_cache_alloc_noprof+0x50/0x310 [ 643.753151][T27719] ? dst_alloc+0xbd/0x100 [ 643.753190][T27719] dst_alloc+0xbd/0x100 [ 643.753231][T27719] ? ipv4_sk_update_pmtu+0x4e2/0xac0 [ 643.753297][T27719] ip_route_output_key_hash_rcu+0xef5/0x1380 [ 643.753334][T27719] ? perf_callchain_kernel+0x301/0x330 [ 643.753411][T27719] ip_route_output_flow+0x7b/0x130 [ 643.753444][T27719] udp_sendmsg+0x11b0/0x13c0 [ 643.753471][T27719] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 643.753514][T27719] ? avc_has_perm+0xf7/0x180 [ 643.753554][T27719] ? __pfx_udp_sendmsg+0x10/0x10 [ 643.753600][T27719] inet_sendmsg+0xac/0xd0 [ 643.753635][T27719] __sock_sendmsg+0x102/0x180 [ 643.753670][T27719] ____sys_sendmsg+0x345/0x4e0 [ 643.753713][T27719] ___sys_sendmsg+0x17b/0x1d0 [ 643.753818][T27719] __sys_sendmmsg+0x178/0x300 [ 643.753859][T27719] __x64_sys_sendmmsg+0x57/0x70 [ 643.753886][T27719] x64_sys_call+0x1c4a/0x2ff0 [ 643.753915][T27719] do_syscall_64+0xd2/0x200 [ 643.754017][T27719] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 643.754057][T27719] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 643.754139][T27719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.754233][T27719] RIP: 0033:0x7f5adeeaebe9 [ 643.754254][T27719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.754280][T27719] RSP: 002b:00007f5add90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 643.754306][T27719] RAX: ffffffffffffffda RBX: 00007f5adf0d5fa0 RCX: 00007f5adeeaebe9 [ 643.754402][T27719] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000006 [ 643.754416][T27719] RBP: 00007f5add90f090 R08: 0000000000000000 R09: 0000000000000000 [ 643.754441][T27719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.754453][T27719] R13: 00007f5adf0d6038 R14: 00007f5adf0d5fa0 R15: 00007ffccb86cad8 [ 643.754475][T27719] [ 644.200081][T27733] 8021q: VLANs not supported on vcan0 [ 644.502042][T27740] Falling back ldisc for ttyS3. [ 644.656128][T27765] FAULT_INJECTION: forcing a failure. [ 644.656128][T27765] name failslab, interval 1, probability 0, space 0, times 0 [ 644.668947][T27765] CPU: 0 UID: 0 PID: 27765 Comm: syz.0.7952 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 644.668988][T27765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.669002][T27765] Call Trace: [ 644.669009][T27765] [ 644.669096][T27765] __dump_stack+0x1d/0x30 [ 644.669129][T27765] dump_stack_lvl+0xe8/0x140 [ 644.669157][T27765] dump_stack+0x15/0x1b [ 644.669203][T27765] should_fail_ex+0x265/0x280 [ 644.669246][T27765] ? sel_netport_sid_slow+0x11b/0x330 [ 644.669314][T27765] should_failslab+0x8c/0xb0 [ 644.669348][T27765] __kmalloc_cache_noprof+0x4c/0x320 [ 644.669391][T27765] sel_netport_sid_slow+0x11b/0x330 [ 644.669433][T27765] sel_netport_sid+0xe9/0x140 [ 644.669475][T27765] selinux_socket_connect_helper+0x36b/0x470 [ 644.669513][T27765] selinux_socket_connect+0x31/0x70 [ 644.669548][T27765] security_socket_connect+0x48/0x80 [ 644.669584][T27765] __sys_connect+0x181/0x2b0 [ 644.669639][T27765] __x64_sys_connect+0x3f/0x50 [ 644.669672][T27765] x64_sys_call+0x2c08/0x2ff0 [ 644.669701][T27765] do_syscall_64+0xd2/0x200 [ 644.669764][T27765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 644.669792][T27765] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 644.669856][T27765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.669880][T27765] RIP: 0033:0x7fc69540ebe9 [ 644.669896][T27765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.669918][T27765] RSP: 002b:00007fc693e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 644.669941][T27765] RAX: ffffffffffffffda RBX: 00007fc695635fa0 RCX: 00007fc69540ebe9 [ 644.669956][T27765] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 644.670004][T27765] RBP: 00007fc693e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 644.670019][T27765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.670034][T27765] R13: 00007fc695636038 R14: 00007fc695635fa0 R15: 00007ffc61e73e98 [ 644.670057][T27765] [ 644.932796][T27772] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 645.048500][T27777] Falling back ldisc for ttyS3. [ 645.089394][T27791] netlink: 'syz.2.7964': attribute type 21 has an invalid length. [ 645.184484][T27798] FAULT_INJECTION: forcing a failure. [ 645.184484][T27798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.197819][T27798] CPU: 0 UID: 0 PID: 27798 Comm: syz.1.7967 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 645.197861][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.197876][T27798] Call Trace: [ 645.197882][T27798] [ 645.197890][T27798] __dump_stack+0x1d/0x30 [ 645.197917][T27798] dump_stack_lvl+0xe8/0x140 [ 645.198016][T27798] dump_stack+0x15/0x1b [ 645.198037][T27798] should_fail_ex+0x265/0x280 [ 645.198144][T27798] should_fail+0xb/0x20 [ 645.198183][T27798] should_fail_usercopy+0x1a/0x20 [ 645.198209][T27798] _copy_to_user+0x20/0xa0 [ 645.198246][T27798] simple_read_from_buffer+0xb5/0x130 [ 645.198292][T27798] proc_fail_nth_read+0x10e/0x150 [ 645.198324][T27798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.198427][T27798] vfs_read+0x1a0/0x6f0 [ 645.198455][T27798] ? __rcu_read_unlock+0x4f/0x70 [ 645.198479][T27798] ? __fget_files+0x184/0x1c0 [ 645.198515][T27798] ? filename_create+0x78/0x230 [ 645.198547][T27798] ksys_read+0xda/0x1a0 [ 645.198594][T27798] __x64_sys_read+0x40/0x50 [ 