last executing test programs: 7.581390634s ago: executing program 4 (id=747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x13f000, 0x800, 0x5, 0x6}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7.502101966s ago: executing program 4 (id=753): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 7.388942748s ago: executing program 4 (id=757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000b40)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x2b2, &(0x7f0000001b40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000680, 0x2000000006b0, 0x2000000006e0], 0x0, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{0x20, '2(\xacTZ\xab\x95@\xb5\x8b\xdb\xfa\xca\xc1\t\x00'}, {}]}, 0x1d) close(r6) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0x81ff) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000580)={0x9c, 0x8, 0x3, 0x1, 0x80000001}) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$eJzs3c9rFFccAPDvbBKjxtYIIm0PJeChFuvGJP1hoQd7LK1UaO92SdYg2biS3YhJheqhXnopUiilQukf0HuP0n+gf4XQClIktIdepsw6azbJ7ibG1WzdzwdG35s3mzdvZr6P9/btsgEMrInsn0LEqxHxbRJxuKVsOPLCiUfHrT28PpttSaTpZ38lkeT7mscn+f9jeeaViPjt64iTha311lZWF0qVSnkpz0/WF69M1lZWT11aLM2X58uXp2dmzrwzM/3+e+9uffHo7tr65vl/fvj07kdnvjm+9v0v94/cTuJsHMrLWtvxFG60ZiZiIr8mI3F204FTPaisnyR7fQLsylAe5yOR9QGHYyiPeuDF91VEpMCASsQ/DKjmOKA5t+86D05fvFnegw8bE6DRre1PHr03Evsbc6ODa8mGmVF2JcZ7UH9Wx69/3rmdbdG79yEAtnXjZkScHh7e0P+9HC393+6d3sExm+vQ/8Hzczcb/7w12mb8V3g8/ok245+xNrG7G9vHf+F+D6rpKBv/fdB2/Pt40Wp8KM+91BjzjSQXL1XKWd+WdZMnYmQ0y3dbzzmzdi/tVNY6/su2rP7mWDA/j/vDm9a75kr10tO0udWDmxGvDbdr//r4N2lz/7PrcX6HdRwr33m9U9n27X+20p8j3mh7/9fnOkn39cnJxvMw2Xwqtvr71rHfO9W/1+3P7v/B7u0fT1rXa2tPXsdP+/8tdyqbSPJF0yd8/vclnzfS+/J910r1+tJUxL7kk637p9df28w3j8/af+J4+/jv9vwfiIgvdtj+W0dvdTy0H+7/3BPd/w6JNOlYdO/jL3/sVP/O+r+3G6kT+Z6d9H9dznRD4mmuHQAAAAAAAPSbQkQciqRQfJwuFIrFR5/vOBoHC5VqrX7yYnX58lw0vis7HiOF5kr3WMvnIabyz8M289Ob8jMRcSQivhs60MgXZ6uVub1uPAAAAAAAAAAAAAAAAAAAAPSJsQ7f/8/8MbTXZwc8c37yGwbXtvHfi196AvpSl/h/8X7xF9jA+B8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXbenaw+uzWX7u6sryQvXqqblybaG4uDxbnK0uXSnOV6vzlXJxthrj2/y9SrV6ZWo6lq9N1stJfbK2snphsbp8uX7h0mJpvnyhPPJ8mgUAAAAAAAAAAAAAAAAAAAD/K7WV1YVSpVJekpDYVWK4P06jN4k0TdM+OI1+SOx1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/4LAAD//6lkOFk=") 7.098164572s ago: executing program 4 (id=767): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xfc, 0x5, 0x2, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x102, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 6.939809905s ago: executing program 4 (id=769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}}, 0x18) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0xecff04d905ffe9e9, 0x0, 0x8}, 0xfe}, 0x18) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xde) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 3.313049775s ago: executing program 4 (id=810): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4040) 1.144964771s ago: executing program 0 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.144186111s ago: executing program 0 (id=866): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) 1.092580402s ago: executing program 0 (id=867): socket(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x81, 0x0) r1 = syz_io_uring_setup(0x2af8, 0x0, &(0x7f0000000340), &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_uring_enter(r1, 0x14e2, 0x27b7, 0x69, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 898.879475ms ago: executing program 2 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 727.222008ms ago: executing program 2 (id=870): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030001407f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140200c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000500000000000000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x112d0c2, &(0x7f0000000140)=ANY=[@ANYBLOB="6d61703d6f66662c63727566742c696f636861727365743d61736369692c626c6f636b3d307830303988eee99740b8313030303230302c756e686964652c73657373696f6e3d3078303030303030303030303030303031312c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x5, 0xa29, &(0x7f0000001fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(r0, &(0x7f0000000800), 0x0, 0x44040, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r1 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000008c0)={0x0, &(0x7f0000000880)}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) 591.99468ms ago: executing program 3 (id=871): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000500000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x112d0c2, &(0x7f0000000140)=ANY=[@ANYBLOB="6d61703d6f66662c63727566742c696f636861727365743d61736369692c626c6f636b3d307830303988eee99740b8313030303230302c756e686964652c73657373696f6e3d3078303030303030303030303030303031312c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x5, 0xa29, &(0x7f0000001fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(r0, &(0x7f0000000800), 0x0, 0x44040, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r1 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000700)="aa3d95f9fe334d5ee17863e94f5d5991dd647f5c1528c984424921b71fef95b2bf19671babd39e3b8118b7bc864753d0eccb3d92b6a3673563c5ba0b7e266f0afe70466cb582013f4cda82a050e2b077fa44b295a2c03891b5fe93c342189ee1e6613607e9bce60807df9be36a21eb2a45e01906f53ef8fbd1491fb35b3ec4e08e73ae4c849753821ddac61f9603551b96ded0a34e8b4facc7d5a8d493e9e32f8ea39ccc745096ad22b046a84ca467868d8c3cdef6f2780e58a6e04491b906225bbf0bc1eefbe60cdb3deeac7983065d432b39ea8f8737", 0xd7, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='.dead\x00', &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000008c0)={0x5, &(0x7f0000000880)=[{0x7, 0x0, 0x7, 0x3}, {0x100, 0x1, 0x4, 0x9}, {0xfff9, 0x4, 0x80, 0xd}, {0x1, 0x81, 0x7, 0x6}, {0x5, 0x40, 0x5, 0xfffffffe}]}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) 520.058441ms ago: executing program 2 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000380)={0x2, 0x8000000000000001, 0x1, 0x4}) 501.304931ms ago: executing program 2 (id=873): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 451.059602ms ago: executing program 2 (id=874): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000010002100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 423.643883ms ago: executing program 3 (id=876): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000001180)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}, 0x80) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x8, 0x7, &(0x7f0000000180)=""/11, &(0x7f00000002c0)=0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0}, &(0x7f0000000c80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, 0x41, 0x4}}], 0x48, 0x2000054}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x10, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"], 0x10) r10 = openat$cgroup(r7, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000540)='memory.stat\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20) 375.950714ms ago: executing program 1 (id=877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf251e0000000800040001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xda14d2f5d07001c7}, 0x84) 375.352954ms ago: executing program 2 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x6044}, 0x6) 358.974244ms ago: executing program 3 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x9}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) (fail_nth: 3) 358.694584ms ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\n\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044000000000000402d000000000000004c37160000200002"], 0x6c}}, 0x0) 296.879725ms ago: executing program 1 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r6) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 296.506605ms ago: executing program 3 (id=882): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="89000000120081ae08060cdc030001407f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140200c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000500000000000000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095000000000000007f0a99860360fd2ab6daf77b4c832822626033cc1d8daa308fe8d035dfce5653053079aacb1c9daab34c3bb3880e547b119aebab4bd37a456a4596a2382bb5f07a1b8a07c1682549b1fe8b3eaaa66f959fb08b6876c5075a2180d76c193a9154b4e93c445881f3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x112d0c2, &(0x7f0000000140)=ANY=[@ANYBLOB="6d61703d6f66662c63727566742c696f636861727365743d61736369692c626c6f636b3d307830303988eee99740b8313030303230302c756e686964652c73657373696f6e3d3078303030303030303030303030303031312c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x5, 0xa29, &(0x7f0000001fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(r0, &(0x7f0000000800), 0x0, 0x44040, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r1 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000008c0)={0x0, &(0x7f0000000880)}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) 295.019105ms ago: executing program 1 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000380)={0x2, 0x8000000000000001, 0x1, 0x4}) 255.662175ms ago: executing program 1 (id=884): syz_emit_ethernet(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 215.591826ms ago: executing program 0 (id=885): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40194) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB="ac1414bbf05d238c00000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000082b00000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000e7000000000000000000000000000000eeabcf20564a8e62df36eefe0000000000000000000000000000000001000000000000000000000000020001036f0000000107000048000200656362286369706865725f6e756c6c2900"/208], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000227bd7000fbdbdf253000000008000300", @ANYRES32=r2, @ANYBLOB="0a62ae0300000006000000000000001d2ead82bc15032157d2ffa42c45966c5308895904a429d36b61b87db14557c4afd2e5d9af5e9f4cd4dd7372b3dfc8d18bd9874e0de0aac6af68b3"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES16=r6, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x4040041}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 175.883217ms ago: executing program 3 (id=886): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xa0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000500000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x112d0c2, &(0x7f0000000140)=ANY=[@ANYBLOB="6d61703d6f66662c63727566742c696f636861727365743d61736369692c626c6f636b3d307830303988eee99740b8313030303230302c756e686964652c73657373696f6e3d3078303030303030303030303030303031312c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x5, 0xa29, &(0x7f0000001fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(r0, &(0x7f0000000800), 0x0, 0x44040, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r1 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000700)="aa3d95f9fe334d5ee17863e94f5d5991dd647f5c1528c984424921b71fef95b2bf19671babd39e3b8118b7bc864753d0eccb3d92b6a3673563c5ba0b7e266f0afe70466cb582013f4cda82a050e2b077fa44b295a2c03891b5fe93c342189ee1e6613607e9bce60807df9be36a21eb2a45e01906f53ef8fbd1491fb35b3ec4e08e73ae4c849753821ddac61f9603551b96ded0a34e8b4facc7d5a8d493e9e32f8ea39ccc745096ad22b046a84ca467868d8c3cdef6f2780e58a6e04491b906225bbf0bc1eefbe60cdb3deeac7983065d432b39ea8f8737", 0xd7, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='.dead\x00', &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000008c0)={0x5, &(0x7f0000000880)=[{0x7, 0x0, 0x7, 0x3}, {0x100, 0x1, 0x4, 0x9}, {0xfff9, 0x4, 0x80, 0xd}, {0x1, 0x81, 0x7, 0x6}, {0x5, 0x40, 0x5, 0xfffffffe}]}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) 77.298239ms ago: executing program 1 (id=887): syz_emit_ethernet(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 57.391019ms ago: executing program 3 (id=888): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x880) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0x1, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x8003, 0x774f}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x7, 0xff, 0xfe, 0x7}, {0x7, 0x97, 0x21, 0x40}, {0x7, 0x4, 0x7}, {0x100, 0x6, 0x2, 0x80}, {0x0, 0x6, 0x2, 0x8000}, {0xffff, 0x81, 0x4, 0x7}, {0x60, 0xf, 0x5e, 0x3f}, {0x4369, 0xfa, 0x7, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 37.276539ms ago: executing program 0 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 0s ago: executing program 0 (id=890): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040c5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r9, r10}, 0xc) kernel console output (not intermixed with test programs): Comm: syz.3.292 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 62.503100][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.503113][ T4551] Call Trace: [ 62.503119][ T4551] [ 62.503126][ T4551] dump_stack_lvl+0xf6/0x150 [ 62.503157][ T4551] dump_stack+0x15/0x1a [ 62.503173][ T4551] should_fail_ex+0x261/0x270 [ 62.503251][ T4551] should_fail+0xb/0x10 [ 62.503279][ T4551] should_fail_usercopy+0x1a/0x20 [ 62.503314][ T4551] _copy_from_user+0x1c/0xa0 [ 62.503354][ T4551] usbdev_ioctl+0x1212/0x3e70 [ 62.503402][ T4551] ? __pfx_usbdev_ioctl+0x10/0x10 [ 62.503437][ T4551] __se_sys_ioctl+0xc9/0x140 [ 62.503466][ T4551] __x64_sys_ioctl+0x43/0x50 [ 62.503536][ T4551] x64_sys_call+0x168d/0x2e10 [ 62.503608][ T4551] do_syscall_64+0xc9/0x1c0 [ 62.503708][ T4551] ? clear_bhb_loop+0x25/0x80 [ 62.503734][ T4551] ? clear_bhb_loop+0x25/0x80 [ 62.503767][ T4551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.503853][ T4551] RIP: 0033:0x7f5d44fcd169 [ 62.503873][ T4551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.503891][ T4551] RSP: 002b:00007f5d4360e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.503909][ T4551] RAX: ffffffffffffffda RBX: 00007f5d451e6080 RCX: 00007f5d44fcd169 [ 62.503920][ T4551] RDX: 0000200000000000 RSI: 000000008108551b RDI: 0000000000000004 [ 62.503935][ T4551] RBP: 00007f5d4360e090 R08: 0000000000000000 R09: 0000000000000000 [ 62.503947][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.503958][ T4551] R13: 0000000000000000 R14: 00007f5d451e6080 R15: 00007ffde41cfa58 [ 62.503976][ T4551] [ 62.755623][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.823019][ T4558] vlan0: entered