last executing test programs: 42.484361881s ago: executing program 2 (id=4035): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x110) 42.385169883s ago: executing program 2 (id=4036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfe, 0x0}) 42.244099606s ago: executing program 2 (id=4040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x4, "c045"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{}, {@empty}, {@local}, {@private}, {@multicast2, 0x9}]}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@remote, @in6=@ipv4}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = fspick(r8, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000200)={0x3, 'veth0_to_hsr\x00', {0x2}, 0x27f}) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10) 41.914786782s ago: executing program 2 (id=4043): syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x8404, &(0x7f0000000200)={[{@journal_async_commit}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000300)=@req={0x9, 0x200, 0xffffffff, 0x6}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x400000c, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28800, 0x0) ioprio_set$pid(0x2, 0x0, 0x3000) sendfile(r3, r4, 0x0, 0x10ffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) io_uring_setup(0x3e2e, &(0x7f00000001c0)={0x0, 0x3c49, 0x1, 0x0, 0xa}) 41.638845758s ago: executing program 2 (id=4044): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6c000000000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000002c880000c902000000000000850000008600000095000054bc51baca"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000780)=0x14500, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf251200000005001300000000000c00060002000000020000000c00060003000000008b62b1c45ecae462707c714c87313fdb37787f13fd9b0fdc02d9ecc5071599aa339a194939ca961597f4f28ede0ffe64028fee72e4c76aa9a50c35f80d0e8c4f8a3966fc6ff102dc138f2431babbc2d7852c969f228121516b43bdc349578d00"/153], 0x3c}, 0x1, 0x0, 0x0, 0x8993a330a0779133}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xb4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6b7e}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 41.463182311s ago: executing program 2 (id=4045): listen(0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='qrtr_ns_message\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001"], 0xdc}}, 0x0) 41.432652251s ago: executing program 32 (id=4045): listen(0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='qrtr_ns_message\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001"], 0xdc}}, 0x0) 2.909528524s ago: executing program 0 (id=4580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 2.889680665s ago: executing program 0 (id=4581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001002dbd7000fedbdf250000", @ANYRES32, @ANYBLOB="000000000000000020001280080001007369740014000280080006002f000000050009"], 0x40}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e00011afbac1414aa0520907800000000450000000000000000020000000000"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.584427901s ago: executing program 1 (id=4588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 2.537281752s ago: executing program 5 (id=4590): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x39) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.536552082s ago: executing program 1 (id=4591): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000b70300e2ec000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r7 = dup(0xffffffffffffffff) write$binfmt_aout(r7, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000001f) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x60) fcntl$notify(r12, 0x402, 0x8000003d) close_range(r11, r12, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 2.422264434s ago: executing program 5 (id=4592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) 2.07191891s ago: executing program 0 (id=4593): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) exit(0x80000001) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x6}, 0x18) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.649067978s ago: executing program 5 (id=4603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (fail_nth: 6) 1.548427561s ago: executing program 5 (id=4605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x10010, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00008100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40002, 0x1, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f80100001300200026bd7000fcdbdf251a0507034e204e23ff7f000081ffffff0400000007000000070000000500000001000000bac30000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_usb_disconnect(0xffffffffffffffff) r11 = dup3(r1, r1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f00000000c0)=0x10, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f0000000000)={0x2, 'ip6gre0\x00', {0x8e}}) 1.404886643s ago: executing program 1 (id=4606): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000e40)='./file2\x00', 0xc50cc0, &(0x7f0000000780)={[{@resgid}], [{@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xff, 0x775, &(0x7f0000001180)="$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") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 1.388493173s ago: executing program 4 (id=4607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0xe, 0x0, 0x0, @mcast2, @empty, 0x8000, 0x20, 0x7b, 0x4}}) socket$pptp(0x18, 0x1, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000040000040b0000000000000059a793ece4eeaaecbcaae6a6d70c99ec1aaaa756c884293824d749083cc9fa996f4e9cb88e331d9cce90a90347373a6b9fc028910a13a2054326c0b5f9b64837e62186e1bc1e2240ead3c7a4cca0096acfbf0aec117bd38423b188ef672c2f5470aa5fde75f13c8bfd2126640bdbb670ee29d5b24936e56357473f68aca2f30df4614f23291f28e822b5ef22599ca8f45a7ee56aff9ee24249d248c3aae0267ff9e2ca6bf76fa368dadf4c53cd9c087d3f45611d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/25], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = dup(r5) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000440)=""/171, 0xab}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000240), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0x8}}}, 