645.198624][T27798] x64_sys_call+0x27bc/0x2ff0 [ 645.198654][T27798] do_syscall_64+0xd2/0x200 [ 645.198688][T27798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.198743][T27798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 645.198784][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.198812][T27798] RIP: 0033:0x7fbc06dcd5fc [ 645.198828][T27798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 645.198848][T27798] RSP: 002b:00007fbc05837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.198868][T27798] RAX: ffffffffffffffda RBX: 00007fbc06ff5fa0 RCX: 00007fbc06dcd5fc [ 645.198893][T27798] RDX: 000000000000000f RSI: 00007fbc058370a0 RDI: 0000000000000006 [ 645.198910][T27798] RBP: 00007fbc05837090 R08: 0000000000000000 R09: 0000000000000000 [ 645.198928][T27798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.199010][T27798] R13: 00007fbc06ff6038 R14: 00007fbc06ff5fa0 R15: 00007ffd3e57d948 [ 645.199038][T27798] [ 646.403707][T27815] netlink: 'syz.3.7971': attribute type 4 has an invalid length. [ 646.505438][T27816] __nla_validate_parse: 23 callbacks suppressed [ 646.505463][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7972'. [ 646.560715][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 646.560740][ T29] audit: type=1400 audit(1754691047.781:53123): avc: denied { write } for pid=27820 comm="syz.4.7974" path="socket:[100770]" dev="sockfs" ino=100770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 646.754154][ T29] audit: type=1326 audit(1754691048.011:53124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 646.819206][T27830] netlink: 'syz.2.7979': attribute type 27 has an invalid length. [ 646.857960][T27830] vlan2: left allmulticast mode [ 646.890895][ T29] audit: type=1326 audit(1754691048.041:53125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 646.914771][ T29] audit: type=1326 audit(1754691048.041:53126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 646.938525][ T29] audit: type=1326 audit(1754691048.041:53127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 646.962433][ T29] audit: type=1326 audit(1754691048.041:53128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 646.986689][ T29] audit: type=1326 audit(1754691048.041:53129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 647.010511][ T29] audit: type=1326 audit(1754691048.041:53130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27827 comm="syz.4.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 647.034488][ T29] audit: type=1400 audit(1754691048.071:53131): avc: denied { mount } for pid=27829 comm="syz.2.7979" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 647.056779][ T29] audit: type=1400 audit(1754691048.071:53132): avc: denied { read } for pid=27829 comm="syz.2.7979" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 649.775522][ T2596] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.785001][ T2596] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.794053][ T2596] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.803497][ T2596] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.233800][T27867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7989'. [ 650.245877][T27867] netlink: 'syz.4.7989': attribute type 21 has an invalid length. [ 650.254200][T27867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7989'. [ 650.391509][T27869] Falling back ldisc for ttyS3. [ 650.709599][T27890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7998'. [ 650.874715][T27897] netlink: 'syz.2.8001': attribute type 13 has an invalid length. [ 651.044788][T27918] program syz.2.8009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.122599][T27927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8012'. [ 651.133740][T27927] netlink: 'syz.2.8012': attribute type 21 has an invalid length. [ 651.141680][T27927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8012'. [ 651.343227][T27935] netlink: '+}[@': attribute type 13 has an invalid length. [ 651.350672][T27935] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 651.967872][T27951] netlink: 'syz.2.8017': attribute type 4 has an invalid length. [ 651.975724][T27951] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8017'. [ 652.218457][T27950] netlink: '+}[@': attribute type 13 has an invalid length. [ 652.295929][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 652.295946][ T29] audit: type=1326 audit(1754691053.551:53275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.502317][ T29] audit: type=1326 audit(1754691053.591:53276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.526222][ T29] audit: type=1326 audit(1754691053.591:53277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.550077][ T29] audit: type=1326 audit(1754691053.591:53278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.573954][ T29] audit: type=1326 audit(1754691053.591:53279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.598065][ T29] audit: type=1326 audit(1754691053.591:53280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.621980][ T29] audit: type=1326 audit(1754691053.591:53281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.645647][ T29] audit: type=1326 audit(1754691053.591:53282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.669300][ T29] audit: type=1326 audit(1754691053.591:53283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.692983][ T29] audit: type=1326 audit(1754691053.591:53284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27960 comm="syz.1.8022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 652.860002][T27973] 9pnet_fd: Insufficient options for proto=fd [ 653.226485][T27991] netlink: 'syz.1.8034': attribute type 13 has an invalid length. [ 653.234595][T27991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8034'. [ 653.245600][T27993] netlink: 'syz.0.8035': attribute type 13 has an invalid length. [ 653.256097][T27981] Falling back ldisc for ttyS3. [ 653.317537][T27996] 9pnet_fd: Insufficient options for proto=fd [ 653.808391][T28011] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8043'. [ 653.871065][T28011] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8043'. [ 655.115763][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8048'. [ 655.509135][T28028] netlink: 'syz.3.8048': attribute type 21 has an invalid length. [ 655.536304][T28028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8048'. [ 655.776526][T28044] program syz.1.8055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.881647][T28037] Falling back ldisc for ttyS3. [ 655.955904][T28050] 9pnet_fd: Insufficient options for proto=fd [ 655.976048][T28052] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8059'. [ 656.005391][T28052] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8059'. [ 656.141933][T28048] Falling back ldisc for ttyS3. [ 656.200599][T28060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8062'. [ 656.224082][T28060] netlink: 'syz.1.8062': attribute type 21 has an invalid length. [ 656.240698][T28060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8062'. [ 656.462930][T28071] program syz.1.8067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.874594][T28091] netlink: 'syz.0.8076': attribute type 21 has an invalid length. [ 656.916037][T28092] $Hÿ: renamed from bond0 [ 656.929533][T28092] $Hÿ: entered promiscuous mode [ 656.934689][T28092] bond_slave_0: entered promiscuous mode [ 656.940553][T28092] bond_slave_1: entered promiscuous mode [ 657.032888][T28083] Falling back ldisc for ttyS3. [ 657.122806][T28103] 9pnet_virtio: no channels available for device 127.0.0.1 [ 657.202871][T28108] __nla_validate_parse: 3 callbacks suppressed [ 657.202889][T28108] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 657.240336][T28114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8087'. [ 657.249809][T28108] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 657.251954][T28114] netlink: 'syz.1.8087': attribute type 21 has an invalid length. [ 657.266660][T28114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8087'. [ 657.300701][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 657.300723][ T29] audit: type=1326 audit(1754691058.551:53609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28115 comm="syz.3.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 657.330773][ T29] audit: type=1326 audit(1754691058.551:53610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28115 comm="syz.3.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 657.354652][ T29] audit: type=1326 audit(1754691058.551:53611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28115 comm="syz.3.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 657.378300][ T29] audit: type=1326 audit(1754691058.551:53612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28115 comm="syz.3.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 657.402532][ T29] audit: type=1326 audit(1754691058.551:53613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28115 comm="syz.3.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 657.447088][ T29] audit: type=1326 audit(1754691058.701:53614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28121 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 657.471004][ T29] audit: type=1326 audit(1754691058.701:53615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28121 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 657.494753][ T29] audit: type=1326 audit(1754691058.701:53616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28121 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 657.525627][ T29] audit: type=1326 audit(1754691058.701:53617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28121 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 657.549395][ T29] audit: type=1326 audit(1754691058.701:53618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28121 comm="syz.4.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565786ebe9 code=0x7ffc0000 [ 657.575181][T28126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28126 comm=syz.4.8091 [ 657.764208][T28133] netlink: 'syz.2.8094': attribute type 1 has an invalid length. [ 657.772870][T28128] Falling back ldisc for ttyS3. [ 657.838877][T28133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 657.850573][T28136] netlink: 'syz.1.8093': attribute type 4 has an invalid length. [ 657.858419][T28136] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8093'. [ 657.965462][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8094'. [ 658.058016][T28133] dummy0: entered promiscuous mode [ 658.100773][T28133] bond1: (slave dummy0): making interface the new active one [ 658.155933][T28133] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 