allmulticast mode [ 62.844976][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 63.023131][ T4579] loop4: detected capacity change from 0 to 1764 [ 63.041572][ T4579] loop4: detected capacity change from 0 to 128 [ 63.044064][ T4583] FAULT_INJECTION: forcing a failure. [ 63.044064][ T4583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.061233][ T4583] CPU: 0 UID: 0 PID: 4583 Comm: syz.1.305 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 63.061301][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.061314][ T4583] Call Trace: [ 63.061319][ T4583] [ 63.061327][ T4583] dump_stack_lvl+0xf6/0x150 [ 63.061355][ T4583] dump_stack+0x15/0x1a [ 63.061376][ T4583] should_fail_ex+0x261/0x270 [ 63.061487][ T4583] should_fail+0xb/0x10 [ 63.061510][ T4583] should_fail_usercopy+0x1a/0x20 [ 63.061560][ T4583] _copy_from_user+0x1c/0xa0 [ 63.061675][ T4583] restore_altstack+0x4d/0xd0 [ 63.061707][ T4583] __do_sys_rt_sigreturn+0xe5/0x180 [ 63.061768][ T4583] x64_sys_call+0x2b49/0x2e10 [ 63.061799][ T4583] do_syscall_64+0xc9/0x1c0 [ 63.061831][ T4583] ? clear_bhb_loop+0x25/0x80 [ 63.061852][ T4583] ? clear_bhb_loop+0x25/0x80 [ 63.062020][ T4583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.062045][ T4583] RIP: 0033:0x7f4e66739359 [ 63.062059][ T4583] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 63.062080][ T4583] RSP: 002b:00007f4e64e06a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 63.062102][ T4583] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e66739359 [ 63.062129][ T4583] RDX: 00007f4e64e06a80 RSI: 00007f4e64e06bb0 RDI: 0000000000000021 [ 63.062144][ T4583] RBP: 00007f4e64e07090 R08: 0000000000000f3a R09: 0000000000000000 [ 63.062214][ T4583] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 63.062307][ T4583] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 63.062335][ T4583] [ 63.234054][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.368377][ T4603] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 63.378602][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.461819][ T4611] FAULT_INJECTION: forcing a failure. [ 63.461819][ T4611] name failslab, interval 1, probability 0, space 0, times 0 [ 63.474578][ T4611] CPU: 0 UID: 0 PID: 4611 Comm: syz.1.317 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 63.474681][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.474695][ T4611] Call Trace: [ 63.474704][ T4611] [ 63.474712][ T4611] dump_stack_lvl+0xf6/0x150 [ 63.474740][ T4611] dump_stack+0x15/0x1a [ 63.474757][ T4611] should_fail_ex+0x261/0x270 [ 63.474834][ T4611] should_failslab+0x8f/0xb0 [ 63.474869][ T4611] __kmalloc_noprof+0xad/0x410 [ 63.474894][ T4611] ? alloc_pipe_info+0x1cb/0x360 [ 63.475049][ T4611] alloc_pipe_info+0x1cb/0x360 [ 63.475082][ T4611] create_pipe_files+0x67/0x400 [ 63.475120][ T4611] ? __fget_files+0x186/0x1c0 [ 63.475151][ T4611] __do_pipe_flags+0x46/0x190 [ 63.475208][ T4611] do_pipe2+0x69/0x140 [ 63.475231][ T4611] __x64_sys_pipe2+0x30/0x40 [ 63.475263][ T4611] x64_sys_call+0x2a4f/0x2e10 [ 63.475294][ T4611] do_syscall_64+0xc9/0x1c0 [ 63.475330][ T4611] ? clear_bhb_loop+0x25/0x80 [ 63.475357][ T4611] ? clear_bhb_loop+0x25/0x80 [ 63.475383][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.475459][ T4611] RIP: 0033:0x7f4e6679d169 [ 63.475474][ T4611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.475491][ T4611] RSP: 002b:00007f4e64e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 63.475520][ T4611] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e6679d169 [ 63.475535][ T4611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.475549][ T4611] RBP: 00007f4e64e07090 R08: 0000000000000000 R09: 0000000000000000 [ 63.475563][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.475577][ T4611] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 63.475596][ T4611] [ 63.817637][ T4628] loop2: detected capacity change from 0 to 512 [ 63.960566][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.973246][ T4628] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.042741][ T4633] 1ªX¹¦À: renamed from 60ªX¹¦À [ 64.064509][ T4633] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 64.159986][ T4642] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 64.393529][ T4649] FAULT_INJECTION: forcing a failure. [ 64.393529][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 64.406367][ T4649] CPU: 0 UID: 0 PID: 4649 Comm: syz.3.327 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 64.406400][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.406415][ T4649] Call Trace: [ 64.406453][ T4649] [ 64.406461][ T4649] dump_stack_lvl+0xf6/0x150 [ 64.406486][ T4649] dump_stack+0x15/0x1a [ 64.406505][ T4649] should_fail_ex+0x261/0x270 [ 64.406539][ T4649] should_failslab+0x8f/0xb0 [ 64.406653][ T4649] __kmalloc_cache_noprof+0x55/0x320 [ 64.406740][ T4649] ? audit_log_d_path+0x8e/0x150 [ 64.406771][ T4649] audit_log_d_path+0x8e/0x150 [ 64.406793][ T4649] audit_log_d_path_exe+0x42/0x70 [ 64.406824][ T4649] audit_log_task+0x1f1/0x250 [ 64.406845][ T4649] audit_seccomp+0x68/0x130 [ 64.406869][ T4649] __seccomp_filter+0x694/0x10e0 [ 64.406907][ T4649] ? __perf_event_task_sched_out+0x13c/0xf00 [ 64.406934][ T4649] ? switch_ldt+0x7f/0x140 [ 64.406965][ T4649] ? _raw_spin_unlock+0x26/0x50 [ 64.406988][ T4649] __secure_computing+0x7e/0x160 [ 64.407018][ T4649] syscall_trace_enter+0xcf/0x1f0 [ 64.407078][ T4649] do_syscall_64+0xaa/0x1c0 [ 64.407114][ T4649] ? clear_bhb_loop+0x25/0x80 [ 64.407160][ T4649] ? clear_bhb_loop+0x25/0x80 [ 64.407182][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.407203][ T4649] RIP: 0033:0x7f5d44fcd169 [ 64.407218][ T4649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.407268][ T4649] RSP: 002b:00007f5d4362f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 64.407289][ T4649] RAX: ffffffffffffffda RBX: 00007f5d451e5fa0 RCX: 00007f5d44fcd169 [ 64.407302][ T4649] RDX: 00002000000001c0 RSI: 0000200000000080 RDI: ffffffffffffffff [ 64.407317][ T4649] RBP: 00007f5d4362f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.407331][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.407376][ T4649] R13: 0000000000000000 R14: 00007f5d451e5fa0 R15: 00007ffde41cfa58 [ 64.407398][ T4649] [ 64.829040][ T4657] __nla_validate_parse: 21 callbacks suppressed [ 64.829054][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 64.857029][ T4659] loop3: detected capacity change from 0 to 512 [ 64.880652][ T4659] EXT4-fs (loop3): 1 orphan inode deleted [ 64.886936][ T4659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.901180][ T3704] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 64.919123][ T4659] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.962914][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 64.999534][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.052528][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 65.141134][ T4678] siw: device registration error -23 [ 65.369468][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 65.369482][ T29] audit: type=1326 audit(1743850349.968:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 65.403780][ T29] audit: type=1326 audit(1743850349.998:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 65.427363][ T29] audit: type=1326 audit(1743850349.998:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 65.450790][ T29] audit: type=1326 audit(1743850349.998:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 65.545549][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.571668][ T29] audit: type=1400 audit(1743850350.158:2176): avc: denied { ioctl } for pid=4682 comm="syz.3.335" path="socket:[9025]" dev="sockfs" ino=9025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.620756][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 65.659684][ T29] audit: type=1400 audit(1743850350.258:2177): avc: denied { create } for pid=4691 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.687473][ T29] audit: type=1400 audit(1743850350.258:2178): avc: denied { bind } for pid=4691 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.706954][ T29] audit: type=1400 audit(1743850350.258:2179): avc: denied { name_bind } for pid=4691 comm="syz.2.345" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 65.727693][ T29] audit: type=1400 audit(1743850350.258:2180): avc: denied { node_bind } for pid=4691 comm="syz.2.345" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 65.748501][ T29] audit: type=1400 audit(1743850350.258:2181): avc: denied { listen } for pid=4691 comm="syz.2.345" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.780379][ T4696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.347'. [ 65.801400][ T4695] net_ratelimit: 6 callbacks suppressed [ 65.801418][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.815417][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.826457][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.840396][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.848886][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.868151][ T4704] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.878491][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.890838][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.899222][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.907675][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.915999][ T4695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.945738][ T4706] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 65.953596][ T4706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.351'. [ 65.973325][ T4704] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.010550][ T4704] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.022990][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 66.040881][ T4713] bond0: (slave bond_slave_0): Releasing backup interface [ 66.050067][ T4713] bond_slave_0 (unregistering): left allmulticast mode [ 66.101608][ T4704] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.143140][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 66.178917][ T4704] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.192356][ T4704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.204475][ T4724] syz.0.359 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.232277][ T4704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.251601][ T4704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.303790][ T4735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.363'. [ 66.380836][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.388975][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.396908][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.405246][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.413197][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.421010][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.428825][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.436679][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.444472][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.452242][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.460059][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.467878][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.475649][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.483531][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.491369][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.499222][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.506962][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.514820][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.522615][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.530478][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.538255][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.546048][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.553824][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.561674][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.569472][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.577239][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.585017][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.592812][ T3384] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 66.608629][ T3384] hid-generic 0000:0000:20000000.0007: hidraw0: HID v0.01 Device [syz0] on syz1 [ 66.635333][ T4755] 9pnet: p9_errstr2errno: server reported unknown error [ 66.654912][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 66.745018][ T4764] can0: slcan on ttyS3. [ 66.859283][ T4764] can0 (unregistered): slcan off ttyS3. [ 66.969221][ T4775] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.043702][ T4781] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 67.194208][ T4781] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.202890][ T4781] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.211301][ T4781] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.273101][ T4788] loop0: detected capacity change from 0 to 1764 [ 67.331379][ T4781] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 67.351622][ T4788] loop0: detected capacity change from 0 to 128 [ 67.358538][ T4788] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.396295][ T4788] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.406017][ T4792] 9pnet: p9_errstr2errno: server reported unknown error [ 67.806302][ T4824] siw: device registration error -23 [ 68.321978][ T4855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.449831][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.457761][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.465713][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.581271][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.589176][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.596925][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.604711][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.612620][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.620589][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.628393][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.636161][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.644018][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.651864][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.695187][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.703209][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.711239][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.719042][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.726855][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.734711][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.742499][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.750389][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.758149][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.766049][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.773846][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.781715][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.789495][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.797251][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.805082][ T4345] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 68.865215][ T4345] hid-generic 0000:0000:20000000.0008: hidraw0: HID v0.01 Device [syz0] on syz1 [ 68.950592][ T4874] loop2: detected capacity change from 0 to 1764 [ 68.974923][ T4874] loop2: detected capacity change from 0 to 128 [ 68.981984][ T4874] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.998909][ T4878] loop4: detected capacity change from 0 to 512 [ 69.005482][ T4878] EXT4-fs: Ignoring removed oldalloc option [ 69.025075][ T4874] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.038943][ T4880] FAULT_INJECTION: forcing a failure. [ 69.038943][ T4880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.052285][ T4880] CPU: 0 UID: 0 PID: 4880 Comm: syz.0.419 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 69.052318][ T4880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.052332][ T4880] Call Trace: [ 69.052340][ T4880] [ 69.052347][ T4880] dump_stack_lvl+0xf6/0x150 [ 69.052372][ T4880] dump_stack+0x15/0x1a [ 69.052393][ T4880] should_fail_ex+0x261/0x270 [ 69.052483][ T4880] should_fail+0xb/0x10 [ 69.052512][ T4880] should_fail_usercopy+0x1a/0x20 [ 69.052545][ T4880] _copy_from_user+0x1c/0xa0 [ 69.052596][ T4880] __sys_bpf+0x16a/0x800 [ 69.052631][ T4880] __x64_sys_bpf+0x43/0x50 [ 69.052662][ T4880] x64_sys_call+0x23da/0x2e10 [ 69.052685][ T4880] do_syscall_64+0xc9/0x1c0 [ 69.052730][ T4880] ? clear_bhb_loop+0x25/0x80 [ 69.052751][ T4880] ? clear_bhb_loop+0x25/0x80 [ 69.052772][ T4880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.052794][ T4880] RIP: 0033:0x7f54948ad169 [ 69.052811][ T4880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.052873][ T4880] RSP: 002b:00007f5492f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.052893][ T4880] RAX: ffffffffffffffda RBX: 00007f5494ac5fa0 RCX: 00007f54948ad169 [ 69.052905][ T4880] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 69.052916][ T4880] RBP: 00007f5492f17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.052983][ T4880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.052997][ T4880] R13: 0000000000000000 R14: 00007f5494ac5fa0 R15: 00007ffe73c938a8 [ 69.053019][ T4880] [ 69.231372][ T4878] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 69.263027][ T4878] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.416: Bad quota inode: 3, type: 0 [ 69.285484][ T4878] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 69.300509][ T4878] EXT4-fs (loop4): mount failed [ 69.335022][ T4887] siw: device registration error -23 [ 69.357504][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.365350][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.373134][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.380962][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.388782][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.396530][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.404384][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.412227][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.420051][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.427838][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.435651][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.443447][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.451706][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.460233][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.468003][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.475797][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.483672][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.491469][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.499312][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.507057][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.514928][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.522722][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.530564][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.538398][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.546197][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.553999][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.561775][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.569573][ T3446] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 69.577669][ T3446] hid-generic 0000:0000:20000000.0009: hidraw0: HID v0.01 Device [syz0] on syz1 [ 69.696915][ T4897] capability: warning: `syz.1.425' uses deprecated v2 capabilities in a way that may be insecure [ 69.977247][ T4920] __nla_validate_parse: 23 callbacks suppressed [ 69.977263][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 70.065482][ T4937] loop3: detected capacity change from 0 to 512 [ 70.100233][ T4937] EXT4-fs (loop3): too many log groups per flexible block group [ 70.108021][ T4937] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 70.133459][ T4937] EXT4-fs (loop3): mount failed [ 70.222267][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 70.285092][ T4958] FAULT_INJECTION: forcing a failure. [ 70.285092][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.298407][ T4958] CPU: 1 UID: 0 PID: 4958 Comm: syz.3.448 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 70.298441][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.298474][ T4958] Call Trace: [ 70.298480][ T4958] [ 70.298488][ T4958] dump_stack_lvl+0xf6/0x150 [ 70.298524][ T4958] dump_stack+0x15/0x1a [ 70.298549][ T4958] should_fail_ex+0x261/0x270 [ 70.298582][ T4958] should_fail+0xb/0x10 [ 70.298636][ T4958] should_fail_usercopy+0x1a/0x20 [ 70.298768][ T4958] _copy_from_user+0x1c/0xa0 [ 70.298806][ T4958] copy_msghdr_from_user+0x54/0x2b0 [ 70.298851][ T4958] ? __fget_files+0x186/0x1c0 [ 70.298873][ T4958] __sys_sendmsg+0x141/0x240 [ 70.298916][ T4958] __x64_sys_sendmsg+0x46/0x50 [ 70.298946][ T4958] x64_sys_call+0x26f3/0x2e10 [ 70.299017][ T4958] do_syscall_64+0xc9/0x1c0 [ 70.299107][ T4958] ? clear_bhb_loop+0x25/0x80 [ 70.299205][ T4958] ? clear_bhb_loop+0x25/0x80 [ 70.299227][ T4958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.299252][ T4958] RIP: 0033:0x7f5d44fcd169 [ 70.299269][ T4958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.299289][ T4958] RSP: 002b:00007f5d4362f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.299362][ T4958] RAX: ffffffffffffffda RBX: 00007f5d451e5fa0 RCX: 00007f5d44fcd169 [ 70.299374][ T4958] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 70.299385][ T4958] RBP: 00007f5d4362f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.299396][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.299410][ T4958] R13: 0000000000000000 R14: 00007f5d451e5fa0 R15: 00007ffde41cfa58 [ 70.299431][ T4958] [ 70.329472][ T4960] dummy0: left allmulticast mode [ 70.480214][ T4960] bridge0: port 3(dummy0) entered disabled state [ 70.494052][ T4960] bridge_slave_0: left allmulticast mode [ 70.499872][ T4960] bridge_slave_0: left promiscuous mode [ 70.505622][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.509417][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 70.509433][ T29] audit: type=1326 audit(1743850355.098:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.551057][ T29] audit: type=1326 audit(1743850355.138:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.574516][ T29] audit: type=1326 audit(1743850355.148:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.577446][ T4960] bridge_slave_1: left allmulticast mode [ 70.598075][ T29] audit: type=1326 audit(1743850355.148:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.603679][ T4960] bridge_slave_1: left promiscuous mode [ 70.603818][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.628118][ T29] audit: type=1326 audit(1743850355.148:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.663076][ T29] audit: type=1326 audit(1743850355.148:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.686407][ T29] audit: type=1326 audit(1743850355.148:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.709738][ T29] audit: type=1326 audit(1743850355.148:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.711174][ T4965] loop2: detected capacity change from 0 to 1764 [ 70.733162][ T29] audit: type=1326 audit(1743850355.148:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.733196][ T29] audit: type=1326 audit(1743850355.148:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 70.786995][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 70.800403][ T4960] bond0: (slave bond_slave_0): Releasing backup interface [ 70.817124][ T4965] loop2: detected capacity change from 0 to 128 [ 70.824281][ T4960] bond_slave_0: left allmulticast mode [ 70.831875][ T4965] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.845185][ T4960] bond0: (slave bond_slave_1): Releasing backup interface [ 70.853006][ T4965] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.864619][ T4960] bond_slave_1: left allmulticast mode [ 70.882475][ T4960] team0: Port device team_slave_0 removed [ 70.897480][ T4960] team0: Port device team_slave_1 removed [ 70.904372][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.911926][ T4960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.914250][ T4974] loop4: detected capacity change from 0 to 1764 [ 70.927302][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.934818][ T4960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.942013][ T4974] loop4: detected capacity change from 0 to 128 [ 70.958348][ T4960] team0: Port device geneve1 removed [ 71.028792][ T23] net_ratelimit: 98 callbacks suppressed [ 71.028806][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.045832][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 71.049188][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.067739][ T4983] loop2: detected capacity change from 0 to 1764 [ 71.137757][ T4979] vlan0: entered allmulticast mode [ 71.167109][ T4983] loop2: detected capacity change from 0 to 128 [ 71.175306][ T4983] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.188151][ T4983] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.231017][ T4996] FAULT_INJECTION: forcing a failure. [ 71.231017][ T4996] name failslab, interval 1, probability 0, space 0, times 0 [ 71.243880][ T4996] CPU: 0 UID: 0 PID: 4996 Comm: syz.4.462 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 71.243911][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.243924][ T4996] Call Trace: [ 71.243956][ T4996] [ 71.243965][ T4996] dump_stack_lvl+0xf6/0x150 [ 71.244109][ T4996] dump_stack+0x15/0x1a [ 71.244130][ T4996] should_fail_ex+0x261/0x270 [ 71.244159][ T4996] should_failslab+0x8f/0xb0 [ 71.244190][ T4996] kmem_cache_alloc_noprof+0x59/0x340 [ 71.244211][ T4996] ? skb_clone+0x154/0x1f0 [ 71.244248][ T4996] skb_clone+0x154/0x1f0 [ 71.244280][ T4996] __netlink_deliver_tap+0x2bd/0x4f0 [ 71.244315][ T4996] netlink_unicast+0x69e/0x6c0 [ 71.244343][ T4996] netlink_sendmsg+0x609/0x720 [ 71.244374][ T4996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.244494][ T4996] __sock_sendmsg+0x140/0x180 [ 71.244531][ T4996] ____sys_sendmsg+0x350/0x4e0 [ 71.244632][ T4996] __sys_sendmsg+0x1a0/0x240 [ 71.244685][ T4996] __x64_sys_sendmsg+0x46/0x50 [ 71.244717][ T4996] x64_sys_call+0x26f3/0x2e10 [ 71.244773][ T4996] do_syscall_64+0xc9/0x1c0 [ 71.244807][ T4996] ? clear_bhb_loop+0x25/0x80 [ 71.244832][ T4996] ? clear_bhb_loop+0x25/0x80 [ 71.244858][ T4996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.244885][ T4996] RIP: 0033:0x7fd5eebad169 [ 71.244944][ T4996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.244963][ T4996] RSP: 002b:00007fd5ed217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.245058][ T4996] RAX: ffffffffffffffda RBX: 00007fd5eedc5fa0 RCX: 00007fd5eebad169 [ 71.245071][ T4996] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 71.245083][ T4996] RBP: 00007fd5ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 71.245097][ T4996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.245110][ T4996] R13: 0000000000000000 R14: 00007fd5eedc5fa0 R15: 00007ffd71d87de8 [ 71.245133][ T4996] [ 71.449200][ T3704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.457522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.475329][ T5000] wg2: entered promiscuous mode [ 71.480606][ T5000] wg2: entered allmulticast mode [ 71.522192][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 71.554409][ T5010] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.565021][ T5007] loop2: detected capacity change from 0 to 1764 [ 71.593258][ T5007] loop2: detected capacity change from 0 to 128 [ 71.600493][ T5007] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.613465][ T5007] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.614212][ T5010] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.676626][ T5015] siw: device registration error -23 [ 71.685598][ T5010] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.745897][ T5010] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.821400][ T5010] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.834805][ T5010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.847407][ T5010] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.856091][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.864222][ T3446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.869942][ T5010] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.872455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.946551][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 72.003602][ T5022] syz.0.474 uses obsolete (PF_INET,SOCK_PACKET) [ 72.089154][ T5024] process 'syz.3.475' launched '/dev/fd/7' with NULL argv: empty string added [ 72.112085][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.143525][ T5030] FAULT_INJECTION: forcing a failure. [ 72.143525][ T5030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.156779][ T5030] CPU: 0 UID: 0 PID: 5030 Comm: syz.0.476 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 72.156812][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.156827][ T5030] Call Trace: [ 72.156835][ T5030] [ 72.156844][ T5030] dump_stack_lvl+0xf6/0x150 [ 72.156948][ T5030] dump_stack+0x15/0x1a [ 72.156970][ T5030] should_fail_ex+0x261/0x270 [ 72.157002][ T5030] should_fail+0xb/0x10 [ 72.157121][ T5030] should_fail_usercopy+0x1a/0x20 [ 72.157149][ T5030] _copy_to_user+0x20/0xa0 [ 72.157183][ T5030] simple_read_from_buffer+0xb2/0x130 [ 72.157288][ T5030] proc_fail_nth_read+0x103/0x140 [ 72.157324][ T5030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.157362][ T5030] vfs_read+0x1b2/0x710 [ 72.157398][ T5030] ? __rcu_read_unlock+0x4e/0x70 [ 72.157434][ T5030] ? __fget_files+0x186/0x1c0 [ 72.157489][ T5030] ksys_read+0xeb/0x1b0 [ 72.157519][ T5030] __x64_sys_read+0x42/0x50 [ 72.157551][ T5030] x64_sys_call+0x2a3b/0x2e10 [ 72.157634][ T5030] do_syscall_64+0xc9/0x1c0 [ 72.157665][ T5030] ? clear_bhb_loop+0x25/0x80 [ 72.157691][ T5030] ? clear_bhb_loop+0x25/0x80 [ 72.157718][ T5030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.157769][ T5030] RIP: 0033:0x7f54948abb7c [ 72.157787][ T5030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.157808][ T5030] RSP: 002b:00007f5492f17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.157831][ T5030] RAX: ffffffffffffffda RBX: 00007f5494ac5fa0 RCX: 00007f54948abb7c [ 72.157844][ T5030] RDX: 000000000000000f RSI: 00007f5492f170a0 RDI: 0000000000000004 [ 72.157857][ T5030] RBP: 00007f5492f17090 R08: 0000000000000000 R09: 0000000000000014 [ 72.157872][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.157909][ T5030] R13: 0000000000000000 R14: 00007f5494ac5fa0 R15: 00007ffe73c938a8 [ 72.157926][ T5030] [ 72.405526][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 72.414510][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 72.423498][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 72.512854][ T5036] FAULT_INJECTION: forcing a failure. [ 72.512854][ T5036] name failslab, interval 1, probability 0, space 0, times 0 [ 72.525583][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.0.479 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 72.525732][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.525747][ T5036] Call Trace: [ 72.525755][ T5036] [ 72.525764][ T5036] dump_stack_lvl+0xf6/0x150 [ 72.525860][ T5036] dump_stack+0x15/0x1a [ 72.525880][ T5036] should_fail_ex+0x261/0x270 [ 72.525907][ T5036] should_failslab+0x8f/0xb0 [ 72.525968][ T5036] kmem_cache_alloc_noprof+0x59/0x340 [ 72.525996][ T5036] ? skb_clone+0x154/0x1f0 [ 72.526095][ T5036] skb_clone+0x154/0x1f0 [ 72.526128][ T5036] __netlink_deliver_tap+0x2bd/0x4f0 [ 72.526211][ T5036] netlink_unicast+0x69e/0x6c0 [ 72.526233][ T5036] netlink_sendmsg+0x609/0x720 [ 72.526299][ T5036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.526328][ T5036] __sock_sendmsg+0x140/0x180 [ 72.526365][ T5036] ____sys_sendmsg+0x350/0x4e0 [ 72.526466][ T5036] __sys_sendmsg+0x1a0/0x240 [ 72.526509][ T5036] __x64_sys_sendmsg+0x46/0x50 [ 72.526541][ T5036] x64_sys_call+0x26f3/0x2e10 [ 72.526568][ T5036] do_syscall_64+0xc9/0x1c0 [ 72.526646][ T5036] ? clear_bhb_loop+0x25/0x80 [ 72.526667][ T5036] ? clear_bhb_loop+0x25/0x80 [ 72.526725][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.526760][ T5036] RIP: 0033:0x7f54948ad169 [ 72.526777][ T5036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.526794][ T5036] RSP: 002b:00007f5492f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.526812][ T5036] RAX: ffffffffffffffda RBX: 00007f5494ac5fa0 RCX: 00007f54948ad169 [ 72.526823][ T5036] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 72.526836][ T5036] RBP: 00007f5492f17090 R08: 0000000000000000 R09: 0000000000000000 [ 72.526850][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.526864][ T5036] R13: 0000000000000000 R14: 00007f5494ac5fa0 R15: 00007ffe73c938a8 [ 72.526918][ T5036] [ 72.735887][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.744135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.946818][ T5041] loop0: detected capacity change from 0 to 1764 [ 73.037425][ T5043] 9pnet: p9_errstr2errno: server reported unknown error [ 73.177402][ T5041] loop0: detected capacity change from 0 to 128 [ 73.203847][ T5046] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 73.211705][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 73.603845][ T5060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.642939][ T5064] siw: device registration error -23 [ 73.656913][ T5065] sctp: [Deprecated]: syz.1.487 (pid 5065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.656913][ T5065] Use struct sctp_sack_info instead [ 73.868797][ T5080] 9pnet: p9_errstr2errno: server reported unknown error [ 73.961061][ T5082] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.968935][ T5082] smc: net device bond0 erased user defined pnetid SYZ0 [ 74.066519][ T5086] vlan0: entered allmulticast mode [ 74.237014][ T5096] loop3: detected capacity change from 0 to 512 [ 74.282360][ T5096] EXT4-fs: Ignoring removed nobh option [ 74.342978][ T5098] vlan2: entered allmulticast mode [ 74.379672][ T5096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.410801][ T5096] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.492275][ T5116] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.528477][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.543842][ T5119] siw: device registration error -23 [ 74.570353][ T5116] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.602447][ T5122] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.610831][ T5122] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.619150][ T5122] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.627487][ T5122] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.652594][ T5116] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.703834][ T5116] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.726637][ T5134] xt_hashlimit: max too large, truncated to 1048576 [ 74.767236][ T5116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784525][ T5116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.801839][ T5116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.820109][ T5116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052544][ T5174] mmap: syz.1.518 (5174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.171988][ T5179] vlan2: entered allmulticast mode [ 75.178925][ T5179] bond0: entered allmulticast mode [ 75.186287][ T5179] bond_slave_0: entered allmulticast mode [ 75.193306][ T5179] bond_slave_1: entered allmulticast mode [ 75.250924][ T5209] __nla_validate_parse: 21 callbacks suppressed [ 75.250942][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 75.432113][ T5233] loop0: detected capacity change from 0 to 512 [ 75.447564][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.468835][ T5233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.471915][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.492507][ T5236] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.503351][ T5233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.511309][ T5233] __quota_error: 642 callbacks suppressed [ 75.511334][ T5233] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 75.513649][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.517106][ T5233] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 75.544844][ T5233] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.525: Failed to acquire dquot type 1 [ 75.556243][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.566462][ T5233] EXT4-fs (loop0): 1 truncate cleaned up [ 75.611682][ T5233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.632786][ T5236] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.654280][ T29] audit: type=1400 audit(1743850360.248:3272): avc: denied { create } for pid=5229 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.684044][ T5233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.525'. [ 75.701220][ T5266] netlink: 3 bytes leftover after parsing attributes in process `syz.4.528'. [ 75.709737][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 75.710541][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.729176][ T5236] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.739216][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 75.749530][ T5266] 1ªX¹¦À: renamed from 60ªX¹¦À [ 75.750003][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.785582][ T29] audit: type=1400 audit(1743850360.378:3273): avc: denied { wake_alarm } for pid=5270 comm="syz.2.530" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.835588][ T5236] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.927175][ T5236] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.952564][ T29] audit: type=1326 audit(1743850360.548:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 75.976029][ T29] audit: type=1326 audit(1743850360.548:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 75.979647][ T5236] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.999673][ T29] audit: type=1326 audit(1743850360.548:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 76.011355][ T5236] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.030975][ T29] audit: type=1326 audit(1743850360.548:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 76.113371][ T5286] vlan0: entered allmulticast mode [ 76.171280][ T29] audit: type=1326 audit(1743850360.638:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5283 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5eebad169 code=0x7ffc0000 [ 76.194686][ T29] audit: type=1400 audit(1743850360.658:3279): avc: denied { mount } for pid=5270 comm="syz.2.530" name="/" dev="ramfs" ino=12320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.220801][ T5236] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.268654][ T5290] FAULT_INJECTION: forcing a failure. [ 76.268654][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 76.281412][ T5290] CPU: 0 UID: 0 PID: 5290 Comm: syz.4.537 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 76.281445][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.281457][ T5290] Call Trace: [ 76.281464][ T5290] [ 76.281472][ T5290] dump_stack_lvl+0xf6/0x150 [ 76.281551][ T5290] dump_stack+0x15/0x1a [ 76.281571][ T5290] should_fail_ex+0x261/0x270 [ 76.281641][ T5290] should_failslab+0x8f/0xb0 [ 76.281676][ T5290] kmem_cache_alloc_noprof+0x59/0x340 [ 76.281697][ T5290] ? alloc_empty_file+0x78/0x200 [ 76.281787][ T5290] alloc_empty_file+0x78/0x200 [ 76.281808][ T5290] path_openat+0x6f/0x2000 [ 76.281834][ T5290] ? _parse_integer_limit+0x167/0x180 [ 76.281942][ T5290] ? kstrtoull+0x115/0x140 [ 76.282102][ T5290] ? kstrtouint+0x7b/0xc0 [ 76.282133][ T5290] do_filp_open+0x115/0x240 [ 76.282177][ T5290] do_sys_openat2+0xaa/0x110 [ 76.282204][ T5290] __x64_sys_openat+0xf8/0x120 [ 76.282274][ T5290] x64_sys_call+0x1ac/0x2e10 [ 76.282313][ T5290] do_syscall_64+0xc9/0x1c0 [ 76.282401][ T5290] ? clear_bhb_loop+0x25/0x80 [ 76.282427][ T5290] ? clear_bhb_loop+0x25/0x80 [ 76.282451][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.282478][ T5290] RIP: 0033:0x7fd5eebad169 [ 76.282493][ T5290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.282545][ T5290] RSP: 002b:00007fd5ed1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.282566][ T5290] RAX: ffffffffffffffda RBX: 00007fd5eedc6080 RCX: 00007fd5eebad169 [ 76.282659][ T5290] RDX: 0000000000515a02 RSI: 00002000000000c0 RDI: 0000000000000008 [ 76.282675][ T5290] RBP: 00007fd5ed1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.282689][ T5290] R10: 52abe154ad664fa4 R11: 0000000000000246 R12: 0000000000000001 [ 76.282701][ T5290] R13: 0000000000000000 R14: 00007fd5eedc6080 R15: 00007ffd71d87de8 [ 76.282719][ T5290] [ 76.661535][ T5331] FAULT_INJECTION: forcing a failure. [ 76.661535][ T5331] name failslab, interval 1, probability 0, space 0, times 0 [ 76.674299][ T5331] CPU: 1 UID: 0 PID: 5331 Comm: syz.1.544 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 76.674331][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.674346][ T5331] Call Trace: [ 76.674354][ T5331] [ 76.674362][ T5331] dump_stack_lvl+0xf6/0x150 [ 76.674395][ T5331] dump_stack+0x15/0x1a [ 76.674416][ T5331] should_fail_ex+0x261/0x270 [ 76.674445][ T5331] should_failslab+0x8f/0xb0 [ 76.674479][ T5331] __kmalloc_cache_noprof+0x55/0x320 [ 76.674519][ T5331] ? __hw_addr_add_ex+0x15a/0x430 [ 76.674547][ T5331] __hw_addr_add_ex+0x15a/0x430 [ 76.674574][ T5331] dev_addr_init+0xb7/0x130 [ 76.674599][ T5331] ? __pfx_tun_setup+0x10/0x10 [ 76.674629][ T5331] alloc_netdev_mqs+0x225/0xac0 [ 76.674721][ T5331] tun_set_iff+0x45f/0x8c0 [ 76.674752][ T5331] __tun_chr_ioctl+0x6a6/0x1590 [ 76.674841][ T5331] tun_chr_ioctl+0x27/0x30 [ 76.674860][ T5331] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 76.674881][ T5331] __se_sys_ioctl+0xc9/0x140 [ 76.674910][ T5331] __x64_sys_ioctl+0x43/0x50 [ 76.674947][ T5331] x64_sys_call+0x168d/0x2e10 [ 76.674974][ T5331] do_syscall_64+0xc9/0x1c0 [ 76.675046][ T5331] ? clear_bhb_loop+0x25/0x80 [ 76.675071][ T5331] ? clear_bhb_loop+0x25/0x80 [ 76.675099][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.675120][ T5331] RIP: 0033:0x7f4e6679d169 [ 76.675135][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.675156][ T5331] RSP: 002b:00007f4e64e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.675244][ T5331] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e6679d169 [ 76.675259][ T5331] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 76.675280][ T5331] RBP: 00007f4e64e07090 R08: 