0x24}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r9, 0x0, 0x4, 0x48, 0x4, 0x0, @local, @loopback, 0x700, 0x10, 0x9, 0x1}}) 1.320193725s ago: executing program 1 (id=4609): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6c000000000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000780)=0x14500, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf251200000005001300000000000c00060002000000020000000c00060003000000008b62b1c45ecae462707c714c87313fdb37787f13fd9b0fdc02d9ecc5071599aa339a194939ca961597f4f28ede0ffe64028fee72e4c76aa9a50c35f80d0e8c4f8a3966fc6ff102dc138f2431babbc2d7852c969f228121516b43bdc349578d00"/153], 0x3c}, 0x1, 0x0, 0x0, 0x8993a330a0779133}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xb4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6b7e}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 1.317103144s ago: executing program 4 (id=4610): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r1, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.288090246s ago: executing program 4 (id=4611): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd7", 0x4}], 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1b00000000000500000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) 1.279287826s ago: executing program 1 (id=4612): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/251, 0xfb}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f00000004c0)=""/94, 0x5e}], 0x4) 939.974422ms ago: executing program 4 (id=4616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000f2af23a2be8d2faee7190cd743f5400e64e2d6b8ca0bb406ccc66b3d2d635b826a700d0b6772ca06aba43ced10a953e41ff9a2d3264bc0c86d1e053e1adf0b90beced062a0366f4c95b547543502e106f4e409901af1f48e224fe79e526706d7e9e58a03fa9f864f56277b8c9b977278aee11c0d03cb28fb0d099d4c94cda99e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setfsuid(0xee00) unshare(0x20000400) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="1fef8b5900080000000000007b8af8ff00000000bfa300000000005d34664e2e4323540007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 923.273192ms ago: executing program 4 (id=4617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='qrtr_ns_message\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001"], 0xdc}}, 0x0) 914.172682ms ago: executing program 3 (id=4618): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x8, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 869.598103ms ago: executing program 3 (id=4619): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000e40)='./file2\x00', 0xc50cc0, &(0x7f0000000780)={[{@resgid}], [{@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xff, 0x775, &(0x7f0000001180)="$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") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 859.118554ms ago: executing program 4 (id=4620): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x428a31e29fe332e) r0 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004340), 0x0, 0x2121, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000000000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000f8ff00"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 808.930284ms ago: executing program 3 (id=4621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r1, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 808.190374ms ago: executing program 3 (id=4622): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xfffffffffffffffd) 770.153335ms ago: executing program 3 (id=4623): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='!pu<-0\t\t\t') (fail_nth: 1) 699.214426ms ago: executing program 3 (id=4624): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@nolazytime}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 684.284416ms ago: executing program 0 (id=4625): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}]}, 0xff, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 656.383867ms ago: executing program 0 (id=4626): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x400000000000000, 0x0, 0x0) 578.193669ms ago: executing program 0 (id=4627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc}, 0x94) (fail_nth: 11) 482.937941ms ago: executing program 5 (id=4628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000f2af23a2be8d2faee7190cd743f5400e64e2d6b8ca0bb406ccc66b3d2d635b826a700d0b6772ca06aba43ced10a953e41ff9a2d3264bc0c86d1e053e1adf0b90beced062a0366f4c95b547543502e106f4e409901af1f48e224fe79e526706d7e9e58a03fa9f864f56277b8c9b977278aee11c0d03cb28fb0d099d4c94cda99e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setfsuid(0xee00) unshare(0x20000400) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="1fef8b5900080000000000007b8af8ff00000000bfa300000000005d34664e2e4323540007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 439.651601ms ago: executing program 1 (id=4629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") r9 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r9, &(0x7f0000000000), 0x100000, 0x3000}]) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000020701040000000000000000070000000900010073797a30000000000900010073797a3000000000f854c63d95a80f7fe1cee3c3cf6e014f0d86874854c4c0d933e8570b011d3b486fd9b660f688c6a73f89b0cf0942a74c574d7b1a0eea96ccc13c4c5c00954b3ddf0e8a76e5921ce481c119c2a59de73b84ee"], 0x2c}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r11, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 0s ago: executing program 5 (id=4630): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="17ac6d91b71666678c4651b24231", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x65dfdbfe, {0x80, 0x20, 0x90, 0x0, 0xff, 0x11, 0x0, 0x5, 0x2300}}, 0x1c}, 0x1, 0x0, 0x0, 0x24044890}, 0x4000004) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000050800001b"]) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) r10 = syz_io_uring_setup(0x83d, &(0x7f0000000500)={0x0, 0x9770, 0x80, 0x2, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r15, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r14}, 0x18) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x10) syz_io_uring_submit(r11, r12, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r10, 0x3516, 0x8000000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): it: type=1326 audit(288.314:18958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f230cd30974 code=0x7ffc0000 [ 288.390158][ T29] audit: type=1326 audit(288.324:18959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f230cd30974 code=0x7ffc0000 [ 288.413277][ T29] audit: type=1326 audit(288.324:18960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.436328][ T29] audit: type=1326 audit(288.324:18961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.459403][ T29] audit: type=1326 audit(288.344:18962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.482701][ T29] audit: type=1326 audit(288.344:18963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.527926][ T29] audit: type=1326 audit(288.354:18964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.551049][ T29] audit: type=1326 audit(288.354:18965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.581239][ T29] audit: type=1326 audit(288.504:18966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.1.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 288.761286][T15030] program syz.0.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.779932][T15028] netlink: 'syz.4.3757': attribute type 10 has an invalid length. [ 288.789078][T15030] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 288.796943][T15030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3758'. [ 288.970946][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3750'. [ 289.358846][T15069] program syz.0.3770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.708473][T15073] siw: device registration error -23 [ 289.780540][T15082] FAULT_INJECTION: forcing a failure. [ 289.780540][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.793703][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.4.3775 Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.793795][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.793811][T15082] Call Trace: [ 289.793819][T15082] [ 289.793828][T15082] __dump_stack+0x1d/0x30 [ 289.793850][T15082] dump_stack_lvl+0xe8/0x140 [ 289.793869][T15082] dump_stack+0x15/0x1b [ 289.793886][T15082] should_fail_ex+0x265/0x280 [ 289.794008][T15082] should_fail+0xb/0x20 [ 289.794056][T15082] should_fail_usercopy+0x1a/0x20 [ 289.794082][T15082] _copy_from_user+0x1c/0xb0 [ 289.794114][T15082] __copy_msghdr+0x244/0x300 [ 289.794161][T15082] ___sys_sendmsg+0x109/0x1d0 [ 289.794215][T15082] __x64_sys_sendmsg+0xd4/0x160 [ 289.794253][T15082] x64_sys_call+0x191e/0x2ff0 [ 289.794274][T15082] do_syscall_64+0xd2/0x200 [ 289.794316][T15082] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.794348][T15082] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.794426][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.794450][T15082] RIP: 0033:0x7f549d69eba9 [ 289.794465][T15082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.794485][T15082] RSP: 002b:00007f549c107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.794549][T15082] RAX: ffffffffffffffda RBX: 00007f549d8e5fa0 RCX: 00007f549d69eba9 [ 289.794564][T15082] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000003 [ 289.794579][T15082] RBP: 00007f549c107090 R08: 0000000000000000 R09: 0000000000000000 [ 289.794595][T15082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.794609][T15082] R13: 00007f549d8e6038 R14: 00007f549d8e5fa0 R15: 00007fff8d8ff6c8 [ 289.794710][T15082] [ 290.065588][T15092] FAULT_INJECTION: forcing a failure. [ 290.065588][T15092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.078775][T15092] CPU: 0 UID: 0 PID: 15092 Comm: syz.4.3779 Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.078808][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.078871][T15092] Call Trace: [ 290.078880][T15092] [ 290.078889][T15092] __dump_stack+0x1d/0x30 [ 290.078916][T15092] dump_stack_lvl+0xe8/0x140 [ 290.078969][T15092] dump_stack+0x15/0x1b [ 290.078987][T15092] should_fail_ex+0x265/0x280 [ 290.079047][T15092] should_fail+0xb/0x20 [ 290.079072][T15092] should_fail_usercopy+0x1a/0x20 [ 290.079115][T15092] _copy_from_user+0x1c/0xb0 [ 290.079204][T15092] memdup_user+0x5e/0xd0 [ 290.079230][T15092] strndup_user+0x68/0xb0 [ 290.079262][T15092] __se_sys_mount+0x4d/0x2e0 [ 290.079285][T15092] ? fput+0x8f/0xc0 [ 290.079318][T15092] ? ksys_write+0x192/0x1a0 [ 290.079347][T15092] __x64_sys_mount+0x67/0x80 [ 290.079377][T15092] x64_sys_call+0x2b4d/0x2ff0 [ 290.079434][T15092] do_syscall_64+0xd2/0x200 [ 290.079466][T15092] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.079541][T15092] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.079580][T15092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.079602][T15092] RIP: 0033:0x7f549d69eba9 [ 290.079617][T15092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.079634][T15092] RSP: 002b:00007f549c107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.079683][T15092] RAX: ffffffffffffffda RBX: 00007f549d8e5fa0 RCX: 00007f549d69eba9 [ 290.079698][T15092] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 290.079712][T15092] RBP: 00007f549c107090 R08: 0000200000000080 R09: 0000000000000000 [ 290.079727][T15092] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 290.079764][T15092] R13: 00007f549d8e6038 R14: 00007f549d8e5fa0 R15: 00007fff8d8ff6c8 [ 290.079783][T15092] [ 290.159546][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3771'. [ 290.230132][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 290.779073][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.805840][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.817896][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.835401][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.897573][T15131] program syz.2.3788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.943214][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 290.997392][T15145] program syz.3.3790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.157256][T15152] siw: device registration error -23 [ 