658.214801][T28138] vlan4: entered promiscuous mode [ 658.219934][T28138] bond1: entered promiscuous mode [ 658.393542][T28143] 9pnet_virtio: no channels available for device 127.0.0.1 [ 658.588688][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8100'. [ 658.622516][T28149] netlink: 'syz.0.8100': attribute type 21 has an invalid length. [ 658.650889][T28149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8100'. [ 658.868973][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8105'. [ 659.132372][T28175] 9pnet_virtio: no channels available for device 127.0.0.1 [ 659.316481][T28186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8116'. [ 659.347971][T28186] netlink: 'syz.4.8116': attribute type 21 has an invalid length. [ 660.513812][T28193] program syz.3.8118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.357230][T28204] __nla_validate_parse: 1 callbacks suppressed [ 662.357253][T28204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8123'. [ 662.594594][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 662.594614][ T29] audit: type=1326 audit(1754691063.851:53725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.1.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 662.640283][ T29] audit: type=1326 audit(1754691063.891:53726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.1.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 662.664304][ T29] audit: type=1326 audit(1754691063.891:53727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28216 comm="syz.1.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc06dcebe9 code=0x7ffc0000 [ 662.726641][T28221] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 662.738321][T28221] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 663.729463][ T29] audit: type=1326 audit(1754691064.081:53728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.753955][ T29] audit: type=1326 audit(1754691064.081:53729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.778124][ T29] audit: type=1326 audit(1754691064.091:53730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.802151][ T29] audit: type=1326 audit(1754691064.091:53731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.826092][ T29] audit: type=1326 audit(1754691064.091:53732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.849808][ T29] audit: type=1326 audit(1754691064.091:53733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 663.873720][ T29] audit: type=1326 audit(1754691064.091:53734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.3.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e12ebe9 code=0x7ffc0000 [ 665.200582][T28252] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 665.214615][T28252] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 665.313317][T28260] netlink: 'syz.3.8144': attribute type 23 has an invalid length. [ 665.405575][T28271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8151'. [ 665.471230][T28268] Falling back ldisc for ttyS3. [ 665.500451][T28277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8154'. [ 665.505562][T28283] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 665.526312][T28283] netlink: 7 bytes leftover after parsing attributes in process `wÞ'. [ 665.714105][T20324] ================================================================== [ 665.722265][T20324] BUG: KCSAN: data-race in __stop_tty / pty_write [ 665.728729][T20324] [ 665.731110][T20324] write to 0xffff888122746dbc of 1 bytes by task 28295 on cpu 0: [ 665.738929][T20324] __stop_tty+0x36/0x90 [ 665.743413][T20324] n_tty_ioctl_helper+0x1e9/0x210 [ 665.748505][T20324] n_tty_ioctl+0x101/0x200 [ 665.753069][T20324] tty_ioctl+0x842/0xb80 [ 665.757372][T20324] __se_sys_ioctl+0xcb/0x140 [ 665.762012][T20324] __x64_sys_ioctl+0x43/0x50 [ 665.766630][T20324] x64_sys_call+0x1816/0x2ff0 [ 665.771324][T20324] do_syscall_64+0xd2/0x200 [ 665.775846][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.781771][T20324] [ 665.784108][T20324] read to 0xffff888122746dbc of 1 bytes by task 20324 on cpu 1: [ 665.791752][T20324] pty_write+0x24/0x90 [ 665.796552][T20324] tty_put_char+0x8f/0xc0 [ 665.801177][T20324] __process_echoes+0x309/0x6b0 [ 665.806225][T20324] n_tty_receive_buf_common+0x8e4/0xbe0 [ 665.811795][T20324] n_tty_receive_buf2+0x33/0x40 [ 665.816753][T20324] tty_ldisc_receive_buf+0x63/0xf0 [ 665.821913][T20324] tty_port_default_receive_buf+0x59/0x90 [ 665.827899][T20324] flush_to_ldisc+0x148/0x340 [ 665.832617][T20324] process_scheduled_works+0x4ce/0x9d0 [ 665.838291][T20324] worker_thread+0x582/0x770 [ 665.842919][T20324] kthread+0x486/0x510 [ 665.847003][T20324] ret_from_fork+0xda/0x150 [ 665.851625][T20324] ret_from_fork_asm+0x1a/0x30 [ 665.856547][T20324] [ 665.859007][T20324] value changed: 0x00 -> 0x01 [ 665.863691][T20324] [ 665.866112][T20324] Reported by Kernel Concurrency Sanitizer on: [ 665.872446][T20324] CPU: 1 UID: 0 PID: 20324 Comm: kworker/u8:18 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 665.884963][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.895125][T20324] Workqueue: events_unbound flush_to_ldisc [ 665.900985][T20324] ================================================================== [ 665.924264][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8163'. [ 665.930218][T28295] netlink: 'syz.1.8159': attribute type 23 has an invalid length.