last executing test programs: 12.009551636s ago: executing program 3 (id=2824): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf250b000000340001800800030003000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000300020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="000000006f9eb6f6dff1f5fac3199c8cb32123ffc92ebd7a6487a6", @ANYRES32=r5, @ANYBLOB="14000200776c616e31000000000000000000000008000300010000001400020076657468315f746f5f68737200000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc800}, 0x4080) 11.932495499s ago: executing program 3 (id=2825): unshare(0x20060400) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="a27beec7789adbfcd661d0760270de3628ad5e487a53845be6736b3cccaf7b1ce80882bf415b80a96ba317fe7204d21da569b1e81cd3de2c60952acf85a97dbffdd9a75e6cc1754ed64542bef50f", 0x4e}, {&(0x7f0000000380)="5cfc078192ca07f57d25213649f3012410a5d65304c067c1d8a63edf4efd13322da905ad6cfe74062b0c5fdc65bd6deec8d7d0176c90168aa0607c06cbc70aa4d63273bcdad185b7623e62fb124c495468399069e46b870def3b1ee44e12946d3415dc6c79904c90c8702a1c6f1a3cb2c27020c72f818749ee364844acfd5d3ac66363c7872366903b8d77ce9b43aed2c1044d172b11b8a774695a44fb03ade374ccc8b40e2249ef25ab404917dfa831842bec2def37d3325a5576db93eb161cba5132c2bab9b4b9ff1aca3639b99a1b0bb19711d5ae58555242", 0xda}, {&(0x7f0000000480)="68fff7ff44c602100a5b92cfb69bb49e885447d38f0ae5aa41079fa33710fb77fa965f7176171a70d5439fe69b663d1c60fec412c1dd2e8062cf456056d0c897a90883edf3d067f6f28aefa4a6561ed49bed04b1db025249560ed46f785129523f51cd98dc9b59a43a1fe220608a7b9211b05579abad5d86962ec2537731889a4cadaa1ffb276486f16befe49587455fd2dd8c7d190d619004a6ef61c8a1b55a3327c2ca9a55f2c19c46f9c12a9b41258764cc6117d6d711058dac83721226b0627d3dbaff6c4a39", 0xc8}], 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x2c69}, 0x18) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f00000000c0)=""/3, 0x3, 0x6, 0x800}) setns(r5, 0x80) 11.605256733s ago: executing program 3 (id=2827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000003c1d0628000000000000000018010000206078250000fe00020000bf7b291d763de8d07dfb3c65d4a10000e862d504d8420c32000007013a63613802e80000f8ff1700b702000008000000b70300000700"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11.604570303s ago: executing program 3 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000380)=""/20, 0x14) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)='\f7', 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x8, 0x80000) 11.583235575s ago: executing program 3 (id=2832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d376f7b8644126747cb39ecdb9209fb", 0x10}], 0x1, 0x0, 0x1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0xf6c54ce5744af6e0, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) socket(0x10, 0x3, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) finit_module(r3, 0x0, 0x3) 11.285331907s ago: executing program 3 (id=2838): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000000f4e00000000000803000000002e00"], &(0x7f00000000c0)=""/76, 0x27, 0x4c, 0x1, 0x9}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a400, 0x0) ioctl$TIOCSBRK(r2, 0x5427) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071106700000004009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000e40)=0x5) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xf0, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000080}, 0x48051) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x18) r12 = memfd_secret(0x0) futimesat(r12, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000c40)=""/127, 0x7b}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/209, 0xd1}], 0x7}, 0x3}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/238, 0xee}], 0x1, &(0x7f0000000a00)=""/18, 0x12}, 0x8001}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/39, 0x27}], 0x1, &(0x7f0000000ac0)=""/189, 0x96}, 0xffff}], 0x3, 0xfc0, 0x0) 6.76074239s ago: executing program 0 (id=2866): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.76021542s ago: executing program 1 (id=2867): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) read$nci(r1, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x4, 0x5e, 0x2}) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @empty}}, 0x8001, 0x7}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000c0}}], 0x2, 0x0) 5.662376257s ago: executing program 0 (id=2870): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.661320087s ago: executing program 1 (id=2871): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x1, 0x4, 0x2000000000008, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="a476924ff75c2477c2f7220d6ee85fdf349ac46e72aa02f2d420638e8eef426f0b5c875299480ebb8e76e75bca577dbfaa9ca61c46793facc20219a62977b3247bde850471bdd3d7d7284b0fd0f98d63ac16b5761fe84f7300433fa77100472758a8fcbe9673439d73f1fd7dde2ec73c351097c3e6ade344c0bc530085918687eebadcf20bf46743407fcdda015acf23d49dfbc118fe367b5063fcd55e1070c297525d628738fe", @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) open(0x0, 0x145142, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x80006, 0x6}, 0x40, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a000000004c9d28c0d30a66cdffac1414aaff02000000000000000000000000000101"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r8, 0x1, 0x2f, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r9 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r9, 0x407, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.660936937s ago: executing program 2 (id=2872): syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd600000"], 0x0) (fail_nth: 3) 5.617001819s ago: executing program 4 (id=2873): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x48010) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x8, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x8910, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x1e, 0x0, &(0x7f0000000240)=0xfffffffffffffd4a) r5 = socket$nl_route(0x10, 0x3, 0x0) timer_delete(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020208000200030001002c000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) r8 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu==0||!') write$UHID_CREATE2(r0, &(0x7f00000006c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x72, 0xce7, 0x2, 0x8, 0xfffffff9, 0x48dc, "edec40246e1e911af72f23b0477078a623e3ef17794b04157ccdd27b28c59952860e23f9efe399c4eff18e6b4deb91d7a38124a651cefbde10734e9324b3010268d927e404c71305b832e9ffb1df57dafa4a7a978f0484c197ce9d16492b9f934be0198a5c863ddc0d273dbabd82fc57c354"}}, 0x18a) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000200001002dbd7000f9dbdf2502"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44046084) 4.456162309s ago: executing program 0 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 4.455256659s ago: executing program 1 (id=2875): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x805, 0x0) socket(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r2, 0x0, 0x800bf5, 0x2000402) bpf$MAP_CREATE(0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB="10000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES64, @ANYRES64=r0], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 4.454843959s ago: executing program 2 (id=2876): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0x0, 0x300, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3, 0x3}}}}]}]}, 0x70}}, 0x4044010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x400, 0x70bd28, 0x6, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x304e0f4f7bb2eec7) 4.450872059s ago: executing program 4 (id=2877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022cbd7000ffdbdf25200000000c2099000008000050000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd700bfbdbdf253e00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x51b46af6b3ca2aa}, 0x4000000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x53}]}, 0x54}}, 0x44800) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$rfkill(r9, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4080) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100251e8000000801030020000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000004) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.02096489s ago: executing program 0 (id=2878): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf250b000000340001800800030003000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000300020000004400018008000100", @ANYRES32=0x0, @ANYBLOB="000000006f9eb6f6dff1f5fac3199c8cb32123ffc92ebd7a6487a6", @ANYRES32=r5, @ANYBLOB="14000200776c616e31000000000000000000000008000300010000001400020076657468315f746f5f68737200000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc800}, 0x4080) 3.020390161s ago: executing program 1 (id=2879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbd, &(0x7f0000000200)=[{&(0x7f0000000080)="d800000018236f645bdc55de0dfb160900000081f783db4cb9040a10080012773cf07ebd4c06007c09e8fc55a10a00150800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4713f5aebbb9ad809d5e1cace0d81ed0bffece0b42ad4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000000000007900000000000000000000000000000000000000fb1bf3c437697f6066357f14c1e2335aaabd4e8977d0e9aa5c82d770d13a19876f90b86ee5b0c6e01353cc35b6ca9796ced24a951549ee89c46ec51fd40abf0832bb918e4f7f61e2f5c0247b992b8059a80fa0df670e04596694c95e5dcfab41b2c6a3b2a89612ea3379dcb386f845f3f07dac690252643ea5fd807148fa6ffb7dd9cc09", 0x158}, {&(0x7f0000000280)="74a5be905ffe077df1df66a4676e677d225c6f71146680ac01457d6b06ba587c4881f3f3bef9c81709953d134a76072d53873b79a9251d4871b266bb74fca98ecf790189c39aaaa6e689238dd7513c4152ce8642a37661f3d8424607f7300c58fcc3402811a9106b4e0adef774f556ed", 0x70}], 0x2, 0x0, 0x0, 0x4788}, 0x4008845) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x90}}, 0x0) 3.019955221s ago: executing program 2 (id=2880): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$usbfs(0x0, 0x8, 0x81) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x3}}, 0x2e) r2 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x38, 0x4855}, 0x24000052) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0xfdff, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 3.014811441s ago: executing program 4 (id=2881): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d376f7b8644126747cb39ecdb9209fb5823", 0x12}], 0x1, 0x0, 0x1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0xf6c54ce5744af6e0, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 2.996402201s ago: executing program 2 (id=2882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x20000000, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x2135, 0x8918, 0x0, 0x3, 0x4, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x7f, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x3, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.981449132s ago: executing program 4 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 3) 1.590029922s ago: executing program 0 (id=2884): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) ioctl(r1, 0x1, &(0x7f0000000480)="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") bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x6, 0x4) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x1}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) creat(&(0x7f00000003c0)='./file1\x00', 0x11) 1.587113542s ago: executing program 1 (id=2885): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)=@generic={&(0x7f0000000180)='./file0\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x482, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xd, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfc32}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x3, 0xc5, &(0x7f00000003c0)=""/197, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3]}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007e000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") socket$netlink(0x10, 0x3, 0x8000000004) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.582209162s ago: executing program 2 (id=2886): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x1, 0x4, 0x2000000000008, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="a476924ff75c2477c2f7220d6ee85fdf349ac46e72aa02f2d420638e8eef426f0b5c875299480ebb8e76e75bca577dbfaa9ca61c46793facc20219a62977b3247bde850471bdd3d7d7284b0fd0f98d63ac16b5761fe84f7300433fa77100472758a8fcbe9673439d73f1fd7dde2ec73c351097c3e6ade344c0bc530085918687eebadcf20bf46743407fcdda015acf23d49dfbc118fe367b5063fcd55e1070c297525d628738fe", @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) open(0x0, 0x145142, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x80006, 0x6}, 0x40, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a000000004c9d28c0d30a66cdffac1414aaff02000000000000000000000000000101"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r8, 0x1, 0x2f, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r9 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r9, 0x407, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.581764431s ago: executing program 4 (id=2887): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) (fail_nth: 3) 66.376366ms ago: executing program 0 (id=2888): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x44, 0x30, 0x10b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 65.949317ms ago: executing program 1 (id=2889): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket(0x11, 0x3, 0x0) r4 = inotify_init1(0x80000) close_range(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x8}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000780)={r5, 0x1000, "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"}, &(0x7f0000000340)=0x1008) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e0132fba5300027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 478.71µs ago: executing program 2 (id=2890): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (fail_nth: 3) 0s ago: executing program 4 (id=2891): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x6e, 0xa4, &(0x7f0000000380)="1e9812998693ecdfc618bf08d63c60113d205b4b24c7261247a2035d8f92f0e501649258a92ba710b6a5b31b248b592d734f1918f27e8fae12bf43c4badc5c685b1129fc4db4852d37f97bea1663f6ef9833bbf847649d9208f41f436f0e10edfb7e1c38aea4b3a3c0cd609c7b7c", &(0x7f0000000400)=""/164, 0x80000001, 0x0, 0xce, 0x98, &(0x7f0000000600)="c0112377af5e8b952a4ea26640684161c3aedbcffa10f7b295fa1214523c6a293b3b8f951a23f9aa4f53f77f5b810d5416af3cc1006b578dffdf0d5180151795ba008846b69e9696782ea25d7aaefdaa00396a9fabd7f97aab31e6530b9cb89cf3a83642559aa02bb7e010a0d0aa6007428858fad9822a2f7c66dba68a168c7fa1a3e0e4b5cc289e8402677aaee0f5e86b3524b529ca4fd70e9d436fedc530c0599fb761e64706b0ab5ad38a9197c4747b0dca452a8b7324268fd03f84532c9bb852108a3be3f5c65c89d3076cbf", &(0x7f0000000700)="368d1bd2cf029a9368e85cf65b1980e952dbe428d9e20f5178afa4d126e96d74de7a9f34744c2945c45076760f648e3f983e8454cba785480c47d7e585d4defd36ab1dbbd4837fd88a6b4ed8ade63b7cb1523b36951a0f17de98be3d1c4e947556f598c8e21ce2b5fbb9701f7d4d42be37251da7cff47c8c7a673b3e465fbb6566aefe1e9b9a14400b57b11e8dfc92a9c99a37bac3119b94", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): /0x1c0 [ 147.952956][ T8893] __secure_computing+0x82/0x150 [ 147.953031][ T8893] syscall_trace_enter+0xcf/0x1e0 [ 147.953091][ T8893] do_syscall_64+0xac/0x200 [ 147.953137][ T8893] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.953165][ T8893] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.953208][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.953246][ T8893] RIP: 0033:0x7fbf8bcaf749 [ 147.953265][ T8893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.953287][ T8893] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 147.953359][ T8893] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 147.953374][ T8893] RDX: 00002000000007c0 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 147.953389][ T8893] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 0000000000000000 [ 147.953404][ T8893] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 147.953419][ T8893] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 147.953450][ T8893] [ 147.960419][ T8895] FAULT_INJECTION: forcing a failure. [ 147.960419][ T8895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.184368][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.2.2155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.184402][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.184450][ T8895] Call Trace: [ 148.184458][ T8895] [ 148.184468][ T8895] __dump_stack+0x1d/0x30 [ 148.184496][ T8895] dump_stack_lvl+0xe8/0x140 [ 148.184580][ T8895] dump_stack+0x15/0x1b [ 148.184600][ T8895] should_fail_ex+0x265/0x280 [ 148.184619][ T8895] should_fail+0xb/0x20 [ 148.184653][ T8895] should_fail_usercopy+0x1a/0x20 [ 148.184701][ T8895] _copy_from_user+0x1c/0xb0 [ 148.184740][ T8895] do_sock_getsockopt+0xf1/0x240 [ 148.184807][ T8895] __x64_sys_getsockopt+0x11e/0x1a0 [ 148.184897][ T8895] x64_sys_call+0x2bca/0x3000 [ 148.184918][ T8895] do_syscall_64+0xd2/0x200 [ 148.184944][ T8895] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.184981][ T8895] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.185157][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.185186][ T8895] RIP: 0033:0x7f4b71c5f749 [ 148.185204][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.185225][ T8895] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 148.185247][ T8895] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 148.185263][ T8895] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 148.185298][ T8895] RBP: 00007f4b706bf090 R08: 0000200000000180 R09: 0000000000000000 [ 148.185313][ T8895] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.185329][ T8895] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 148.185351][ T8895] [ 148.420044][ T8903] pimreg: tun_chr_ioctl cmd 1074025678 [ 148.425665][ T8903] pimreg: group set to 0 [ 148.439380][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2158'. [ 148.505075][ T8913] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.550030][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2165'. [ 148.601496][ T8924] veth64: entered promiscuous mode [ 148.606737][ T8924] veth64: entered allmulticast mode [ 148.659127][ T8925] lo speed is unknown, defaulting to 1000 [ 148.773705][ T8947] FAULT_INJECTION: forcing a failure. [ 148.773705][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.786817][ T8947] CPU: 1 UID: 0 PID: 8947 Comm: syz.2.2178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.786916][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.786931][ T8947] Call Trace: [ 148.786938][ T8947] [ 148.786946][ T8947] __dump_stack+0x1d/0x30 [ 148.786986][ T8947] dump_stack_lvl+0xe8/0x140 [ 148.787010][ T8947] dump_stack+0x15/0x1b [ 148.787031][ T8947] should_fail_ex+0x265/0x280 [ 148.787054][ T8947] should_fail+0xb/0x20 [ 148.787072][ T8947] should_fail_usercopy+0x1a/0x20 [ 148.787178][ T8947] _copy_from_iter+0xd2/0xe80 [ 148.787206][ T8947] ? __build_skb_around+0x1ab/0x200 [ 148.787316][ T8947] ? __alloc_skb+0x223/0x320 [ 148.787427][ T8947] netlink_sendmsg+0x471/0x6b0 [ 148.787453][ T8947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.787477][ T8947] __sock_sendmsg+0x145/0x180 [ 148.787575][ T8947] ____sys_sendmsg+0x31e/0x4e0 [ 148.787601][ T8947] ___sys_sendmsg+0x17b/0x1d0 [ 148.787713][ T8947] __x64_sys_sendmsg+0xd4/0x160 [ 148.787774][ T8947] x64_sys_call+0x191e/0x3000 [ 148.787802][ T8947] do_syscall_64+0xd2/0x200 [ 148.787910][ T8947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.787945][ T8947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.787987][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.788014][ T8947] RIP: 0033:0x7f4b71c5f749 [ 148.788092][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.788115][ T8947] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.788139][ T8947] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 148.788154][ T8947] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 148.788167][ T8947] RBP: 00007f4b706bf090 R08: 0000000000000000 R09: 0000000000000000 [ 148.788178][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.788189][ T8947] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 148.788287][ T8947] [ 148.853683][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 149.232621][ T8978] lo speed is unknown, defaulting to 1000 [ 149.472518][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 149.737964][ T9020] pimreg: tun_chr_ioctl cmd 1074025678 [ 149.743548][ T9020] pimreg: group set to 0 [ 149.763412][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 150.066736][ T9058] pimreg: tun_chr_ioctl cmd 1074025678 [ 150.072329][ T9058] pimreg: group set to 0 [ 150.639995][ T9101] pimreg: tun_chr_ioctl cmd 1074025678 [ 150.645571][ T9101] pimreg: group set to 0 [ 150.886917][ T9120] validate_nla: 2 callbacks suppressed [ 150.886930][ T9120] netlink: 'syz.1.2253': attribute type 10 has an invalid length. [ 151.122795][ T9124] veth22: entered promiscuous mode [ 151.127988][ T9124] veth22: entered allmulticast mode [ 151.268311][ T9140] lo speed is unknown, defaulting to 1000 [ 151.496852][ T9163] ip6gre1: entered promiscuous mode [ 151.502157][ T9163] ip6gre1: entered allmulticast mode [ 151.524398][ T9149] FAULT_INJECTION: forcing a failure. [ 151.524398][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.537619][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.537644][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.537656][ T9149] Call Trace: [ 151.537662][ T9149] [ 151.537669][ T9149] __dump_stack+0x1d/0x30 [ 151.537691][ T9149] dump_stack_lvl+0xe8/0x140 [ 151.537716][ T9149] dump_stack+0x15/0x1b [ 151.537814][ T9149] should_fail_ex+0x265/0x280 [ 151.537837][ T9149] should_fail+0xb/0x20 [ 151.537852][ T9149] should_fail_usercopy+0x1a/0x20 [ 151.537872][ T9149] copy_folio_from_iter_atomic+0x278/0x11b0 [ 151.537910][ T9149] ? shmem_write_begin+0xa8/0x190 [ 151.537994][ T9149] ? shmem_write_begin+0xe1/0x190 [ 151.538092][ T9149] generic_perform_write+0x2c2/0x490 [ 151.538119][ T9149] shmem_file_write_iter+0xc5/0xf0 [ 151.538152][ T9149] do_iter_readv_writev+0x4a1/0x540 [ 151.538183][ T9149] vfs_writev+0x2df/0x8b0 [ 151.538286][ T9149] __se_sys_pwritev2+0xfc/0x1c0 [ 151.538369][ T9149] __x64_sys_pwritev2+0x67/0x80 [ 151.538407][ T9149] x64_sys_call+0x2c59/0x3000 [ 151.538435][ T9149] do_syscall_64+0xd2/0x200 [ 151.538492][ T9149] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.538534][ T9149] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.538572][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.538599][ T9149] RIP: 0033:0x7fbf8bcaf749 [ 151.538617][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.538640][ T9149] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 151.538736][ T9149] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 151.538748][ T9149] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 151.538818][ T9149] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 0000000000000003 [ 151.538832][ T9149] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 151.538847][ T9149] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 151.538869][ T9149] [ 151.857384][ T9174] __nla_validate_parse: 9 callbacks suppressed [ 151.857456][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2277'. [ 151.901416][ T9178] veth36: entered promiscuous mode [ 151.906610][ T9178] veth36: entered allmulticast mode [ 151.997083][ T9187] pimreg: tun_chr_ioctl cmd 1074025678 [ 152.002648][ T9187] pimreg: group set to 0 [ 152.015135][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2284'. [ 152.024265][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 152.173227][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2291'. [ 152.183231][ T9205] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.192391][ T9205] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 152.525984][ T9221] veth38: entered promiscuous mode [ 152.531216][ T9221] veth38: entered allmulticast mode [ 152.741000][ T29] kauditd_printk_skb: 23872 callbacks suppressed [ 152.741016][ T29] audit: type=1400 audit(1764599823.975:358751): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.749588][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.774183][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.775447][ T3043] audit: audit_lost=23360 audit_rate_limit=0 audit_backlog_limit=64 [ 152.781791][ T3315] audit: audit_lost=23361 audit_rate_limit=0 audit_backlog_limit=64 [ 152.789753][ T3043] audit: backlog limit exceeded [ 152.790178][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.797746][ T3315] audit: backlog limit exceeded [ 152.801072][ T9233] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.802629][ T3043] audit: audit_lost=23362 audit_rate_limit=0 audit_backlog_limit=64 [ 152.832197][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2304'. [ 153.035770][ T9259] lo speed is unknown, defaulting to 1000 [ 153.117286][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2316'. [ 153.461455][ T9292] veth40: entered promiscuous mode [ 153.466635][ T9292] veth40: entered allmulticast mode [ 153.473163][ T9295] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.516766][ T9295] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 153.581224][ T9300] lo speed is unknown, defaulting to 1000 [ 153.963662][ T9318] pimreg: tun_chr_ioctl cmd 1074025678 [ 153.969215][ T9318] pimreg: group set to 0 [ 153.992836][ T9319] veth50: entered promiscuous mode [ 153.998004][ T9319] veth50: entered allmulticast mode [ 154.026459][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2339'. [ 154.218615][ T9329] xt_hashlimit: max too large, truncated to 1048576 [ 154.265211][ T9332] lo speed is unknown, defaulting to 1000 [ 154.449002][ T9345] veth38: entered promiscuous mode [ 154.454306][ T9345] veth38: entered allmulticast mode [ 154.532666][ T9354] xt_hashlimit: max too large, truncated to 1048576 [ 154.597398][ T9351] veth40: entered promiscuous mode [ 154.602608][ T9351] veth40: entered allmulticast mode [ 154.672914][ T9356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2355'. [ 154.807687][ T9368] lo speed is unknown, defaulting to 1000 [ 154.848155][ T9373] FAULT_INJECTION: forcing a failure. [ 154.848155][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.861399][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.3.2358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.861428][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.861440][ T9373] Call Trace: [ 154.861446][ T9373] [ 154.861454][ T9373] __dump_stack+0x1d/0x30 [ 154.861476][ T9373] dump_stack_lvl+0xe8/0x140 [ 154.861495][ T9373] dump_stack+0x15/0x1b [ 154.861612][ T9373] should_fail_ex+0x265/0x280 [ 154.861636][ T9373] should_fail+0xb/0x20 [ 154.861654][ T9373] should_fail_usercopy+0x1a/0x20 [ 154.861674][ T9373] _copy_from_user+0x1c/0xb0 [ 154.861699][ T9373] do_ipt_set_ctl+0x3a0/0x820 [ 154.861718][ T9373] ? lock_sock_nested+0x112/0x140 [ 154.861770][ T9373] nf_setsockopt+0x199/0x1b0 [ 154.861801][ T9373] ip_setsockopt+0x102/0x110 [ 154.861838][ T9373] udp_setsockopt+0x99/0xb0 [ 154.861896][ T9373] sock_common_setsockopt+0x69/0x80 [ 154.861927][ T9373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.862030][ T9373] __sys_setsockopt+0x184/0x200 [ 154.862065][ T9373] __x64_sys_setsockopt+0x64/0x80 [ 154.862101][ T9373] x64_sys_call+0x20ec/0x3000 [ 154.862200][ T9373] do_syscall_64+0xd2/0x200 [ 154.862220][ T9373] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.862327][ T9373] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.862384][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.862429][ T9373] RIP: 0033:0x7fbf8bcaf749 [ 154.862444][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.862464][ T9373] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.862486][ T9373] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 154.862501][ T9373] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 154.862565][ T9373] RBP: 00007fbf8a717090 R08: 0000000000000548 R09: 0000000000000000 [ 154.862576][ T9373] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 154.862588][ T9373] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 154.862621][ T9373] [ 155.127595][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2366'. [ 155.138605][ T9379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.147863][ T9379] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 155.173349][ T9381] veth52: entered promiscuous mode [ 155.178537][ T9381] veth52: entered allmulticast mode [ 155.453282][ T9388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.463061][ T9388] netlink: 'syz.1.2367': attribute type 10 has an invalid length. [ 155.602314][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2369'. [ 155.826436][ T9403] pimreg: tun_chr_ioctl cmd 1074025678 [ 155.833548][ T9403] pimreg: group set to 0 [ 155.935708][ T9405] lo speed is unknown, defaulting to 1000 [ 155.960089][ T9409] lo speed is unknown, defaulting to 1000 [ 156.455306][ T9454] xt_hashlimit: max too large, truncated to 1048576 [ 156.523203][ T9460] veth42: entered promiscuous mode [ 156.528439][ T9460] veth42: entered allmulticast mode [ 156.892617][ T9505] pimreg: tun_chr_ioctl cmd 1074025678 [ 156.898127][ T9505] pimreg: group set to 0 [ 156.908050][ T9505] __nla_validate_parse: 7 callbacks suppressed [ 156.908066][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 157.018843][ T9519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2424'. [ 157.073740][ T9521] lo speed is unknown, defaulting to 1000 [ 157.183897][ T9536] pimreg: tun_chr_ioctl cmd 1074025678 [ 157.189420][ T9536] pimreg: group set to 0 [ 157.199035][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2432'. [ 157.359953][ T9552] veth66: entered promiscuous mode [ 157.365172][ T9552] veth66: entered allmulticast mode [ 157.542132][ T9562] FAULT_INJECTION: forcing a failure. [ 157.542132][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 157.554908][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.2.2443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.554941][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.554956][ T9562] Call Trace: [ 157.555089][ T9562] [ 157.555098][ T9562] __dump_stack+0x1d/0x30 [ 157.555128][ T9562] dump_stack_lvl+0xe8/0x140 [ 157.555154][ T9562] dump_stack+0x15/0x1b [ 157.555177][ T9562] should_fail_ex+0x265/0x280 [ 157.555202][ T9562] should_failslab+0x8c/0xb0 [ 157.555319][ T9562] kmem_cache_alloc_noprof+0x50/0x480 [ 157.555356][ T9562] ? audit_log_start+0x342/0x720 [ 157.555393][ T9562] audit_log_start+0x342/0x720 [ 157.555491][ T9562] ? kstrtouint+0x76/0xc0 [ 157.555533][ T9562] audit_seccomp+0x48/0x100 [ 157.555570][ T9562] ? __seccomp_filter+0x82d/0x1250 [ 157.555714][ T9562] __seccomp_filter+0x83e/0x1250 [ 157.555749][ T9562] ? save_fpregs_to_fpstate+0x100/0x160 [ 157.555789][ T9562] ? _raw_spin_unlock+0x26/0x50 [ 157.555904][ T9562] __secure_computing+0x82/0x150 [ 157.555968][ T9562] syscall_trace_enter+0xcf/0x1e0 [ 157.555997][ T9562] do_syscall_64+0xac/0x200 [ 157.556023][ T9562] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.556147][ T9562] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.556239][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.556268][ T9562] RIP: 0033:0x7f4b71c5f749 [ 157.556285][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.556307][ T9562] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 157.556329][ T9562] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 157.556344][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.556386][ T9562] RBP: 00007f4b706bf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.556473][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.556489][ T9562] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 157.556511][ T9562] [ 157.564751][ T9564] pimreg: tun_chr_ioctl cmd 1074025678 [ 157.754348][ T29] kauditd_printk_skb: 23125 callbacks suppressed [ 157.754368][ T29] audit: type=1400 audit(1764600852.987:379586): avc: denied { prog_load } for pid=9566 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.760010][ T9564] pimreg: group set to 0 [ 157.763619][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2444'. [ 157.769589][ T29] audit: type=1400 audit(1764600852.987:379587): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.810642][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.828658][ T29] audit: type=1400 audit(1764600852.987:379588): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.828691][ T29] audit: type=1400 audit(1764600852.987:379589): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.828720][ T29] audit: type=1400 audit(1764600852.987:379590): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.835232][ T3043] audit: audit_lost=24127 audit_rate_limit=0 audit_backlog_limit=64 [ 157.856416][ T29] audit: type=1400 audit(1764600852.987:379591): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.856444][ T29] audit: type=1400 audit(1764600852.987:379592): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.877660][ T3043] audit: backlog limit exceeded [ 157.982705][ T9567] lo speed is unknown, defaulting to 1000 [ 158.076443][ T9582] FAULT_INJECTION: forcing a failure. [ 158.076443][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 158.089132][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.1.2453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.089164][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.089176][ T9582] Call Trace: [ 158.089182][ T9582] [ 158.089189][ T9582] __dump_stack+0x1d/0x30 [ 158.089216][ T9582] dump_stack_lvl+0xe8/0x140 [ 158.089241][ T9582] dump_stack+0x15/0x1b [ 158.089263][ T9582] should_fail_ex+0x265/0x280 [ 158.089285][ T9582] should_failslab+0x8c/0xb0 [ 158.089315][ T9582] kmem_cache_alloc_noprof+0x50/0x480 [ 158.089349][ T9582] ? __mpol_dup+0x42/0x1b0 [ 158.089376][ T9582] __mpol_dup+0x42/0x1b0 [ 158.089402][ T9582] vma_dup_policy+0x29/0x70 [ 158.089427][ T9582] __split_vma+0x266/0x650 [ 158.089453][ T9582] ? path_openat+0x1bf8/0x2170 [ 158.089475][ T9582] vma_modify+0x21e/0xc80 [ 158.089496][ T9582] ? _parse_integer+0x27/0x40 [ 158.089535][ T9582] vma_modify_policy+0x101/0x130 [ 158.089562][ T9582] mbind_range+0x1b8/0x440 [ 158.089590][ T9582] __se_sys_set_mempolicy_home_node+0x33f/0x520 [ 158.089642][ T9582] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 158.089694][ T9582] x64_sys_call+0x2261/0x3000 [ 158.089721][ T9582] do_syscall_64+0xd2/0x200 [ 158.089746][ T9582] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.089780][ T9582] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.089813][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.089833][ T9582] RIP: 0033:0x7f10ca3df749 [ 158.089848][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.089865][ T9582] RSP: 002b:00007f10c8e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 158.089884][ T9582] RAX: ffffffffffffffda RBX: 00007f10ca635fa0 RCX: 00007f10ca3df749 [ 158.089898][ T9582] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000417000 [ 158.089913][ T9582] RBP: 00007f10c8e47090 R08: 0000000000000000 R09: 0000000000000000 [ 158.089928][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.089943][ T9582] R13: 00007f10ca636038 R14: 00007f10ca635fa0 R15: 00007fffe0e5d1a8 [ 158.089965][ T9582] [ 158.317026][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2455'. [ 158.321420][ T9582] bridge0: entered promiscuous mode [ 158.344187][ T9582] macsec1: entered promiscuous mode [ 158.351871][ T9582] bridge0: port 2(macsec1) entered blocking state [ 158.358362][ T9582] bridge0: port 2(macsec1) entered disabled state [ 158.391978][ T9582] macsec1: entered allmulticast mode [ 158.397451][ T9582] bridge0: entered allmulticast mode [ 158.428943][ T9582] macsec1: left allmulticast mode [ 158.434063][ T9582] bridge0: left allmulticast mode [ 158.444772][ T9582] bridge0: left promiscuous mode [ 158.473690][ T9602] pimreg: tun_chr_ioctl cmd 1074025678 [ 158.479407][ T9602] pimreg: group set to 0 [ 158.512067][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2460'. [ 158.685269][ T9621] lo speed is unknown, defaulting to 1000 [ 159.064711][ T9646] pimreg: tun_chr_ioctl cmd 1074025678 [ 159.070225][ T9646] pimreg: group set to 0 [ 159.098516][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 159.272507][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2484'. [ 159.283298][ T9662] netlink: 'syz.2.2484': attribute type 13 has an invalid length. [ 159.291224][ T9662] netlink: 'syz.2.2484': attribute type 27 has an invalid length. [ 159.305084][ T9662] IPVS: set_ctl: invalid protocol: 24832 108.97.110.49:0 [ 159.408749][ T9670] lo speed is unknown, defaulting to 1000 [ 159.501348][ T9683] pimreg: tun_chr_ioctl cmd 1074025678 [ 159.506858][ T9683] pimreg: group set to 0 [ 159.523282][ T9685] veth54: entered promiscuous mode [ 159.528523][ T9685] veth54: entered allmulticast mode [ 159.577751][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2493'. [ 159.948163][ T9717] bridge0: entered promiscuous mode [ 159.955349][ T9697] FAULT_INJECTION: forcing a failure. [ 159.955349][ T9697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.960147][ T9717] macsec1: entered promiscuous mode [ 159.968477][ T9697] CPU: 0 UID: 0 PID: 9697 Comm: syz.0.2499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.968511][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.968529][ T9697] Call Trace: [ 159.968537][ T9697] [ 159.968549][ T9697] __dump_stack+0x1d/0x30 [ 159.968604][ T9697] dump_stack_lvl+0xe8/0x140 [ 159.968632][ T9697] dump_stack+0x15/0x1b [ 159.968657][ T9697] should_fail_ex+0x265/0x280 [ 159.968695][ T9697] should_fail+0xb/0x20 [ 159.968776][ T9697] should_fail_usercopy+0x1a/0x20 [ 159.968805][ T9697] _copy_from_user+0x1c/0xb0 [ 159.968895][ T9697] snd_seq_ioctl+0x125/0x300 [ 159.968932][ T9697] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 159.968961][ T9697] __se_sys_ioctl+0xce/0x140 [ 159.968996][ T9697] __x64_sys_ioctl+0x43/0x50 [ 159.969024][ T9697] x64_sys_call+0x1816/0x3000 [ 159.969055][ T9697] do_syscall_64+0xd2/0x200 [ 159.969085][ T9697] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.969159][ T9697] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.969206][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.969236][ T9697] RIP: 0033:0x7fecfde5f749 [ 159.969324][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.969349][ T9697] RSP: 002b:00007fecfc8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.969375][ T9697] RAX: ffffffffffffffda RBX: 00007fecfe0b5fa0 RCX: 00007fecfde5f749 [ 159.969393][ T9697] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003 [ 159.969457][ T9697] RBP: 00007fecfc8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.969474][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.969491][ T9697] R13: 00007fecfe0b6038 R14: 00007fecfe0b5fa0 R15: 00007ffdc8ec5888 [ 159.969516][ T9697] [ 160.154174][ T9717] bridge0: port 2(macsec1) entered blocking state [ 160.160638][ T9717] bridge0: port 2(macsec1) entered disabled state [ 160.201312][ T9717] macsec1: entered allmulticast mode [ 160.206630][ T9717] bridge0: entered allmulticast mode [ 160.226615][ T9717] macsec1: left allmulticast mode [ 160.231804][ T9717] bridge0: left allmulticast mode [ 160.237945][ T9717] bridge0: left promiscuous mode [ 160.248320][ T9722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2507'. [ 160.261771][ T9722] ip6gre1: entered promiscuous mode [ 160.267171][ T9722] ip6gre1: entered allmulticast mode [ 160.331070][ T9728] lo speed is unknown, defaulting to 1000 [ 160.361030][ T9734] pimreg: tun_chr_ioctl cmd 1074025678 [ 160.366557][ T9734] pimreg: group set to 0 [ 160.509050][ T9743] FAULT_INJECTION: forcing a failure. [ 160.509050][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 160.521847][ T9743] CPU: 0 UID: 0 PID: 9743 Comm: syz.0.2515 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.521926][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.521940][ T9743] Call Trace: [ 160.521948][ T9743] [ 160.521974][ T9743] __dump_stack+0x1d/0x30 [ 160.522013][ T9743] dump_stack_lvl+0xe8/0x140 [ 160.522037][ T9743] dump_stack+0x15/0x1b [ 160.522059][ T9743] should_fail_ex+0x265/0x280 [ 160.522161][ T9743] should_failslab+0x8c/0xb0 [ 160.522190][ T9743] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 160.522285][ T9743] ? sidtab_sid2str_get+0xa0/0x130 [ 160.522313][ T9743] ? skb_put+0xa9/0xf0 [ 160.522343][ T9743] kmemdup_noprof+0x2b/0x70 [ 160.522369][ T9743] sidtab_sid2str_get+0xa0/0x130 [ 160.522463][ T9743] security_sid_to_context_core+0x1eb/0x2e0 [ 160.522532][ T9743] security_sid_to_context+0x27/0x40 [ 160.522558][ T9743] avc_audit_post_callback+0x9d/0x520 [ 160.522676][ T9743] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 160.522765][ T9743] common_lsm_audit+0x1bb/0x230 [ 160.522809][ T9743] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 160.522846][ T9743] slow_avc_audit+0x104/0x140 [ 160.522879][ T9743] avc_has_perm+0x13a/0x180 [ 160.522898][ T9743] sel_write_load+0xf8/0x380 [ 160.522949][ T9743] ? __pfx_sel_write_load+0x10/0x10 [ 160.523020][ T9743] vfs_write+0x269/0x960 [ 160.523080][ T9743] ? __rcu_read_unlock+0x4f/0x70 [ 160.523111][ T9743] ? __fget_files+0x184/0x1c0 [ 160.523223][ T9743] ksys_write+0xda/0x1a0 [ 160.523254][ T9743] __x64_sys_write+0x40/0x50 [ 160.523296][ T9743] x64_sys_call+0x2802/0x3000 [ 160.523321][ T9743] do_syscall_64+0xd2/0x200 [ 160.523354][ T9743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.523386][ T9743] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.523447][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.523471][ T9743] RIP: 0033:0x7fecfde5f749 [ 160.523488][ T9743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.523515][ T9743] RSP: 002b:00007fecfc8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.523533][ T9743] RAX: ffffffffffffffda RBX: 00007fecfe0b5fa0 RCX: 00007fecfde5f749 [ 160.523544][ T9743] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000004 [ 160.523560][ T9743] RBP: 00007fecfc8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.523571][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.523583][ T9743] R13: 00007fecfe0b6038 R14: 00007fecfe0b5fa0 R15: 00007ffdc8ec5888 [ 160.523624][ T9743] [ 160.935203][ T9760] FAULT_INJECTION: forcing a failure. [ 160.935203][ T9760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.948505][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.4.2523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.948539][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.948555][ T9760] Call Trace: [ 160.948564][ T9760] [ 160.948573][ T9760] __dump_stack+0x1d/0x30 [ 160.948625][ T9760] dump_stack_lvl+0xe8/0x140 [ 160.948651][ T9760] dump_stack+0x15/0x1b [ 160.948673][ T9760] should_fail_ex+0x265/0x280 [ 160.948752][ T9760] should_fail_alloc_page+0xf2/0x100 [ 160.948921][ T9760] __alloc_frozen_pages_noprof+0xff/0x360 [ 160.949015][ T9760] alloc_pages_mpol+0xb3/0x260 [ 160.949085][ T9760] alloc_pages_noprof+0x90/0x130 [ 160.949105][ T9760] __pmd_alloc+0x47/0x420 [ 160.949158][ T9760] handle_mm_fault+0x19d4/0x2be0 [ 160.949187][ T9760] ? __rcu_read_unlock+0x4f/0x70 [ 160.949216][ T9760] ? mt_find+0x21b/0x330 [ 160.949277][ T9760] do_user_addr_fault+0x3fe/0x1080 [ 160.949352][ T9760] exc_page_fault+0x62/0xa0 [ 160.949393][ T9760] asm_exc_page_fault+0x26/0x30 [ 160.949420][ T9760] RIP: 0010:__get_user_8+0x14/0x30 [ 160.949497][ T9760] Code: ca e9 80 ec 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 4f ec 01 00 90 90 90 90 90 90 90 90 90 [ 160.949521][ T9760] RSP: 0018:ffffc90010753d18 EFLAGS: 00050283 [ 160.949540][ T9760] RAX: 0000200000000040 RBX: 0000000000000000 RCX: 0000000000000000 [ 160.949555][ T9760] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.949567][ T9760] RBP: ffffc90010753ec0 R08: 0001888121c61093 R09: 0000000000000000 [ 160.949584][ T9760] R10: ffff888104400000 R11: 0000000000009400 R12: ffff888103856d40 [ 160.949667][ T9760] R13: 0000000000000000 R14: 0000200000001180 R15: 00000000ffffffff [ 160.949685][ T9760] ? lru_cache_disable+0x1f/0x30 [ 160.949710][ T9760] __se_sys_move_pages+0x354/0x1360 [ 160.949768][ T9760] ? 0xffffffff81000000 [ 160.949783][ T9760] ? get_pid_task+0x96/0xd0 [ 160.949805][ T9760] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.949900][ T9760] ? vfs_write+0x7e8/0x960 [ 160.949941][ T9760] ? __rcu_read_unlock+0x4f/0x70 [ 160.949970][ T9760] ? __fget_files+0x184/0x1c0 [ 160.950029][ T9760] ? fput+0x8f/0xc0 [ 160.950047][ T9760] ? ksys_write+0x192/0x1a0 [ 160.950075][ T9760] __x64_sys_move_pages+0x78/0x90 [ 160.950108][ T9760] x64_sys_call+0x2f87/0x3000 [ 160.950215][ T9760] do_syscall_64+0xd2/0x200 [ 160.950239][ T9760] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.950271][ T9760] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.950310][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.950340][ T9760] RIP: 0033:0x7fa864d1f749 [ 160.950356][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.950397][ T9760] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 160.950414][ T9760] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 160.950425][ T9760] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 160.950435][ T9760] RBP: 00007fa863787090 R08: 0000200000000000 R09: 0000000000000000 [ 160.950497][ T9760] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 160.950559][ T9760] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 160.950577][ T9760] [ 160.959389][ T9761] FAULT_INJECTION: forcing a failure. [ 160.959389][ T9761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.287914][ T9761] CPU: 1 UID: 0 PID: 9761 Comm: syz.3.2519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.287939][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.288005][ T9761] Call Trace: [ 161.288014][ T9761] [ 161.288023][ T9761] __dump_stack+0x1d/0x30 [ 161.288051][ T9761] dump_stack_lvl+0xe8/0x140 [ 161.288077][ T9761] dump_stack+0x15/0x1b [ 161.288098][ T9761] should_fail_ex+0x265/0x280 [ 161.288134][ T9761] should_fail+0xb/0x20 [ 161.288201][ T9761] should_fail_usercopy+0x1a/0x20 [ 161.288289][ T9761] copy_fpstate_to_sigframe+0x628/0x7d0 [ 161.288335][ T9761] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 161.288381][ T9761] ? x86_task_fpu+0x36/0x60 [ 161.288480][ T9761] get_sigframe+0x34d/0x490 [ 161.288504][ T9761] ? get_signal+0xdc7/0xf70 [ 161.288531][ T9761] x64_setup_rt_frame+0xa8/0x580 [ 161.288601][ T9761] arch_do_signal_or_restart+0x23e/0x440 [ 161.288631][ T9761] exit_to_user_mode_loop+0x77/0x110 [ 161.288664][ T9761] do_syscall_64+0x1d6/0x200 [ 161.288688][ T9761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.288780][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.288810][ T9761] RIP: 0033:0x7fbf8bcae1ff [ 161.288845][ T9761] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.288865][ T9761] RSP: 002b:00007fbf8a717030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.288884][ T9761] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00007fbf8bcae1ff [ 161.288901][ T9761] RDX: 0000000000000001 RSI: 00007fbf8a717090 RDI: 0000000000000006 [ 161.288915][ T9761] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 00007fbf8a716df7 [ 161.288930][ T9761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 161.288945][ T9761] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 161.289029][ T9761] [ 161.528655][ T9773] lo speed is unknown, defaulting to 1000 [ 161.548813][ T9777] lo speed is unknown, defaulting to 1000 [ 161.723131][ T9787] veth0_vlan: entered allmulticast mode [ 162.138483][ T9818] __nla_validate_parse: 2 callbacks suppressed [ 162.138502][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'. [ 162.211568][ T9820] veth56: entered promiscuous mode [ 162.216821][ T9820] veth56: entered allmulticast mode [ 162.258288][ T9822] xt_hashlimit: max too large, truncated to 1048576 [ 162.382456][ T9827] pimreg: tun_chr_ioctl cmd 1074025678 [ 162.388111][ T9827] pimreg: group set to 0 [ 162.427916][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'. [ 162.433866][ T9836] FAULT_INJECTION: forcing a failure. [ 162.433866][ T9836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.450041][ T9836] CPU: 1 UID: 0 PID: 9836 Comm: syz.4.2554 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.450063][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.450073][ T9836] Call Trace: [ 162.450079][ T9836] [ 162.450087][ T9836] __dump_stack+0x1d/0x30 [ 162.450149][ T9836] dump_stack_lvl+0xe8/0x140 [ 162.450172][ T9836] dump_stack+0x15/0x1b [ 162.450260][ T9836] should_fail_ex+0x265/0x280 [ 162.450311][ T9836] should_fail+0xb/0x20 [ 162.450325][ T9836] should_fail_usercopy+0x1a/0x20 [ 162.450348][ T9836] _copy_from_user+0x1c/0xb0 [ 162.450372][ T9836] kstrtouint_from_user+0x69/0xf0 [ 162.450393][ T9836] ? 0xffffffff81000000 [ 162.450453][ T9836] ? selinux_file_permission+0x1e4/0x320 [ 162.450491][ T9836] proc_fail_nth_write+0x50/0x160 [ 162.450528][ T9836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.450590][ T9836] vfs_write+0x269/0x960 [ 162.450659][ T9836] ? vfs_read+0x4e6/0x770 [ 162.450706][ T9836] ? __rcu_read_unlock+0x4f/0x70 [ 162.450729][ T9836] ? fdget_pos+0xed/0x1d0 [ 162.450787][ T9836] ksys_write+0xda/0x1a0 [ 162.450822][ T9836] __x64_sys_write+0x40/0x50 [ 162.450868][ T9836] x64_sys_call+0x2802/0x3000 [ 162.450896][ T9836] do_syscall_64+0xd2/0x200 [ 162.450915][ T9836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.450947][ T9836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.451014][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.451117][ T9836] RIP: 0033:0x7fa864d1e1ff [ 162.451134][ T9836] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.451156][ T9836] RSP: 002b:00007fa863787030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.451176][ T9836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa864d1e1ff [ 162.451191][ T9836] RDX: 0000000000000001 RSI: 00007fa8637870a0 RDI: 0000000000000003 [ 162.451205][ T9836] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 162.451219][ T9836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 162.451306][ T9836] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 162.451326][ T9836] [ 162.461697][ T9835] FAULT_INJECTION: forcing a failure. [ 162.461697][ T9835] name failslab, interval 1, probability 0, space 0, times 0 [ 162.677072][ T9835] CPU: 0 UID: 0 PID: 9835 Comm: syz.0.2555 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.677148][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.677160][ T9835] Call Trace: [ 162.677168][ T9835] [ 162.677177][ T9835] __dump_stack+0x1d/0x30 [ 162.677205][ T9835] dump_stack_lvl+0xe8/0x140 [ 162.677231][ T9835] dump_stack+0x15/0x1b [ 162.677332][ T9835] should_fail_ex+0x265/0x280 [ 162.677350][ T9835] ? __se_sys_mount+0xef/0x2e0 [ 162.677373][ T9835] should_failslab+0x8c/0xb0 [ 162.677407][ T9835] __kmalloc_cache_noprof+0x4c/0x4a0 [ 162.677522][ T9835] ? memdup_user+0x99/0xd0 [ 162.677547][ T9835] __se_sys_mount+0xef/0x2e0 [ 162.677576][ T9835] ? fput+0x8f/0xc0 [ 162.677598][ T9835] ? ksys_write+0x192/0x1a0 [ 162.677676][ T9835] __x64_sys_mount+0x67/0x80 [ 162.677709][ T9835] x64_sys_call+0x2b51/0x3000 [ 162.677736][ T9835] do_syscall_64+0xd2/0x200 [ 162.677767][ T9835] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.677799][ T9835] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.677838][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.677937][ T9835] RIP: 0033:0x7fecfde5f749 [ 162.677956][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.677977][ T9835] RSP: 002b:00007fecfc8c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.678000][ T9835] RAX: ffffffffffffffda RBX: 00007fecfe0b5fa0 RCX: 00007fecfde5f749 [ 162.678020][ T9835] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 162.678032][ T9835] RBP: 00007fecfc8c7090 R08: 0000200000000080 R09: 0000000000000000 [ 162.678047][ T9835] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 162.678062][ T9835] R13: 00007fecfe0b6038 R14: 00007fecfe0b5fa0 R15: 00007ffdc8ec5888 [ 162.678084][ T9835] [ 162.864081][ T29] kauditd_printk_skb: 28938 callbacks suppressed [ 162.864093][ T29] audit: type=1400 audit(1764601625.906:395874): avc: denied { create } for pid=9839 comm="syz.4.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 162.873703][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.896954][ T3043] audit: audit_lost=28347 audit_rate_limit=0 audit_backlog_limit=64 [ 162.904978][ T3043] audit: backlog limit exceeded [ 162.909833][ T29] audit: type=1400 audit(1764601626.096:395875): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.931064][ T29] audit: type=1400 audit(1764601626.096:395876): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.937314][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.952425][ T29] audit: type=1400 audit(1764601626.096:395877): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.958915][ T3043] audit: audit_lost=28348 audit_rate_limit=0 audit_backlog_limit=64 [ 162.980131][ T29] audit: type=1400 audit(1764601626.096:395878): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.233815][ T9872] veth24: entered promiscuous mode [ 163.238995][ T9872] veth24: entered allmulticast mode [ 163.294010][ T9876] FAULT_INJECTION: forcing a failure. [ 163.294010][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.307125][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.3.2569 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.307208][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.307220][ T9876] Call Trace: [ 163.307226][ T9876] [ 163.307283][ T9876] __dump_stack+0x1d/0x30 [ 163.307304][ T9876] dump_stack_lvl+0xe8/0x140 [ 163.307325][ T9876] dump_stack+0x15/0x1b [ 163.307341][ T9876] should_fail_ex+0x265/0x280 [ 163.307364][ T9876] should_fail+0xb/0x20 [ 163.307382][ T9876] should_fail_usercopy+0x1a/0x20 [ 163.307440][ T9876] _copy_from_user+0x1c/0xb0 [ 163.307532][ T9876] __se_sys_mount+0x10d/0x2e0 [ 163.307559][ T9876] ? fput+0x8f/0xc0 [ 163.307588][ T9876] ? ksys_write+0x192/0x1a0 [ 163.307619][ T9876] __x64_sys_mount+0x67/0x80 [ 163.307729][ T9876] x64_sys_call+0x2b51/0x3000 [ 163.307757][ T9876] do_syscall_64+0xd2/0x200 [ 163.307782][ T9876] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.307809][ T9876] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.307922][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.307947][ T9876] RIP: 0033:0x7fbf8bcaf749 [ 163.307964][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.308010][ T9876] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.308032][ T9876] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 163.308043][ T9876] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 163.308060][ T9876] RBP: 00007fbf8a717090 R08: 00002000000000c0 R09: 0000000000000000 [ 163.308071][ T9876] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 163.308082][ T9876] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 163.308098][ T9876] [ 163.647882][ T2748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.657058][ T2748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.688897][ T2748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.720951][ T2748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.740985][ T9888] pimreg: tun_chr_ioctl cmd 1074025678 [ 163.746502][ T9888] pimreg: group set to 0 [ 163.770399][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2576'. [ 163.787121][ T9892] netlink: 'syz.4.2571': attribute type 64 has an invalid length. [ 163.954031][ T9906] veth44: entered promiscuous mode [ 163.959283][ T9906] veth44: entered allmulticast mode [ 164.015811][ T9909] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.067231][ T9910] lo speed is unknown, defaulting to 1000 [ 164.093492][ T9909] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 164.472874][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.662868][ T9918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.676046][ T9918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.709635][ T9918] macvlan1: left promiscuous mode [ 164.715097][ T9918] macvlan1: left allmulticast mode [ 164.768623][ T9918] veth2: left promiscuous mode [ 164.773595][ T9918] veth2: left allmulticast mode [ 164.778978][ T9918] veth4: left promiscuous mode [ 164.783813][ T9918] veth4: left allmulticast mode [ 164.801656][ T9918] ip6gre1: left promiscuous mode [ 164.806737][ T9918] ip6gre1: left allmulticast mode [ 164.815525][ T3449] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.816265][ T9918] veth6: left promiscuous mode [ 164.826846][ T9918] veth6: left allmulticast mode [ 164.831853][ T9918] veth8: left promiscuous mode [ 164.836639][ T9918] veth8: left allmulticast mode [ 164.841712][ T9918] veth10: left promiscuous mode [ 164.846663][ T9918] veth10: left allmulticast mode [ 164.851798][ T9918] veth12: left promiscuous mode [ 164.856711][ T9918] veth12: left allmulticast mode [ 164.861876][ T9918] veth14: left promiscuous mode [ 164.866747][ T9918] veth14: left allmulticast mode [ 164.872101][ T9918] veth16: left promiscuous mode [ 164.877054][ T9918] veth16: left allmulticast mode [ 164.882118][ T9918] veth18: left promiscuous mode [ 164.887091][ T9918] veth18: left allmulticast mode [ 164.892247][ T9918] veth20: left promiscuous mode [ 164.897119][ T9918] veth20: left allmulticast mode [ 164.902198][ T9918] veth22: left promiscuous mode [ 164.907062][ T9918] veth22: left allmulticast mode [ 164.912171][ T9918] veth24: left promiscuous mode [ 164.917108][ T9918] veth24: left allmulticast mode [ 164.922227][ T9918] veth26: left promiscuous mode [ 164.927152][ T9918] veth26: left allmulticast mode [ 164.932268][ T9918] veth28: left promiscuous mode [ 164.937253][ T9918] veth28: left allmulticast mode [ 164.942459][ T9918] veth30: left promiscuous mode [ 164.947317][ T9918] veth30: left allmulticast mode [ 164.952449][ T9918] veth32: left promiscuous mode [ 164.957344][ T9918] veth32: left allmulticast mode [ 164.962528][ T9918] veth34: left promiscuous mode [ 164.967432][ T9918] veth34: left allmulticast mode [ 164.972592][ T9918] veth36: left promiscuous mode [ 164.977474][ T9918] veth36: left allmulticast mode [ 164.982588][ T9918] veth38: left promiscuous mode [ 164.987494][ T9918] veth38: left allmulticast mode [ 164.992567][ T9918] veth40: left promiscuous mode [ 164.997472][ T9918] veth40: left allmulticast mode [ 165.002603][ T9918] veth42: left promiscuous mode [ 165.007495][ T9918] veth42: left allmulticast mode [ 165.012678][ T9918] veth44: left promiscuous mode [ 165.017567][ T9918] veth44: left allmulticast mode [ 165.022665][ T9918] veth46: left promiscuous mode [ 165.027554][ T9918] veth46: left allmulticast mode [ 165.032681][ T9918] veth48: left promiscuous mode [ 165.037549][ T9918] veth48: left allmulticast mode [ 165.042724][ T9918] veth50: left promiscuous mode [ 165.047592][ T9918] veth50: left allmulticast mode [ 165.052736][ T9918] veth52: left promiscuous mode [ 165.057646][ T9918] veth52: left allmulticast mode [ 165.062733][ T9918] veth54: left promiscuous mode [ 165.067625][ T9918] veth54: left allmulticast mode [ 165.082149][ T9918] veth56: left promiscuous mode [ 165.087091][ T9918] veth56: left allmulticast mode [ 165.092563][ T9918] veth58: left promiscuous mode [ 165.097426][ T9918] veth58: left allmulticast mode [ 165.102600][ T9918] veth60: left promiscuous mode [ 165.107458][ T9918] veth60: left allmulticast mode [ 165.112634][ T9918] veth62: left promiscuous mode [ 165.117522][ T9918] veth62: left allmulticast mode [ 165.122557][ T9918] veth64: left promiscuous mode [ 165.127625][ T9918] veth64: left allmulticast mode [ 165.132952][ T9918] veth66: left promiscuous mode [ 165.137844][ T9918] veth66: left allmulticast mode [ 165.162574][ T3451] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.172696][ T3451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.209906][ T3451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.218971][ T3451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.649444][ T9975] lo speed is unknown, defaulting to 1000 [ 165.710731][ T9980] FAULT_INJECTION: forcing a failure. [ 165.710731][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.723884][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.4.2611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.723916][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.723933][ T9980] Call Trace: [ 165.723998][ T9980] [ 165.724005][ T9980] __dump_stack+0x1d/0x30 [ 165.724104][ T9980] dump_stack_lvl+0xe8/0x140 [ 165.724221][ T9980] dump_stack+0x15/0x1b [ 165.724244][ T9980] should_fail_ex+0x265/0x280 [ 165.724269][ T9980] should_fail+0xb/0x20 [ 165.724288][ T9980] should_fail_usercopy+0x1a/0x20 [ 165.724347][ T9980] _copy_to_user+0x20/0xa0 [ 165.724377][ T9980] simple_read_from_buffer+0xb5/0x130 [ 165.724481][ T9980] proc_fail_nth_read+0x10e/0x150 [ 165.724579][ T9980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.724610][ T9980] vfs_read+0x1a8/0x770 [ 165.724676][ T9980] ? __rcu_read_unlock+0x4f/0x70 [ 165.724780][ T9980] ? __fget_files+0x184/0x1c0 [ 165.724809][ T9980] ksys_read+0xda/0x1a0 [ 165.724834][ T9980] __x64_sys_read+0x40/0x50 [ 165.724887][ T9980] x64_sys_call+0x27c0/0x3000 [ 165.724963][ T9980] do_syscall_64+0xd2/0x200 [ 165.724983][ T9980] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.725066][ T9980] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.725110][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.725148][ T9980] RIP: 0033:0x7fa864d1e15c [ 165.725163][ T9980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.725181][ T9980] RSP: 002b:00007fa863787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.725231][ T9980] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1e15c [ 165.725247][ T9980] RDX: 000000000000000f RSI: 00007fa8637870a0 RDI: 0000000000000003 [ 165.725263][ T9980] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 165.725278][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.725293][ T9980] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 165.725334][ T9980] [ 166.215263][ T9997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2616'. [ 166.225513][T10001] FAULT_INJECTION: forcing a failure. [ 166.225513][T10001] name failslab, interval 1, probability 0, space 0, times 0 [ 166.238272][T10001] CPU: 0 UID: 0 PID: 10001 Comm: syz.2.2621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.238306][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.238326][T10001] Call Trace: [ 166.238333][T10001] [ 166.238340][T10001] __dump_stack+0x1d/0x30 [ 166.238420][T10001] dump_stack_lvl+0xe8/0x140 [ 166.238441][T10001] dump_stack+0x15/0x1b [ 166.238533][T10001] should_fail_ex+0x265/0x280 [ 166.238558][T10001] should_failslab+0x8c/0xb0 [ 166.238587][T10001] kmem_cache_alloc_noprof+0x50/0x480 [ 166.238616][T10001] ? getname_flags+0x80/0x3b0 [ 166.238666][T10001] ? kstrtoull+0x111/0x140 [ 166.238762][T10001] getname_flags+0x80/0x3b0 [ 166.238802][T10001] vfs_fstatat+0x43/0x170 [ 166.238870][T10001] __se_sys_newfstatat+0x55/0x260 [ 166.238921][T10001] ? __fget_files+0x184/0x1c0 [ 166.238954][T10001] ? fput+0x8f/0xc0 [ 166.239053][T10001] ? ksys_write+0x192/0x1a0 [ 166.239088][T10001] __x64_sys_newfstatat+0x55/0x70 [ 166.239158][T10001] x64_sys_call+0x135a/0x3000 [ 166.239180][T10001] do_syscall_64+0xd2/0x200 [ 166.239280][T10001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.239373][T10001] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.239419][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.239444][T10001] RIP: 0033:0x7f4b71c5f749 [ 166.239479][T10001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.239502][T10001] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 166.239526][T10001] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 166.239542][T10001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 166.239558][T10001] RBP: 00007f4b706bf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.239641][T10001] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 166.239654][T10001] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 166.239688][T10001] [ 166.463717][T10006] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 166.472290][T10005] FAULT_INJECTION: forcing a failure. [ 166.472290][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.485381][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.2.2623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.485462][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.485477][T10005] Call Trace: [ 166.485486][T10005] [ 166.485496][T10005] __dump_stack+0x1d/0x30 [ 166.485519][T10005] dump_stack_lvl+0xe8/0x140 [ 166.485538][T10005] dump_stack+0x15/0x1b [ 166.485603][T10005] should_fail_ex+0x265/0x280 [ 166.485621][T10005] should_fail+0xb/0x20 [ 166.485636][T10005] should_fail_usercopy+0x1a/0x20 [ 166.485656][T10005] _copy_from_user+0x1c/0xb0 [ 166.485684][T10005] ___sys_sendmsg+0xc1/0x1d0 [ 166.485800][T10005] __x64_sys_sendmsg+0xd4/0x160 [ 166.485823][T10005] x64_sys_call+0x191e/0x3000 [ 166.485845][T10005] do_syscall_64+0xd2/0x200 [ 166.485865][T10005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.485929][T10005] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.486030][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.486056][T10005] RIP: 0033:0x7f4b71c5f749 [ 166.486075][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.486093][T10005] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.486110][T10005] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 166.486180][T10005] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 166.486193][T10005] RBP: 00007f4b706bf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.486246][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.486260][T10005] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 166.486286][T10005] [ 166.709051][T10011] lo speed is unknown, defaulting to 1000 [ 166.733985][T10017] netlink: 'syz.2.2627': attribute type 7 has an invalid length. [ 166.752940][T10017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2627'. [ 166.774509][T10020] FAULT_INJECTION: forcing a failure. [ 166.774509][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.787672][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.3.2628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.787697][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.787708][T10020] Call Trace: [ 166.787714][T10020] [ 166.787739][T10020] __dump_stack+0x1d/0x30 [ 166.787775][T10020] dump_stack_lvl+0xe8/0x140 [ 166.787801][T10020] dump_stack+0x15/0x1b [ 166.787845][T10020] should_fail_ex+0x265/0x280 [ 166.787869][T10020] should_fail+0xb/0x20 [ 166.787889][T10020] should_fail_usercopy+0x1a/0x20 [ 166.787915][T10020] _copy_to_user+0x20/0xa0 [ 166.788015][T10020] simple_read_from_buffer+0xb5/0x130 [ 166.788048][T10020] proc_fail_nth_read+0x10e/0x150 [ 166.788154][T10020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.788212][T10020] vfs_read+0x1a8/0x770 [ 166.788320][T10020] ? __rcu_read_unlock+0x4f/0x70 [ 166.788348][T10020] ? __fget_files+0x184/0x1c0 [ 166.788427][T10020] ksys_read+0xda/0x1a0 [ 166.788459][T10020] __x64_sys_read+0x40/0x50 [ 166.788486][T10020] x64_sys_call+0x27c0/0x3000 [ 166.788515][T10020] do_syscall_64+0xd2/0x200 [ 166.788600][T10020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.788716][T10020] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.788749][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.788769][T10020] RIP: 0033:0x7fbf8bcae15c [ 166.788786][T10020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.788849][T10020] RSP: 002b:00007fbf8a717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.788921][T10020] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcae15c [ 166.788936][T10020] RDX: 000000000000000f RSI: 00007fbf8a7170a0 RDI: 0000000000000003 [ 166.788951][T10020] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 0000000000000000 [ 166.789012][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.789027][T10020] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 166.789050][T10020] [ 167.026754][ T4121] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.038439][ T4278] Bluetooth: hci0: command 0x1003 tx timeout [ 167.268549][T10043] veth46: entered promiscuous mode [ 167.273843][T10043] veth46: entered allmulticast mode [ 167.379693][T10055] xt_hashlimit: max too large, truncated to 1048576 [ 167.400365][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 167.554212][T10074] FAULT_INJECTION: forcing a failure. [ 167.554212][T10074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.567534][T10074] CPU: 1 UID: 0 PID: 10074 Comm: syz.0.2653 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.567662][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.567737][T10074] Call Trace: [ 167.567743][T10074] [ 167.567749][T10074] __dump_stack+0x1d/0x30 [ 167.567770][T10074] dump_stack_lvl+0xe8/0x140 [ 167.567792][T10074] dump_stack+0x15/0x1b [ 167.567871][T10074] should_fail_ex+0x265/0x280 [ 167.567896][T10074] should_fail+0xb/0x20 [ 167.567998][T10074] should_fail_usercopy+0x1a/0x20 [ 167.568022][T10074] _copy_to_user+0x20/0xa0 [ 167.568068][T10074] simple_read_from_buffer+0xb5/0x130 [ 167.568100][T10074] proc_fail_nth_read+0x10e/0x150 [ 167.568185][T10074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.568259][T10074] vfs_read+0x1a8/0x770 [ 167.568317][T10074] ? __rcu_read_unlock+0x4f/0x70 [ 167.568347][T10074] ? __fget_files+0x184/0x1c0 [ 167.568420][T10074] ksys_read+0xda/0x1a0 [ 167.568452][T10074] __x64_sys_read+0x40/0x50 [ 167.568480][T10074] x64_sys_call+0x27c0/0x3000 [ 167.568501][T10074] do_syscall_64+0xd2/0x200 [ 167.568522][T10074] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.568571][T10074] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.568616][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.568643][T10074] RIP: 0033:0x7fecfde5e15c [ 167.568660][T10074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.568741][T10074] RSP: 002b:00007fecfc8c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.568765][T10074] RAX: ffffffffffffffda RBX: 00007fecfe0b5fa0 RCX: 00007fecfde5e15c [ 167.568781][T10074] RDX: 000000000000000f RSI: 00007fecfc8c70a0 RDI: 0000000000000006 [ 167.568793][T10074] RBP: 00007fecfc8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.568832][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.568903][T10074] R13: 00007fecfe0b6038 R14: 00007fecfe0b5fa0 R15: 00007ffdc8ec5888 [ 167.568926][T10074] [ 167.870856][T10100] xt_hashlimit: max too large, truncated to 1048576 [ 167.880346][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 167.882856][T10101] veth42: entered promiscuous mode [ 167.892260][T10095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 167.894460][T10101] veth42: entered allmulticast mode [ 167.900917][T10095] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 167.913921][T10095] vhci_hcd vhci_hcd.0: Device attached [ 167.918860][T10103] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.938162][T10103] netlink: 'syz.1.2665': attribute type 10 has an invalid length. [ 167.953708][T10098] vhci_hcd: connection closed [ 167.953881][ T2748] vhci_hcd: stop threads [ 167.962978][ T2748] vhci_hcd: release socket [ 167.967418][ T2748] vhci_hcd: disconnect device [ 167.996152][T10110] FAULT_INJECTION: forcing a failure. [ 167.996152][T10110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.009442][T10110] CPU: 1 UID: 0 PID: 10110 Comm: syz.3.2667 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.009471][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.009488][T10110] Call Trace: [ 168.009495][T10110] [ 168.009508][T10110] __dump_stack+0x1d/0x30 [ 168.009536][T10110] dump_stack_lvl+0xe8/0x140 [ 168.009572][T10110] dump_stack+0x15/0x1b [ 168.009612][T10110] should_fail_ex+0x265/0x280 [ 168.009637][T10110] should_fail+0xb/0x20 [ 168.009658][T10110] should_fail_usercopy+0x1a/0x20 [ 168.009683][T10110] _copy_from_user+0x1c/0xb0 [ 168.009763][T10110] ___sys_sendmsg+0xc1/0x1d0 [ 168.009792][T10110] __x64_sys_sendmsg+0xd4/0x160 [ 168.009815][T10110] x64_sys_call+0x191e/0x3000 [ 168.009838][T10110] do_syscall_64+0xd2/0x200 [ 168.009879][T10110] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.009914][T10110] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.010020][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.010047][T10110] RIP: 0033:0x7fbf8bcaf749 [ 168.010064][T10110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.010145][T10110] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.010171][T10110] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 168.010188][T10110] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 168.010203][T10110] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 0000000000000000 [ 168.010218][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.010275][T10110] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 168.010344][T10110] [ 168.074451][ T29] kauditd_printk_skb: 28852 callbacks suppressed [ 168.074471][ T29] audit: type=1400 audit(1764601631.094:410256): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 168.079175][T10112] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 168.083675][ T29] audit: type=1400 audit(1764601631.103:410257): avc: denied { prog_load } for pid=10106 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 168.090333][T10112] netlink: 'syz.0.2666': attribute type 10 has an invalid length. [ 168.092796][ T29] audit: type=1326 audit(1764601631.103:410258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f10ca3df749 code=0x7ffc0000 [ 168.124798][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.128633][ T29] audit: type=1326 audit(1764601631.103:410259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm=18 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca3df749 code=0x7ffc0000 [ 168.137016][ T3043] audit: audit_lost=33174 audit_rate_limit=0 audit_backlog_limit=64 [ 168.145097][ T29] audit: type=1326 audit(1764601631.103:410260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm=18 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca3df749 code=0x7ffc0000 [ 168.153046][ T3043] audit: backlog limit exceeded [ 168.154090][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.170049][ T3320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.521567][T10127] FAULT_INJECTION: forcing a failure. [ 168.521567][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.523953][T10131] xt_hashlimit: max too large, truncated to 1048576 [ 168.534736][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.3.2675 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.534764][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.534778][T10127] Call Trace: [ 168.534786][T10127] [ 168.534795][T10127] __dump_stack+0x1d/0x30 [ 168.534823][T10127] dump_stack_lvl+0xe8/0x140 [ 168.534854][T10127] dump_stack+0x15/0x1b [ 168.534875][T10127] should_fail_ex+0x265/0x280 [ 168.534899][T10127] should_fail+0xb/0x20 [ 168.534920][T10127] should_fail_usercopy+0x1a/0x20 [ 168.535027][T10127] _copy_from_user+0x1c/0xb0 [ 168.535058][T10127] do_ipv6_setsockopt+0x124/0x2160 [ 168.535183][T10127] ? kstrtoull+0x111/0x140 [ 168.535263][T10127] ? __rcu_read_unlock+0x4f/0x70 [ 168.535337][T10127] ? avc_has_perm_noaudit+0x1b1/0x200 [ 168.535364][T10127] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 168.535405][T10127] ipv6_setsockopt+0x59/0x130 [ 168.535498][T10127] tcp_setsockopt+0x98/0xb0 [ 168.535522][T10127] sock_common_setsockopt+0x69/0x80 [ 168.535555][T10127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.535589][T10127] __sys_setsockopt+0x184/0x200 [ 168.535666][T10127] __x64_sys_setsockopt+0x64/0x80 [ 168.535706][T10127] x64_sys_call+0x20ec/0x3000 [ 168.535734][T10127] do_syscall_64+0xd2/0x200 [ 168.535761][T10127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.535831][T10127] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.535873][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.535898][T10127] RIP: 0033:0x7fbf8bcaf749 [ 168.535997][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.536019][T10127] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.536042][T10127] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 168.536057][T10127] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 168.536073][T10127] RBP: 00007fbf8a717090 R08: 0000000000000500 R09: 0000000000000000 [ 168.536211][T10127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.536247][T10127] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 168.536272][T10127] [ 168.634785][T10133] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 168.720129][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 168.791345][T10137] lo speed is unknown, defaulting to 1000 [ 168.802471][T10133] netlink: 'syz.2.2678': attribute type 10 has an invalid length. [ 168.987666][T10167] FAULT_INJECTION: forcing a failure. [ 168.987666][T10167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.000910][T10167] CPU: 1 UID: 0 PID: 10167 Comm: syz.2.2693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.000943][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.000959][T10167] Call Trace: [ 169.000989][T10167] [ 169.000997][T10167] __dump_stack+0x1d/0x30 [ 169.001022][T10167] dump_stack_lvl+0xe8/0x140 [ 169.001046][T10167] dump_stack+0x15/0x1b [ 169.001067][T10167] should_fail_ex+0x265/0x280 [ 169.001092][T10167] should_fail+0xb/0x20 [ 169.001159][T10167] should_fail_usercopy+0x1a/0x20 [ 169.001181][T10167] _copy_to_user+0x20/0xa0 [ 169.001229][T10167] simple_read_from_buffer+0xb5/0x130 [ 169.001260][T10167] proc_fail_nth_read+0x10e/0x150 [ 169.001295][T10167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.001405][T10167] vfs_read+0x1a8/0x770 [ 169.001433][T10167] ? __rcu_read_unlock+0x4f/0x70 [ 169.001522][T10167] ? __fget_files+0x184/0x1c0 [ 169.001552][T10167] ksys_read+0xda/0x1a0 [ 169.001608][T10167] __x64_sys_read+0x40/0x50 [ 169.001638][T10167] x64_sys_call+0x27c0/0x3000 [ 169.001665][T10167] do_syscall_64+0xd2/0x200 [ 169.001690][T10167] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.001835][T10167] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.001866][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.001913][T10167] RIP: 0033:0x7f4b71c5e15c [ 169.001931][T10167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.001950][T10167] RSP: 002b:00007f4b706bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.002041][T10167] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5e15c [ 169.002052][T10167] RDX: 000000000000000f RSI: 00007f4b706bf0a0 RDI: 0000000000000004 [ 169.002063][T10167] RBP: 00007f4b706bf090 R08: 0000000000000000 R09: 0000000000000000 [ 169.002075][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.002086][T10167] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 169.002103][T10167] [ 169.261580][T10179] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.271680][T10179] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 169.347462][T10189] --map-set only usable from mangle table [ 169.392822][T10182] lo speed is unknown, defaulting to 1000 [ 169.623523][T10226] xt_hashlimit: max too large, truncated to 1048576 [ 169.631699][T10229] FAULT_INJECTION: forcing a failure. [ 169.631699][T10229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.644876][T10229] CPU: 1 UID: 0 PID: 10229 Comm: syz.2.2720 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.644904][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.644916][T10229] Call Trace: [ 169.644921][T10229] [ 169.644928][T10229] __dump_stack+0x1d/0x30 [ 169.644955][T10229] dump_stack_lvl+0xe8/0x140 [ 169.644980][T10229] dump_stack+0x15/0x1b [ 169.645033][T10229] should_fail_ex+0x265/0x280 [ 169.645058][T10229] should_fail+0xb/0x20 [ 169.645076][T10229] should_fail_usercopy+0x1a/0x20 [ 169.645100][T10229] _copy_from_user+0x1c/0xb0 [ 169.645209][T10229] memdup_user+0x5e/0xd0 [ 169.645341][T10229] strndup_user+0x68/0xb0 [ 169.645369][T10229] __se_sys_mount+0x4d/0x2e0 [ 169.645396][T10229] ? fput+0x8f/0xc0 [ 169.645469][T10229] ? ksys_write+0x192/0x1a0 [ 169.645576][T10229] __x64_sys_mount+0x67/0x80 [ 169.645625][T10229] x64_sys_call+0x2b51/0x3000 [ 169.645652][T10229] do_syscall_64+0xd2/0x200 [ 169.645675][T10229] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.645822][T10229] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.645860][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.645887][T10229] RIP: 0033:0x7f4b71c5f749 [ 169.645934][T10229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.645958][T10229] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.645982][T10229] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 169.646005][T10229] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 169.646016][T10229] RBP: 00007f4b706bf090 R08: 0000200000000600 R09: 0000000000000000 [ 169.646031][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.646047][T10229] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 169.646069][T10229] [ 169.646401][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 169.687322][T10232] FAULT_INJECTION: forcing a failure. [ 169.687322][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 169.854164][T10232] CPU: 1 UID: 0 PID: 10232 Comm: syz.2.2723 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.854197][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.854213][T10232] Call Trace: [ 169.854222][T10232] [ 169.854232][T10232] __dump_stack+0x1d/0x30 [ 169.854258][T10232] dump_stack_lvl+0xe8/0x140 [ 169.854278][T10232] dump_stack+0x15/0x1b [ 169.854294][T10232] should_fail_ex+0x265/0x280 [ 169.854319][T10232] should_failslab+0x8c/0xb0 [ 169.854356][T10232] kmem_cache_alloc_noprof+0x50/0x480 [ 169.854389][T10232] ? mas_alloc_nodes+0x1a2/0x210 [ 169.854415][T10232] mas_alloc_nodes+0x1a2/0x210 [ 169.854442][T10232] mas_preallocate+0x2ca/0x510 [ 169.854473][T10232] __split_vma+0x240/0x650 [ 169.854508][T10232] ? mas_find+0x5d5/0x700 [ 169.854535][T10232] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 169.854571][T10232] mmap_region+0x52b/0x1620 [ 169.854595][T10232] ? __rcu_read_unlock+0x4f/0x70 [ 169.854620][T10232] ? mntput_no_expire+0x6f/0x440 [ 169.854663][T10232] do_mmap+0x9b3/0xbe0 [ 169.854690][T10232] vm_mmap_pgoff+0x17a/0x2e0 [ 169.854730][T10232] ksys_mmap_pgoff+0x268/0x310 [ 169.854749][T10232] x64_sys_call+0x14a3/0x3000 [ 169.854778][T10232] do_syscall_64+0xd2/0x200 [ 169.854801][T10232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.854838][T10232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.854881][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.854909][T10232] RIP: 0033:0x7f4b71c5f749 [ 169.854927][T10232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.854949][T10232] RSP: 002b:00007f4b706bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.854967][T10232] RAX: ffffffffffffffda RBX: 00007f4b71eb5fa0 RCX: 00007f4b71c5f749 [ 169.854979][T10232] RDX: 0000000002000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 169.854991][T10232] RBP: 00007f4b706bf090 R08: 0000000000000003 R09: 0000000000000000 [ 169.855002][T10232] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 169.855017][T10232] R13: 00007f4b71eb6038 R14: 00007f4b71eb5fa0 R15: 00007ffdce588f98 [ 169.855039][T10232] [ 170.079482][T10239] FAULT_INJECTION: forcing a failure. [ 170.079482][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.079576][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.4.2725 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.079601][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.079617][T10239] Call Trace: [ 170.079626][T10239] [ 170.079635][T10239] __dump_stack+0x1d/0x30 [ 170.079662][T10239] dump_stack_lvl+0xe8/0x140 [ 170.079685][T10239] dump_stack+0x15/0x1b [ 170.079706][T10239] should_fail_ex+0x265/0x280 [ 170.079724][T10239] should_fail+0xb/0x20 [ 170.079739][T10239] should_fail_usercopy+0x1a/0x20 [ 170.079837][T10239] strncpy_from_user+0x25/0x230 [ 170.079864][T10239] ? kmem_cache_alloc_noprof+0x242/0x480 [ 170.079910][T10239] ? getname_flags+0x80/0x3b0 [ 170.079980][T10239] getname_flags+0xae/0x3b0 [ 170.080010][T10239] user_path_at+0x28/0x130 [ 170.080103][T10239] __se_sys_mount+0x25b/0x2e0 [ 170.080127][T10239] ? fput+0x8f/0xc0 [ 170.080230][T10239] __x64_sys_mount+0x67/0x80 [ 170.080260][T10239] x64_sys_call+0x2b51/0x3000 [ 170.080281][T10239] do_syscall_64+0xd2/0x200 [ 170.080375][T10239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.080402][T10239] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.080448][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.080475][T10239] RIP: 0033:0x7fa864d1f749 [ 170.080493][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.080515][T10239] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.080534][T10239] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 170.080604][T10239] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000000 [ 170.080619][T10239] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 170.080631][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.080644][T10239] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 170.080740][T10239] [ 170.105716][T10245] FAULT_INJECTION: forcing a failure. [ 170.105716][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 170.105747][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.4.2726 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.105784][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.105800][T10245] Call Trace: [ 170.105806][T10245] [ 170.105814][T10245] __dump_stack+0x1d/0x30 [ 170.105840][T10245] dump_stack_lvl+0xe8/0x140 [ 170.105872][T10245] dump_stack+0x15/0x1b [ 170.105889][T10245] should_fail_ex+0x265/0x280 [ 170.105911][T10245] should_failslab+0x8c/0xb0 [ 170.105939][T10245] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 170.106043][T10245] ? __alloc_skb+0x101/0x320 [ 170.106078][T10245] __alloc_skb+0x101/0x320 [ 170.106152][T10245] netlink_alloc_large_skb+0xbf/0xf0 [ 170.106205][T10245] netlink_sendmsg+0x3cf/0x6b0 [ 170.106228][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.106342][T10245] __sock_sendmsg+0x145/0x180 [ 170.106375][T10245] ____sys_sendmsg+0x31e/0x4e0 [ 170.106398][T10245] ___sys_sendmsg+0x17b/0x1d0 [ 170.106437][T10245] __x64_sys_sendmsg+0xd4/0x160 [ 170.106465][T10245] x64_sys_call+0x191e/0x3000 [ 170.106536][T10245] do_syscall_64+0xd2/0x200 [ 170.106563][T10245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.106600][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.106643][T10245] RIP: 0033:0x7fa864d1f749 [ 170.106660][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.106694][T10245] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.106713][T10245] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 170.106760][T10245] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 170.106782][T10245] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 170.106797][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.106811][T10245] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 170.106830][T10245] [ 170.295631][T10261] lo speed is unknown, defaulting to 1000 [ 170.506351][T10272] pimreg: tun_chr_ioctl cmd 1074025678 [ 170.506376][T10272] pimreg: group set to 0 [ 170.509114][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2737'. [ 170.630132][T10278] FAULT_INJECTION: forcing a failure. [ 170.630132][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.883938][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.1.2740 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.883975][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.884068][T10278] Call Trace: [ 170.884076][T10278] [ 170.884084][T10278] __dump_stack+0x1d/0x30 [ 170.884113][T10278] dump_stack_lvl+0xe8/0x140 [ 170.884175][T10278] dump_stack+0x15/0x1b [ 170.884200][T10278] should_fail_ex+0x265/0x280 [ 170.884226][T10278] should_fail+0xb/0x20 [ 170.884248][T10278] should_fail_usercopy+0x1a/0x20 [ 170.884286][T10278] _copy_from_user+0x1c/0xb0 [ 170.884351][T10278] __se_sys_mount+0x10d/0x2e0 [ 170.884385][T10278] ? fput+0x8f/0xc0 [ 170.884408][T10278] ? ksys_write+0x192/0x1a0 [ 170.884443][T10278] __x64_sys_mount+0x67/0x80 [ 170.884512][T10278] x64_sys_call+0x2b51/0x3000 [ 170.884569][T10278] do_syscall_64+0xd2/0x200 [ 170.884597][T10278] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.884636][T10278] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.884698][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.884728][T10278] RIP: 0033:0x7f10ca3df749 [ 170.884755][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.884780][T10278] RSP: 002b:00007f10c8e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.884826][T10278] RAX: ffffffffffffffda RBX: 00007f10ca635fa0 RCX: 00007f10ca3df749 [ 170.884843][T10278] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 170.884860][T10278] RBP: 00007f10c8e47090 R08: 00002000000000c0 R09: 0000000000000000 [ 170.884893][T10278] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 170.884909][T10278] R13: 00007f10ca636038 R14: 00007f10ca635fa0 R15: 00007fffe0e5d1a8 [ 170.884979][T10278] [ 171.317664][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2745'. [ 171.565603][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 171.771744][T10317] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.935106][T10332] FAULT_INJECTION: forcing a failure. [ 171.935106][T10332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.948225][T10332] CPU: 1 UID: 0 PID: 10332 Comm: syz.4.2762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.948258][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.948417][T10332] Call Trace: [ 171.948426][T10332] [ 171.948435][T10332] __dump_stack+0x1d/0x30 [ 171.948463][T10332] dump_stack_lvl+0xe8/0x140 [ 171.948490][T10332] dump_stack+0x15/0x1b [ 171.948567][T10332] should_fail_ex+0x265/0x280 [ 171.948586][T10332] should_fail+0xb/0x20 [ 171.948603][T10332] should_fail_usercopy+0x1a/0x20 [ 171.948631][T10332] _copy_from_user+0x1c/0xb0 [ 171.948705][T10332] kstrtouint_from_user+0x69/0xf0 [ 171.948731][T10332] ? 0xffffffff81000000 [ 171.948805][T10332] ? selinux_file_permission+0x1e4/0x320 [ 171.948848][T10332] proc_fail_nth_write+0x50/0x160 [ 171.948879][T10332] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.948913][T10332] vfs_write+0x269/0x960 [ 171.948942][T10332] ? vfs_read+0x4e6/0x770 [ 171.949012][T10332] ? __rcu_read_unlock+0x4f/0x70 [ 171.949045][T10332] ? __fget_files+0x184/0x1c0 [ 171.949083][T10332] ksys_write+0xda/0x1a0 [ 171.949117][T10332] __x64_sys_write+0x40/0x50 [ 171.949151][T10332] x64_sys_call+0x2802/0x3000 [ 171.949196][T10332] do_syscall_64+0xd2/0x200 [ 171.949221][T10332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.949262][T10332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.949299][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.949322][T10332] RIP: 0033:0x7fa864d1e1ff [ 171.949385][T10332] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.949409][T10332] RSP: 002b:00007fa863787030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.949433][T10332] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa864d1e1ff [ 171.949449][T10332] RDX: 0000000000000001 RSI: 00007fa8637870a0 RDI: 0000000000000003 [ 171.949461][T10332] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 171.949473][T10332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 171.949514][T10332] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 171.949537][T10332] [ 172.015574][T10335] FAULT_INJECTION: forcing a failure. [ 172.015574][T10335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.181145][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.0.2763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.181179][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.181194][T10335] Call Trace: [ 172.181203][T10335] [ 172.181211][T10335] __dump_stack+0x1d/0x30 [ 172.181233][T10335] dump_stack_lvl+0xe8/0x140 [ 172.181253][T10335] dump_stack+0x15/0x1b [ 172.181296][T10335] should_fail_ex+0x265/0x280 [ 172.181323][T10335] should_fail+0xb/0x20 [ 172.181343][T10335] should_fail_usercopy+0x1a/0x20 [ 172.181398][T10335] _copy_from_user+0x1c/0xb0 [ 172.181461][T10335] kstrtouint_from_user+0x69/0xf0 [ 172.181482][T10335] ? 0xffffffff81000000 [ 172.181498][T10335] ? selinux_file_permission+0x1e4/0x320 [ 172.181593][T10335] proc_fail_nth_write+0x50/0x160 [ 172.181631][T10335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.181682][T10335] vfs_write+0x269/0x960 [ 172.181711][T10335] ? vfs_read+0x4e6/0x770 [ 172.181792][T10335] ? __rcu_read_unlock+0x4f/0x70 [ 172.181835][T10335] ? __fget_files+0x184/0x1c0 [ 172.181872][T10335] ksys_write+0xda/0x1a0 [ 172.181980][T10335] __x64_sys_write+0x40/0x50 [ 172.182007][T10335] x64_sys_call+0x2802/0x3000 [ 172.182036][T10335] do_syscall_64+0xd2/0x200 [ 172.182063][T10335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.182160][T10335] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.182241][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.182271][T10335] RIP: 0033:0x7fecfde5e1ff [ 172.182291][T10335] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.182396][T10335] RSP: 002b:00007fecfc8a6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.182419][T10335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fecfde5e1ff [ 172.182434][T10335] RDX: 0000000000000001 RSI: 00007fecfc8a60a0 RDI: 0000000000000004 [ 172.182449][T10335] RBP: 00007fecfc8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.182465][T10335] R10: 0400000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 172.182480][T10335] R13: 00007fecfe0b6128 R14: 00007fecfe0b6090 R15: 00007ffdc8ec5888 [ 172.182503][T10335] [ 172.188140][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 172.789377][T10363] lo speed is unknown, defaulting to 1000 [ 172.827512][T10368] netlink: 'syz.1.2777': attribute type 7 has an invalid length. [ 172.827541][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 172.891876][T10370] lo speed is unknown, defaulting to 1000 [ 173.389097][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 173.432939][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 173.441085][ T29] kauditd_printk_skb: 26579 callbacks suppressed [ 173.441106][ T29] audit: type=1400 audit(2000000003.911:428550): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.469530][ T29] audit: type=1400 audit(2000000003.911:428551): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.490965][ T29] audit: type=1400 audit(2000000003.911:428552): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.512224][ T29] audit: type=1400 audit(2000000003.911:428553): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.533588][ T29] audit: type=1400 audit(2000000003.911:428554): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.555017][ T29] audit: type=1400 audit(2000000003.911:428555): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.576322][ T29] audit: type=1400 audit(2000000003.911:428556): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.597701][ T29] audit: type=1400 audit(2000000003.930:428557): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.619026][ T29] audit: type=1400 audit(2000000003.930:428558): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.640294][ T29] audit: type=1400 audit(2000000003.930:428559): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.699066][T10397] FAULT_INJECTION: forcing a failure. [ 173.699066][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 173.711867][T10397] CPU: 1 UID: 0 PID: 10397 Comm: syz.4.2790 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.711911][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.711925][T10397] Call Trace: [ 173.711933][T10397] [ 173.711941][T10397] __dump_stack+0x1d/0x30 [ 173.712004][T10397] dump_stack_lvl+0xe8/0x140 [ 173.712028][T10397] dump_stack+0x15/0x1b [ 173.712044][T10397] should_fail_ex+0x265/0x280 [ 173.712095][T10397] should_failslab+0x8c/0xb0 [ 173.712130][T10397] kmem_cache_alloc_noprof+0x50/0x480 [ 173.712166][T10397] ? alloc_empty_file+0x76/0x200 [ 173.712287][T10397] ? mntput+0x4b/0x80 [ 173.712337][T10397] alloc_empty_file+0x76/0x200 [ 173.712368][T10397] path_openat+0x68/0x2170 [ 173.712422][T10397] ? _parse_integer_limit+0x170/0x190 [ 173.712532][T10397] ? kstrtoull+0x111/0x140 [ 173.712566][T10397] ? kstrtouint+0x76/0xc0 [ 173.712605][T10397] do_filp_open+0x109/0x230 [ 173.712678][T10397] do_sys_openat2+0xa6/0x110 [ 173.712702][T10397] __x64_sys_openat+0xf2/0x120 [ 173.712732][T10397] x64_sys_call+0x2eab/0x3000 [ 173.712766][T10397] do_syscall_64+0xd2/0x200 [ 173.712792][T10397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.712821][T10397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.712852][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.712947][T10397] RIP: 0033:0x7fa864d1f749 [ 173.712961][T10397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.713000][T10397] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.713023][T10397] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 173.713038][T10397] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 173.713052][T10397] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 173.713066][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.713129][T10397] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 173.713150][T10397] [ 174.047513][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2792'. [ 174.308905][T10427] lo speed is unknown, defaulting to 1000 [ 174.343163][T10432] FAULT_INJECTION: forcing a failure. [ 174.343163][T10432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.356277][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.3.2805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.356303][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.356315][T10432] Call Trace: [ 174.356321][T10432] [ 174.356328][T10432] __dump_stack+0x1d/0x30 [ 174.356351][T10432] dump_stack_lvl+0xe8/0x140 [ 174.356389][T10432] dump_stack+0x15/0x1b [ 174.356407][T10432] should_fail_ex+0x265/0x280 [ 174.356431][T10432] should_fail+0xb/0x20 [ 174.356511][T10432] should_fail_usercopy+0x1a/0x20 [ 174.356534][T10432] strncpy_from_user+0x25/0x230 [ 174.356559][T10432] ? kmem_cache_alloc_noprof+0x242/0x480 [ 174.356586][T10432] ? getname_flags+0x80/0x3b0 [ 174.356670][T10432] getname_flags+0xae/0x3b0 [ 174.356793][T10432] __se_sys_quotactl+0x16a/0x670 [ 174.356870][T10432] __x64_sys_quotactl+0x55/0x70 [ 174.356901][T10432] x64_sys_call+0x15d6/0x3000 [ 174.356928][T10432] do_syscall_64+0xd2/0x200 [ 174.357008][T10432] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.357085][T10432] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.357123][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.357144][T10432] RIP: 0033:0x7fbf8bcaf749 [ 174.357162][T10432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.357185][T10432] RSP: 002b:00007fbf8a717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 174.357244][T10432] RAX: ffffffffffffffda RBX: 00007fbf8bf05fa0 RCX: 00007fbf8bcaf749 [ 174.357259][T10432] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffff80000201 [ 174.357275][T10432] RBP: 00007fbf8a717090 R08: 0000000000000000 R09: 0000000000000000 [ 174.357286][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.357297][T10432] R13: 00007fbf8bf06038 R14: 00007fbf8bf05fa0 R15: 00007ffda37f4b38 [ 174.357314][T10432] [ 174.757623][T10462] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.768115][T10462] netlink: 'syz.0.2814': attribute type 10 has an invalid length. [ 174.930167][T10475] FAULT_INJECTION: forcing a failure. [ 174.930167][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.943288][T10475] CPU: 0 UID: 0 PID: 10475 Comm: syz.3.2818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.943375][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.943390][T10475] Call Trace: [ 174.943398][T10475] [ 