0000000000000000 R09: 0000000000000000 [ 76.675299][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.675313][ T5331] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 76.675411][ T5331] [ 76.892988][ T3380] net_ratelimit: 8 callbacks suppressed [ 76.893004][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.030588][ T5350] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.110639][ T5350] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.157217][ T3850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.165593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.244019][ T5401] FAULT_INJECTION: forcing a failure. [ 77.244019][ T5401] name failslab, interval 1, probability 0, space 0, times 0 [ 77.256923][ T5401] CPU: 1 UID: 0 PID: 5401 Comm: syz.4.554 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 77.256955][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.256969][ T5401] Call Trace: [ 77.256976][ T5401] [ 77.256991][ T5401] dump_stack_lvl+0xf6/0x150 [ 77.257019][ T5401] dump_stack+0x15/0x1a [ 77.257040][ T5401] should_fail_ex+0x261/0x270 [ 77.257132][ T5401] should_failslab+0x8f/0xb0 [ 77.257177][ T5401] __kmalloc_noprof+0xad/0x410 [ 77.257202][ T5401] ? alloc_pipe_info+0x1cb/0x360 [ 77.257240][ T5401] alloc_pipe_info+0x1cb/0x360 [ 77.257288][ T5401] splice_direct_to_actor+0x621/0x680 [ 77.257329][ T5401] ? __pfx_direct_splice_actor+0x10/0x10 [ 77.257364][ T5401] ? __rcu_read_unlock+0x4e/0x70 [ 77.257399][ T5401] ? avc_policy_seqno+0x15/0x20 [ 77.257507][ T5401] ? selinux_file_permission+0x22d/0x360 [ 77.257537][ T5401] do_splice_direct+0xd9/0x150 [ 77.257570][ T5401] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 77.257608][ T5401] do_sendfile+0x40a/0x690 [ 77.257705][ T5401] __x64_sys_sendfile64+0x113/0x160 [ 77.257730][ T5401] x64_sys_call+0xfc3/0x2e10 [ 77.257751][ T5401] do_syscall_64+0xc9/0x1c0 [ 77.257781][ T5401] ? clear_bhb_loop+0x25/0x80 [ 77.257886][ T5401] ? clear_bhb_loop+0x25/0x80 [ 77.257913][ T5401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.257938][ T5401] RIP: 0033:0x7fd5eebad169 [ 77.257953][ T5401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.258001][ T5401] RSP: 002b:00007fd5ed217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 77.258022][ T5401] RAX: ffffffffffffffda RBX: 00007fd5eedc5fa0 RCX: 00007fd5eebad169 [ 77.258037][ T5401] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 77.258051][ T5401] RBP: 00007fd5ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 77.258065][ T5401] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 77.258079][ T5401] R13: 0000000000000000 R14: 00007fd5eedc5fa0 R15: 00007ffd71d87de8 [ 77.258102][ T5401] [ 77.475628][ T5350] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.520483][ T5350] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.796212][ T5440] FAULT_INJECTION: forcing a failure. [ 77.796212][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 77.808994][ T5440] CPU: 1 UID: 0 PID: 5440 Comm: syz.2.563 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 77.809020][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.809032][ T5440] Call Trace: [ 77.809037][ T5440] [ 77.809045][ T5440] dump_stack_lvl+0xf6/0x150 [ 77.809073][ T5440] dump_stack+0x15/0x1a [ 77.809120][ T5440] should_fail_ex+0x261/0x270 [ 77.809153][ T5440] should_failslab+0x8f/0xb0 [ 77.809185][ T5440] kmem_cache_alloc_noprof+0x59/0x340 [ 77.809207][ T5440] ? skb_clone+0x154/0x1f0 [ 77.809308][ T5440] skb_clone+0x154/0x1f0 [ 77.809339][ T5440] __netlink_deliver_tap+0x2bd/0x4f0 [ 77.809374][ T5440] netlink_unicast+0x69e/0x6c0 [ 77.809480][ T5440] netlink_sendmsg+0x609/0x720 [ 77.809514][ T5440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.809541][ T5440] __sock_sendmsg+0x140/0x180 [ 77.809628][ T5440] ____sys_sendmsg+0x350/0x4e0 [ 77.809659][ T5440] __sys_sendmsg+0x1a0/0x240 [ 77.809754][ T5440] __x64_sys_sendmsg+0x46/0x50 [ 77.809784][ T5440] x64_sys_call+0x26f3/0x2e10 [ 77.809844][ T5440] do_syscall_64+0xc9/0x1c0 [ 77.809956][ T5440] ? clear_bhb_loop+0x25/0x80 [ 77.809978][ T5440] ? clear_bhb_loop+0x25/0x80 [ 77.810046][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.810070][ T5440] RIP: 0033:0x7fefba2cd169 [ 77.810087][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.810165][ T5440] RSP: 002b:00007fefb892f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.810187][ T5440] RAX: ffffffffffffffda RBX: 00007fefba4e5fa0 RCX: 00007fefba2cd169 [ 77.810202][ T5440] RDX: 0000000004004840 RSI: 0000200000000040 RDI: 0000000000000003 [ 77.810217][ T5440] RBP: 00007fefb892f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.810231][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.810245][ T5440] R13: 0000000000000000 R14: 00007fefba4e5fa0 R15: 00007fff9bacfb98 [ 77.810292][ T5440] [ 78.030631][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.450902][ T3707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.459137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.545651][ T5459] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.630114][ T5459] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.687474][ T5463] 9pnet: p9_errstr2errno: server reported unknown error [ 78.700217][ T5459] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.773494][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.782221][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.791181][ T5468] netlink: 'syz.2.575': attribute type 39 has an invalid length. [ 78.793355][ T5459] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.845924][ T5459] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.858937][ T5459] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872844][ T5459] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.885272][ T5459] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.049014][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.132940][ T5489] 9pnet: p9_errstr2errno: server reported unknown error [ 79.164311][ T5493] loop0: detected capacity change from 0 to 1024 [ 79.184425][ T5491] vlan2: entered allmulticast mode [ 79.190372][ T5493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.251791][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.299813][ T5502] loop3: detected capacity change from 0 to 1764 [ 79.329613][ T5350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.352155][ T5350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.363863][ T5350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.377792][ T5350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.467433][ T5504] FAULT_INJECTION: forcing a failure. [ 79.467433][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 79.480195][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: syz.0.589 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 79.480223][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.480235][ T5504] Call Trace: [ 79.480241][ T5504] [ 79.480251][ T5504] dump_stack_lvl+0xf6/0x150 [ 79.480283][ T5504] dump_stack+0x15/0x1a [ 79.480301][ T5504] should_fail_ex+0x261/0x270 [ 79.480333][ T5504] should_failslab+0x8f/0xb0 [ 79.480450][ T5504] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 79.480480][ T5504] ? kvasprintf_const+0x5d/0x100 [ 79.480507][ T5504] kvasprintf+0x8e/0x120 [ 79.480533][ T5504] kvasprintf_const+0x5d/0x100 [ 79.480557][ T5504] kobject_set_name_vargs+0x44/0xe0 [ 79.480582][ T5504] dev_set_name+0x89/0xb0 [ 79.480711][ T5504] usb_set_configuration+0xa42/0x12e0 [ 79.480749][ T5504] usbdev_ioctl+0x2b42/0x3e70 [ 79.480796][ T5504] ? ioctl_has_perm+0x292/0x2f0 [ 79.480821][ T5504] ? do_vfs_ioctl+0x977/0x1570 [ 79.480850][ T5504] ? selinux_file_ioctl+0x2f9/0x380 [ 79.480950][ T5504] ? __fget_files+0x186/0x1c0 [ 79.481027][ T5504] ? __pfx_usbdev_ioctl+0x10/0x10 [ 79.481054][ T5504] __se_sys_ioctl+0xc9/0x140 [ 79.481080][ T5504] __x64_sys_ioctl+0x43/0x50 [ 79.481110][ T5504] x64_sys_call+0x168d/0x2e10 [ 79.481137][ T5504] do_syscall_64+0xc9/0x1c0 [ 79.481181][ T5504] ? clear_bhb_loop+0x25/0x80 [ 79.481201][ T5504] ? clear_bhb_loop+0x25/0x80 [ 79.481225][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.481287][ T5504] RIP: 0033:0x7f54948ad169 [ 79.481304][ T5504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.481325][ T5504] RSP: 002b:00007f5492f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.481347][ T5504] RAX: ffffffffffffffda RBX: 00007f5494ac5fa0 RCX: 00007f54948ad169 [ 79.481362][ T5504] RDX: 0000200000000000 RSI: 0000000080045505 RDI: 0000000000000008 [ 79.481394][ T5504] RBP: 00007f5492f17090 R08: 0000000000000000 R09: 0000000000000000 [ 79.481409][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.481450][ T5504] R13: 0000000000000000 R14: 00007f5494ac5fa0 R15: 00007ffe73c938a8 [ 79.481480][ T5504] [ 79.488536][ T5504] usb usb1: device_add((null)) --> -22 [ 79.783372][ T5529] 0ªX¹¦À: renamed from 61ªX¹¦À [ 79.799963][ T5529] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.825885][ T10] IPVS: starting estimator thread 0... [ 79.918616][ T5532] IPVS: using max 2112 ests per chain, 105600 per kthread [ 80.036785][ T5566] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 80.069557][ T5570] 0ªX¹¦À: renamed from 61ªX¹¦À [ 80.077956][ T5570] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.093828][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.141350][ T5574] loop2: detected capacity change from 0 to 2048 [ 80.190667][ T5582] FAULT_INJECTION: forcing a failure. [ 80.190667][ T5582] name failslab, interval 1, probability 0, space 0, times 0 [ 80.203387][ T5582] CPU: 1 UID: 0 PID: 5582 Comm: syz.0.620 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 80.203421][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.203436][ T5582] Call Trace: [ 80.203442][ T5582] [ 80.203501][ T5582] dump_stack_lvl+0xf6/0x150 [ 80.203523][ T5582] dump_stack+0x15/0x1a [ 80.203537][ T5582] should_fail_ex+0x261/0x270 [ 80.203577][ T5582] should_failslab+0x8f/0xb0 [ 80.203604][ T5582] __kmalloc_cache_noprof+0x55/0x320 [ 80.203630][ T5582] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 80.203671][ T5582] __se_sys_memfd_create+0x1ea/0x5a0 [ 80.203781][ T5582] __x64_sys_memfd_create+0x31/0x40 [ 80.203804][ T5582] x64_sys_call+0x1163/0x2e10 [ 80.203823][ T5582] do_syscall_64+0xc9/0x1c0 [ 80.203848][ T5582] ? clear_bhb_loop+0x25/0x80 [ 80.203929][ T5582] ? clear_bhb_loop+0x25/0x80 [ 80.203948][ T5582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.203966][ T5582] RIP: 0033:0x7f54948ad169 [ 80.203980][ T5582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.203994][ T5582] RSP: 002b:00007f5492f16d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 80.204036][ T5582] RAX: ffffffffffffffda RBX: 00000000000005d4 RCX: 00007f54948ad169 [ 80.204046][ T5582] RDX: 00007f5492f16dec RSI: 0000000000000000 RDI: 00007f549492ec3c [ 80.204056][ T5582] RBP: 0000200000000000 R08: 00007f5492f16b07 R09: 0000000000000000 [ 80.204066][ T5582] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 80.204075][ T5582] R13: 00007f5492f16dec R14: 00007f5492f16df0 R15: 00007ffe73c938a8 [ 80.204092][ T5582] [ 80.399769][ T5586] __nla_validate_parse: 25 callbacks suppressed [ 80.399786][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.428122][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.455605][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.484243][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.498027][ T5593] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 80.520583][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.531359][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 80.535311][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 80.535327][ T29] audit: type=1400 audit(1743850365.128:3578): avc: denied { create } for pid=5596 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.546630][ T5597] loop2: detected capacity change from 0 to 256 [ 80.574661][ T29] audit: type=1400 audit(1743850365.138:3579): avc: denied { bind } for pid=5596 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.575902][ T5597] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.619466][ T5597] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.643573][ T29] audit: type=1326 audit(1743850365.238:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.667274][ T29] audit: type=1326 audit(1743850365.238:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.677315][ T5604] netlink: 3 bytes leftover after parsing attributes in process `syz.4.629'. [ 80.690604][ T29] audit: type=1326 audit(1743850365.238:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.722779][ T29] audit: type=1326 audit(1743850365.238:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.746553][ T29] audit: type=1326 audit(1743850365.238:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.769974][ T29] audit: type=1326 audit(1743850365.238:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.793369][ T29] audit: type=1326 audit(1743850365.238:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.816763][ T29] audit: type=1326 audit(1743850365.238:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 80.849218][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 80.868278][ T5604] 0ªX¹¦À: renamed from 61ªX¹¦À [ 80.923183][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 80.943328][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.951284][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.959196][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.973252][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.981203][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.989109][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 80.996968][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.004826][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.012662][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.012709][ T5627] 9pnet: p9_errstr2errno: server reported unknown error [ 81.020511][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.035504][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.043295][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.051153][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.060043][ T5625] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.070776][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.078616][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.086387][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.094200][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.101990][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.109840][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.117652][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.125436][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.133296][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.141169][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.148949][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.156844][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.164662][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.172758][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.180657][ T23] hid-generic 0000:0000:20000000.000A: unknown main item tag 0x0 [ 81.190673][ T23] hid-generic 0000:0000:20000000.000A: hidraw0: HID v0.01 Device [syz0] on syz1 [ 81.240804][ T5625] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.294133][ T5625] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.320845][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.329636][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.337690][ T5636] netlink: 'syz.1.642': attribute type 39 has an invalid length. [ 81.350412][ T5625] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.773846][ T5643] siw: device registration error -23 [ 81.797153][ T5645] 0ªX¹¦À: renamed from caif0 [ 81.804237][ T5645] 0ªX¹¦À: entered allmulticast mode [ 81.862297][ T5653] loop3: detected capacity change from 0 to 1764 [ 81.877886][ T5653] loop3: detected capacity change from 0 to 128 [ 81.900598][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.908450][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.916260][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.925763][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.933622][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.941754][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.949565][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.957361][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.965141][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.972955][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.980746][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.988597][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 81.996369][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.004209][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.012159][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.019970][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.027809][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.035642][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.043480][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.051265][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.059169][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.066927][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.074723][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.082530][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.090338][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.098111][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.105896][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.113771][ T10] hid-generic 0000:0000:20000000.000B: unknown main item tag 0x0 [ 82.122101][ T10] hid-generic 0000:0000:20000000.000B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 82.249544][ T3384] net_ratelimit: 5 callbacks suppressed [ 82.249562][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.267708][ T5665] vlan2: entered allmulticast mode [ 82.888898][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.897113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.052583][ T5697] loop3: detected capacity change from 0 to 128 [ 83.055534][ T5699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.073194][ T5699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.083501][ T5699] netlink: 'syz.2.669': attribute type 39 has an invalid length. [ 83.227177][ T5707] loop0: detected capacity change from 0 to 1764 [ 83.244310][ T5707] loop0: detected capacity change from 0 to 128 [ 83.323012][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.451800][ T5715] 9pnet: p9_errstr2errno: server reported unknown error [ 84.169271][ T3693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.177519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.257609][ T5741] 9pnet: p9_errstr2errno: server reported unknown error [ 84.330106][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.342747][ T5745] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.392662][ T5752] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 84.420150][ T5745] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.432725][ T5756] 1ªX¹¦À: renamed from 60ªX¹¦À [ 84.439749][ T5756] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.480030][ T5745] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.521773][ T5768] 0ªX¹¦À: renamed from 61ªX¹¦À [ 84.529192][ T5768] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.550964][ T5745] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.570246][ T5625] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.583005][ T5625] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.594323][ T5625] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.611385][ T5625] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627315][ T5745] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.649244][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.661558][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.663385][ T5745] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.670027][ T5778] netlink: 'syz.2.700': attribute type 39 has an invalid length. [ 84.684924][ T5745] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.706285][ T5745] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.830893][ T5792] 1ªX¹¦À: renamed from 60ªX¹¦À [ 84.838215][ T5792] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 85.426857][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.434746][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.437604][ T5829] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.442541][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.461930][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.469837][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.477644][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.485506][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.493522][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.496155][ T5836] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 85.501370][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.509087][ T5836] __nla_validate_parse: 14 callbacks suppressed [ 85.509103][ T5836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.719'. [ 85.532076][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.539911][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.547655][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.555432][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.563300][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.571149][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.578960][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.586729][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.594537][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.602383][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.610241][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.618068][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.625931][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.633699][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.641557][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.649343][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.657087][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.664858][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.672625][ T10] hid-generic 0000:0000:20000000.000C: unknown main item tag 0x0 [ 85.681541][ T5829] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.692431][ T10] hid-generic 0000:0000:20000000.000C: hidraw0: HID v0.01 Device [syz0] on syz1 [ 85.721918][ T5838] FAULT_INJECTION: forcing a failure. [ 85.721918][ T5838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.735129][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz.0.724 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 85.735160][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.735173][ T5838] Call Trace: [ 85.735180][ T5838] [ 85.735261][ T5838] dump_stack_lvl+0xf6/0x150 [ 85.735291][ T5838] dump_stack+0x15/0x1a [ 85.735312][ T5838] should_fail_ex+0x261/0x270 [ 85.735346][ T5838] should_fail+0xb/0x10 [ 85.735374][ T5838] should_fail_usercopy+0x1a/0x20 [ 85.735466][ T5838] _copy_from_user+0x1c/0xa0 [ 85.735503][ T5838] copy_msghdr_from_user+0x54/0x2b0 [ 85.735576][ T5838] ? __fget_files+0x186/0x1c0 [ 85.735604][ T5838] __sys_sendmsg+0x141/0x240 [ 85.735652][ T5838] __x64_sys_sendmsg+0x46/0x50 [ 85.735684][ T5838] x64_sys_call+0x26f3/0x2e10 [ 85.735758][ T5838] do_syscall_64+0xc9/0x1c0 [ 85.735807][ T5838] ? clear_bhb_loop+0x25/0x80 [ 85.735829][ T5838] ? clear_bhb_loop+0x25/0x80 [ 85.735850][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.735871][ T5838] RIP: 0033:0x7f54948ad169 [ 85.735945][ T5838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.735964][ T5838] RSP: 002b:00007f5492f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.735983][ T5838] RAX: ffffffffffffffda RBX: 00007f5494ac5fa0 RCX: 00007f54948ad169 [ 85.735997][ T5838] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 85.736012][ T5838] RBP: 00007f5492f17090 R08: 0000000000000000 R09: 0000000000000000 [ 85.736026][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.736040][ T5838] R13: 0000000000000000 R14: 00007f5494ac5fa0 R15: 00007ffe73c938a8 [ 85.736063][ T5838] [ 85.917092][ T5829] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.975910][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 85.975924][ T29] audit: type=1400 audit(1743850370.568:3987): avc: denied { write } for pid=5841 comm="syz.0.726" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.014270][ T5829] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.107983][ T5829] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124758][ T5829] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141850][ T5829] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155378][ T5829] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.189450][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.200538][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.209021][ T5848] netlink: 'syz.0.729': attribute type 39 has an invalid length. [ 86.238317][ T5852] FAULT_INJECTION: forcing a failure. [ 86.238317][ T5852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.251534][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz.2.731 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 86.251643][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.251658][ T5852] Call Trace: [ 86.251664][ T5852] [ 86.251671][ T5852] dump_stack_lvl+0xf6/0x150 [ 86.251715][ T5852] dump_stack+0x15/0x1a [ 86.251735][ T5852] should_fail_ex+0x261/0x270 [ 86.251768][ T5852] should_fail+0xb/0x10 [ 86.251803][ T5852] should_fail_usercopy+0x1a/0x20 [ 86.251914][ T5852] _copy_from_user+0x1c/0xa0 [ 86.252014][ T5852] copy_msghdr_from_user+0x54/0x2b0 [ 86.252063][ T5852] ? __fget_files+0x186/0x1c0 [ 86.252089][ T5852] __sys_sendmsg+0x141/0x240 [ 86.252137][ T5852] __x64_sys_sendmsg+0x46/0x50 [ 86.252165][ T5852] x64_sys_call+0x26f3/0x2e10 [ 86.252187][ T5852] do_syscall_64+0xc9/0x1c0 [ 86.252295][ T5852] ? clear_bhb_loop+0x25/0x80 [ 86.252319][ T5852] ? clear_bhb_loop+0x25/0x80 [ 86.252365][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.252385][ T5852] RIP: 0033:0x7fefba2cd169 [ 86.252400][ T5852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.252562][ T5852] RSP: 002b:00007fefb892f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.252583][ T5852] RAX: ffffffffffffffda RBX: 00007fefba4e5fa0 RCX: 00007fefba2cd169 [ 86.252598][ T5852] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 86.252612][ T5852] RBP: 00007fefb892f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.252627][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.252641][ T5852] R13: 0000000000000000 R14: 00007fefba4e5fa0 R15: 00007fff9bacfb98 [ 86.252663][ T5852] [ 86.470741][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.480271][ T29] audit: type=1326 audit(1743850371.078:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.503780][ T29] audit: type=1326 audit(1743850371.078:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.503801][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.541311][ T29] audit: type=1326 audit(1743850371.078:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.544720][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.564611][ T29] audit: type=1326 audit(1743850371.078:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.564657][ T29] audit: type=1326 audit(1743850371.078:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.590128][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 86.596832][ T29] audit: type=1326 audit(1743850371.078:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.624960][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.629060][ T29] audit: type=1326 audit(1743850371.078:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.685080][ T29] audit: type=1326 audit(1743850371.078:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.708462][ T29] audit: type=1326 audit(1743850371.078:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5856 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d44fcd169 code=0x7ffc0000 [ 86.761427][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.771042][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 86.783198][ T5864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.736'. [ 86.820204][ T5875] FAULT_INJECTION: forcing a failure. [ 86.820204][ T5875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.833343][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.1.740 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 86.833388][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.833409][ T5875] Call Trace: [ 86.833416][ T5875] [ 86.833425][ T5875] dump_stack_lvl+0xf6/0x150 [ 86.833533][ T5875] dump_stack+0x15/0x1a [ 86.833549][ T5875] should_fail_ex+0x261/0x270 [ 86.833577][ T5875] should_fail+0xb/0x10 [ 86.833600][ T5875] should_fail_usercopy+0x1a/0x20 [ 86.833628][ T5875] _copy_from_user+0x1c/0xa0 [ 86.833772][ T5875] copy_msghdr_from_user+0x54/0x2b0 [ 86.833814][ T5875] ? __fget_files+0x186/0x1c0 [ 86.833840][ T5875] __sys_sendmsg+0x141/0x240 [ 86.833893][ T5875] __x64_sys_sendmsg+0x46/0x50 [ 86.833966][ T5875] x64_sys_call+0x26f3/0x2e10 [ 86.833993][ T5875] do_syscall_64+0xc9/0x1c0 [ 86.834085][ T5875] ? clear_bhb_loop+0x25/0x80 [ 86.834111][ T5875] ? clear_bhb_loop+0x25/0x80 [ 86.834132][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.834154][ T5875] RIP: 0033:0x7f4e6679d169 [ 86.834172][ T5875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.834200][ T5875] RSP: 002b:00007f4e64e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.834307][ T5875] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e6679d169 [ 86.834352][ T5875] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 86.834363][ T5875] RBP: 00007f4e64e07090 R08: 0000000000000000 R09: 0000000000000000 [ 86.834374][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.834386][ T5875] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 86.834413][ T5875] [ 87.053045][ T5883] FAULT_INJECTION: forcing a failure. [ 87.053045][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 87.066036][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz.1.744 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 87.066067][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.066080][ T5883] Call Trace: [ 87.066086][ T5883] [ 87.066093][ T5883] dump_stack_lvl+0xf6/0x150 [ 87.066117][ T5883] dump_stack+0x15/0x1a [ 87.066154][ T5883] should_fail_ex+0x261/0x270 [ 87.066182][ T5883] should_failslab+0x8f/0xb0 [ 87.066213][ T5883] __kmalloc_noprof+0xad/0x410 [ 87.066234][ T5883] ? copy_splice_read+0xb8/0x5d0 [ 87.066265][ T5883] copy_splice_read+0xb8/0x5d0 [ 87.066294][ T5883] ? __kmalloc_noprof+0x287/0x410 [ 87.066314][ T5883] ? alloc_pipe_info+0x1cb/0x360 [ 87.066419][ T5883] ? __pfx_copy_splice_read+0x10/0x10 [ 87.066446][ T5883] splice_direct_to_actor+0x26c/0x680 [ 87.066477][ T5883] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.066510][ T5883] do_splice_direct+0xd9/0x150 [ 87.066538][ T5883] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.066619][ T5883] do_sendfile+0x40a/0x690 [ 87.066644][ T5883] __x64_sys_sendfile64+0x113/0x160 [ 87.066665][ T5883] x64_sys_call+0xfc3/0x2e10 [ 87.066764][ T5883] do_syscall_64+0xc9/0x1c0 [ 87.066793][ T5883] ? clear_bhb_loop+0x25/0x80 [ 87.066814][ T5883] ? clear_bhb_loop+0x25/0x80 [ 87.066878][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.066899][ T5883] RIP: 0033:0x7f4e6679d169 [ 87.066914][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.066932][ T5883] RSP: 002b:00007f4e64e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.066950][ T5883] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e6679d169 [ 87.066987][ T5883] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 87.066998][ T5883] RBP: 00007f4e64e07090 R08: 0000000000000000 R09: 0000000000000000 [ 87.067010][ T5883] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 87.067022][ T5883] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 87.067040][ T5883] [ 87.283929][ T3446] net_ratelimit: 2 callbacks suppressed [ 87.284000][ T3446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.297810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.344611][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 87.448738][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.470016][ T5907] FAULT_INJECTION: forcing a failure. [ 87.470016][ T5907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.472247][ T5911] loop4: detected capacity change from 0 to 128 [ 87.483282][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: syz.1.755 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 87.483375][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.483391][ T5907] Call Trace: [ 87.483400][ T5907] [ 87.483410][ T5907] dump_stack_lvl+0xf6/0x150 [ 87.483441][ T5907] dump_stack+0x15/0x1a [ 87.483463][ T5907] should_fail_ex+0x261/0x270 [ 87.483505][ T5907] should_fail+0xb/0x10 [ 87.483535][ T5907] should_fail_usercopy+0x1a/0x20 [ 87.483614][ T5907] strncpy_from_user+0x25/0x230 [ 87.483640][ T5907] ? getname_flags+0x81/0x3b0 [ 87.483700][ T5907] getname_flags+0xb0/0x3b0 [ 87.483726][ T5907] do_sys_openat2+0x65/0x110 [ 87.483828][ T5907] __se_sys_openat2+0x19f/0x200 [ 87.483903][ T5907] __x64_sys_openat2+0x55/0x70 [ 87.484025][ T5907] x64_sys_call+0x243c/0x2e10 [ 87.484053][ T5907] do_syscall_64+0xc9/0x1c0 [ 87.484090][ T5907] ? clear_bhb_loop+0x25/0x80 [ 87.484118][ T5907] ? clear_bhb_loop+0x25/0x80 [ 87.484198][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.484225][ T5907] RIP: 0033:0x7f4e6679d169 [ 87.484246][ T5907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.484267][ T5907] RSP: 002b:00007f4e64e07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 87.484314][ T5907] RAX: ffffffffffffffda RBX: 00007f4e669b5fa0 RCX: 00007f4e6679d169 [ 87.484330][ T5907] RDX: 0000200000000300 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 87.484346][ T5907] RBP: 00007f4e64e07090 R08: 0000000000000000 R09: 0000000000000000 [ 87.484362][ T5907] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 87.484377][ T5907] R13: 0000000000000000 R14: 00007f4e669b5fa0 R15: 00007ffd812d4e58 [ 87.484401][ T5907] [ 87.593786][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.630633][ T5911] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.638687][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.704109][ T5911] serio: Serial port ptm0 [ 87.715167][ T5919] netlink: 'syz.1.758': attribute type 39 has an invalid length. [ 87.764764][ T5928] No such timeout policy "syz0" [ 87.782344][ T5922] netlink: 'syz.3.763': attribute type 4 has an invalid length. [ 87.807913][ T3693] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.818044][ T5932] FAULT_INJECTION: forcing a failure. [ 87.818044][ T5932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.831188][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.3.768 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 87.831223][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.831314][ T5932] Call Trace: [ 87.831320][ T5932] [ 87.831327][ T5932] dump_stack_lvl+0xf6/0x150 [ 87.831350][ T5932] dump_stack+0x15/0x1a [ 87.831366][ T5932] should_fail_ex+0x261/0x270 [ 87.831440][ T5932] should_fail+0xb/0x10 [ 87.831468][ T5932] should_fail_usercopy+0x1a/0x20 [ 87.831680][ T5932] _copy_from_user+0x1c/0xa0 [ 87.831765][ T5932] kstrtouint_from_user+0x84/0x100 [ 87.831793][ T5932] ? 0xffffffff81000000 [ 87.831839][ T5932] ? selinux_file_permission+0x22d/0x360 [ 87.831947][ T5932] proc_fail_nth_write+0x54/0x160 [ 87.831966][ T5932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.832111][ T5932] vfs_write+0x295/0x950 [ 87.832143][ T5932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.832188][ T5932] ? __fget_files+0x186/0x1c0 [ 87.832211][ T5932] ksys_write+0xeb/0x1b0 [ 87.832307][ T5932] __x64_sys_write+0x42/0x50 [ 87.832338][ T5932] x64_sys_call+0x2a45/0x2e10 [ 87.832360][ T5932] do_syscall_64+0xc9/0x1c0 [ 87.832394][ T5932] ? clear_bhb_loop+0x25/0x80 [ 87.832426][ T5932] ? clear_bhb_loop+0x25/0x80 [ 87.832486][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.832507][ T5932] RIP: 0033:0x7f5d44fcbc1f [ 87.832524][ T5932] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 87.832546][ T5932] RSP: 002b:00007f5d4362f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 87.832566][ T5932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d44fcbc1f [ 87.832579][ T5932] RDX: 0000000000000001 RSI: 00007f5d4362f0a0 RDI: 0000000000000006 [ 87.832591][ T5932] RBP: 00007f5d4362f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.832604][ T5932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 87.832650][ T5932] R13: 0000000000000000 R14: 00007f5d451e5fa0 R15: 00007ffde41cfa58 [ 87.832686][ T5932] [ 87.921557][ T5933] vlan2: entered allmulticast mode [ 88.126352][ T5950] Timeout policy `syz0' can only be used by L3 protocol number 34916 [ 88.169974][ T5945] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.202252][ T5951] 1ªX¹¦À: renamed from 60ªX¹¦À [ 88.211224][ T5951] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 88.272228][ T5945] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.320849][ T5960] loop3: detected capacity change from 0 to 1024 [ 88.330195][ T5960] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.341214][ T5960] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.352028][ T5960] JBD2: no valid journal superblock found [ 88.357835][ T5960] EXT4-fs (loop3): Could not load journal inode [ 88.464632][ T5960] loop3: detected capacity change from 0 to 4096 [ 88.489076][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.510703][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.518712][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.526537][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.557978][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.565918][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.573735][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.581512][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.589339][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.597089][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.604863][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.612636][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.620411][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.628246][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.641239][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.655424][ T3693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.663720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.681600][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #15: comm syz.3.776: corrupted inode contents [ 88.695059][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.702909][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.710825][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.718730][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.726529][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.734325][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.742122][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.749915][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.757728][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.765571][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.773383][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.781209][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.789115][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.796954][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.804727][ T3384] hid-generic 0000:0000:20000000.000D: unknown main item tag 0x0 [ 88.819671][ T5960] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz.3.776: mark_inode_dirty error [ 88.833414][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #15: comm syz.3.776: corrupted inode contents [ 88.846310][ T5960] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.776: mark_inode_dirty error [ 88.860182][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #15: comm syz.3.776: corrupted inode contents [ 88.873571][ T5960] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.776: mark_inode_dirty error [ 88.890776][ T3384] hid-generic 0000:0000:20000000.000D: hidraw0: HID v0.01 Device [syz0] on syz1 [ 88.977585][ T5975] SELinux: syz.3.776 (5975) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 89.019522][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #15: comm syz.3.776: corrupted inode contents [ 89.035220][ T5960] EXT4-fs error (device loop3): ext4_truncate:4254: inode #15: comm syz.3.776: mark_inode_dirty error [ 89.050475][ T5960] EXT4-fs error (device loop3) in ext4_setattr:5599: Corrupt filesystem [ 89.060705][ T5972] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #15: comm syz.3.776: corrupted inode contents [ 89.075116][ T5945] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.187288][ T5968] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.200234][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.209784][ T336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.218040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.236224][ T5945] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.290449][ T5968] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.390751][ T5968] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.450368][ T5968] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.477925][ T5986] loop3: detected capacity change from 0 to 1764 [ 89.505043][ T5986] loop3: detected capacity change from 0 to 128 [ 89.524076][ T5986] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.536100][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.546930][ T5986] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.626051][ T5988] vlan0: entered allmulticast mode [ 89.639411][ T5988] bond0: (slave vlan0): Opening slave failed [ 89.728387][ T5991] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.791471][ T5991] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.835418][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.835704][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.843287][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.851844][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.859367][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.873631][ T5997] netlink: 'syz.0.789': attribute type 39 has an invalid length. [ 89.876392][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.884503][ T5991] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.890327][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.890411][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.915757][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.923544][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.931336][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.939119][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.946940][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.954788][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.962586][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.970468][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.978331][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.986187][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 89.994065][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.001860][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.009688][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.017527][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.025294][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.033100][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.040863][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.048747][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.056517][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.064299][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.072261][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.080038][ T3384] hid-generic 0000:0000:20000000.000E: unknown main item tag 0x0 [ 90.088204][ T3384] hid-generic 0000:0000:20000000.000E: hidraw0: HID v0.01 Device [syz0] on syz1 [ 90.100084][ T5991] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.157439][ T5991] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.171058][ T5991] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.183361][ T5991] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.195752][ T5991] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.346247][ T6017] 0ªX¹¦À: renamed from 61ªX¹¦À [ 90.656851][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.664805][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.672602][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.692804][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.700723][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.708508][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.716313][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.724095][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.731873][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.739661][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.747465][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.755250][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.763015][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.853993][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.861929][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.869841][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.877591][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.885626][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.893420][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.901207][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.909161][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.916905][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.924711][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.932530][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.940358][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.948135][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.955983][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.963766][ T3446] hid-generic 0000:0000:20000000.000F: unknown main item tag 0x0 [ 90.990056][ T3446] hid-generic 0000:0000:20000000.000F: hidraw0: HID v0.01 Device [syz0] on syz1 [ 91.117176][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 91.117195][ T29] audit: type=1326 audit(1743850375.708:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 91.175327][ T6040] loop0: detected capacity change from 0 to 1024 [ 91.253576][ T29] audit: type=1326 audit(1743850375.748:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 91.276990][ T29] audit: type=1326 audit(1743850375.748:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54948ad169 code=0x7ffc0000 [ 91.300423][ T29] audit: type=1326 audit(1743850375.748:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54948ad1a3 code=0x7ffc0000 [ 91.323752][ T29] audit: type=1326 audit(1743850375.758:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54948abc1f code=0x7ffc0000 [ 91.346938][ T29] audit: type=1326 audit(1743850375.768:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f54948ad1f7 code=0x7ffc0000 [ 91.370388][ T29] audit: type=1326 audit(1743850375.768:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54948abad0 code=0x7ffc0000 [ 91.393718][ T29] audit: type=1326 audit(1743850375.768:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54948acd6b code=0x7ffc0000 [ 91.416971][ T29] audit: type=1326 audit(1743850375.828:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54948abdca code=0x7ffc0000 [ 91.440184][ T29] audit: type=1326 audit(1743850375.828:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54948abdca code=0x7ffc0000 [ 91.487540][ T5945] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500703][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.513276][ T5945] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536458][ T5945] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.548791][ T5945] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597025][ T6053] __nla_validate_parse: 12 callbacks suppressed [ 91.597045][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.612628][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.629643][ T6050] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.650810][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.660917][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.681541][ T6050] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.708161][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.722826][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.732580][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 91.761597][ T6050] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.820187][ T6050] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.986164][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.001236][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.009682][ T6071] netlink: 'syz.0.812': attribute type 39 has an invalid length. [ 92.035246][ T5968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.050037][ T5968] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.063965][ T5968] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.072525][ T6075] loop3: detected capacity change from 0 to 1764 [ 92.076223][ T5968] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.095972][ T6075] loop3: detected capacity change from 0 to 128 [ 92.105943][ T6075] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.119697][ T6075] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.136277][ T6077] SELinux: syz.2.821 (6077) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.154785][ T6077] loop2: detected capacity change from 0 to 512 [ 92.171253][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 92.185114][ T6077] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.215941][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 92.225440][ T6083] loop3: detected capacity change from 0 to 1764 [ 92.246618][ T6083] loop3: detected capacity change from 0 to 128 [ 92.343833][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 92.407105][ T6103] loop3: detected capacity change from 0 to 1764 [ 92.419110][ T3380] net_ratelimit: 4 callbacks suppressed [ 92.419125][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.421428][ T6103] loop3: detected capacity change from 0 to 128 [ 92.442446][ T6103] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.457046][ T6103] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.535727][ T6113] loop3: detected capacity change from 0 to 1764 [ 92.555068][ T6113] loop3: detected capacity change from 0 to 128 [ 92.588929][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.839'. [ 92.714039][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 92.781973][ T6133] loop3: detected capacity change from 0 to 1764 [ 92.798271][ T6133] loop3: detected capacity change from 0 to 128 [ 92.830021][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 92.843343][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.852788][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.861046][ T6139] netlink: 'syz.3.848': attribute type 39 has an invalid length. [ 93.004843][ T6151] bond1: entered promiscuous mode [ 93.010029][ T6151] bond1: entered allmulticast mode [ 93.015445][ T6151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.026497][ T6151] bond1 (unregistering): Released all slaves [ 93.460080][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.491507][ T6235] loop0: detected capacity change from 0 to 1764 [ 93.512752][ T6235] loop0: detected capacity change from 0 to 128 [ 93.536445][ T6235] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.557981][ T6235] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.926147][ T6310] siw: device registration error -23 [ 94.026355][ T6318] bond1: entered promiscuous mode [ 94.031631][ T6318] bond1: entered allmulticast mode [ 94.039373][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.052995][ T6318] bond1 (unregistering): Released all slaves [ 94.267760][ T6321] loop2: detected capacity change from 0 to 1764 [ 94.337098][ T6321] loop2: detected capacity change from 0 to 128 [ 94.343912][ T6321] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.356249][ T6321] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.366127][ T6323] loop3: detected capacity change from 0 to 1764 [ 94.387918][ T6323] loop3: detected capacity change from 0 to 128 [ 94.409221][ T3707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.417459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.488803][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.596259][ T6356] loop3: detected capacity change from 0 to 1764 [ 94.612078][ T6356] loop3: detected capacity change from 0 to 128 [ 94.619349][ T6356] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.690981][ T6356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.713828][ T6364] 0ªX¹¦À: renamed from 61ªX¹¦À [ 94.730792][ T6364] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 94.773438][ T6366] loop3: detected capacity change from 0 to 1764 [ 94.794212][ T6366] loop3: detected capacity change from 0 to 128 [ 94.867739][ T6374] futex_wake_op: syz.3.888 tries to shift op by -1; fix this program [ 94.910864][ T6380] ================================================================== [ 94.919006][ T6380] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 94.925800][ T6380] [ 94.928128][ T6380] write to 0xffff8881046fb200 of 8 bytes by task 6378 on cpu 1: [ 94.935764][ T6380] mas_wmb_replace+0x224/0x1510 [ 94.940630][ T6380] mas_wr_store_entry+0x158c/0x2460 [ 94.945847][ T6380] mas_store_prealloc+0x6d5/0x960 [ 94.950925][ T6380] vma_iter_store_new+0x1d3/0x210 [ 94.956044][ T6380] vma_complete+0x12b/0x570 [ 94.960567][ T6380] __split_vma+0x56c/0x630 [ 94.964993][ T6380] vma_modify+0x105/0x200 [ 94.969341][ T6380] vma_modify_flags+0x10a/0x140 [ 94.974215][ T6380] mprotect_fixup+0x30f/0x5d0 [ 94.978901][ T6380] do_mprotect_pkey+0x6ce/0x9a0 [ 94.983762][ T6380] __x64_sys_mprotect+0x48/0x60 [ 94.988624][ T6380] x64_sys_call+0x272f/0x2e10 [ 94.993327][ T6380] do_syscall_64+0xc9/0x1c0 [ 94.997863][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.003782][ T6380] [ 95.006112][ T6380] read to 0xffff8881046fb200 of 8 bytes by task 6380 on cpu 0: [ 95.013660][ T6380] mas_walk+0x123/0x320 [ 95.017833][ T6380] lock_vma_under_rcu+0xa7/0x340 [ 95.022796][ T6380] exc_page_fault+0x150/0x6a0 [ 95.027487][ T6380] asm_exc_page_fault+0x26/0x30 [ 95.032348][ T6380] [ 95.034675][ T6380] value changed: 0xffff88810005f3c1 -> 0xffff8881046fb200 [ 95.041794][ T6380] [ 95.044119][ T6380] Reported by Kernel Concurrency Sanitizer on: [ 95.050273][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.0.890 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary) [ 95.062260][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.072326][ T6380] ================================================================== [ 95.081589][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.089872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.529008][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.543878][ T6050] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.554972][ T6050] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.565860][ T6050] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.574548][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.578744][ T6050] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.608713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.619822][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.088706][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.096892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.648705][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.529047][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.537349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.688749][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.728668][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.809243][ T336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.808760][ T23] net_ratelimit: 6 callbacks suppressed [ 102.808780][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.848731][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.888781][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog