last executing test programs: 2.325232279s ago: executing program 1 (id=1563): socket$netlink(0x10, 0x3, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) chdir(&(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) r7 = dup2(r5, r6) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 2.234515419s ago: executing program 0 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001200431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000e2ff03003680"], 0x24}}, 0x0) 2.157400419s ago: executing program 0 (id=1570): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) semop(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={r1, r2+60000000}) 2.001987578s ago: executing program 1 (id=1572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) (fail_nth: 10) 1.894896627s ago: executing program 0 (id=1574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, 0x0, 0x0) 1.558035076s ago: executing program 1 (id=1576): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c6, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = inotify_init1(0xc0800) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x6, 0x2) (async) inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021) (async) ftruncate(r1, 0x2007ff3) (async) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 1.557578006s ago: executing program 0 (id=1577): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x52638b07, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, 0x0, 0x20040814) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x56) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.433005526s ago: executing program 2 (id=1579): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 1.411694666s ago: executing program 2 (id=1580): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x1003, 0x800, 0x1, 0x361}, &(0x7f0000000840)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = epoll_create(0xb7b4) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x3ff, &(0x7f00000000c0)={[0x1]}, 0x8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'decodes', ' ', 'mem'}, 0xc) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x0, {0x0, r5}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r10 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) 1.343711775s ago: executing program 1 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') utimensat(r2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 1.241726045s ago: executing program 1 (id=1583): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f00000000c0)={0x200000, 0x0, 0x8000, 0x8, 0x10000000}) r4 = syz_clone(0x80000400, &(0x7f0000000180)="d84144fd89b0065db98b123f0a2d44ab9ded5221f847e5694b596c7f0f7188efbcca051d50c28f38c77594d00f1834bedaadf4bc527fd5949b069799539c297aaec34150d232c28ec9ead0c45bfb92fb286d4a9cd60a4c2e10f264e5f80afcf629df199d4b6e1511764e0a89", 0x6c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000540)="d4775cdb1f78518e599ab99508cf53879c05b981bd9c6f283132ee270e0420badbb6157d4c85eb5bd602abeec9e36a0488f5e09a83f7779f0c8377f9e56360e8f62d417dbcc2aa5385369c91da32a7d87011457170eaa65ab06c6ec13ffc1350c9d645ab276d687ce25d42aa11cbe283f141e3cf2220d9cbfd24e8147d4ae86fe81713e3354440f871531465537342a7541724adc6d0d1910e2b44224ba3fafd30b3640b207b22f6088263a02be060faebd3a9dc7769b8b01fb2f02b5a27dd1342aa878233830f06565bbd7737bb2dcebf832b1e2b746ec4f7337d") syz_clone3(&(0x7f0000000640)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/84, 0x54, &(0x7f0000000d80)=""/4096, &(0x7f0000000400)=[r3, r4], 0x2}, 0x58) keyctl$update(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) (async) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f00000000c0)={0x200000, 0x0, 0x8000, 0x8, 0x10000000}) (async) syz_clone(0x80000400, &(0x7f0000000180)="d84144fd89b0065db98b123f0a2d44ab9ded5221f847e5694b596c7f0f7188efbcca051d50c28f38c77594d00f1834bedaadf4bc527fd5949b069799539c297aaec34150d232c28ec9ead0c45bfb92fb286d4a9cd60a4c2e10f264e5f80afcf629df199d4b6e1511764e0a89", 0x6c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000540)="d4775cdb1f78518e599ab99508cf53879c05b981bd9c6f283132ee270e0420badbb6157d4c85eb5bd602abeec9e36a0488f5e09a83f7779f0c8377f9e56360e8f62d417dbcc2aa5385369c91da32a7d87011457170eaa65ab06c6ec13ffc1350c9d645ab276d687ce25d42aa11cbe283f141e3cf2220d9cbfd24e8147d4ae86fe81713e3354440f871531465537342a7541724adc6d0d1910e2b44224ba3fafd30b3640b207b22f6088263a02be060faebd3a9dc7769b8b01fb2f02b5a27dd1342aa878233830f06565bbd7737bb2dcebf832b1e2b746ec4f7337d") (async) syz_clone3(&(0x7f0000000640)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/84, 0x54, &(0x7f0000000d80)=""/4096, &(0x7f0000000400)=[r3, r4], 0x2}, 0x58) (async) keyctl$update(0x2, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (async) 1.061299734s ago: executing program 1 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f00000000c0)={0x20fffffe}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000080000000900000001000000fdd2985c9e32d96ae69887cd0bc78c14bc784eed43f86f9a3ff2cedd248f16672dbca650213da94b01de080d38ee0a8edc2692bd4aef35592eb5cd33007f4351b815ac89d0e639993916191273495fdd8b290a2eacb23db8a53fe1cc3250156e6d4e2eb5b543fab68b0f7ca09ff08b06", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) rename(0x0, &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18410000000000ef070004850000002a00000095000400"/41], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES16=r5], 0x58}}, 0x24000001) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x28, 0x0, 0x8, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x100405, 0x0, 0x0, 0x3, 0xf94, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x90}}, 0x4048084) 1.016754484s ago: executing program 3 (id=1586): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44000000030101010000000000000000020000001400198008000100080400000800020014080000100001800c0002"], 0x44}}, 0x0) 943.636423ms ago: executing program 3 (id=1587): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="ff72de7241137c000000a480f5dfb39512262c5e9d7459faddc7da69f3c2f1c8ffd8f04fb8d22e58a27b0597f38e76a3e598b2f0cb011b83b3e15bf20d7ef73fb9482c863cc2a010a4f199b599eec6657db6eed086d26c786fb31872218ef98307c64bd7719c5ce68aa199e559fc7eead9c2311b048f5e65405891d00bceac1effdbc4225d240f8fc90c2068812024b8431c68475cb1b4369b94"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_free\x00', r4}, 0x18) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13) kexec_load(0xff0f, 0x1, &(0x7f0000000900)=[{0x0, 0x2, 0x7ffe0000, 0x3e0000}], 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) 805.849453ms ago: executing program 3 (id=1589): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) listen(r0, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc0e4ddb06f9ec52a5ccf27680d696", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="f1210e92e468f2fb04", 0x9}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000bc0)=[{0x0}, {0x0, 0x11000}, {&(0x7f0000000ac0)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x4, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000002c0)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@grpquota}, {@noload}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0x511, &(0x7f0000000540)="$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") 712.182433ms ago: executing program 0 (id=1591): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 625.969942ms ago: executing program 4 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0xfff0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 617.062612ms ago: executing program 0 (id=1593): syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=']) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000000240)="94", 0x1) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r4, r8, 0x8f5, 0x0) write(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xc8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x40, 0xd, 0x0, 0xfffffffffffffffe, 0x4080048, r11}) 615.589952ms ago: executing program 3 (id=1594): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@errors_continue}, {@noload}, {@dioread_lock}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007af}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bsdgroups}, {@nobh}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async, rerun: 32) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) (async) memfd_create(&(0x7f0000000080)='delalloc', 0x3) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c2683a4b6fc89398f2b9200f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f852b40e54191cbd2602084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) ioperm(0x0, 0x8, 0x400) rt_sigtimedwait(&(0x7f0000000000)={[0x2]}, 0x0, &(0x7f0000000080), 0x8) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map=r3, r2, 0x4, 0x0, 0x0, @void, @value=r1}, 0x20) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x4) (async) sendfile(r5, r4, 0x0, 0xfffe83) 514.011862ms ago: executing program 4 (id=1595): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 510.207332ms ago: executing program 2 (id=1596): r0 = io_uring_setup(0x79bf, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x4, 0x32f}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='devfreq_monitor\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2b5, &(0x7f0000000700)="$eJzs3N9Lk20cx/HP49TNic4HHh4oqC7spE6Grj+gRihEo8KcVAfBbd6rsdtN7nsYi8idRKf9HdJhZ0H1D3gSnXTemQRBJx5EC3dvurkZcz/c0vcL5P5u3+vjdflj8p2wbd97vZpJedGUlddQyGhIKmpHmtqtKv6pXIfK9ahqFXV5/MeXc3fvP7gZTyTmFoyZjy9eiRljJi+8f/r8zfTH/PjS28l3QW1NPdz+Hvu69f/Wme1fi0/Snkl7JpvLG8ss53J5a9mxzUray0SNuePYlmebdNaz3bp+ysmtrRWMlV2ZCK+5tucZK1swGbtg8jmTdwvGemylsyYajZqJsE634RbWJDcXFqz4oe1SoKsnQs+NNbvTdePF5s3k5jGcCQAADJjd+X9ah83//qx/+PyfWPKvXZ7/pabzf3UaZf5vX7HuVsP8z8B/Arlu3ApXHr91Vm/xIAEAAAAAAAAAAAAAAAAAAAAA4C+wUypFSqVSpHqtfgQlhSRVb/f7nOiNNn/+V/t0XHRZzQv3QpLzaj25nvSvfj+eUlqObM0oop/l34cKv56/kZibMWVT+uBsVPIb68mAgtX8rpHKhg358//O+nlTnx9RuHb/mCL6r/n+sab5UV26WJOPKqJPj5STo5XyMfbzL2aNuX47cSA/Vl4HAAAAAMBJEDV7Gp6/l/vlBSE19v38Ef4/cOD59bDOtvIWlQAAAAAAoGNe4VnGchzbbaMISuogPqDFiKSOPk+gs3iPimuSBuAYx1WEJPn3mHbi3/biLaVKLawZltT3b8sRin7/ZQIAAADQbftD/xFCn1/28EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJw+rb4fWHV9Q6va+EO8ZrvAsX+BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAD5HQAA//+tnRln") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000001c0)='kfree\x00'}, 0x10) poll(&(0x7f0000000040)=[{r0, 0x1020}], 0x1, 0x4a) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1000004, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ebaa23cc45d85cf6208ac43ce60e92f1e5d859899c22aa770fb976c50b02587d9871a4e063a8617fcebfa3bf5ddafbd34be9f2418d6cf7ae792ca42b4fe7d378b162178d255c2b9fdd2b3dde24"], 0x3, 0x7a3, &(0x7f0000000a80)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 509.086412ms ago: executing program 3 (id=1597): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 501.539682ms ago: executing program 4 (id=1598): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 472.992702ms ago: executing program 4 (id=1599): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000250b896de70b2e8f14432e020db32607f22bd461da4ca0259c5ed7a064439958ac9e08d2af0e5d145fdca6a7e24823c65cf1352bc906b0eb54bc055eeba7d29cc926f345e84780b2be8d45678a4603c28573a5293bdfeeab009b84ea6cb4fc29356d4458d7775d194dabd5", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x71fe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xd8, 0x0, 0x10001, 0x7, 0x9f14, 0xfff, "c14c22a9929634cf087dc21f590e416bc6cbebf666645cdbe9765be95df33277bc7689352c52a87af81a817b4dd9ed6b454ea9813a09c8ae82502cb6e7e5f005540a586808736628a6bd08dc9dc116724baa046517b67c62657f101c25fe9c2e45aa3fd0eabf9e1a8e22365edd3eaedf54e66fe5c2ee6def970a02af72593da4edbb0751a33cd94a384bb7cb0e165995429932927b0597de13691521ecb53a40710753610c54a888b7e4fc5a3318db62e198c9f9572b6ddd9746886f099d38c71111365cfc931ef7748d42e0a6c0f28ac88a741781f7add4"}}, 0x1f0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x45, 0x62282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xb, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x47, @vifc_lcl_addr=@local, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000600)=""/133, 0x0, 0x85, 0x0, 0x10001, 0x0, @void, @value}, 0x28) 391.433952ms ago: executing program 3 (id=1600): prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nodots}, {@fat=@errors_remount}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@errors_continue}]}, 0x1, 0x2f8, &(0x7f0000000680)="$eJzs3TFra2UYB/C38Ta9VO69mQRdfNFFl0OtX8AgLRQDSm1EHYRTeqohMSk5AZPi0N3F2dGxOLoJ4hfoB3B36yKdCoJHmsQ2rS1qb9O09PeD8D7Jn4TnJZzDsxzew4+//bK5nSfbaS+U3omhFEIoHYdQGVYjcxPrXCiHSXvhzV+//+6bDz/59L1qrbayHuNqdePt5Rjj01d//urrH177pffiRz8+/WkhHFQ+O/x9+beDlw5ePvxz44tGHht5bHd6MY3zodNLN1tZ3GrkzSTGD1pZmmex0c6z7km+2Rnn263Ozs4gpu2tJ4s73SzPY9oexGY2iL1O7HUHMf08bbRjkiTxyWLg39T319fT6qy74Ab8URTFFVG3W03nwuOw8I+kvj/1vgCAO+f/zP+la8z/lfAf5v/T+d78f7vM/w/ByfxfHl+/55n/AQAAAAAAAAAAAADgPjguimdFUTz7e734mnV/TJf//2GbeHDvcQhHe/16vz5aR/nqWm1lKQ5Vzr511O/XXzjN3xrl8Xw+HxbH+fKleTm88fooP8nefb92IV8IW9PfPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMJfHUpef7J8nFfH6cj96trtVWli493/9ReOXRrW4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK4tH+w201Yr616/CKEYOvuk/Hw/eMPF3t1oQ3FlUQ4h3IE2FJPFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPvODv2edScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMUj7YbaatVtadYjHrPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwnfwUAAP//6KbT4w==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 278.181801ms ago: executing program 2 (id=1601): r0 = socket$tipc(0x1e, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000400)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x4004841) 220.945281ms ago: executing program 2 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000001500000008000300", @ANYRES32=r4, @ANYBLOB="0c002b8008000100e3"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f00000000c0)=""/44, 0x2c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10) close_range(r1, r6, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x8e, 0x1, 0x3, 0x46, @loopback, @remote, 0x1, 0x40, 0xd, 0x8}}) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast2, @loopback}, &(0x7f0000000580)=0xc) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r15, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@RTM_NEWMDB={0x98, 0x54, 0x10, 0x480, 0x25dfdbfd, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x1, 0x0, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x2, 0x2, {@in6_addr=@private1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x1, 0x1, 0x3, {@ip4=@multicast1, 0x800}}}]}, 0x98}}, 0x0) 98.18767ms ago: executing program 4 (id=1603): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 1.93229ms ago: executing program 2 (id=1604): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) listen(r0, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc0e4ddb06f9ec52a5ccf27680d696", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="f1210e92e468f2fb04", 0x9}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000bc0)=[{0x0}, {0x0, 0x11000}, {&(0x7f0000000ac0)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x4, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000002c0)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@grpquota}, {@noload}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==") 0s ago: executing program 4 (id=1605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="8f42cf41614e4513e7fc4d9311abae2c636e1ca2c8b5073e964e737aa00baa68d8294f23953c427735eb3d14055c890c3f14f9b24f80270dc51d9b945bf165903c398cd6b19b599176ffdebe5d1bb0b329daf7120f80b30bf0a619956e0c556588beac62c244ca96c8a2615bb4b7245a4566ace0b07672423ac60d1ce6722f5aedb3e790cf8fdb31acfd4d5130ea5a85251d8793e3e385c19317a54c24c4c2cd1b19bc656afc3b3fd58b2a1ddd957061261f783c54de51194ccdd794f52d4245f91e7abb38dc6125d07f822cbffcce961efb28ebc5ab837704d342b4df4b71fee22ed8fe22be2d3d49a1fd962188b508ede5a6acf6e270a5c87ddb35ab4d", @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x3000, 0x2, 0x2, 0x8, 0x4, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='kmem_cache_free\x00', r6}, 0x18) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) uname(0xfffffffffffffffc) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.258821][ T6660] RSP: 002b:00007f2815f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.267257][ T6660] RAX: ffffffffffffffda RBX: 00007f2817aa5fa0 RCX: 00007f28178b5d29 [ 97.275357][ T6660] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 97.283335][ T6660] RBP: 00007f2815f27090 R08: 0000000000000000 R09: 0000000000000000 [ 97.291401][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.299440][ T6660] R13: 0000000000000000 R14: 00007f2817aa5fa0 R15: 00007ffef2ce8b18 [ 97.307441][ T6660] [ 97.517425][ T6694] lo speed is unknown, defaulting to 1000 [ 97.637729][ T6366] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.651372][ T6366] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.663445][ T6366] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675622][ T6366] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850862][ T6729] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 98.060966][ T6755] netlink: 'syz.1.1146': attribute type 4 has an invalid length. [ 98.091960][ T6759] FAULT_INJECTION: forcing a failure. [ 98.091960][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 98.104902][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.1.1148 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 98.117110][ T6759] Tainted: [W]=WARN [ 98.120911][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.130975][ T6759] Call Trace: [ 98.134267][ T6759] [ 98.137224][ T6759] dump_stack_lvl+0xf2/0x150 [ 98.141841][ T6759] dump_stack+0x15/0x1a [ 98.146038][ T6759] should_fail_ex+0x223/0x230 [ 98.150744][ T6759] ? allocate_file_region_entries+0xe1/0x330 [ 98.156857][ T6759] should_failslab+0x8f/0xb0 [ 98.161670][ T6759] __kmalloc_cache_noprof+0x4e/0x320 [ 98.166971][ T6759] allocate_file_region_entries+0xe1/0x330 [ 98.172816][ T6759] region_chg+0x238/0x2d0 [ 98.177160][ T6759] ? __rcu_read_unlock+0x4e/0x70 [ 98.182111][ T6759] alloc_hugetlb_folio+0x2d4/0x1750 [ 98.187375][ T6759] ? folio_unlock+0xdc/0x130 [ 98.191999][ T6759] hugetlbfs_fallocate+0x505/0x940 [ 98.197293][ T6759] vfs_fallocate+0x368/0x3b0 [ 98.202037][ T6759] do_vfs_ioctl+0x1451/0x1530 [ 98.206799][ T6759] ? __fget_files+0x17c/0x1c0 [ 98.211615][ T6759] __se_sys_ioctl+0x80/0x140 [ 98.216371][ T6759] __x64_sys_ioctl+0x43/0x50 [ 98.221095][ T6759] x64_sys_call+0x1690/0x2dc0 [ 98.225867][ T6759] do_syscall_64+0xc9/0x1c0 [ 98.230484][ T6759] ? clear_bhb_loop+0x55/0xb0 [ 98.235185][ T6759] ? clear_bhb_loop+0x55/0xb0 [ 98.239929][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.245844][ T6759] RIP: 0033:0x7f3dbb515d29 [ 98.250273][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.270180][ T6759] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.278599][ T6759] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 98.286645][ T6759] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000003 [ 98.294623][ T6759] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 98.302616][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.310645][ T6759] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 98.318693][ T6759] [ 98.363561][ T6770] __nla_validate_parse: 8 callbacks suppressed [ 98.369953][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 98.384079][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 98.431007][ T6779] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 98.450144][ T6783] hugetlbfs: Bad value 'p' for mount option 'size' [ 98.450144][ T6783] [ 98.461898][ T6782] program syz.1.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.512687][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1162'. [ 98.618004][ T6797] lo speed is unknown, defaulting to 1000 [ 98.783057][ T6814] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1169'. [ 98.862307][ T6820] netlink: 'syz.4.1172': attribute type 4 has an invalid length. [ 98.944328][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'. [ 98.964709][ T6826] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 98.964709][ T6826] program syz.2.1174 not setting count and/or reply_len properly [ 99.102427][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1173'. [ 99.272751][ T6852] netlink: 'syz.4.1183': attribute type 4 has an invalid length. [ 99.678743][ T6878] batman_adv: batadv0: Interface deactivated: dummy0 [ 99.685563][ T6878] batman_adv: batadv0: Removing interface: dummy0 [ 99.708320][ T6878] bridge_slave_0: left allmulticast mode [ 99.714049][ T6878] bridge_slave_0: left promiscuous mode [ 99.719719][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.752773][ T6878] bridge_slave_1: left allmulticast mode [ 99.758503][ T6878] bridge_slave_1: left promiscuous mode [ 99.764390][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.792616][ T6878] bond0: (slave bond_slave_0): Releasing backup interface [ 99.806776][ T6878] bond0: (slave bond_slave_1): Releasing backup interface [ 99.836172][ T6878] team0: Port device team_slave_0 removed [ 99.847871][ T6878] team0: Port device team_slave_1 removed [ 99.855596][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.863159][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.884802][ T6888] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1193'. [ 99.886285][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.901557][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.948171][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 99.965145][ T6878] veth0_vlan: left allmulticast mode [ 99.972864][ T6878] team0: Port device vlan1 removed [ 100.099205][ T6902] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1198'. [ 100.214536][ T29] kauditd_printk_skb: 771 callbacks suppressed [ 100.214552][ T29] audit: type=1400 audit(1736145052.959:3590): avc: denied { read } for pid=6903 comm="syz.0.1199" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.244170][ T29] audit: type=1400 audit(1736145052.959:3591): avc: denied { open } for pid=6903 comm="syz.0.1199" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.268360][ T29] audit: type=1400 audit(1736145052.959:3592): avc: denied { ioctl } for pid=6903 comm="syz.0.1199" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.332725][ T29] audit: type=1400 audit(1736145053.069:3593): avc: denied { create } for pid=6914 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.338093][ T6919] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1204'. [ 100.355325][ T29] audit: type=1400 audit(1736145053.079:3594): avc: denied { write } for pid=6914 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.382118][ T29] audit: type=1400 audit(1736145053.079:3595): avc: denied { nlmsg_write } for pid=6914 comm="syz.3.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.414128][ T29] audit: type=1400 audit(1736145053.129:3596): avc: denied { bind } for pid=6916 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.433548][ T29] audit: type=1400 audit(1736145053.149:3597): avc: denied { map_create } for pid=6920 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.452747][ T29] audit: type=1400 audit(1736145053.149:3598): avc: denied { map_read map_write } for pid=6920 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.472614][ T29] audit: type=1400 audit(1736145053.159:3599): avc: denied { prog_load } for pid=6920 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.570908][ T6928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6928 comm=syz.0.1210 [ 100.686884][ T3375] usb 9-1: enqueue for inactive port 0 [ 100.696891][ T3375] usb 9-1: enqueue for inactive port 0 [ 100.714709][ T6945] FAULT_INJECTION: forcing a failure. [ 100.714709][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 100.727531][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.1.1216 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 100.728667][ T6947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 100.739762][ T6945] Tainted: [W]=WARN [ 100.739771][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.739784][ T6945] Call Trace: [ 100.739790][ T6945] [ 100.739799][ T6945] dump_stack_lvl+0xf2/0x150 [ 100.757394][ T6947] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 100.763770][ T6945] dump_stack+0x15/0x1a [ 100.788833][ T6945] should_fail_ex+0x223/0x230 [ 100.793617][ T6945] should_failslab+0x8f/0xb0 [ 100.798252][ T6945] kmem_cache_alloc_node_noprof+0x59/0x320 [ 100.799546][ T3375] vhci_hcd: vhci_device speed not set [ 100.804092][ T6945] ? __alloc_skb+0x10b/0x310 [ 100.814188][ T6945] __alloc_skb+0x10b/0x310 [ 100.818624][ T6945] ? audit_log_start+0x34c/0x6b0 [ 100.823638][ T6945] audit_log_start+0x368/0x6b0 [ 100.828439][ T6945] ? exc_page_fault+0x4fc/0x650 [ 100.833320][ T6945] audit_seccomp+0x4b/0x130 [ 100.837861][ T6945] __seccomp_filter+0x6fa/0x1180 [ 100.842843][ T6945] ? _copy_from_user+0x3d/0xb0 [ 100.847770][ T6945] ? __copy_siginfo_from_user+0x58/0x2b0 [ 100.853443][ T6945] ? bpf_trace_run2+0x123/0x1d0 [ 100.858340][ T6945] __secure_computing+0x9f/0x1c0 [ 100.863357][ T6945] syscall_trace_enter+0xd1/0x1f0 [ 100.868485][ T6945] ? fpregs_assert_state_consistent+0x83/0xa0 [ 100.874592][ T6945] do_syscall_64+0xaa/0x1c0 [ 100.879167][ T6945] ? clear_bhb_loop+0x55/0xb0 [ 100.883920][ T6945] ? clear_bhb_loop+0x55/0xb0 [ 100.888685][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.894650][ T6945] RIP: 0033:0x7f3dbb51473c [ 100.899092][ T6945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.918789][ T6945] RSP: 002b:00007f3db9b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.927253][ T6945] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb51473c [ 100.935305][ T6945] RDX: 000000000000000f RSI: 00007f3db9b870a0 RDI: 0000000000000006 [ 100.943336][ T6945] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 100.951320][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.959366][ T6945] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 100.967399][ T6945] [ 101.125020][ T6961] lo speed is unknown, defaulting to 1000 [ 101.155015][ T6958] IPVS: stopping master sync thread 6965 ... [ 101.164040][ T6965] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 101.186166][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.193868][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.201338][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.208809][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.216270][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.223706][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.231156][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.238615][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.246165][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.253578][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.261029][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.268487][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.276011][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.283404][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.290898][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.298324][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.305755][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.313227][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.320712][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.324069][ T6968] FAULT_INJECTION: forcing a failure. [ 101.324069][ T6968] name failslab, interval 1, probability 0, space 0, times 0 [ 101.328116][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.340720][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: +}[@ Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 101.348120][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.359689][ T6968] Tainted: [W]=WARN [ 101.359698][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.367116][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.370898][ T6968] Call Trace: [ 101.370908][ T6968] [ 101.380978][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.388380][ T6968] dump_stack_lvl+0xf2/0x150 [ 101.391684][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.394592][ T6968] dump_stack+0x15/0x1a [ 101.394632][ T6968] should_fail_ex+0x223/0x230 [ 101.402004][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.406586][ T6968] should_failslab+0x8f/0xb0 [ 101.413985][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.418097][ T6968] __kmalloc_node_noprof+0xad/0x410 [ 101.422767][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.430102][ T6968] ? __kvmalloc_node_noprof+0x72/0x170 [ 101.434747][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.442047][ T6968] ? security_sid_to_context_core+0x2b8/0x2f0 [ 101.447290][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.454597][ T6968] __kvmalloc_node_noprof+0x72/0x170 [ 101.460065][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.467404][ T6968] simple_xattr_alloc+0x43/0x90 [ 101.473485][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.480820][ T6968] shmem_initxattrs+0x18a/0x2f0 [ 101.486128][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.493454][ T6968] ? __pfx_shmem_initxattrs+0x10/0x10 [ 101.498461][ T3374] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 101.505644][ T6968] security_inode_init_security+0x257/0x330 [ 101.537030][ T6968] shmem_mknod+0xa8/0x180 [ 101.541396][ T6968] shmem_create+0x34/0x40 [ 101.545756][ T6968] vfs_create+0x19c/0x2b0 [ 101.550144][ T6968] do_mknodat+0x299/0x420 [ 101.554505][ T6968] __x64_sys_mknod+0x51/0x60 [ 101.555141][ T3374] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 101.559231][ T6968] x64_sys_call+0x16be/0x2dc0 [ 101.573603][ T6968] do_syscall_64+0xc9/0x1c0 [ 101.578332][ T6968] ? clear_bhb_loop+0x55/0xb0 [ 101.583062][ T6968] ? clear_bhb_loop+0x55/0xb0 [ 101.587749][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.593829][ T6968] RIP: 0033:0x7f3dbb515d29 [ 101.598306][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.617937][ T6968] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 101.626379][ T6968] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 101.634355][ T6968] RDX: 0000000000000702 RSI: 0000000000000fff RDI: 0000000020000140 [ 101.642332][ T6968] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 101.650311][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.658297][ T6968] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 101.666370][ T6968] [ 101.742745][ T6979] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.805150][ T6979] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.895769][ T6979] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.917316][ T6991] capability: warning: `syz.3.1229' uses deprecated v2 capabilities in a way that may be insecure [ 101.945706][ T6979] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.122752][ T7000] FAULT_INJECTION: forcing a failure. [ 102.122752][ T7000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.135903][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.1.1233 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 102.148167][ T7000] Tainted: [W]=WARN [ 102.152036][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.162139][ T7000] Call Trace: [ 102.165442][ T7000] [ 102.168391][ T7000] dump_stack_lvl+0xf2/0x150 [ 102.173138][ T7000] dump_stack+0x15/0x1a [ 102.177332][ T7000] should_fail_ex+0x223/0x230 [ 102.182068][ T7000] should_fail+0xb/0x10 [ 102.186351][ T7000] should_fail_usercopy+0x1a/0x20 [ 102.191398][ T7000] _copy_from_user+0x1e/0xb0 [ 102.196080][ T7000] __se_sys_mount+0x119/0x2d0 [ 102.200798][ T7000] ? __bpf_trace_sys_enter+0x10/0x30 [ 102.206154][ T7000] __x64_sys_mount+0x67/0x80 [ 102.210807][ T7000] x64_sys_call+0x2c84/0x2dc0 [ 102.215593][ T7000] do_syscall_64+0xc9/0x1c0 [ 102.220121][ T7000] ? clear_bhb_loop+0x55/0xb0 [ 102.224907][ T7000] ? clear_bhb_loop+0x55/0xb0 [ 102.230088][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.236038][ T7000] RIP: 0033:0x7f3dbb515d29 [ 102.240463][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.260215][ T7000] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.268720][ T7000] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 