174.943406][T10475] __dump_stack+0x1d/0x30 [ 174.943429][T10475] dump_stack_lvl+0xe8/0x140 [ 174.943447][T10475] dump_stack+0x15/0x1b [ 174.943462][T10475] should_fail_ex+0x265/0x280 [ 174.943525][T10475] should_fail+0xb/0x20 [ 174.943544][T10475] should_fail_usercopy+0x1a/0x20 [ 174.943563][T10475] _copy_to_user+0x20/0xa0 [ 174.943648][T10475] simple_read_from_buffer+0xb5/0x130 [ 174.943696][T10475] proc_fail_nth_read+0x10e/0x150 [ 174.943731][T10475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.943765][T10475] vfs_read+0x1a8/0x770 [ 174.943792][T10475] ? __rcu_read_unlock+0x4f/0x70 [ 174.943904][T10475] ? __fget_files+0x184/0x1c0 [ 174.943938][T10475] ksys_read+0xda/0x1a0 [ 174.943963][T10475] __x64_sys_read+0x40/0x50 [ 174.943985][T10475] x64_sys_call+0x27c0/0x3000 [ 174.944072][T10475] do_syscall_64+0xd2/0x200 [ 174.944094][T10475] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.944148][T10475] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.944188][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.944269][T10475] RIP: 0033:0x7fbf8bcae15c [ 174.944283][T10475] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.944306][T10475] RSP: 002b:00007fbf8a6f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.944342][T10475] RAX: ffffffffffffffda RBX: 00007fbf8bf06090 RCX: 00007fbf8bcae15c [ 174.944426][T10475] RDX: 000000000000000f RSI: 00007fbf8a6f60a0 RDI: 0000000000000003 [ 174.944440][T10475] RBP: 00007fbf8a6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.944455][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.944470][T10475] R13: 00007fbf8bf06128 R14: 00007fbf8bf06090 R15: 00007ffda37f4b38 [ 174.944527][T10475] [ 175.270651][T10479] sch_fq: defrate 4294967295 ignored. [ 175.276757][T10479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.339567][T10483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2824'. [ 175.415718][T10487] FAULT_INJECTION: forcing a failure. [ 175.415718][T10487] name failslab, interval 1, probability 0, space 0, times 0 [ 175.428409][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.4.2826 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.428504][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.428518][T10487] Call Trace: [ 175.428524][T10487] [ 175.428531][T10487] __dump_stack+0x1d/0x30 [ 175.428564][T10487] dump_stack_lvl+0xe8/0x140 [ 175.428586][T10487] dump_stack+0x15/0x1b [ 175.428603][T10487] should_fail_ex+0x265/0x280 [ 175.428627][T10487] should_failslab+0x8c/0xb0 [ 175.428715][T10487] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 175.428763][T10487] ? sidtab_sid2str_get+0xa0/0x130 [ 175.428830][T10487] kmemdup_noprof+0x2b/0x70 [ 175.428863][T10487] sidtab_sid2str_get+0xa0/0x130 [ 175.428937][T10487] security_sid_to_context_core+0x1eb/0x2e0 [ 175.428976][T10487] security_sid_to_context+0x27/0x40 [ 175.429003][T10487] selinux_lsmprop_to_secctx+0x67/0xf0 [ 175.429067][T10487] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 175.429096][T10487] audit_log_subj_ctx+0xa4/0x3e0 [ 175.429121][T10487] ? skb_put+0xa9/0xf0 [ 175.429151][T10487] audit_log_task_context+0x48/0x70 [ 175.429203][T10487] audit_log_task+0xf4/0x250 [ 175.429318][T10487] ? kstrtouint+0x76/0xc0 [ 175.429393][T10487] audit_seccomp+0x61/0x100 [ 175.429431][T10487] ? __seccomp_filter+0x82d/0x1250 [ 175.429501][T10487] __seccomp_filter+0x83e/0x1250 [ 175.429548][T10487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.429584][T10487] ? vfs_write+0x7e8/0x960 [ 175.429606][T10487] ? __rcu_read_unlock+0x4f/0x70 [ 175.429696][T10487] ? __fget_files+0x184/0x1c0 [ 175.429860][T10487] __secure_computing+0x82/0x150 [ 175.429894][T10487] syscall_trace_enter+0xcf/0x1e0 [ 175.429928][T10487] do_syscall_64+0xac/0x200 [ 175.429954][T10487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.430066][T10487] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.430107][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.430159][T10487] RIP: 0033:0x7fa864d1f749 [ 175.430173][T10487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.430190][T10487] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 175.430208][T10487] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 175.430222][T10487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 175.430310][T10487] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 175.430325][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.430410][T10487] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 175.430429][T10487] [ 175.802298][T10504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10504 comm=syz.2.2833 [ 175.839686][T10507] FAULT_INJECTION: forcing a failure. [ 175.839686][T10507] name failslab, interval 1, probability 0, space 0, times 0 [ 175.852549][T10507] CPU: 1 UID: 0 PID: 10507 Comm: syz.4.2836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.852591][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.852608][T10507] Call Trace: [ 175.852616][T10507] [ 175.852626][T10507] __dump_stack+0x1d/0x30 [ 175.852676][T10507] dump_stack_lvl+0xe8/0x140 [ 175.852703][T10507] dump_stack+0x15/0x1b [ 175.852727][T10507] should_fail_ex+0x265/0x280 [ 175.852753][T10507] should_failslab+0x8c/0xb0 [ 175.852791][T10507] kmem_cache_alloc_noprof+0x50/0x480 [ 175.852864][T10507] ? getname_flags+0x80/0x3b0 [ 175.852895][T10507] ? fput+0x8f/0xc0 [ 175.852918][T10507] getname_flags+0x80/0x3b0 [ 175.853027][T10507] __x64_sys_unlinkat+0x70/0xb0 [ 175.853059][T10507] x64_sys_call+0x2eed/0x3000 [ 175.853089][T10507] do_syscall_64+0xd2/0x200 [ 175.853208][T10507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.853244][T10507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.853289][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.853317][T10507] RIP: 0033:0x7fa864d1f749 [ 175.853394][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.853412][T10507] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 175.853435][T10507] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 175.853451][T10507] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 175.853466][T10507] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 175.853541][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.853565][T10507] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 175.853583][T10507] [ 176.051739][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 176.062049][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2835'. [ 176.064837][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 176.080691][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 176.090199][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 176.222944][T10527] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.586761][ T2748] bridge_slave_0: left allmulticast mode [ 176.592467][ T2748] bridge_slave_0: left promiscuous mode [ 176.598283][ T2748] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.778938][ T2748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.789538][ T2748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.799702][ T2748] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 176.809945][ T2748] bond0 (unregistering): Released all slaves [ 176.907417][ T2748] hsr_slave_0: left promiscuous mode [ 176.916557][ T2748] hsr_slave_1: left promiscuous mode [ 176.926163][ T2748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.947737][ T2748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.955383][ T2748] batman_adv: batadv0: Removing interface: dummy0 [ 177.088528][ T2748] team0 (unregistering): Port device team_slave_1 removed [ 177.098383][ T2748] team0 (unregistering): Port device team_slave_0 removed [ 177.118329][ T3449] smc: removing ib device syz0 [ 177.287393][T10551] FAULT_INJECTION: forcing a failure. [ 177.287393][T10551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.300540][T10551] CPU: 1 UID: 0 PID: 10551 Comm: syz.1.2851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.300655][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.300669][T10551] Call Trace: [ 177.300676][T10551] [ 177.300684][T10551] __dump_stack+0x1d/0x30 [ 177.300704][T10551] dump_stack_lvl+0xe8/0x140 [ 177.300777][T10551] dump_stack+0x15/0x1b [ 177.300797][T10551] should_fail_ex+0x265/0x280 [ 177.300816][T10551] should_fail+0xb/0x20 [ 177.300829][T10551] should_fail_usercopy+0x1a/0x20 [ 177.300857][T10551] _copy_to_user+0x20/0xa0 [ 177.300880][T10551] simple_read_from_buffer+0xb5/0x130 [ 177.300905][T10551] proc_fail_nth_read+0x10e/0x150 [ 177.301002][T10551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.301038][T10551] vfs_read+0x1a8/0x770 [ 177.301067][T10551] ? __rcu_read_unlock+0x4f/0x70 [ 177.301090][T10551] ? __fget_files+0x184/0x1c0 [ 177.301130][T10551] ksys_read+0xda/0x1a0 [ 177.301199][T10551] __x64_sys_read+0x40/0x50 [ 177.301359][T10551] x64_sys_call+0x27c0/0x3000 [ 177.301379][T10551] do_syscall_64+0xd2/0x200 [ 177.301400][T10551] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.301465][T10551] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.301504][T10551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.301586][T10551] RIP: 0033:0x7f10ca3de15c [ 177.301603][T10551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.301654][T10551] RSP: 002b:00007f10c8e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.301675][T10551] RAX: ffffffffffffffda RBX: 00007f10ca635fa0 RCX: 00007f10ca3de15c [ 177.301689][T10551] RDX: 000000000000000f RSI: 00007f10c8e470a0 RDI: 0000000000000003 [ 177.301702][T10551] RBP: 00007f10c8e47090 R08: 0000000000000000 R09: 0000000000000000 [ 177.301735][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.301790][T10551] R13: 00007f10ca636038 R14: 00007f10ca635fa0 R15: 00007fffe0e5d1a8 [ 177.301810][T10551] [ 177.969814][T10563] pimreg: tun_chr_ioctl cmd 1074025678 [ 177.975491][T10563] pimreg: group set to 0 [ 178.742417][T10575] FAULT_INJECTION: forcing a failure. [ 178.742417][T10575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.755588][T10575] CPU: 1 UID: 0 PID: 10575 Comm: syz.4.2861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.755621][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.755637][T10575] Call Trace: [ 178.755644][T10575] [ 178.755653][T10575] __dump_stack+0x1d/0x30 [ 178.755696][T10575] dump_stack_lvl+0xe8/0x140 [ 178.755719][T10575] dump_stack+0x15/0x1b [ 178.755735][T10575] should_fail_ex+0x265/0x280 [ 178.755777][T10575] should_fail+0xb/0x20 [ 178.755795][T10575] should_fail_usercopy+0x1a/0x20 [ 178.755875][T10575] _copy_from_user+0x1c/0xb0 [ 178.755908][T10575] memdup_user+0x5e/0xd0 [ 178.755975][T10575] strndup_user+0x68/0xb0 [ 178.756005][T10575] __se_sys_mount+0x4d/0x2e0 [ 178.756038][T10575] ? fput+0x8f/0xc0 [ 178.756121][T10575] ? ksys_write+0x192/0x1a0 [ 178.756219][T10575] __x64_sys_mount+0x67/0x80 [ 178.756253][T10575] x64_sys_call+0x2b51/0x3000 [ 178.756299][T10575] do_syscall_64+0xd2/0x200 [ 178.756325][T10575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.756361][T10575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 178.756453][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.756557][T10575] RIP: 0033:0x7fa864d1f749 [ 178.756572][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.756590][T10575] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.756612][T10575] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 178.756629][T10575] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 178.756644][T10575] RBP: 00007fa863787090 R08: 0000200000000600 R09: 0000000000000000 [ 178.756659][T10575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.756674][T10575] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 178.756703][T10575] [ 178.796805][ T29] kauditd_printk_skb: 30609 callbacks suppressed [ 178.796822][ T29] audit: type=1400 audit(2000000264.936:454083): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.819836][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.822700][ T29] audit: type=1400 audit(2000000264.936:454084): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 178.826773][ T3043] audit: audit_lost=37634 audit_rate_limit=0 audit_backlog_limit=64 [ 178.831113][ T29] audit: type=1400 audit(2000000264.945:454085): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.831144][ T29] audit: type=1400 audit(2000000264.945:454086): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.831173][ T29] audit: type=1400 audit(2000000264.945:454087): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.831201][ T29] audit: type=1400 audit(2000000264.945:454088): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.835769][ T3043] audit: backlog limit exceeded [ 178.839606][ T29] audit: type=1400 audit(2000000264.945:454089): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.604449][T10585] __nla_validate_parse: 2 callbacks suppressed [ 179.604514][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 179.621158][T10584] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2865'. [ 181.714331][T10603] lo speed is unknown, defaulting to 1000 [ 181.865533][T10603] netlink: 'syz.4.2873': attribute type 2 has an invalid length. [ 181.927002][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2873'. [ 182.920293][T10613] netlink: 'syz.4.2877': attribute type 27 has an invalid length. [ 182.954709][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.969212][T10613] batman_adv: batadv0: Interface deactivated: dummy0 [ 183.035703][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.074517][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.138586][T10613] ipvlan0: left allmulticast mode [ 183.143724][T10613] veth0_vlan: left allmulticast mode [ 183.180597][T10613] veth2: left promiscuous mode [ 183.185432][T10613] veth2: left allmulticast mode [ 183.190479][T10613] veth4: left promiscuous mode [ 183.195403][T10613] veth4: left allmulticast mode [ 183.234214][T10613] veth6: left promiscuous mode [ 183.239099][T10613] veth6: left allmulticast mode [ 183.244134][T10613] veth8: left promiscuous mode [ 183.248912][T10613] veth8: left allmulticast mode [ 183.254033][T10613] veth10: left promiscuous mode [ 183.258931][T10613] veth10: left allmulticast mode [ 183.264011][T10613] veth12: left promiscuous mode [ 183.268896][T10613] veth12: left allmulticast mode [ 183.274000][T10613] veth14: left promiscuous mode [ 183.278937][T10613] veth14: left allmulticast mode [ 183.284024][T10613] veth16: left promiscuous mode [ 183.288926][T10613] veth16: left allmulticast mode [ 183.298953][T10613] veth18: left promiscuous mode [ 183.303915][T10613] veth18: left allmulticast mode [ 183.309170][T10613] veth20: left promiscuous mode [ 183.314061][T10613] veth20: left allmulticast mode [ 183.319199][T10613] veth22: left promiscuous mode [ 183.324111][T10613] veth22: left allmulticast mode [ 183.329291][T10613] veth24: left promiscuous mode [ 183.334198][T10613] veth24: left allmulticast mode [ 183.339307][T10613] veth26: left promiscuous mode [ 183.344212][T10613] veth26: left allmulticast mode [ 183.349358][T10613] veth28: left promiscuous mode [ 183.354260][T10613] veth28: left allmulticast mode [ 183.359450][T10613] veth30: left promiscuous mode [ 183.364342][T10613] veth30: left allmulticast mode [ 183.369380][T10613] veth32: left promiscuous mode [ 183.374359][T10613] veth32: left allmulticast mode [ 183.379463][T10613] veth34: left promiscuous mode [ 183.384394][T10613] veth34: left allmulticast mode [ 183.389685][T10613] ip6gre1: left promiscuous mode [ 183.394713][T10613] ip6gre1: left allmulticast mode [ 183.400578][T10613] veth36: left promiscuous mode [ 183.405543][T10613] veth36: left allmulticast mode [ 183.410640][T10613] veth38: left promiscuous mode [ 183.415535][T10613] veth38: left allmulticast mode [ 183.420617][T10613] veth40: left promiscuous mode [ 183.425492][T10613] veth40: left allmulticast mode [ 183.430713][T10613] veth42: left promiscuous mode [ 183.435596][T10613] veth42: left allmulticast mode [ 183.440643][T10613] veth44: left promiscuous mode [ 183.445506][T10613] veth44: left allmulticast mode [ 183.450658][T10613] veth46: left promiscuous mode [ 183.455514][T10613] veth46: left allmulticast mode [ 183.473642][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.482122][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.490290][T10617] batman_adv: batadv0: Interface activated: dummy0 [ 183.496890][T10617] net_ratelimit: 10 callbacks suppressed [ 183.496949][T10617] batadv0: mtu less than device minimum [ 183.508718][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.519460][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.530281][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.541081][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.551764][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.562610][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.573421][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.584407][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.595212][T10617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.611912][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.629957][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.639169][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.648165][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.153053][ T29] kauditd_printk_skb: 67249 callbacks suppressed [ 184.153069][ T29] audit: type=1400 audit(2000000269.950:499529): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.160791][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.180704][ T29] audit: type=1400 audit(2000000269.950:499530): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.180734][ T29] audit: type=1400 audit(2000000269.950:499531): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.187272][ T3043] audit: audit_lost=44905 audit_rate_limit=0 audit_backlog_limit=64 [ 184.208540][ T29] audit: type=1400 audit(2000000269.950:499532): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.229745][ T3043] audit: backlog limit exceeded [ 184.231004][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.239340][ T29] audit: type=1400 audit(2000000269.950:499533): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.259144][ T3043] audit: audit_lost=44906 audit_rate_limit=0 audit_backlog_limit=64 [ 184.306541][T10623] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2878'. [ 184.370333][T10633] FAULT_INJECTION: forcing a failure. [ 184.370333][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.375651][T10629] lo speed is unknown, defaulting to 1000 [ 184.383523][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.4.2883 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.383554][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.383620][T10633] Call Trace: [ 184.383628][T10633] [ 184.383639][T10633] __dump_stack+0x1d/0x30 [ 184.383669][T10633] dump_stack_lvl+0xe8/0x140 [ 184.383696][T10633] dump_stack+0x15/0x1b [ 184.383720][T10633] should_fail_ex+0x265/0x280 [ 184.383860][T10633] should_fail+0xb/0x20 [ 184.383881][T10633] should_fail_usercopy+0x1a/0x20 [ 184.383923][T10633] _copy_from_user+0x1c/0xb0 [ 184.383966][T10633] kstrtouint_from_user+0x69/0xf0 [ 184.383994][T10633] ? 0xffffffff81000000 [ 184.384011][T10633] ? selinux_file_permission+0x1e4/0x320 [ 184.384056][T10633] proc_fail_nth_write+0x50/0x160 [ 184.384183][T10633] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.384296][T10633] vfs_write+0x269/0x960 [ 184.384396][T10633] ? vfs_read+0x4e6/0x770 [ 184.384427][T10633] ? __rcu_read_unlock+0x4f/0x70 [ 184.384519][T10633] ? __fget_files+0x184/0x1c0 [ 184.384630][T10633] ksys_write+0xda/0x1a0 [ 184.384664][T10633] __x64_sys_write+0x40/0x50 [ 184.384711][T10633] x64_sys_call+0x2802/0x3000 [ 184.384808][T10633] do_syscall_64+0xd2/0x200 [ 184.384893][T10633] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.384940][T10633] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.384986][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.385059][T10633] RIP: 0033:0x7fa864d1e1ff [ 184.385131][T10633] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 184.385156][T10633] RSP: 002b:00007fa863787030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 184.385181][T10633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa864d1e1ff [ 184.385198][T10633] RDX: 0000000000000001 RSI: 00007fa8637870a0 RDI: 0000000000000003 [ 184.385212][T10633] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 184.385229][T10633] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 184.385258][T10633] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 184.385316][T10633] [ 185.753478][T10640] FAULT_INJECTION: forcing a failure. [ 185.753478][T10640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.766592][T10640] CPU: 1 UID: 0 PID: 10640 Comm: syz.4.2887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.766620][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.766647][T10640] Call Trace: [ 185.766655][T10640] [ 185.766664][T10640] __dump_stack+0x1d/0x30 [ 185.766689][T10640] dump_stack_lvl+0xe8/0x140 [ 185.766712][T10640] dump_stack+0x15/0x1b [ 185.766733][T10640] should_fail_ex+0x265/0x280 [ 185.766781][T10640] should_fail+0xb/0x20 [ 185.766854][T10640] should_fail_usercopy+0x1a/0x20 [ 185.766877][T10640] _copy_from_iter+0xd2/0xe80 [ 185.766907][T10640] ? __pfx_woken_wake_function+0x10/0x10 [ 185.766939][T10640] file_tty_write+0x322/0x690 [ 185.767035][T10640] ? __pfx_tty_write+0x10/0x10 [ 185.767058][T10640] tty_write+0x25/0x30 [ 185.767077][T10640] vfs_write+0x52a/0x960 [ 185.767113][T10640] ksys_write+0xda/0x1a0 [ 185.767143][T10640] __x64_sys_write+0x40/0x50 [ 185.767204][T10640] x64_sys_call+0x2802/0x3000 [ 185.767225][T10640] do_syscall_64+0xd2/0x200 [ 185.767251][T10640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.767315][T10640] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.767381][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.767403][T10640] RIP: 0033:0x7fa864d1f749 [ 185.767421][T10640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.767473][T10640] RSP: 002b:00007fa863787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.767492][T10640] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 185.767505][T10640] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 185.767517][T10640] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 185.767623][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.767675][T10640] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 185.767692][T10640] [ 187.285401][T10654] netlink: 'syz.1.2889': attribute type 4 has an invalid length. [ 187.295034][T10651] FAULT_INJECTION: forcing a failure. [ 187.295034][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 187.307720][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.4.2891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.307763][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.307777][T10651] Call Trace: [ 187.307833][T10651] [ 187.307841][T10651] __dump_stack+0x1d/0x30 [ 187.307866][T10651] dump_stack_lvl+0xe8/0x140 [ 187.307889][T10651] dump_stack+0x15/0x1b [ 187.307908][T10651] should_fail_ex+0x265/0x280 [ 187.307970][T10651] should_failslab+0x8c/0xb0 [ 187.308066][T10651] __kmalloc_noprof+0xa5/0x570 [ 187.308100][T10651] ? security_prepare_creds+0x52/0x120 [ 187.308132][T10651] security_prepare_creds+0x52/0x120 [ 187.308200][T10651] prepare_creds+0x34a/0x4c0 [ 187.308221][T10654] netlink: 'syz.1.2889': attribute type 4 has an invalid length. [ 187.308230][T10651] copy_creds+0x8f/0x3f0 [ 187.308268][T10651] copy_process+0x658/0x2000 [ 187.308329][T10654] ================================================================== [ 187.308357][T10651] ? kstrtouint+0x76/0xc0 [ 187.308402][T10651] ? __rcu_read_unlock+0x4f/0x70 [ 187.308443][T10651] kernel_clone+0x16c/0x5c0 [ 187.308546][T10651] ? vfs_write+0x7e8/0x960 [ 187.308581][T10651] __x64_sys_clone+0xe6/0x120 [ 187.308632][T10651] x64_sys_call+0x119c/0x3000 [ 187.308722][T10651] do_syscall_64+0xd2/0x200 [ 187.308828][T10651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.308884][T10651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.308930][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.309014][T10651] RIP: 0033:0x7fa864d1f749 [ 187.309034][T10651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.309119][T10651] RSP: 002b:00007fa863786fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 187.309145][T10651] RAX: ffffffffffffffda RBX: 00007fa864f75fa0 RCX: 00007fa864d1f749 [ 187.309303][T10651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 187.309320][T10651] RBP: 00007fa863787090 R08: 0000000000000000 R09: 0000000000000000 [ 187.309336][T10651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 187.309353][T10651] R13: 00007fa864f76038 R14: 00007fa864f75fa0 R15: 00007ffe1848a4d8 [ 187.309376][T10651] [ 187.376737][T10654] BUG: KCSAN: data-race in data_push_tail / symbol_string [ 187.376778][T10654] [ 187.376785][T10654] write to 0xffffffff88e79b18 of 1 bytes by task 10651 on cpu 0: [ 187.376803][T10654] symbol_string+0x1ce/0x250 [ 187.376833][T10654] pointer+0x60c/0xcf0 [ 187.376860][T10654] vsnprintf+0x491/0x890 [ 187.376886][T10654] vscnprintf+0x41/0x90 [ 187.376913][T10654] printk_sprint+0x30/0x2d0 [ 187.376935][T10654] vprintk_store+0x599/0x860 [ 187.376957][T10654] vprintk_emit+0x10d/0x580 [ 187.376979][T10654] vprintk_default+0x26/0x30 [ 187.377002][T10654] vprintk+0x1d/0x30 [ 187.377030][T10654] _printk+0x79/0xa0 [ 187.377060][T10654] show_trace_log_lvl+0x4e3/0x560 [ 187.377085][T10654] __dump_stack+0x1d/0x30 [ 187.377103][T10654] dump_stack_lvl+0xe8/0x140 [ 187.377122][T10654] dump_stack+0x15/0x1b [ 187.377140][T10654] should_fail_ex+0x265/0x280 [ 187.377158][T10654] should_failslab+0x8c/0xb0 [ 187.377187][T10654] __kmalloc_noprof+0xa5/0x570 [ 187.377216][T10654] security_prepare_creds+0x52/0x120 [ 187.377247][T10654] prepare_creds+0x34a/0x4c0 [ 187.377273][T10654] copy_creds+0x8f/0x3f0 [ 187.377298][T10654] copy_process+0x658/0x2000 [ 187.377326][T10654] kernel_clone+0x16c/0x5c0 [ 187.377356][T10654] __x64_sys_clone+0xe6/0x120 [ 187.377388][T10654] x64_sys_call+0x119c/0x3000 [ 187.377412][T10654] do_syscall_64+0xd2/0x200 [ 187.377433][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.377454][T10654] [ 187.377461][T10654] read to 0xffffffff88e79b18 of 8 bytes by task 10654 on cpu 1: [ 187.377477][T10654] data_push_tail+0xfd/0x420 [ 187.377498][T10654] data_alloc+0xfb/0x2e0 [ 187.377515][T10654] prb_reserve+0x807/0xaf0 [ 187.377533][T10654] vprintk_store+0x56d/0x860 [ 187.377554][T10654] vprintk_emit+0x10d/0x580 [ 187.377576][T10654] vprintk_default+0x26/0x30 [ 187.377599][T10654] vprintk+0x1d/0x30 [ 187.377628][T10654] _printk+0x79/0xa0 [ 187.377662][T10654] __nla_validate_parse+0x1227/0x1d00 [ 187.377685][T10654] __nla_parse+0x40/0x60 [ 187.377705][T10654] rtnl_setlink+0xd2/0x420 [ 187.377729][T10654] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 187.377752][T10654] netlink_rcv_skb+0x123/0x220 [ 187.377785][T10654] rtnetlink_rcv+0x1c/0x30 [ 187.377807][T10654] netlink_unicast+0x5c0/0x690 [ 187.377837][T10654] netlink_sendmsg+0x58b/0x6b0 [ 187.377855][T10654] __sock_sendmsg+0x145/0x180 [ 187.377880][T10654] sock_write_iter+0x1a7/0x1f0 [ 187.377902][T10654] do_iter_readv_writev+0x4a1/0x540 [ 187.377930][T10654] vfs_writev+0x2df/0x8b0 [ 187.377961][T10654] do_writev+0xe7/0x210 [ 187.377993][T10654] __x64_sys_writev+0x45/0x50 [ 187.378022][T10654] x64_sys_call+0x1e9a/0x3000 [ 187.378045][T10654] do_syscall_64+0xd2/0x200 [ 187.378066][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.378088][T10654] [ 187.378093][T10654] value changed: 0x00000000ffffe985 -> 0x663878302b736465 [ 187.378105][T10654] [ 187.378110][T10654] Reported by Kernel Concurrency Sanitizer on: [ 187.378123][T10654] CPU: 1 UID: 0 PID: 10654 Comm: syz.1.2889 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.378149][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.378163][T10654] ================================================================== [ 187.848735][T10654] syz.1.2889 (10654) used greatest stack depth: 9432 bytes left [ 189.354517][ T31] bridge_slave_0: left allmulticast mode [ 189.360245][ T31] bridge_slave_0: left promiscuous mode [ 189.365901][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.508826][ T29] kauditd_printk_skb: 44766 callbacks suppressed [ 189.508842][ T29] audit: type=1400 audit(2000000274.945:540346): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.517197][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.536463][ T29] audit: type=1400 audit(2000000274.954:540347): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.542973][ T3043] audit: audit_lost=46225 audit_rate_limit=0 audit_backlog_limit=64 [ 189.564182][ T29] audit: type=1400 audit(2000000274.954:540348): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.572167][ T3043] audit: backlog limit exceeded [ 189.573166][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.593364][ T29] audit: type=1400 audit(2000000274.954:540349): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.598249][ T3043] audit: audit_lost=46226 audit_rate_limit=0 audit_backlog_limit=64 [ 189.604732][ T29] audit: type=1400 audit(2000000274.954:540350): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.656934][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.666493][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.675911][ T31] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 189.685059][ T31] bond0 (unregistering): Released all slaves [ 189.770607][ T31] hsr_slave_0: left promiscuous mode [ 189.776486][ T31] hsr_slave_1: left promiscuous mode [ 189.782327][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.790120][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.798024][ T31] batman_adv: batadv0: Interface deactivated: dummy0 [ 189.804725][ T31] batman_adv: batadv0: Removing interface: dummy0 [ 189.898802][ T31] team0 (unregistering): Port device team_slave_1 removed [ 189.909254][ T31] team0 (unregistering): Port device team_slave_0 removed [ 190.262053][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.314368][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.377989][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.441892][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.747322][ T31] bridge_slave_0: left allmulticast mode [ 190.753078][ T31] bridge_slave_0: left promiscuous mode [ 190.758760][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.770764][ T31] bridge_slave_0: left allmulticast mode [ 190.776485][ T31] bridge_slave_0: left promiscuous mode [ 190.782258][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.040018][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.049828][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.060271][ T31] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 191.069389][ T31] bond0 (unregistering): Released all slaves [ 191.147900][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.158267][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.168946][ T31] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 191.179165][ T31] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 191.188311][ T31] bond0 (unregistering): Released all slaves [ 191.242495][ T31] hsr_slave_0: left promiscuous mode [ 191.248294][ T31] hsr_slave_1: left promiscuous mode [ 191.254421][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.261809][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.269824][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.277258][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.287663][ T31] hsr_slave_0: left promiscuous mode [ 191.293677][ T31] hsr_slave_1: left promiscuous mode [ 191.299606][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.307284][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.318317][ T31] veth1_macvtap: left promiscuous mode [ 191.324035][ T31] veth0_macvtap: left promiscuous mode [ 191.329875][ T31] veth1_vlan: left promiscuous mode [ 191.335332][ T31] veth0_vlan: left promiscuous mode [ 191.472019][ T31] team0 (unregistering): Port device team_slave_1 removed [ 191.483559][ T31] team0 (unregistering): Port device team_slave_0 removed [ 191.622228][ T31] team0 (unregistering): Port device team_slave_1 removed [ 191.632591][ T31] team0 (unregistering): Port device team_slave_0 removed [ 192.134719][ T31] IPVS: stop unused estimator thread 0... [ 194.864827][ T29] kauditd_printk_skb: 55541 callbacks suppressed [ 194.864842][ T29] audit: type=1400 audit(2000000279.968:591415): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.872715][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.892587][ T29] audit: type=1400 audit(2000000279.968:591416): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.899001][ T3043] audit: audit_lost=47719 audit_rate_limit=0 audit_backlog_limit=64 [ 194.899022][ T3043] audit: backlog limit exceeded [ 194.899154][ T3043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.920318][ T29] audit: type=1400 audit(2000000279.968:591417): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.928297][ T3043] audit: audit_lost=47720 audit_rate_limit=0 audit_backlog_limit=64 [ 194.933145][ T29] audit: type=1400 audit(2000000279.968:591418): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.939653][ T3043] audit: backlog limit exceeded