102.276706][ T7000] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 102.284702][ T7000] RBP: 00007f3db9b87090 R08: 0000000020000a40 R09: 0000000000000000 [ 102.292879][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.300874][ T7000] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 102.308883][ T7000] [ 102.457641][ T7012] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 102.468114][ T7012] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 102.629396][ T7016] cgroup: fork rejected by pids controller in /syz0 [ 102.846285][ T6979] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.858454][ T6979] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.871560][ T6979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.885033][ T6979] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.918009][ T7123] FAULT_INJECTION: forcing a failure. [ 102.918009][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.931205][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.2.1243 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 102.943526][ T7123] Tainted: [W]=WARN [ 102.947384][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.957469][ T7123] Call Trace: [ 102.960841][ T7123] [ 102.963806][ T7123] dump_stack_lvl+0xf2/0x150 [ 102.968495][ T7123] dump_stack+0x15/0x1a [ 102.972735][ T7123] should_fail_ex+0x223/0x230 [ 102.977495][ T7123] should_fail+0xb/0x10 [ 102.981750][ T7123] should_fail_usercopy+0x1a/0x20 [ 102.986810][ T7123] _copy_from_user+0x1e/0xb0 [ 102.991455][ T7123] get_timespec64+0x49/0x140 [ 102.996173][ T7123] __se_sys_io_pgetevents+0x77/0x2e0 [ 103.001568][ T7123] __x64_sys_io_pgetevents+0x78/0x90 [ 103.006896][ T7123] x64_sys_call+0x2d06/0x2dc0 [ 103.011600][ T7123] do_syscall_64+0xc9/0x1c0 [ 103.016259][ T7123] ? clear_bhb_loop+0x55/0xb0 [ 103.021028][ T7123] ? clear_bhb_loop+0x55/0xb0 [ 103.025740][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.031678][ T7123] RIP: 0033:0x7f160f7e5d29 [ 103.036203][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.055860][ T7123] RSP: 002b:00007f160de57038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 103.064280][ T7123] RAX: ffffffffffffffda RBX: 00007f160f9d5fa0 RCX: 00007f160f7e5d29 [ 103.072265][ T7123] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 00007f1610515000 [ 103.080249][ T7123] RBP: 00007f160de57090 R08: 00000000200004c0 R09: 0000000000000000 [ 103.088274][ T7123] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 103.096285][ T7123] R13: 0000000000000000 R14: 00007f160f9d5fa0 R15: 00007fff033596f8 [ 103.104283][ T7123] [ 103.462461][ T7141] lo speed is unknown, defaulting to 1000 [ 103.469552][ T7149] __nla_validate_parse: 5 callbacks suppressed [ 103.469587][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 103.565739][ T7141] chnl_net:caif_netlink_parms(): no params data found [ 103.606222][ T7175] FAULT_INJECTION: forcing a failure. [ 103.606222][ T7175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.619381][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.2.1260 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 103.631762][ T7175] Tainted: [W]=WARN [ 103.635680][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.645756][ T7175] Call Trace: [ 103.649490][ T7175] [ 103.652494][ T7175] dump_stack_lvl+0xf2/0x150 [ 103.657147][ T7175] dump_stack+0x15/0x1a [ 103.661369][ T7175] should_fail_ex+0x223/0x230 [ 103.666077][ T7175] should_fail+0xb/0x10 [ 103.670244][ T7175] should_fail_usercopy+0x1a/0x20 [ 103.675369][ T7175] _copy_from_iter+0xd5/0xd00 [ 103.680135][ T7175] ? kmalloc_reserve+0x16e/0x190 [ 103.687525][ T7175] ? __build_skb_around+0x196/0x1f0 [ 103.692744][ T7175] ? __alloc_skb+0x21f/0x310 [ 103.697348][ T7175] ? __virt_addr_valid+0x1ed/0x250 [ 103.702488][ T7175] ? __check_object_size+0x364/0x520 [ 103.707794][ T7175] netlink_sendmsg+0x460/0x6e0 [ 103.712614][ T7175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.718004][ T7175] __sock_sendmsg+0x140/0x180 [ 103.722730][ T7175] ____sys_sendmsg+0x312/0x410 [ 103.727623][ T7175] __sys_sendmsg+0x19d/0x230 [ 103.732339][ T7175] __x64_sys_sendmsg+0x46/0x50 [ 103.737229][ T7175] x64_sys_call+0x2734/0x2dc0 [ 103.742154][ T7175] do_syscall_64+0xc9/0x1c0 [ 103.746665][ T7175] ? clear_bhb_loop+0x55/0xb0 [ 103.751355][ T7175] ? clear_bhb_loop+0x55/0xb0 [ 103.756041][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.761966][ T7175] RIP: 0033:0x7f160f7e5d29 [ 103.766385][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.786416][ T7175] RSP: 002b:00007f160de57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.794920][ T7175] RAX: ffffffffffffffda RBX: 00007f160f9d5fa0 RCX: 00007f160f7e5d29 [ 103.802900][ T7175] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 103.810893][ T7175] RBP: 00007f160de57090 R08: 0000000000000000 R09: 0000000000000000 [ 103.818878][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.826902][ T7175] R13: 0000000000000000 R14: 00007f160f9d5fa0 R15: 00007fff033596f8 [ 103.834892][ T7175] [ 103.840649][ T7176] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 103.860606][ T7176] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 103.892560][ T7178] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1261'. [ 103.951102][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.958356][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.989820][ T7141] bridge_slave_0: entered allmulticast mode [ 104.008959][ T7141] bridge_slave_0: entered promiscuous mode [ 104.024837][ T7185] lo speed is unknown, defaulting to 1000 [ 104.031110][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.038681][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.048292][ T7141] bridge_slave_1: entered allmulticast mode [ 104.054996][ T7141] bridge_slave_1: entered promiscuous mode [ 104.161907][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.173364][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.213127][ T7141] team0: Port device team_slave_0 added [ 104.225496][ T7141] team0: Port device team_slave_1 added [ 104.237174][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 104.243769][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.251300][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.268342][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 104.274929][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.282632][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.289251][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.289409][ T7194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.296303][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.330374][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.346422][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.353422][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.357810][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 104.379531][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.385817][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.385904][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.439176][ T7207] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 104.445971][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.446569][ T7212] loop5: detected capacity change from 0 to 7 [ 104.453620][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 104.461034][ T7212] Buffer I/O error on dev loop5, logical block 0, async page read [ 104.473136][ T7212] Buffer I/O error on dev loop5, logical block 0, async page read [ 104.481142][ T7212] loop5: unable to read partition table [ 104.487291][ T3378] vhci_hcd: vhci_device speed not set [ 104.492756][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16) [ 104.499543][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.507200][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.507415][ T7212] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 104.507415][ T7212] ) failed (rc=-5) [ 104.527715][ T7217] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1269'. [ 104.534627][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(18) [ 104.543248][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.550959][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.564566][ T7194] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 104.565889][ T7141] hsr_slave_0: entered promiscuous mode [ 104.571198][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.584310][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 104.585486][ T7141] hsr_slave_1: entered promiscuous mode [ 104.595547][ T3378] usb 5-1: new full-speed USB device number 5 using vhci_hcd [ 104.597337][ T7220] vhci_hcd: connection closed [ 104.603260][ T7218] vhci_hcd: connection closed [ 104.603614][ T28] vhci_hcd: stop threads [ 104.609451][ T7214] vhci_hcd: connection closed [ 104.612741][ T28] vhci_hcd: release socket [ 104.626527][ T28] vhci_hcd: disconnect device [ 104.631343][ T7208] vhci_hcd: connection closed [ 104.631362][ T7203] vhci_hcd: connection closed [ 104.633460][ T7200] vhci_hcd: connection closed [ 104.636418][ T7195] vhci_hcd: connection reset by peer [ 104.641844][ T7141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.647943][ T28] vhci_hcd: stop threads [ 104.650783][ T7141] Cannot create hsr debugfs directory [ 104.655127][ T7217] batadv1: entered promiscuous mode [ 104.658412][ T28] vhci_hcd: release socket [ 104.662564][ T7217] batadv1: entered allmulticast mode [ 104.667989][ T28] vhci_hcd: disconnect device [ 104.668800][ T28] vhci_hcd: stop threads [ 104.692894][ T28] vhci_hcd: release socket [ 104.697382][ T28] vhci_hcd: disconnect device [ 104.702483][ T28] vhci_hcd: stop threads [ 104.706831][ T28] vhci_hcd: release socket [ 104.711255][ T28] vhci_hcd: disconnect device [ 104.716381][ T28] vhci_hcd: stop threads [ 104.720736][ T28] vhci_hcd: release socket [ 104.725640][ T28] vhci_hcd: disconnect device [ 104.730649][ T28] vhci_hcd: stop threads [ 104.734968][ T28] vhci_hcd: release socket [ 104.739448][ T28] vhci_hcd: disconnect device [ 104.744903][ T28] vhci_hcd: stop threads [ 104.747481][ T7213] lo speed is unknown, defaulting to 1000 [ 104.749166][ T28] vhci_hcd: release socket [ 104.749182][ T28] vhci_hcd: disconnect device [ 104.854068][ T7234] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 104.863203][ T7234] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 104.896792][ T7141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.016940][ T7141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.055980][ T7141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.117753][ T7141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.146965][ T7274] dccp_xmit_packet: Payload too large (65475) for featneg. [ 105.224385][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 105.224403][ T29] audit: type=1400 audit(1736145057.949:3949): avc: denied { execmem } for pid=7275 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.251971][ T7281] lo speed is unknown, defaulting to 1000 [ 105.268532][ T7141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.275544][ T29] audit: type=1400 audit(1736145058.009:3950): avc: denied { create } for pid=7141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.296249][ T29] audit: type=1400 audit(1736145058.009:3951): avc: denied { write } for pid=7141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.304995][ T7277] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 105.316878][ T29] audit: type=1400 audit(1736145058.009:3952): avc: denied { read } for pid=7141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.346266][ T29] audit: type=1400 audit(1736145058.039:3953): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 105.347925][ T7141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.368442][ T29] audit: type=1400 audit(1736145058.039:3954): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.377335][ T7288] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 105.396849][ T29] audit: type=1400 audit(1736145058.039:3955): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.427257][ T29] audit: type=1400 audit(1736145058.039:3956): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.428630][ T7291] FAULT_INJECTION: forcing a failure. [ 105.428630][ T7291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.450415][ T29] audit: type=1400 audit(1736145058.069:3957): avc: denied { read write } for pid=7285 comm="syz.4.1285" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.463462][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.4.1286 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 105.487172][ T29] audit: type=1400 audit(1736145058.069:3958): avc: denied { open } for pid=7285 comm="syz.4.1285" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.499125][ T7291] Tainted: [W]=WARN [ 105.499135][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.499151][ T7291] Call Trace: [ 105.540611][ T7291] [ 105.543558][ T7291] dump_stack_lvl+0xf2/0x150 [ 105.548191][ T7291] dump_stack+0x15/0x1a [ 105.552466][ T7291] should_fail_ex+0x223/0x230 [ 105.557228][ T7291] should_fail+0xb/0x10 [ 105.561458][ T7291] should_fail_usercopy+0x1a/0x20 [ 105.566554][ T7291] _copy_from_iter+0xd5/0xd00 [ 105.571316][ T7291] ? kmalloc_reserve+0x16e/0x190 [ 105.576276][ T7291] ? __build_skb_around+0x196/0x1f0 [ 105.581565][ T7291] ? __alloc_skb+0x21f/0x310 [ 105.586244][ T7291] ? __virt_addr_valid+0x1ed/0x250 [ 105.591391][ T7291] ? __check_object_size+0x364/0x520 [ 105.596763][ T7291] netlink_sendmsg+0x460/0x6e0 [ 105.601566][ T7291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.606957][ T7291] __sock_sendmsg+0x140/0x180 [ 105.611747][ T7291] ____sys_sendmsg+0x312/0x410 [ 105.616571][ T7291] __sys_sendmsg+0x19d/0x230 [ 105.621206][ T7291] __x64_sys_sendmsg+0x46/0x50 [ 105.626015][ T7291] x64_sys_call+0x2734/0x2dc0 [ 105.630742][ T7291] do_syscall_64+0xc9/0x1c0 [ 105.635281][ T7291] ? clear_bhb_loop+0x55/0xb0 [ 105.639982][ T7291] ? clear_bhb_loop+0x55/0xb0 [ 105.644835][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.650762][ T7291] RIP: 0033:0x7f28178b5d29 [ 105.655190][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.674944][ T7291] RSP: 002b:00007f2815f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.683374][ T7291] RAX: ffffffffffffffda RBX: 00007f2817aa5fa0 RCX: 00007f28178b5d29 [ 105.691367][ T7291] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 105.699366][ T7291] RBP: 00007f2815f27090 R08: 0000000000000000 R09: 0000000000000000 [ 105.707367][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.715385][ T7291] R13: 0000000000000000 R14: 00007f2817aa5fa0 R15: 00007ffef2ce8b18 [ 105.723425][ T7291] [ 105.770379][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 105.779370][ T7141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.794446][ T7141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.886283][ T7141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.898094][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.908610][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.915731][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.939299][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.946475][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.982824][ T7141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.993421][ T7141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.014669][ T7302] lo speed is unknown, defaulting to 1000 [ 106.118330][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1291'. [ 106.148106][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.224540][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 106.231373][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.238908][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.254125][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 106.260767][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.262665][ T7334] netlink: 'syz.4.1295': attribute type 4 has an invalid length. [ 106.268523][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.280519][ T7334] netlink: 'syz.4.1295': attribute type 4 has an invalid length. [ 106.291872][ T7141] veth0_vlan: entered promiscuous mode [ 106.301584][ T7141] veth1_vlan: entered promiscuous mode [ 106.315320][ T7327] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.329439][ T7141] veth0_macvtap: entered promiscuous mode [ 106.340601][ T7141] veth1_macvtap: entered promiscuous mode [ 106.348156][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 106.354791][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.362444][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.385666][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.396277][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.407424][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 106.414092][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.415320][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.421827][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.433180][ T7347] netlink: 'syz.4.1298': attribute type 4 has an invalid length. [ 106.437156][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.453103][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.464633][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.478780][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16) [ 106.481081][ T7347] netlink: 'syz.4.1298': attribute type 4 has an invalid length. [ 106.485432][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.485632][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.502388][ T7141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.512222][ T7351] syz.1.1299[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.515407][ T7141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.515448][ T7141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.515487][ T7141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.528050][ T7354] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(18) [ 106.546290][ T7351] syz.1.1299[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.553104][ T7354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.553264][ T7354] vhci_hcd vhci_hcd.0: Device attached [ 106.564945][ T7351] syz.1.1299[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.577428][ T7327] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 106.602409][ T7327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.610264][ T7327] vhci_hcd vhci_hcd.0: Device attached [ 106.633012][ T7359] vhci_hcd: connection closed [ 106.633293][ T3317] vhci_hcd: stop threads [ 106.642372][ T3317] vhci_hcd: release socket [ 106.642389][ T3317] vhci_hcd: disconnect device [ 106.642887][ T7355] vhci_hcd: connection closed [ 106.643077][ T3317] vhci_hcd: stop threads [ 106.643086][ T3317] vhci_hcd: release socket [ 106.643099][ T3317] vhci_hcd: disconnect device [ 106.643304][ T7352] vhci_hcd: connection closed [ 106.648763][ T3317] vhci_hcd: stop threads [ 106.648775][ T3317] vhci_hcd: release socket [ 106.648788][ T3317] vhci_hcd: disconnect device [ 106.648968][ T7345] vhci_hcd: connection closed [ 106.649004][ T7328] vhci_hcd: connection closed [ 106.649124][ T7340] vhci_hcd: connection closed [ 106.649209][ T7332] vhci_hcd: connection closed [ 106.649305][ T3317] vhci_hcd: stop threads [ 106.649337][ T3317] vhci_hcd: release socket [ 106.649350][ T3317] vhci_hcd: disconnect device [ 106.649448][ T3317] vhci_hcd: stop threads [ 106.649454][ T3317] vhci_hcd: release socket [ 106.649464][ T3317] vhci_hcd: disconnect device [ 106.649692][ T3317] vhci_hcd: stop threads [ 106.649699][ T3317] vhci_hcd: release socket [ 106.649709][ T3317] vhci_hcd: disconnect device [ 106.649886][ T3317] vhci_hcd: stop threads [ 106.649892][ T3317] vhci_hcd: release socket [ 106.649901][ T3317] vhci_hcd: disconnect device [ 106.675660][ T7368] serio: Serial port ptm0 [ 106.746021][ T7371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 106.755479][ T7371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 106.839711][ T7373] lo speed is unknown, defaulting to 1000 [ 106.861348][ T7377] FAULT_INJECTION: forcing a failure. [ 106.861348][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 106.874108][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.1.1303 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 106.886491][ T7377] Tainted: [W]=WARN [ 106.890341][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.900418][ T7377] Call Trace: [ 106.903702][ T7377] [ 106.906660][ T7377] dump_stack_lvl+0xf2/0x150 [ 106.911354][ T7377] dump_stack+0x15/0x1a [ 106.915559][ T7377] should_fail_ex+0x223/0x230 [ 106.920264][ T7377] ? nd_alloc_stack+0x4e/0x90 [ 106.924967][ T7377] should_failslab+0x8f/0xb0 [ 106.929632][ T7377] __kmalloc_cache_noprof+0x4e/0x320 [ 106.934957][ T7377] nd_alloc_stack+0x4e/0x90 [ 106.939514][ T7377] pick_link+0x745/0x7e0 [ 106.943819][ T7377] ? selinux_inode_permission+0x341/0x410 [ 106.949615][ T7377] step_into+0x756/0x840 [ 106.953898][ T7377] link_path_walk+0x54c/0x820 [ 106.958632][ T7377] path_openat+0x1af/0x1fa0 [ 106.963169][ T7377] do_filp_open+0x107/0x230 [ 106.967992][ T7377] ? __pfx_shmem_put_link+0x10/0x10 [ 106.973249][ T7377] ? __pfx_shmem_put_link+0x10/0x10 [ 106.978508][ T7377] do_open_execat+0xd0/0x280 [ 106.983155][ T7377] alloc_bprm+0x28/0x5d0 [ 106.987455][ T7377] do_execveat_common+0x134/0x800 [ 106.992648][ T7377] __x64_sys_execve+0x5a/0x70 [ 106.997341][ T7377] x64_sys_call+0x1333/0x2dc0 [ 107.002219][ T7377] do_syscall_64+0xc9/0x1c0 [ 107.006771][ T7377] ? clear_bhb_loop+0x55/0xb0 [ 107.011497][ T7377] ? clear_bhb_loop+0x55/0xb0 [ 107.016249][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.022181][ T7377] RIP: 0033:0x7f3dbb515d29 [ 107.026601][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.046304][ T7377] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 107.054754][ T7377] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 107.062774][ T7377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 107.070845][ T7377] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 107.078830][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.086942][ T7377] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 107.094970][ T7377] [ 107.131280][ T7389] FAULT_INJECTION: forcing a failure. [ 107.131280][ T7389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.144447][ T7389] CPU: 1 UID: 0 PID: 7389 Comm: syz.0.1307 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 107.156658][ T7389] Tainted: [W]=WARN [ 107.160517][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.170615][ T7389] Call Trace: [ 107.173934][ T7389] [ 107.176878][ T7389] dump_stack_lvl+0xf2/0x150 [ 107.181632][ T7389] dump_stack+0x15/0x1a [ 107.185813][ T7389] should_fail_ex+0x223/0x230 [ 107.190522][ T7389] should_fail+0xb/0x10 [ 107.194693][ T7389] should_fail_usercopy+0x1a/0x20 [ 107.199820][ T7389] _copy_from_user+0x1e/0xb0 [ 107.204535][ T7389] copy_msghdr_from_user+0x54/0x2a0 [ 107.209831][ T7389] __sys_sendmmsg+0x1e8/0x4b0 [ 107.214622][ T7389] __x64_sys_sendmmsg+0x57/0x70 [ 107.219495][ T7389] x64_sys_call+0x29aa/0x2dc0 [ 107.224248][ T7389] do_syscall_64+0xc9/0x1c0 [ 107.228760][ T7389] ? clear_bhb_loop+0x55/0xb0 [ 107.233448][ T7389] ? clear_bhb_loop+0x55/0xb0 [ 107.238137][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.244057][ T7389] RIP: 0033:0x7f30bc5a5d29 [ 107.248479][ T7389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.268203][ T7389] RSP: 002b:00007f30bac17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.276732][ T7389] RAX: ffffffffffffffda RBX: 00007f30bc795fa0 RCX: 00007f30bc5a5d29 [ 107.284750][ T7389] RDX: 00000000040001b6 RSI: 0000000020001540 RDI: 0000000000000004 [ 107.292758][ T7389] RBP: 00007f30bac17090 R08: 0000000000000000 R09: 0000000000000000 [ 107.300761][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.308790][ T7389] R13: 0000000000000000 R14: 00007f30bc795fa0 R15: 00007ffdd473c808 [ 107.316778][ T7389] [ 107.390213][ T7396] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 107.402514][ T7396] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 107.432373][ T7400] lo speed is unknown, defaulting to 1000 [ 107.572352][ T7410] bond1: entered promiscuous mode [ 107.577649][ T7410] bond1: entered allmulticast mode [ 107.583588][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.590579][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 107.599953][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 107.603118][ T7414] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 107.603118][ T7414] program syz.4.1318 not setting count and/or reply_len properly [ 107.641796][ T7410] lo speed is unknown, defaulting to 1000 [ 107.664350][ T7424] $H: renamed from bond0 (while UP) [ 107.677996][ T7424] $H: entered promiscuous mode [ 107.683101][ T7424] bond_slave_0: entered promiscuous mode [ 107.689017][ T7424] bond_slave_1: entered promiscuous mode [ 107.725546][ T7425] tipc: Started in network mode [ 107.732116][ T7425] tipc: Node identity ac14140f, cluster identity 4711 [ 107.742554][ T7425] tipc: New replicast peer: 255.255.255.255 [ 107.753991][ T7425] tipc: Enabled bearer , priority 10 [ 107.827482][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 107.837282][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 107.843879][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.851417][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 107.869216][ T7445] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 107.871740][ T7443] lo speed is unknown, defaulting to 1000 [ 107.884864][ T7445] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 107.896776][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 107.903319][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.911066][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 107.924484][ T7438] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.945880][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 107.952455][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.960069][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 107.969492][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 107.976124][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.983947][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 107.995615][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16) [ 108.000660][ T7456] pimreg: entered allmulticast mode [ 108.002272][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.008737][ T7456] pimreg: left allmulticast mode [ 108.014919][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 108.030988][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(18) [ 108.037636][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.045583][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 108.053031][ T7438] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 108.059652][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.067354][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 108.083174][ T7461] vhci_hcd: connection closed [ 108.083721][ T50] vhci_hcd: stop threads [ 108.086358][ T7457] vhci_hcd: connection closed [ 108.088515][ T50] vhci_hcd: release socket [ 108.101979][ T50] vhci_hcd: disconnect device [ 108.108932][ T7459] vhci_hcd: connection closed [ 108.109155][ T7464] serio: Serial port ptm0 [ 108.109793][ T7446] vhci_hcd: connection closed [ 108.114127][ T7442] vhci_hcd: connection closed [ 108.119198][ T7451] vhci_hcd: connection closed [ 108.124752][ T7453] vhci_hcd: connection closed [ 108.133049][ T50] vhci_hcd: stop threads [ 108.142275][ T50] vhci_hcd: release socket [ 108.146890][ T50] vhci_hcd: disconnect device [ 108.151961][ T50] vhci_hcd: stop threads [ 108.156387][ T50] vhci_hcd: release socket [ 108.160986][ T50] vhci_hcd: disconnect device [ 108.167636][ T50] vhci_hcd: stop threads [ 108.171967][ T50] vhci_hcd: release socket [ 108.176467][ T50] vhci_hcd: disconnect device [ 108.181903][ T50] vhci_hcd: stop threads [ 108.186290][ T50] vhci_hcd: release socket [ 108.190772][ T50] vhci_hcd: disconnect device [ 108.196325][ T50] vhci_hcd: stop threads [ 108.200591][ T50] vhci_hcd: release socket [ 108.205061][ T50] vhci_hcd: disconnect device [ 108.210223][ T50] vhci_hcd: stop threads [ 108.214592][ T50] vhci_hcd: release socket [ 108.219131][ T50] vhci_hcd: disconnect device [ 108.277451][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 108.286815][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 108.312029][ T7470] lo speed is unknown, defaulting to 1000 [ 108.326465][ T7472] serio: Serial port ptm0 [ 108.629054][ T7478] lo speed is unknown, defaulting to 1000 [ 108.698075][ T7495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 108.739167][ T7497] lo speed is unknown, defaulting to 1000 [ 108.763755][ T2962] tipc: Node number set to 2886997007 [ 108.790454][ T7502] serio: Serial port ptm0 [ 108.832462][ T7505] FAULT_INJECTION: forcing a failure. [ 108.832462][ T7505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.845834][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: syz.0.1344 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 108.849980][ T7507] lo speed is unknown, defaulting to 1000 [ 108.858039][ T7505] Tainted: [W]=WARN [ 108.858049][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.858065][ T7505] Call Trace: [ 108.858072][ T7505] [ 108.858081][ T7505] dump_stack_lvl+0xf2/0x150 [ 108.888574][ T7505] dump_stack+0x15/0x1a [ 108.892770][ T7505] should_fail_ex+0x223/0x230 [ 108.897825][ T7505] should_fail+0xb/0x10 [ 108.902000][ T7505] should_fail_usercopy+0x1a/0x20 [ 108.907094][ T7505] _copy_from_user+0x1e/0xb0 [ 108.911780][ T7505] btf_new_fd+0x1fc/0x790 [ 108.916162][ T7505] bpf_btf_load+0x115/0x130 [ 108.920682][ T7505] __sys_bpf+0x686/0x7a0 [ 108.925003][ T7505] __x64_sys_bpf+0x43/0x50 [ 108.929457][ T7505] x64_sys_call+0x2914/0x2dc0 [ 108.934153][ T7505] do_syscall_64+0xc9/0x1c0 [ 108.938720][ T7505] ? clear_bhb_loop+0x55/0xb0 [ 108.943413][ T7505] ? clear_bhb_loop+0x55/0xb0 [ 108.948123][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.954108][ T7505] RIP: 0033:0x7f30bc5a5d29 [ 108.958701][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.978414][ T7505] RSP: 002b:00007f30bac17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.986903][ T7505] RAX: ffffffffffffffda RBX: 00007f30bc795fa0 RCX: 00007f30bc5a5d29 [ 108.995231][ T7505] RDX: 0000000000000028 RSI: 0000000020000240 RDI: 0000000000000012 [ 109.003234][ T7505] RBP: 00007f30bac17090 R08: 0000000000000000 R09: 0000000000000000 [ 109.011210][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.019229][ T7505] R13: 0000000000000000 R14: 00007f30bc795fa0 R15: 00007ffdd473c808 [ 109.027223][ T7505] [ 109.176719][ T7519] FAULT_INJECTION: forcing a failure. [ 109.176719][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 109.189536][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.4.1348 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 109.201764][ T7519] Tainted: [W]=WARN [ 109.205598][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.215765][ T7519] Call Trace: [ 109.219073][ T7519] [ 109.222017][ T7519] dump_stack_lvl+0xf2/0x150 [ 109.226670][ T7519] dump_stack+0x15/0x1a [ 109.230866][ T7519] should_fail_ex+0x223/0x230 [ 109.235613][ T7519] ? audit_log_d_path+0x96/0x250 [ 109.240625][ T7519] should_failslab+0x8f/0xb0 [ 109.245259][ T7519] __kmalloc_cache_noprof+0x4e/0x320 [ 109.250653][ T7519] audit_log_d_path+0x96/0x250 [ 109.255535][ T7519] ? __rcu_read_unlock+0x4e/0x70 [ 109.260532][ T7519] audit_log_d_path_exe+0x42/0x70 [ 109.265654][ T7519] audit_log_task+0x192/0x1c0 [ 109.270502][ T7519] audit_seccomp+0x68/0x130 [ 109.275030][ T7519] __seccomp_filter+0x6fa/0x1180 [ 109.280111][ T7519] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.285945][ T7519] ? vfs_write+0x596/0x920 [ 109.290413][ T7519] __secure_computing+0x9f/0x1c0 [ 109.295433][ T7519] syscall_trace_enter+0xd1/0x1f0 [ 109.300496][ T7519] ? fpregs_assert_state_consistent+0x83/0xa0 [ 109.306596][ T7519] do_syscall_64+0xaa/0x1c0 [ 109.311120][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 109.315881][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 109.320613][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.326567][ T7519] RIP: 0033:0x7f28178b5d29 [ 109.331109][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.350892][ T7519] RSP: 002b:00007f2815f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 109.359358][ T7519] RAX: ffffffffffffffda RBX: 00007f2817aa5fa0 RCX: 00007f28178b5d29 [ 109.367372][ T7519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 109.375461][ T7519] RBP: 00007f2815f27090 R08: 0000000000000000 R09: 0000000000000000 [ 109.383522][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.391539][ T7519] R13: 0000000000000000 R14: 00007f2817aa5fa0 R15: 00007ffef2ce8b18 [ 109.399544][ T7519] [ 109.457347][ T7525] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1350'. [ 109.472220][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 109.478796][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.486414][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.496268][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 109.502823][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.510541][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.517611][ T7526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.537746][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 109.544331][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.551993][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.578172][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 109.584948][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.592652][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.629823][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15) [ 109.633966][ T3378] usb 5-1: enqueue for inactive port 0 [ 109.636457][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.649524][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.652140][ T3378] usb 5-1: enqueue for inactive port 0 [ 109.679876][ T3379] vhci_hcd: vhci_device speed not set [ 109.685693][ T7542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 109.696141][ T7545] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(17) [ 109.702847][ T7545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.710677][ T7545] vhci_hcd vhci_hcd.0: Device attached [ 109.712377][ T7542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 109.733704][ T3379] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 109.744691][ T7526] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(20) [ 109.751338][ T7526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.758907][ T7526] vhci_hcd vhci_hcd.0: Device attached [ 109.777645][ T7540] vhci_hcd: connection closed [ 109.777654][ T7548] vhci_hcd: connection closed [ 109.777862][ T7551] vhci_hcd: connection closed [ 109.782779][ T7536] vhci_hcd: connection closed [ 109.788521][ T28] vhci_hcd: stop threads [ 109.792709][ T7531] vhci_hcd: connection closed [ 109.796594][ T28] vhci_hcd: release socket [ 109.796610][ T28] vhci_hcd: disconnect device [ 109.796672][ T3378] vhci_hcd: vhci_device speed not set [ 109.798950][ T28] vhci_hcd: stop threads [ 109.802569][ T7529] vhci_hcd: connection closed [ 109.805850][ T28] vhci_hcd: release socket [ 109.812228][ T7527] vhci_hcd: connection reset by peer [ 109.814879][ T28] vhci_hcd: disconnect device [ 109.861093][ T28] vhci_hcd: stop threads [ 109.865971][ T28] vhci_hcd: release socket [ 109.870399][ T28] vhci_hcd: disconnect device [ 109.876401][ T28] vhci_hcd: stop threads [ 109.880850][ T28] vhci_hcd: release socket [ 109.885371][ T28] vhci_hcd: disconnect device [ 109.889501][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 109.891390][ T28] vhci_hcd: stop threads [ 109.903365][ T28] vhci_hcd: release socket [ 109.907895][ T28] vhci_hcd: disconnect device [ 109.920996][ T28] vhci_hcd: stop threads [ 109.925307][ T28] vhci_hcd: release socket [ 109.929769][ T28] vhci_hcd: disconnect device [ 109.935177][ T28] vhci_hcd: stop threads [ 109.939535][ T28] vhci_hcd: release socket [ 109.944050][ T28] vhci_hcd: disconnect device [ 110.358293][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 110.358311][ T29] audit: type=1400 audit(1736145063.099:4384): avc: denied { ioctl } for pid=7572 comm="syz.1.1363" path="socket:[20184]" dev="sockfs" ino=20184 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.391901][ T29] audit: type=1400 audit(1736145063.129:4385): avc: denied { wake_alarm } for pid=7572 comm="syz.1.1363" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.446494][ T7575] lo speed is unknown, defaulting to 1000 [ 110.496225][ T7578] validate_nla: 6 callbacks suppressed [ 110.496243][ T7578] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 110.509933][ T7578] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 110.519632][ T2962] lo speed is unknown, defaulting to 1000 [ 110.545410][ T29] audit: type=1400 audit(1736145063.289:4386): avc: denied { mounton } for pid=7579 comm="syz.1.1366" path="/317/file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.558512][ T7580] 9pnet_fd: Insufficient options for proto=fd [ 110.651520][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1370'. [ 110.766167][ T29] audit: type=1400 audit(1736145063.509:4387): avc: denied { create } for pid=7596 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.790645][ T29] audit: type=1400 audit(1736145063.529:4388): avc: denied { write } for pid=7596 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.810884][ T29] audit: type=1400 audit(1736145063.529:4389): avc: denied { nlmsg_write } for pid=7596 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.831626][ T29] audit: type=1400 audit(1736145063.529:4390): avc: denied { read } for pid=7596 comm="syz.2.1372" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.855320][ T29] audit: type=1400 audit(1736145063.529:4391): avc: denied { open } for pid=7596 comm="syz.2.1372" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.879270][ T29] audit: type=1400 audit(1736145063.529:4392): avc: denied { ioctl } for pid=7596 comm="syz.2.1372" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.925717][ T7603] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 110.934284][ T29] audit: type=1326 audit(1736145063.669:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.4.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28178b5d29 code=0x7ffc0000 [ 110.952580][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 110.964410][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.972026][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 110.980464][ T7609] netlink: 'syz.1.1376': attribute type 4 has an invalid length. [ 110.980785][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 110.988968][ T7612] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 110.994882][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.012778][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.017764][ T7612] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 111.024102][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.038799][ T7614] netlink: 'syz.1.1376': attribute type 4 has an invalid length. [ 111.038978][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 111.053148][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.057812][ T5114] lo speed is unknown, defaulting to 1000 [ 111.060767][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.073180][ T8] lo speed is unknown, defaulting to 1000 [ 111.078562][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 111.085594][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.093728][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.105975][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 111.112671][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.120374][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.134024][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(17) [ 111.140709][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.148350][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.158551][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19) [ 111.159360][ T7627] 9pnet_fd: Insufficient options for proto=fd [ 111.165172][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.165274][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 111.172251][ T9] vhci_hcd: vhci_device speed not set [ 111.203019][ T7622] vhci_hcd: connection closed [ 111.203150][ T7615] vhci_hcd: connection closed [ 111.203284][ T7619] vhci_hcd: connection closed [ 111.207920][ T7606] vhci_hcd: connection closed [ 111.212735][ T7628] vhci_hcd: connection closed [ 111.217637][ T7610] vhci_hcd: connection closed [ 111.223904][ T7617] vhci_hcd: connection closed [ 111.232340][ T53] vhci_hcd: stop threads [ 111.241498][ T53] vhci_hcd: release socket [ 111.246156][ T53] vhci_hcd: disconnect device [ 111.255132][ T7633] netlink: zone id is out of range [ 111.260390][ T53] vhci_hcd: stop threads [ 111.264712][ T53] vhci_hcd: release socket [ 111.269230][ T53] vhci_hcd: disconnect device [ 111.270754][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1379'. [ 111.276339][ T53] vhci_hcd: stop threads [ 111.288298][ T53] vhci_hcd: release socket [ 111.292832][ T53] vhci_hcd: disconnect device [ 111.298879][ T53] vhci_hcd: stop threads [ 111.303290][ T53] vhci_hcd: release socket [ 111.307871][ T53] vhci_hcd: disconnect device [ 111.313693][ T53] vhci_hcd: stop threads [ 111.317971][ T53] vhci_hcd: release socket [ 111.322498][ T53] vhci_hcd: disconnect device [ 111.329320][ T9] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 111.338638][ T9] usb 9-1: enqueue for inactive port 0 [ 111.341947][ T53] vhci_hcd: stop threads [ 111.344611][ T9] usb 9-1: enqueue for inactive port 0 [ 111.348423][ T53] vhci_hcd: release socket [ 111.353930][ T9] usb 9-1: enqueue for inactive port 0 [ 111.363886][ T53] vhci_hcd: disconnect device [ 111.368897][ T53] vhci_hcd: stop threads [ 111.373259][ T53] vhci_hcd: release socket [ 111.377821][ T53] vhci_hcd: disconnect device [ 111.384260][ T7631] geneve0: entered allmulticast mode [ 111.392611][ T7641] FAULT_INJECTION: forcing a failure. [ 111.392611][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.394758][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 111.405963][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.1.1383 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 111.426821][ T7641] Tainted: [W]=WARN [ 111.430643][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.440766][ T7641] Call Trace: [ 111.444061][ T7641] [ 111.447058][ T7641] dump_stack_lvl+0xf2/0x150 [ 111.451692][ T7641] dump_stack+0x15/0x1a [ 111.455884][ T7641] should_fail_ex+0x223/0x230 [ 111.460590][ T7641] should_fail+0xb/0x10 [ 111.464765][ T7641] should_fail_usercopy+0x1a/0x20 [ 111.469801][ T7641] _copy_from_user+0x1e/0xb0 [ 111.474480][ T7641] btf_new_fd+0x1fc/0x790 [ 111.478840][ T7641] bpf_btf_load+0x115/0x130 [ 111.483364][ T7641] __sys_bpf+0x686/0x7a0 [ 111.487664][ T7641] __x64_sys_bpf+0x43/0x50 [ 111.492106][ T7641] x64_sys_call+0x2914/0x2dc0 [ 111.496902][ T7641] do_syscall_64+0xc9/0x1c0 [ 111.501447][ T7641] ? clear_bhb_loop+0x55/0xb0 [ 111.506148][ T7641] ? clear_bhb_loop+0x55/0xb0 [ 111.510835][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.516819][ T7641] RIP: 0033:0x7f3dbb515d29 [ 111.521252][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.541107][ T7641] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.549531][ T7641] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 111.557534][ T7641] RDX: 0000000000000028 RSI: 0000000020000240 RDI: 0000000000000012 [ 111.565598][ T7641] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 111.573575][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.581550][ T7641] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 111.589536][ T7641] [ 111.594409][ T9] vhci_hcd: vhci_device speed not set [ 111.661574][ T7649] syzkaller0: entered promiscuous mode [ 111.667511][ T7649] syzkaller0: entered allmulticast mode [ 111.675375][ T7651] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 111.687273][ T7651] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 111.788647][ T7658] 9pnet_fd: Insufficient options for proto=fd [ 111.860022][ T7661] lo speed is unknown, defaulting to 1000 [ 111.967765][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 112.008645][ T7680] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 112.019591][ T7680] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 112.113475][ T7689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=7689 comm=syz.2.1400 [ 112.127247][ T7690] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 112.137879][ T7690] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 112.498348][ T7695] 9pnet_fd: Insufficient options for proto=fd [ 112.742959][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 112.788569][ T7714] netlink: 'syz.4.1410': attribute type 4 has an invalid length. [ 112.840734][ T7716] vhci_hcd: invalid port number 15 [ 112.861662][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.870807][ T7719] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.870939][ T7722] 9pnet_fd: Insufficient options for proto=fd [ 112.942306][ T7727] lo speed is unknown, defaulting to 1000 [ 113.125046][ T7740] serio: Serial port ptm0 [ 113.156519][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 113.211367][ T7747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 113.217988][ T7747] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.225569][ T7747] vhci_hcd vhci_hcd.0: Device attached [ 113.233834][ T7745] FAULT_INJECTION: forcing a failure. [ 113.233834][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 113.246647][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.1.1420 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 113.258832][ T7745] Tainted: [W]=WARN [ 113.262643][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.272712][ T7745] Call Trace: [ 113.276001][ T7745] [ 113.278940][ T7745] dump_stack_lvl+0xf2/0x150 [ 113.283627][ T7745] dump_stack+0x15/0x1a [ 113.287813][ T7745] should_fail_ex+0x223/0x230 [ 113.292514][ T7745] should_failslab+0x8f/0xb0 [ 113.297160][ T7745] __kmalloc_noprof+0xab/0x3f0 [ 113.301941][ T7745] ? security_sb_alloc+0x47/0x110 [ 113.307062][ T7745] security_sb_alloc+0x47/0x110 [ 113.311937][ T7745] alloc_super+0x108/0x5a0 [ 113.316365][ T7745] ? __pfx_set_anon_super_fc+0x10/0x10 [ 113.321862][ T7745] sget_fc+0x259/0x670 [ 113.325943][ T7745] ? __pfx_set_anon_super_fc+0x10/0x10 [ 113.331424][ T7745] ? __pfx_mqueue_fill_super+0x10/0x10 [ 113.336925][ T7745] get_tree_nodev+0x28/0xf0 [ 113.341454][ T7745] mqueue_get_tree+0x6b/0x90 [ 113.346143][ T7745] vfs_get_tree+0x56/0x1e0 [ 113.350577][ T7745] fc_mount+0x16/0x70 [ 113.354573][ T7745] mq_init_ns+0x253/0x300 [ 113.358957][ T7745] copy_ipcs+0x218/0x3b0 [ 113.363222][ T7745] create_new_namespaces+0x135/0x430 [ 113.368533][ T7745] ? security_capable+0x81/0x90 [ 113.373405][ T7745] unshare_nsproxy_namespaces+0xe6/0x120 [ 113.379068][ T7745] ksys_unshare+0x3c9/0x6e0 [ 113.383589][ T7745] __x64_sys_unshare+0x1f/0x30 [ 113.388367][ T7745] x64_sys_call+0x1a3e/0x2dc0 [ 113.393062][ T7745] do_syscall_64+0xc9/0x1c0 [ 113.397575][ T7745] ? clear_bhb_loop+0x55/0xb0 [ 113.402304][ T7745] ? clear_bhb_loop+0x55/0xb0 [ 113.406997][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.412915][ T7745] RIP: 0033:0x7f3dbb515d29 [ 113.417402][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.437096][ T7745] RSP: 002b:00007f3db9b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.445570][ T7745] RAX: ffffffffffffffda RBX: 00007f3dbb706080 RCX: 00007f3dbb515d29 [ 113.453552][ T7745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 113.461531][ T7745] RBP: 00007f3db9b66090 R08: 0000000000000000 R09: 0000000000000000 [ 113.469574][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.477548][ T7745] R13: 0000000000000000 R14: 00007f3dbb706080 R15: 00007ffe96121028 [ 113.485540][ T7745] [ 113.502616][ T7749] vhci_hcd: connection closed [ 113.502938][ T28] vhci_hcd: stop threads [ 113.512024][ T28] vhci_hcd: release socket [ 113.516486][ T28] vhci_hcd: disconnect device [ 113.563736][ T2962] vhci_hcd: vhci_device speed not set [ 113.571119][ T7755] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.662438][ T7759] 9pnet_fd: Insufficient options for proto=fd [ 113.701832][ T7765] FAULT_INJECTION: forcing a failure. [ 113.701832][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.715071][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.0.1429 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 113.727265][ T7765] Tainted: [W]=WARN [ 113.731062][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.741116][ T7765] Call Trace: [ 113.744423][ T7765] [ 113.747355][ T7765] dump_stack_lvl+0xf2/0x150 [ 113.751961][ T7765] dump_stack+0x15/0x1a [ 113.756168][ T7765] should_fail_ex+0x223/0x230 [ 113.760867][ T7765] should_fail+0xb/0x10 [ 113.765050][ T7765] should_fail_usercopy+0x1a/0x20 [ 113.770105][ T7765] _copy_from_user+0x1e/0xb0 [ 113.774739][ T7765] get_nodes+0x172/0x330 [ 113.779038][ T7765] __x64_sys_set_mempolicy+0xf6/0x160 [ 113.784445][ T7765] x64_sys_call+0x673/0x2dc0 [ 113.789069][ T7765] do_syscall_64+0xc9/0x1c0 [ 113.793597][ T7765] ? clear_bhb_loop+0x55/0xb0 [ 113.798424][ T7765] ? clear_bhb_loop+0x55/0xb0 [ 113.803242][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.809172][ T7765] RIP: 0033:0x7f30bc5a5d29 [ 113.813639][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.833359][ T7765] RSP: 002b:00007f30bac17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 113.841789][ T7765] RAX: ffffffffffffffda RBX: 00007f30bc795fa0 RCX: 00007f30bc5a5d29 [ 113.849770][ T7765] RDX: 0000000000000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 113.857752][ T7765] RBP: 00007f30bac17090 R08: 0000000000000000 R09: 0000000000000000 [ 113.865813][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.873839][ T7765] R13: 0000000000000000 R14: 00007f30bc795fa0 R15: 00007ffdd473c808 [ 113.881826][ T7765] [ 113.893897][ T7770] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 113.913921][ T7770] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 113.945712][ T7772] FAULT_INJECTION: forcing a failure. [ 113.945712][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 113.958162][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1433'. [ 113.958882][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.2.1432 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 113.979601][ T7772] Tainted: [W]=WARN [ 113.983417][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.993545][ T7772] Call Trace: [ 113.996894][ T7772] [ 113.999847][ T7772] dump_stack_lvl+0xf2/0x150 [ 114.004533][ T7772] dump_stack+0x15/0x1a [ 114.008861][ T7772] should_fail_ex+0x223/0x230 [ 114.013563][ T7772] should_failslab+0x8f/0xb0 [ 114.018182][ T7772] kmem_cache_alloc_node_noprof+0x59/0x320 [ 114.024070][ T7772] ? alloc_vmap_area+0x5ac/0x1830 [ 114.029120][ T7772] alloc_vmap_area+0x5ac/0x1830 [ 114.034134][ T7772] ? __rcu_read_unlock+0x4e/0x70 [ 114.039104][ T7772] ? should_fail_ex+0xd7/0x230 [ 114.043977][ T7772] ? should_failslab+0x8f/0xb0 [ 114.048798][ T7772] ? __kmalloc_cache_node_noprof+0x18c/0x320 [ 114.054853][ T7772] __get_vm_area_node+0x162/0x1c0 [ 114.059896][ T7772] __vmalloc_node_range_noprof+0x280/0xe80 [ 114.065722][ T7772] ? copy_process+0x3a9/0x1f90 [ 114.070527][ T7772] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 114.076613][ T7772] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 114.082787][ T7772] dup_task_struct+0x4a2/0x710 [ 114.087576][ T7772] ? copy_process+0x3a9/0x1f90 [ 114.092356][ T7772] copy_process+0x3a9/0x1f90 [ 114.096992][ T7772] ? 0xffffffff81000000 [ 114.101154][ T7772] ? selinux_file_permission+0x22a/0x360 [ 114.106800][ T7772] ? __rcu_read_unlock+0x4e/0x70 [ 114.111780][ T7772] kernel_clone+0x167/0x5e0 [ 114.116376][ T7772] ? vfs_write+0x596/0x920 [ 114.120865][ T7772] __x64_sys_clone+0xe8/0x120 [ 114.125575][ T7772] x64_sys_call+0x2d7e/0x2dc0 [ 114.130280][ T7772] do_syscall_64+0xc9/0x1c0 [ 114.134840][ T7772] ? clear_bhb_loop+0x55/0xb0 [ 114.139616][ T7772] ? clear_bhb_loop+0x55/0xb0 [ 114.144450][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.150412][ T7772] RIP: 0033:0x7f160f7e5d29 [ 114.154875][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.174528][ T7772] RSP: 002b:00007f160de56fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 114.182974][ T7772] RAX: ffffffffffffffda RBX: 00007f160f9d5fa0 RCX: 00007f160f7e5d29 [ 114.190966][ T7772] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 114.198960][ T7772] RBP: 00007f160de57090 R08: 0000000000000000 R09: 0000000000000000 [ 114.206943][ T7772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 114.214942][ T7772] R13: 0000000000000000 R14: 00007f160f9d5fa0 R15: 00007fff033596f8 [ 114.222931][ T7772] [ 114.264810][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 114.273916][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 114.291843][ T3375] lo speed is unknown, defaulting to 1000 [ 114.320111][ T3374] lo speed is unknown, defaulting to 1000 [ 114.348368][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 114.363192][ T7789] lo speed is unknown, defaulting to 1000 [ 114.470563][ T7803] FAULT_INJECTION: forcing a failure. [ 114.470563][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.483994][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.0.1444 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 114.496188][ T7803] Tainted: [W]=WARN [ 114.499996][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.510159][ T7803] Call Trace: [ 114.513446][ T7803] [ 114.516397][ T7803] dump_stack_lvl+0xf2/0x150 [ 114.521035][ T7803] dump_stack+0x15/0x1a [ 114.525219][ T7803] should_fail_ex+0x223/0x230 [ 114.529995][ T7803] should_fail+0xb/0x10 [ 114.534166][ T7803] should_fail_usercopy+0x1a/0x20 [ 114.539292][ T7803] copy_page_from_iter_atomic+0x228/0xf80 [ 114.545085][ T7803] ? shmem_write_begin+0xa2/0x180 [ 114.550288][ T7803] ? shmem_write_begin+0xda/0x180 [ 114.555419][ T7803] generic_perform_write+0x2f1/0x4a0 [ 114.560767][ T7803] shmem_file_write_iter+0xc2/0xe0 [ 114.565913][ T7803] do_iter_readv_writev+0x394/0x450 [ 114.571139][ T7803] vfs_writev+0x2d4/0x880 [ 114.575483][ T7803] ? proc_fail_nth_write+0x12a/0x150 [ 114.580795][ T7803] __se_sys_pwritev2+0x100/0x1c0 [ 114.585868][ T7803] __x64_sys_pwritev2+0x78/0x90 [ 114.590754][ T7803] x64_sys_call+0x2afe/0x2dc0 [ 114.595441][ T7803] do_syscall_64+0xc9/0x1c0 [ 114.600036][ T7803] ? clear_bhb_loop+0x55/0xb0 [ 114.604864][ T7803] ? clear_bhb_loop+0x55/0xb0 [ 114.609550][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.615464][ T7803] RIP: 0033:0x7f30bc5a5d29 [ 114.619885][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.639601][ T7803] RSP: 002b:00007f30bac17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 114.648101][ T7803] RAX: ffffffffffffffda RBX: 00007f30bc795fa0 RCX: 00007f30bc5a5d29 [ 114.656082][ T7803] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 000000000000000c [ 114.664084][ T7803] RBP: 00007f30bac17090 R08: 0000000000000000 R09: 0000000000000003 [ 114.672061][ T7803] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 114.680038][ T7803] R13: 0000000000000000 R14: 00007f30bc795fa0 R15: 00007ffdd473c808 [ 114.688072][ T7803] [ 114.736870][ T7801] lo speed is unknown, defaulting to 1000 [ 114.802330][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1446'. [ 114.833913][ T3379] usb 3-1: enqueue for inactive port 0 [ 114.839531][ T3379] usb 3-1: enqueue for inactive port 0 [ 114.884943][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 114.895363][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 114.914979][ T3379] vhci_hcd: vhci_device speed not set [ 114.967708][ T7827] 9pnet_fd: Insufficient options for proto=fd [ 115.008798][ T7832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1453'. [ 115.059892][ T7835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.115158][ T7835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.165714][ T7835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.171420][ T7845] block device autoloading is deprecated and will be removed. [ 115.217735][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'. [ 115.234549][ T7835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.267610][ T7845] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.284629][ T7852] loop1: detected capacity change from 0 to 128 [ 115.298184][ T7852] /dev/loop1: Can't open blockdev [ 115.312147][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'. [ 115.375470][ T7835] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.376660][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 115.376678][ T29] audit: type=1400 audit(1736145068.119:5005): avc: denied { read } for pid=7863 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.413052][ T7835] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.432064][ T29] audit: type=1400 audit(1736145068.149:5006): avc: denied { open } for pid=7863 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.457331][ T29] audit: type=1400 audit(1736145068.149:5007): avc: denied { getattr } for pid=7863 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.482660][ T29] audit: type=1400 audit(1736145068.149:5008): avc: denied { getattr } for pid=7863 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=441 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.509103][ T29] audit: type=1400 audit(1736145068.169:5009): avc: denied { read } for pid=7867 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=441 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.531037][ T29] audit: type=1400 audit(1736145068.169:5010): avc: denied { open } for pid=7867 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=441 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.559093][ T7835] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.567560][ T29] audit: type=1400 audit(1736145068.199:5011): avc: denied { read write } for pid=7851 comm="syz.1.1459" name="loop1" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.587651][ T7835] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.591802][ T29] audit: type=1400 audit(1736145068.199:5012): avc: denied { open } for pid=7851 comm="syz.1.1459" path="/dev/loop1" dev="devtmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.624070][ T29] audit: type=1400 audit(1736145068.199:5013): avc: denied { ioctl } for pid=7851 comm="syz.1.1459" path="/dev/loop1" dev="devtmpfs" ino=1066 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.630408][ T7875] FAULT_INJECTION: forcing a failure. [ 115.630408][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.649636][ T29] audit: type=1400 audit(1736145068.229:5014): avc: denied { map_create } for pid=7868 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.662634][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.2.1462 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 115.662671][ T7875] Tainted: [W]=WARN [ 115.662679][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.662694][ T7875] Call Trace: [ 115.662702][ T7875] [ 115.662711][ T7875] dump_stack_lvl+0xf2/0x150 [ 115.662758][ T7875] dump_stack+0x15/0x1a [ 115.722855][ T7875] should_fail_ex+0x223/0x230 [ 115.727644][ T7875] should_fail+0xb/0x10 [ 115.731812][ T7875] should_fail_usercopy+0x1a/0x20 [ 115.736850][ T7875] _copy_to_user+0x20/0xa0 [ 115.741322][ T7875] simple_read_from_buffer+0xa0/0x110 [ 115.746776][ T7875] proc_fail_nth_read+0xf9/0x140 [ 115.751793][ T7875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.757436][ T7875] vfs_read+0x1a2/0x700 [ 115.761609][ T7875] ? __rcu_read_unlock+0x4e/0x70 [ 115.766773][ T7875] ? __fget_files+0x17c/0x1c0 [ 115.771559][ T7875] ksys_read+0xe8/0x1b0 [ 115.775821][ T7875] __x64_sys_read+0x42/0x50 [ 115.780338][ T7875] x64_sys_call+0x2874/0x2dc0 [ 115.785030][ T7875] do_syscall_64+0xc9/0x1c0 [ 115.789543][ T7875] ? clear_bhb_loop+0x55/0xb0 [ 115.794252][ T7875] ? clear_bhb_loop+0x55/0xb0 [ 115.798994][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.804911][ T7875] RIP: 0033:0x7f160f7e473c [ 115.809331][ T7875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.828967][ T7875] RSP: 002b:00007f160de57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.837434][ T7875] RAX: ffffffffffffffda RBX: 00007f160f9d5fa0 RCX: 00007f160f7e473c [ 115.845412][ T7875] RDX: 000000000000000f RSI: 00007f160de570a0 RDI: 0000000000000004 [ 115.853477][ T7875] RBP: 00007f160de57090 R08: 0000000000000000 R09: 0000000000000000 [ 115.861505][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.869481][ T7875] R13: 0000000000000000 R14: 00007f160f9d5fa0 R15: 00007fff033596f8 [ 115.877542][ T7875] [ 115.887753][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 115.929089][ T7881] validate_nla: 8 callbacks suppressed [ 115.929105][ T7881] netlink: 'syz.3.1463': attribute type 4 has an invalid length. [ 115.978820][ T7890] FAULT_INJECTION: forcing a failure. [ 115.978820][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 115.991671][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.2.1466 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 115.994365][ T7892] netlink: 'syz.0.1467': attribute type 4 has an invalid length. [ 116.003905][ T7890] Tainted: [W]=WARN [ 116.012287][ T7885] 9pnet_fd: Insufficient options for proto=fd [ 116.015362][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.031560][ T7890] Call Trace: [ 116.034947][ T7890] [ 116.038006][ T7890] dump_stack_lvl+0xf2/0x150 [ 116.042687][ T7890] dump_stack+0x15/0x1a [ 116.046912][ T7890] should_fail_ex+0x223/0x230 [ 116.051702][ T7890] should_failslab+0x8f/0xb0 [ 116.056336][ T7890] kmem_cache_alloc_noprof+0x52/0x320 [ 116.058335][ T7895] netlink: 'syz.3.1463': attribute type 4 has an invalid length. [ 116.061729][ T7890] ? skb_clone+0x154/0x1f0 [ 116.073923][ T7890] skb_clone+0x154/0x1f0 [ 116.078218][ T7890] __netlink_deliver_tap+0x2bd/0x4f0 [ 116.083546][ T7890] netlink_unicast+0x64a/0x670 [ 116.088419][ T7890] netlink_sendmsg+0x5cc/0x6e0 [ 116.093244][ T7890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.098637][ T7890] __sock_sendmsg+0x140/0x180 [ 116.103337][ T7890] ____sys_sendmsg+0x312/0x410 [ 116.108251][ T7890] __sys_sendmsg+0x19d/0x230 [ 116.112923][ T7890] __x64_sys_sendmsg+0x46/0x50 [ 116.117693][ T7890] x64_sys_call+0x2734/0x2dc0 [ 116.122389][ T7890] do_syscall_64+0xc9/0x1c0 [ 116.126928][ T7890] ? clear_bhb_loop+0x55/0xb0 [ 116.131620][ T7890] ? clear_bhb_loop+0x55/0xb0 [ 116.136456][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.142460][ T7890] RIP: 0033:0x7f160f7e5d29 [ 116.146924][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.166548][ T7890] RSP: 002b:00007f160de57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.175032][ T7890] RAX: ffffffffffffffda RBX: 00007f160f9d5fa0 RCX: 00007f160f7e5d29 [ 116.183012][ T7890] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 116.186177][ T7903] loop5: detected capacity change from 0 to 7 [ 116.190988][ T7890] RBP: 00007f160de57090 R08: 0000000000000000 R09: 0000000000000000 [ 116.191009][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.199165][ T7903] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.205129][ T7890] R13: 0000000000000000 R14: 00007f160f9d5fa0 R15: 00007fff033596f8 [ 116.205157][ T7890] [ 116.233887][ T7903] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.241878][ T7903] loop5: unable to read partition table [ 116.252033][ T7903] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 116.252033][ T7903] ) failed (rc=-5) [ 116.320482][ T7913] serio: Serial port ptm0 [ 116.337940][ T7911] lo speed is unknown, defaulting to 1000 [ 116.374774][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 116.381443][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.388955][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 116.406025][ T7929] block device autoloading is deprecated and will be removed. [ 116.421353][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 116.428139][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.435889][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 116.457644][ T7921] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.481836][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 116.488391][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.496073][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 116.541233][ T7942] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 116.547916][ T7942] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.555570][ T7942] vhci_hcd vhci_hcd.0: Device attached [ 116.573831][ T8] vhci_hcd: vhci_device speed not set [ 116.595532][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 116.602226][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.609783][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 116.633849][ T8] usb 5-1: new full-speed USB device number 6 using vhci_hcd [ 116.655261][ T7942] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(17) [ 116.661982][ T7942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.669651][ T7942] vhci_hcd vhci_hcd.0: Device attached [ 116.691392][ T7921] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(16) [ 116.698128][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.705609][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 116.718479][ T7964] vhci_hcd: connection closed [ 116.718596][ T7956] vhci_hcd: connection closed [ 116.723868][ T7943] vhci_hcd: connection closed [ 116.723897][ T7948] vhci_hcd: connection closed [ 116.729170][ T7930] vhci_hcd: connection closed [ 116.733469][ T7938] vhci_hcd: connection closed [ 116.743176][ T3317] vhci_hcd: stop threads [ 116.743245][ T7924] vhci_hcd: connection reset by peer [ 116.747943][ T3317] vhci_hcd: release socket [ 116.747957][ T3317] vhci_hcd: disconnect device [ 116.753272][ T3317] vhci_hcd: stop threads [ 116.771105][ T3317] vhci_hcd: release socket [ 116.775637][ T3317] vhci_hcd: disconnect device [ 116.782747][ T7971] loop3: detected capacity change from 0 to 128 [ 116.783418][ T3317] vhci_hcd: stop threads [ 116.791869][ T7971] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.793340][ T3317] vhci_hcd: release socket [ 116.806947][ T3317] vhci_hcd: disconnect device [ 116.817432][ T3317] vhci_hcd: stop threads [ 116.821762][ T3317] vhci_hcd: release socket [ 116.826335][ T3317] vhci_hcd: disconnect device [ 116.837196][ T3317] vhci_hcd: stop threads [ 116.841515][ T3317] vhci_hcd: release socket [ 116.846000][ T3317] vhci_hcd: disconnect device [ 116.851786][ T3317] vhci_hcd: stop threads [ 116.856091][ T3317] vhci_hcd: release socket [ 116.860581][ T3317] vhci_hcd: disconnect device [ 116.869447][ T3317] vhci_hcd: stop threads [ 116.873794][ T3317] vhci_hcd: release socket [ 116.878242][ T3317] vhci_hcd: disconnect device [ 116.945567][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 117.004110][ T7982] netlink: 'syz.3.1480': attribute type 4 has an invalid length. [ 117.022707][ T7982] netlink: 'syz.3.1480': attribute type 4 has an invalid length. [ 117.035742][ T7988] FAULT_INJECTION: forcing a failure. [ 117.035742][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 117.048625][ T7988] CPU: 0 UID: 0 PID: 7988 Comm: syz.1.1482 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 117.060825][ T7988] Tainted: [W]=WARN [ 117.064646][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.074756][ T7988] Call Trace: [ 117.078127][ T7988] [ 117.081084][ T7988] dump_stack_lvl+0xf2/0x150 [ 117.085717][ T7988] dump_stack+0x15/0x1a [ 117.089898][ T7988] should_fail_ex+0x223/0x230 [ 117.094622][ T7988] should_failslab+0x8f/0xb0 [ 117.099239][ T7988] kmem_cache_alloc_noprof+0x52/0x320 [ 117.104675][ T7988] ? alloc_empty_file+0xd0/0x200 [ 117.109620][ T7988] ? _raw_spin_unlock+0x26/0x50 [ 117.114506][ T7988] alloc_empty_file+0xd0/0x200 [ 117.119327][ T7988] alloc_file_pseudo+0xc3/0x140 [ 117.124242][ T7988] anon_inode_getfd+0xc2/0x170 [ 117.129083][ T7988] btf_new_fd+0x667/0x790 [ 117.133531][ T7988] bpf_btf_load+0x115/0x130 [ 117.138061][ T7988] __sys_bpf+0x686/0x7a0 [ 117.142320][ T7988] __x64_sys_bpf+0x43/0x50 [ 117.146864][ T7988] x64_sys_call+0x2914/0x2dc0 [ 117.151554][ T7988] do_syscall_64+0xc9/0x1c0 [ 117.156178][ T7988] ? clear_bhb_loop+0x55/0xb0 [ 117.160945][ T7988] ? clear_bhb_loop+0x55/0xb0 [ 117.165635][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.171676][ T7988] RIP: 0033:0x7f3dbb515d29 [ 117.176095][ T7988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.196157][ T7988] RSP: 002b:00007f3db9b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.204611][ T7988] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb515d29 [ 117.212674][ T7988] RDX: 0000000000000028 RSI: 0000000020000300 RDI: 0000000000000012 [ 117.220661][ T7988] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 117.228708][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.236687][ T7988] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 117.244691][ T7988] [ 117.251696][ T3374] IPVS: starting estimator thread 0... [ 117.320506][ T7999] serio: Serial port ptm0 [ 117.343225][ T8003] loop1: detected capacity change from 0 to 128 [ 117.353818][ T7991] IPVS: using max 2448 ests per chain, 122400 per kthread [ 117.373896][ T8003] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.402335][ T8012] 9pnet_fd: Insufficient options for proto=fd [ 117.451018][ T8015] syzkaller1: entered promiscuous mode [ 117.456569][ T8015] syzkaller1: entered allmulticast mode [ 117.605209][ T8020] lo speed is unknown, defaulting to 1000 [ 117.636917][ T8034] dccp_xmit_packet: Payload too large (65475) for featneg. [ 117.657383][ T8034] loop3: detected capacity change from 0 to 512 [ 117.659598][ T8035] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 117.692851][ T8034] journal_path: Lookup failure for './file0' [ 117.699089][ T8034] EXT4-fs: error: could not find journal device path [ 117.714786][ T8035] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 117.728011][ T8030] vlan2: entered allmulticast mode [ 117.853135][ T8044] 9pnet_fd: Insufficient options for proto=fd [ 117.886270][ T8048] loop3: detected capacity change from 0 to 128 [ 117.893525][ T8048] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.042881][ T8054] serio: Serial port ptm0 [ 118.049776][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 118.124493][ T8062] 9pnet_fd: Insufficient options for proto=fd [ 118.216627][ T8068] unsupported nla_type 65024 [ 118.247144][ T8070] dccp_xmit_packet: Payload too large (65475) for featneg. [ 118.258603][ T8070] loop3: detected capacity change from 0 to 512 [ 118.267548][ T8070] journal_path: Lookup failure for './file0' [ 118.273581][ T8070] EXT4-fs: error: could not find journal device path [ 118.400971][ T8079] 9pnet_fd: Insufficient options for proto=fd [ 118.416207][ T8081] loop3: detected capacity change from 0 to 128 [ 118.431401][ T8081] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.437387][ T8083] syz.2.1518[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.440849][ T8083] syz.2.1518[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.454709][ T8083] syz.2.1518[8083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.491125][ T8083] tipc: Started in network mode [ 118.507621][ T8083] tipc: Node identity be1fa5007ca1, cluster identity 4711 [ 118.514878][ T8083] tipc: Enabled bearer , priority 7 [ 118.525652][ T8083] : renamed from syzkaller0 [ 118.549808][ T8083] tipc: Disabling bearer [ 118.606387][ T8092] SELinux: Context  is not valid (left unmapped). [ 118.621559][ T8083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.651176][ T8095] netlink: 'syz.3.1522': attribute type 4 has an invalid length. [ 118.668318][ T8095] netlink: 'syz.3.1522': attribute type 4 has an invalid length. [ 118.719202][ T8098] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 118.746586][ T8098] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 118.789109][ T8096] loop1: detected capacity change from 0 to 8192 [ 118.810836][ T8108] FAULT_INJECTION: forcing a failure. [ 118.810836][ T8108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.824098][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.0.1525 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 118.831043][ T8107] lo speed is unknown, defaulting to 1000 [ 118.836330][ T8108] Tainted: [W]=WARN [ 118.836340][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.856042][ T8108] Call Trace: [ 118.859335][ T8108] [ 118.862342][ T8108] dump_stack_lvl+0xf2/0x150 [ 118.866971][ T8108] dump_stack+0x15/0x1a [ 118.871147][ T8108] should_fail_ex+0x223/0x230 [ 118.875918][ T8108] should_fail+0xb/0x10 [ 118.880157][ T8108] should_fail_usercopy+0x1a/0x20 [ 118.885196][ T8108] _copy_to_user+0x20/0xa0 [ 118.889689][ T8108] simple_read_from_buffer+0xa0/0x110 [ 118.895115][ T8108] proc_fail_nth_read+0xf9/0x140 [ 118.900076][ T8108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.905728][ T8108] vfs_read+0x1a2/0x700 [ 118.910010][ T8108] ? __rcu_read_unlock+0x4e/0x70 [ 118.915062][ T8108] ? __fget_files+0x17c/0x1c0 [ 118.919823][ T8108] ksys_read+0xe8/0x1b0 [ 118.924024][ T8108] __x64_sys_read+0x42/0x50 [ 118.928625][ T8108] x64_sys_call+0x2874/0x2dc0 [ 118.933381][ T8108] do_syscall_64+0xc9/0x1c0 [ 118.937941][ T8108] ? clear_bhb_loop+0x55/0xb0 [ 118.942683][ T8108] ? clear_bhb_loop+0x55/0xb0 [ 118.947473][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.953939][ T8108] RIP: 0033:0x7f30bc5a473c [ 118.958360][ T8108] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.977977][ T8108] RSP: 002b:00007f30babf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.986525][ T8108] RAX: ffffffffffffffda RBX: 00007f30bc796080 RCX: 00007f30bc5a473c [ 118.994518][ T8108] RDX: 000000000000000f RSI: 00007f30babf60a0 RDI: 0000000000000004 [ 119.002563][ T8108] RBP: 00007f30babf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.010552][ T8108] R10: 0000000000005406 R11: 0000000000000246 R12: 0000000000000001 [ 119.018582][ T8108] R13: 0000000000000000 R14: 00007f30bc796080 R15: 00007ffdd473c808 [ 119.026574][ T8108] [ 119.044349][ T8096] loop1: p2 [ 119.047638][ T8096] loop1: p2 size 2147483392 extends beyond EOD, truncated [ 119.061501][ T2999] loop1: p2 [ 119.079839][ T8115] 9pnet_fd: Insufficient options for proto=fd [ 119.086558][ T2999] loop1: p2 size 2147483392 extends beyond EOD, truncated [ 119.144078][ T8123] FAULT_INJECTION: forcing a failure. [ 119.144078][ T8123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.157494][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.0.1532 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 119.169744][ T8123] Tainted: [W]=WARN [ 119.173643][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.183720][ T8123] Call Trace: [ 119.187013][ T8123] [ 119.189983][ T8123] dump_stack_lvl+0xf2/0x150 [ 119.194632][ T8123] dump_stack+0x15/0x1a [ 119.198826][ T8123] should_fail_ex+0x223/0x230 [ 119.203527][ T8123] should_fail_alloc_page+0xfd/0x110 [ 119.208855][ T8123] __alloc_pages_noprof+0x109/0x340 [ 119.214206][ T8123] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 119.219732][ T8123] folio_alloc_mpol_noprof+0x36/0x70 [ 119.225037][ T8123] shmem_get_folio_gfp+0x3d1/0xd90 [ 119.230950][ T8123] shmem_write_begin+0xa2/0x180 [ 119.235814][ T8123] generic_perform_write+0x1a8/0x4a0 [ 119.241152][ T8123] shmem_file_write_iter+0xc2/0xe0 [ 119.246289][ T8123] iter_file_splice_write+0x5f1/0x980 [ 119.251687][ T8123] ? __pfx_iter_file_splice_write+0x10/0x10 [ 119.257643][ T8123] direct_splice_actor+0x160/0x2c0 [ 119.262798][ T8123] splice_direct_to_actor+0x302/0x670 [ 119.268196][ T8123] ? __pfx_direct_splice_actor+0x10/0x10 [ 119.273852][ T8123] do_splice_direct+0xd7/0x150 [ 119.278644][ T8123] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 119.284606][ T8123] do_sendfile+0x398/0x660 [ 119.289192][ T8123] __x64_sys_sendfile64+0x110/0x150 [ 119.294498][ T8123] x64_sys_call+0xfbd/0x2dc0 [ 119.299127][ T8123] do_syscall_64+0xc9/0x1c0 [ 119.303704][ T8123] ? clear_bhb_loop+0x55/0xb0 [ 119.308435][ T8123] ? clear_bhb_loop+0x55/0xb0 [ 119.313127][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.319075][ T8123] RIP: 0033:0x7f30bc5a5d29 [ 119.323498][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.343166][ T8123] RSP: 002b:00007f30bac17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 119.351620][ T8123] RAX: ffffffffffffffda RBX: 00007f30bc795fa0 RCX: 00007f30bc5a5d29 [ 119.359646][ T8123] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 119.367625][ T8123] RBP: 00007f30bac17090 R08: 0000000000000000 R09: 0000000000000000 [ 119.375601][ T8123] R10: 0000000080200001 R11: 0000000000000246 R12: 0000000000000002 [ 119.383587][ T8123] R13: 0000000000000000 R14: 00007f30bc795fa0 R15: 00007ffdd473c808 [ 119.391670][ T8123] [ 119.402434][ T8124] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 119.422449][ T8120] __nla_validate_parse: 8 callbacks suppressed [ 119.422467][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 119.432719][ T8124] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 119.466820][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 119.528952][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 119.545736][ T8130] netlink: 'syz.1.1534': attribute type 4 has an invalid length. [ 119.590419][ T3443] lo speed is unknown, defaulting to 1000 [ 119.603855][ T5114] lo speed is unknown, defaulting to 1000 [ 119.673618][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1539'. [ 119.720257][ T8150] 9pnet_fd: Insufficient options for proto=fd [ 119.968317][ T2962] IPVS: starting estimator thread 0... [ 119.979162][ T8157] FAULT_INJECTION: forcing a failure. [ 119.979162][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 119.991893][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.0.1543 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 120.004173][ T8157] Tainted: [W]=WARN [ 120.007991][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.018276][ T8157] Call Trace: [ 120.021566][ T8157] [ 120.024511][ T8157] dump_stack_lvl+0xf2/0x150 [ 120.029180][ T8157] dump_stack+0x15/0x1a [ 120.033371][ T8157] should_fail_ex+0x223/0x230 [ 120.038129][ T8157] should_failslab+0x8f/0xb0 [ 120.042807][ T8157] kmem_cache_alloc_noprof+0x52/0x320 [ 120.048211][ T8157] ? security_file_alloc+0x32/0x100 [ 120.053453][ T8157] security_file_alloc+0x32/0x100 [ 120.058532][ T8157] init_file+0x5b/0x1b0 [ 120.062754][ T8157] alloc_empty_file+0xea/0x200 [ 120.067544][ T8157] alloc_file_pseudo+0xc3/0x140 [ 120.072410][ T8157] __shmem_file_setup+0x1bb/0x1f0 [ 120.077458][ T8157] shmem_file_setup+0x3b/0x50 [ 120.082144][ T8157] __se_sys_memfd_create+0x31d/0x5c0 [ 120.087466][ T8157] __x64_sys_memfd_create+0x31/0x40 [ 120.092765][ T8157] x64_sys_call+0x2d4c/0x2dc0 [ 120.097554][ T8157] do_syscall_64+0xc9/0x1c0 [ 120.102066][ T8157] ? clear_bhb_loop+0x55/0xb0 [ 120.106773][ T8157] ? clear_bhb_loop+0x55/0xb0 [ 120.111457][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.117490][ T8157] RIP: 0033:0x7f30bc5a5d29 [ 120.121907][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.141794][ T8157] RSP: 002b:00007f30bac16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.150216][ T8157] RAX: ffffffffffffffda RBX: 00000000000005ae RCX: 00007f30bc5a5d29 [ 120.158362][ T8157] RDX: 00007f30bac16ef0 RSI: 0000000000000000 RDI: 00007f30bc622469 [ 120.166339][ T8157] RBP: 0000000020000180 R08: 00007f30bac16bb7 R09: 00007f30bac16e40 [ 120.174348][ T8157] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 120.182325][ T8157] R13: 00007f30bac16ef0 R14: 00007f30bac16eb0 R15: 0000000020000940 [ 120.190364][ T8157] [ 120.260038][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 120.271059][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 120.280761][ T8158] IPVS: using max 1968 ests per chain, 98400 per kthread [ 120.421741][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1551'. [ 120.463938][ T8173] lo speed is unknown, defaulting to 1000 [ 120.525438][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 120.525506][ T29] audit: type=1400 audit(1736145073.269:5571): avc: denied { create } for pid=8180 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.569091][ T29] audit: type=1400 audit(1736145073.309:5572): avc: denied { write } for pid=8180 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.588578][ T29] audit: type=1400 audit(1736145073.309:5573): avc: denied { connect } for pid=8180 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.608204][ T29] audit: type=1400 audit(1736145073.309:5574): avc: denied { name_connect } for pid=8180 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 120.614097][ T8182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.631473][ T29] audit: type=1400 audit(1736145073.349:5575): avc: denied { setopt } for pid=8180 comm="syz.3.1553" laddr=172.20.20.170 lport=58744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.666046][ T29] audit: type=1326 audit(1736145073.389:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160f7e5d29 code=0x7ffc0000 [ 120.668412][ T8189] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 120.689703][ T29] audit: type=1326 audit(1736145073.389:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160f7e5d29 code=0x7ffc0000 [ 120.717090][ T8189] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 120.723353][ T29] audit: type=1326 audit(1736145073.389:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f160f7e7c7a code=0x7ffc0000 [ 120.756703][ T29] audit: type=1326 audit(1736145073.389:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f160f7e4690 code=0x7ffc0000 [ 120.763287][ T8198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.780203][ T29] audit: type=1326 audit(1736145073.389:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f160f7e47df code=0x7ffc0000 [ 120.817070][ T8196] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 120.823617][ T8196] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.831303][ T8196] vhci_hcd vhci_hcd.0: Device attached [ 120.832705][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 120.843322][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.850879][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 120.864135][ T8196] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 120.870778][ T8196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.878338][ T8196] vhci_hcd vhci_hcd.0: Device attached [ 120.887098][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 120.896109][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 120.906337][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 120.942218][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(5) [ 120.948844][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.956464][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 121.020636][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 121.027358][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.034916][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 121.074862][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 121.081536][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.089206][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 121.107995][ T8190] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(18) [ 121.114646][ T8190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.122328][ T8190] vhci_hcd vhci_hcd.0: Device attached [ 121.139708][ T8227] validate_nla: 3 callbacks suppressed [ 121.139726][ T8227] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 121.147689][ T8200] vhci_hcd: connection closed [ 121.153426][ T8220] vhci_hcd: connection closed [ 121.154663][ T8222] vhci_hcd: connection closed [ 121.159011][ T8205] vhci_hcd: connection closed [ 121.167865][ T50] vhci_hcd: stop threads [ 121.168028][ T8214] vhci_hcd: connection closed [ 121.172642][ T50] vhci_hcd: release socket [ 121.177811][ T8191] vhci_hcd: connection closed [ 121.181627][ T50] vhci_hcd: disconnect device [ 121.196590][ T8208] vhci_hcd: connection closed [ 121.202552][ T50] vhci_hcd: stop threads [ 121.202864][ T8228] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 121.207318][ T50] vhci_hcd: release socket [ 121.207335][ T50] vhci_hcd: disconnect device [ 121.223351][ T50] vhci_hcd: stop threads [ 121.233182][ T50] vhci_hcd: release socket [ 121.237880][ T50] vhci_hcd: disconnect device [ 121.245188][ T50] vhci_hcd: stop threads [ 121.249499][ T50] vhci_hcd: release socket [ 121.254040][ T50] vhci_hcd: disconnect device [ 121.259208][ T50] vhci_hcd: stop threads [ 121.263485][ T50] vhci_hcd: release socket [ 121.268082][ T50] vhci_hcd: disconnect device [ 121.286961][ T50] vhci_hcd: stop threads [ 121.291290][ T50] vhci_hcd: release socket [ 121.295763][ T50] vhci_hcd: disconnect device [ 121.307515][ T50] vhci_hcd: stop threads [ 121.311885][ T50] vhci_hcd: release socket [ 121.316742][ T50] vhci_hcd: disconnect device [ 121.327349][ T8232] dccp_xmit_packet: Payload too large (65475) for featneg. [ 121.400849][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 121.431766][ T8248] lo speed is unknown, defaulting to 1000 [ 121.687253][ T8262] lo speed is unknown, defaulting to 1000 [ 121.688071][ T8259] loop1: detected capacity change from 0 to 8192 [ 121.714900][ T8259] FAULT_INJECTION: forcing a failure. [ 121.714900][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 121.727651][ T8259] CPU: 0 UID: 0 PID: 8259 Comm: syz.1.1572 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 121.739834][ T8259] Tainted: [W]=WARN [ 121.743645][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.753782][ T8259] Call Trace: [ 121.757068][ T8259] [ 121.760003][ T8259] dump_stack_lvl+0xf2/0x150 [ 121.764662][ T8259] dump_stack+0x15/0x1a [ 121.768844][ T8259] should_fail_ex+0x223/0x230 [ 121.773553][ T8259] ? audit_log_d_path+0x96/0x250 [ 121.778507][ T8259] should_failslab+0x8f/0xb0 [ 121.783249][ T8259] __kmalloc_cache_noprof+0x4e/0x320 [ 121.788630][ T8259] audit_log_d_path+0x96/0x250 [ 121.793503][ T8259] ? __rcu_read_unlock+0x4e/0x70 [ 121.798544][ T8259] audit_log_d_path_exe+0x42/0x70 [ 121.803682][ T8259] audit_log_task+0x192/0x1c0 [ 121.808461][ T8259] audit_seccomp+0x68/0x130 [ 121.812997][ T8259] __seccomp_filter+0x6fa/0x1180 [ 121.817957][ T8259] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.823632][ T8259] ? vfs_write+0x596/0x920 [ 121.828070][ T8259] __secure_computing+0x9f/0x1c0 [ 121.833028][ T8259] syscall_trace_enter+0xd1/0x1f0 [ 121.838168][ T8259] ? __x64_sys_pread64+0xd7/0x150 [ 121.843249][ T8259] ? fpregs_assert_state_consistent+0x83/0xa0 [ 121.849389][ T8259] do_syscall_64+0xaa/0x1c0 [ 121.853949][ T8259] ? clear_bhb_loop+0x55/0xb0 [ 121.858638][ T8259] ? clear_bhb_loop+0x55/0xb0 [ 121.863325][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.869244][ T8259] RIP: 0033:0x7f3dbb51473c [ 121.873689][ T8259] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.893313][ T8259] RSP: 002b:00007f3db9b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.901781][ T8259] RAX: ffffffffffffffda RBX: 00007f3dbb705fa0 RCX: 00007f3dbb51473c [ 121.909764][ T8259] RDX: 000000000000000f RSI: 00007f3db9b870a0 RDI: 0000000000000004 [ 121.917740][ T8259] RBP: 00007f3db9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 121.925716][ T8259] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 121.933694][ T8259] R13: 0000000000000000 R14: 00007f3dbb705fa0 R15: 00007ffe96121028 [ 121.941764][ T8259] [ 121.947207][ T8] usb 5-1: enqueue for inactive port 0 [ 121.952733][ T8] usb 5-1: enqueue for inactive port 0 [ 121.975908][ T8266] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 121.977156][ T8268] loop3: detected capacity change from 0 to 2048 [ 121.991966][ T8266] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 122.023889][ T8] vhci_hcd: vhci_device speed not set [ 122.072946][ T8275] loop1: detected capacity change from 0 to 512 [ 122.087509][ T8268] Alternate GPT is invalid, using primary GPT. [ 122.094070][ T8268] loop3: p2 p3 p7 [ 122.103927][ T8275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.118018][ T8275] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.137008][ T8262] 9pnet_fd: Insufficient options for proto=fd [ 122.237278][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.266572][ T8288] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 122.292891][ T8288] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 122.315368][ T8291] IPv4: Oversized IP packet from 127.202.26.0 [ 122.410684][ T8300] xt_NFQUEUE: number of total queues is 0 [ 122.633622][ T8306] kernel profiling enabled (shift: 17) [ 122.678254][ T8306] lo speed is unknown, defaulting to 1000 [ 122.691418][ T8306] lo speed is unknown, defaulting to 1000 [ 122.705223][ T8306] lo speed is unknown, defaulting to 1000 [ 122.773276][ T8318] dccp_xmit_packet: Payload too large (65475) for featneg. [ 122.799930][ T8306] infiniband sz1: set active [ 122.804731][ T8306] infiniband sz1: added lo [ 122.811261][ T3379] lo speed is unknown, defaulting to 1000 [ 122.820585][ T8318] loop3: detected capacity change from 0 to 512 [ 122.831843][ T8318] journal_path: Lookup failure for './file0' [ 122.837275][ T8306] RDS/IB: sz1: added [ 122.837934][ T8318] EXT4-fs: error: could not find journal device path [ 122.857427][ T8306] smc: adding ib device sz1 with port count 1 [ 122.863840][ T8306] smc: ib device sz1 port 1 has pnetid [ 122.869874][ T3379] lo speed is unknown, defaulting to 1000 [ 122.886028][ T8306] lo speed is unknown, defaulting to 1000 [ 123.030770][ T8329] loop3: detected capacity change from 0 to 1024 [ 123.032772][ T8306] lo speed is unknown, defaulting to 1000 [ 123.062084][ T8325] lo speed is unknown, defaulting to 1000 [ 123.163532][ T3379] hid (null): invalid report_count 53044 [ 123.169267][ T3379] hid (null): unknown global tag 0xc [ 123.174735][ T3379] hid (null): unknown global tag 0x64 [ 123.180176][ T3379] hid (null): invalid report_count 359207902 [ 123.186304][ T3379] hid (null): global environment stack underflow [ 123.192832][ T3379] hid (null): global environment stack underflow [ 123.209704][ T8325] lo speed is unknown, defaulting to 1000 [ 123.222922][ T8345] syz.4.1599[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.223075][ T8345] syz.4.1599[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.237655][ T8345] syz.4.1599[8345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.252522][ T3379] hid-generic 0000:10001:0007.0003: collection stack underflow [ 123.258416][ T8345] dvmrp0: entered allmulticast mode [ 123.264201][ T3379] hid-generic 0000:10001:0007.0003: item 0 1 0 12 parsing failed [ 123.287623][ T3379] hid-generic 0000:10001:0007.0003: probe with driver hid-generic failed with error -22 [ 123.288849][ T8349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 123.303947][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.305546][ T8345] dvmrp0: left allmulticast mode [ 123.311447][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 123.337643][ T8353] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 123.344286][ T8353] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.352027][ T8353] vhci_hcd vhci_hcd.0: Device attached [ 123.358068][ T8306] lo speed is unknown, defaulting to 1000 [ 123.362557][ T8349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.391636][ T8349] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 123.398300][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.405901][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 123.416094][ T8349] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 123.422783][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.430604][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 123.471133][ T8349] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 123.477868][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.485347][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 123.502239][ T8353] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 123.508931][ T8353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.516690][ T8353] vhci_hcd vhci_hcd.0: Device attached [ 123.535691][ T8349] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(16) [ 123.542445][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.549920][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 123.555595][ T5114] vhci_hcd: vhci_device speed not set [ 123.563394][ T8306] lo speed is unknown, defaulting to 1000 [ 123.601037][ T8349] loop3: detected capacity change from 0 to 512 [ 123.614001][ T5114] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 123.624346][ T8350] vhci_hcd: connection reset by peer [ 123.629784][ T8371] vhci_hcd: connection closed [ 123.629797][ T8354] vhci_hcd: connection closed [ 123.629873][ T8371] ================================================================== [ 123.629914][ T8371] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 123.629958][ T8371] [ 123.629967][ T8371] write to 0xffffffff88bce9bd of 1 bytes by task 8354 on cpu 0: [ 123.629995][ T8369] vhci_hcd: connection closed [ 123.629989][ T8371] vsnprintf+0xdd8/0xe30 [ 123.630018][ T8371] vscnprintf+0x42/0x90 [ 123.630049][ T8371] printk_sprint+0x30/0x2d0 [ 123.630082][ T8371] vprintk_store+0x589/0x870 [ 123.630110][ T8371] vprintk_emit+0x15e/0x680 [ 123.630135][ T8371] vprintk_default+0x26/0x30 [ 123.630160][ T8371] vprintk+0x75/0x80 [ 123.630178][ T8371] _printk+0x7a/0xa0 [ 123.630191][ T8374] vhci_hcd: connection closed [ 123.630199][ T8371] vhci_rx_loop+0x4d1/0x980 [ 123.630226][ T8371] kthread+0x1d1/0x210 [ 123.630250][ T8371] ret_from_fork+0x4b/0x60 [ 123.630273][ T8371] ret_from_fork_asm+0x1a/0x30 [ 123.630297][ T8371] [ 123.630285][ T8365] vhci_hcd: connection closed [ 123.630303][ T8371] read to 0xffffffff88bce9b8 of 8 bytes by task 8371 on cpu 1: [ 123.630325][ T8371] data_push_tail+0x102/0x430 [ 123.630355][ T8371] data_alloc+0xbe/0x2c0 [ 123.630381][ T8371] prb_reserve+0x85e/0xb60 [ 123.630407][ T8371] vprintk_store+0x558/0x870 [ 123.630443][ T8371] vprintk_emit+0x15e/0x680 [ 123.630474][ T8371] vprintk_default+0x26/0x30 [ 123.630505][ T8371] vprintk+0x75/0x80 [ 123.630523][ T8371] _printk+0x7a/0xa0 [ 123.630543][ T8371] vhci_rx_loop+0x4d1/0x980 [ 123.630565][ T8371] kthread+0x1d1/0x210 [ 123.630586][ T8371] ret_from_fork+0x4b/0x60 [ 123.630609][ T8371] ret_from_fork_asm+0x1a/0x30 [ 123.630636][ T8371] [ 123.630643][ T8371] value changed: 0x00000000ffffebca -> 0x0000006465646573 [ 123.630659][ T8371] [ 123.630666][ T8371] Reported by Kernel Concurrency Sanitizer on: [ 123.630682][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: vhci_rx Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 123.630722][ T8371] Tainted: [W]=WARN [ 123.630731][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.630745][ T8371] ================================================================== [ 123.643938][ T8359] vhci_hcd: connection closed [ 123.650765][ T36] vhci_hcd: stop threads [ 123.856794][ T36] vhci_hcd: release socket [ 123.861251][ T36] vhci_hcd: disconnect device [ 123.873689][ T36] vhci_hcd: stop threads [ 123.877966][ T36] vhci_hcd: release socket [ 123.881117][ T8306] lo speed is unknown, defaulting to 1000 [ 123.882381][ T36] vhci_hcd: disconnect device [ 123.891422][ T36] vhci_hcd: stop threads [ 123.897153][ T36] vhci_hcd: release socket [ 123.901593][ T36] vhci_hcd: disconnect device [ 123.906596][ T36] vhci_hcd: stop threads [ 123.910851][ T36] vhci_hcd: release socket [ 123.915397][ T36] vhci_hcd: disconnect device [ 123.920618][ T36] vhci_hcd: stop threads [ 123.924925][ T36] vhci_hcd: release socket [ 123.929494][ T36] vhci_hcd: disconnect device [ 123.934941][ T36] vhci_hcd: stop threads [ 123.939293][ T36] vhci_hcd: release socket [ 123.943760][ T36] vhci_hcd: disconnect device [ 123.948826][ T36] vhci_hcd: stop threads [ 123.953081][ T36] vhci_hcd: release socket [ 123.957668][ T36] vhci_hcd: disconnect device [ 123.986651][ T8306] lo speed is unknown, defaulting to 1000 [ 128.683813][ T5114] usb 7-1: enqueue for inactive port 0 [ 128.689359][ T5114] usb 7-1: enqueue for inactive port 0 [ 128.763713][ T5114] vhci_hcd: vhci_device speed not set