291.245988][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 291.249365][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 291.270895][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 291.280087][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3800'. [ 291.483066][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3802'. [ 291.572518][T15202] siw: device registration error -23 [ 291.644305][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 291.751425][T15218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.794377][T15218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.805440][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.814210][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.823312][ T23] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 291.831739][ T23] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.857151][T15218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.905876][T15218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.970061][ T1880] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.983171][ T1880] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.999655][ T1880] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.027111][T15226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3818'. [ 292.028479][ T1880] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.120971][T15232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.154332][T15232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.177890][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.187564][T15232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.201370][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.211822][ T3825] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 292.256592][T15232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.267156][ T3825] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.399433][ T1880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.411099][ T1880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.427699][ T1880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.438202][ T1880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.609002][T15264] program syz.2.3829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.045350][T15292] lo speed is unknown, defaulting to 1000 [ 293.794856][ T29] kauditd_printk_skb: 1164 callbacks suppressed [ 293.794872][ T29] audit: type=1326 audit(293.784:20131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 293.863889][ T29] audit: type=1326 audit(293.784:20132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 293.887616][ T29] audit: type=1326 audit(293.784:20133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 293.910939][ T29] audit: type=1326 audit(293.784:20134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 293.933979][ T29] audit: type=1326 audit(293.784:20135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 293.957084][ T29] audit: type=1326 audit(293.784:20136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 294.131470][T15351] sch_fq: defrate 4294967295 ignored. [ 294.209949][T15351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.217435][T15351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.238897][T15351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.246383][T15351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.401236][ T29] audit: type=1326 audit(294.384:20137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15355 comm="syz.2.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8729eba9 code=0x7ffc0000 [ 294.426029][ T29] audit: type=1326 audit(294.414:20138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15355 comm="syz.2.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8729eba9 code=0x7ffc0000 [ 294.449260][ T29] audit: type=1326 audit(294.414:20139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15355 comm="syz.2.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb8729eba9 code=0x7ffc0000 [ 294.472417][ T29] audit: type=1326 audit(294.414:20140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15355 comm="syz.2.3867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8729eba9 code=0x7ffc0000 [ 294.607750][T15372] program syz.2.3873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.618814][T15372] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 294.898393][T15388] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.915419][T15388] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.951110][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.959823][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.972968][ T1035] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 294.990664][ T1035] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.052623][T15400] FAULT_INJECTION: forcing a failure. [ 295.052623][T15400] name failslab, interval 1, probability 0, space 0, times 0 [ 295.065387][T15400] CPU: 1 UID: 0 PID: 15400 Comm: syz.3.3881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 295.065415][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.065427][T15400] Call Trace: [ 295.065435][T15400] [ 295.065444][T15400] __dump_stack+0x1d/0x30 [ 295.065478][T15400] dump_stack_lvl+0xe8/0x140 [ 295.065497][T15400] dump_stack+0x15/0x1b [ 295.065513][T15400] should_fail_ex+0x265/0x280 [ 295.065608][T15400] should_failslab+0x8c/0xb0 [ 295.065639][T15400] kmem_cache_alloc_node_noprof+0x57/0x320 [ 295.065678][T15400] ? __alloc_skb+0x101/0x320 [ 295.065705][T15400] __alloc_skb+0x101/0x320 [ 295.065738][T15400] netlink_alloc_large_skb+0xba/0xf0 [ 295.065814][T15400] netlink_sendmsg+0x3cf/0x6b0 [ 295.065851][T15400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.065886][T15400] __sock_sendmsg+0x145/0x180 [ 295.065935][T15400] ____sys_sendmsg+0x31e/0x4e0 [ 295.065975][T15400] ___sys_sendmsg+0x17b/0x1d0 [ 295.066026][T15400] __x64_sys_sendmsg+0xd4/0x160 [ 295.066064][T15400] x64_sys_call+0x191e/0x2ff0 [ 295.066144][T15400] do_syscall_64+0xd2/0x200 [ 295.066243][T15400] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 295.066273][T15400] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.066349][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.066376][T15400] RIP: 0033:0x7f4a890eeba9 [ 295.066396][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.066417][T15400] RSP: 002b:00007f4a87b4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.066435][T15400] RAX: ffffffffffffffda RBX: 00007f4a89335fa0 RCX: 00007f4a890eeba9 [ 295.066447][T15400] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 295.066488][T15400] RBP: 00007f4a87b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.066503][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.066518][T15400] R13: 00007f4a89336038 R14: 00007f4a89335fa0 R15: 00007fff668d2ad8 [ 295.066541][T15400] [ 295.069754][T15388] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.082877][T15402] netlink: 'syz.0.3882': attribute type 1 has an invalid length. [ 295.328450][T15405] lo speed is unknown, defaulting to 1000 [ 295.345012][T15388] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.374216][T15413] program syz.0.3886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.399083][T15413] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 295.406943][T15413] __nla_validate_parse: 4 callbacks suppressed [ 295.406959][T15413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3886'. [ 295.436452][ T1963] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.463926][ T1963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.505221][T15415] lo speed is unknown, defaulting to 1000 [ 295.532228][ T1963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.602012][T15418] : renamed from veth0_to_bond (while UP) [ 295.666342][ T1963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.934759][T15426] : renamed from veth0_to_bond (while UP) [ 295.985239][T15428] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.035497][T15428] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.039205][T15433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.057468][T15433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.085197][T15428] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.120419][T15439] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 296.120419][T15439] program syz.0.3895 not setting count and/or reply_len properly [ 296.145242][T15428] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.190167][ T1880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.214286][ T1880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.223533][T15447] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.241516][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.254587][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.273960][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.291669][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.301265][ T3825] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 296.310244][ T3825] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.329677][T15447] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.409711][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3905'. [ 296.435482][T15447] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.480103][T15447] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.502305][T15476] siw: device registration error -23 [ 296.528547][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.541258][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.553596][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.565092][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.993848][T15513] program syz.1.3921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.132582][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3925'. [ 297.388463][T15550] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.440025][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.448701][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.459765][ T23] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 297.469827][T15550] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.483929][ T23] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.524070][T15558] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3941'. [ 297.555003][T15550] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.615021][T15550] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.691740][T15573] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.731042][T15532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3930'. [ 297.745461][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.754195][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.764754][T15573] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.765995][ T3412] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 297.782798][ T3412] hid-generic 0000:0000:0000.007A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 297.844996][T15573] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.894774][T15573] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.956765][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.976715][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.994781][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.013085][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.103074][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3949'. [ 298.406716][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 298.589426][T15609] program syz.3.3960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.599378][T15609] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 298.607525][T15609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3960'. [ 298.774621][T15614] program syz.3.3961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.124887][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 299.124905][ T29] audit: type=1326 audit(299.114:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.214324][ T29] audit: type=1326 audit(299.114:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.237568][ T29] audit: type=1326 audit(299.154:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.260583][ T29] audit: type=1326 audit(299.154:20635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.283788][ T29] audit: type=1326 audit(299.154:20636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.306808][ T29] audit: type=1326 audit(299.154:20637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.329848][ T29] audit: type=1326 audit(299.154:20638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.353052][ T29] audit: type=1326 audit(299.154:20639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.376414][ T29] audit: type=1326 audit(299.154:20640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.399425][ T29] audit: type=1326 audit(299.154:20641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.1.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 299.434445][T15648] lo speed is unknown, defaulting to 1000 [ 299.888853][ T1963] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.901936][ T1963] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.921396][ T1963] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.950997][ T1963] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.071241][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3981'. [ 300.101710][T15688] program syz.4.3984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.170325][T15692] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3985'. [ 300.532026][T15710] siw: device registration error -23 [ 300.684639][T15725] program syz.0.3995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.838589][T15742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4003'. [ 300.875264][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'. [ 300.954871][T15749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.994601][T15749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.019982][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.028716][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.038050][ T3413] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 301.046876][ T3413] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.072328][T15749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.134339][T15749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.296015][T15767] program syz.3.4009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.507943][T15777] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.559706][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.571087][T15777] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.574156][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.600552][ T9] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 301.610383][ T9] hid-generic 0000:0000:0000.007C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 301.631441][T15777] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.706150][T15777] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.774433][ T1963] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.787277][ T1963] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.809503][ T1963] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.829136][ T1963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.847106][T15793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4017'. [ 302.073065][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 302.202150][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4025'. [ 302.360493][T15823] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.394317][T15823] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.413875][T15829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.423876][T15829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.433354][ T3548] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 302.446101][ T3548] hid-generic 0000:0000:0000.007D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 302.459161][T15823] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.514685][T15823] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.580646][T15826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4030'. [ 302.590503][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.607770][ T1963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.620538][ T1963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.634289][ T1963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.906709][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4031'. [ 303.393627][T15849] serio: Serial port ptm1 [ 303.518157][T15856] program syz.2.4040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.685103][T15866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4042'. [ 304.346515][T15875] lo speed is unknown, defaulting to 1000 [ 304.392532][ T1963] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.422677][ T1963] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.422808][T15888] siw: device registration error -23 [ 304.438137][T15889] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.449501][ T1963] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.475096][ T1963] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.477351][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.491948][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.501777][ T3825] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 304.510676][ T3825] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.511575][T15889] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.583604][T15902] program syz.1.4053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.595118][T15875] chnl_net:caif_netlink_parms(): no params data found [ 304.612272][T15902] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 304.620115][T15902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4053'. [ 304.655387][T15889] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.727716][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.734896][T15875] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.772645][T15875] bridge_slave_0: entered allmulticast mode [ 304.787425][T15875] bridge_slave_0: entered promiscuous mode [ 304.795660][T15889] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.814557][T15875] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.821333][T15919] siw: device registration error -23 [ 304.821722][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.844336][T15875] bridge_slave_1: entered allmulticast mode [ 304.850824][T15875] bridge_slave_1: entered promiscuous mode [ 305.113442][T15875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.156922][ T1963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.257531][ T1963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.385468][ T1963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.634217][T15875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.647860][ T1963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.665610][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 305.665626][ T29] audit: type=1326 audit(305.634:21275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.695317][ T29] audit: type=1326 audit(305.654:21276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.718638][ T29] audit: type=1326 audit(305.654:21277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.741849][ T29] audit: type=1326 audit(305.654:21278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.764956][ T29] audit: type=1326 audit(305.654:21279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.787996][ T29] audit: type=1326 audit(305.654:21280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.811000][ T29] audit: type=1326 audit(305.654:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.834191][ T29] audit: type=1326 audit(305.654:21282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.857264][ T29] audit: type=1326 audit(305.654:21283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.880245][ T29] audit: type=1326 audit(305.654:21284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.3.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 305.903737][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4067'. [ 305.939734][T15875] team0: Port device team_slave_0 added [ 305.946939][T15875] team0: Port device team_slave_1 added [ 305.966747][T15875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.973843][T15875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.999788][T15875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.013521][T15875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.020528][T15875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.046657][T15875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.126456][ T1963] bridge_slave_1: left allmulticast mode [ 306.132166][ T1963] bridge_slave_1: left promiscuous mode [ 306.137908][ T1963] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.182227][ T1963] bridge_slave_0: left allmulticast mode [ 306.188243][ T1963] bridge_slave_0: left promiscuous mode [ 306.193980][ T1963] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.227236][T15954] siw: device registration error -23 [ 306.452196][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 306.484951][ T1963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.496588][ T1963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.508252][ T1963] bond0 (unregistering): Released all slaves [ 306.541363][T15875] hsr_slave_0: entered promiscuous mode [ 306.547856][T15875] hsr_slave_1: entered promiscuous mode [ 306.554459][T15875] debugfs: 'hsr0' already exists in 'hsr' [ 306.560235][T15875] Cannot create hsr debugfs directory [ 306.566683][ T1963] tipc: Left network mode [ 306.584809][ T1963] hsr_slave_0: left promiscuous mode [ 306.593638][ T1963] hsr_slave_1: left promiscuous mode [ 306.602459][ T1963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.609951][ T1963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.617346][T15990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4076'. [ 306.626914][ T1963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.634440][ T1963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.649213][ T1963] veth1_macvtap: left promiscuous mode [ 306.654938][ T1963] veth0_macvtap: left promiscuous mode [ 306.721341][ T1963] team0 (unregistering): Port device team_slave_1 removed [ 306.739592][ T1963] team0 (unregistering): Port device team_slave_0 removed [ 306.749549][T15998] program syz.3.4078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.759444][T15998] netlink: 'syz.3.4078': attribute type 1 has an invalid length. [ 306.767325][T15998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4078'. [ 306.785066][ T6368] lo speed is unknown, defaulting to 1000 [ 306.791072][ T6368] infiniband syz0: ib_query_port failed (-19) [ 306.929319][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 306.964485][T15875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.037821][T15875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.050155][T15875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.072142][T15875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.133252][T15875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.151461][T15875] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.187763][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.194940][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.231434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.238675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.395629][T15875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.531188][T16077] program syz.1.4090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.551336][T16077] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 307.559422][T16077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4090'. [ 307.592364][T16081] lo speed is unknown, defaulting to 1000 [ 307.612789][T16081] lo speed is unknown, defaulting to 1000 [ 307.618739][T16081] lo speed is unknown, defaulting to 1000 [ 307.649377][T16081] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.682787][T15875] veth0_vlan: entered promiscuous mode [ 307.698366][T16081] lo speed is unknown, defaulting to 1000 [ 307.718833][T15875] veth1_vlan: entered promiscuous mode [ 307.727183][T16081] lo speed is unknown, defaulting to 1000 [ 307.738515][T16081] lo speed is unknown, defaulting to 1000 [ 307.745159][T15875] veth0_macvtap: entered promiscuous mode [ 307.756111][T15875] veth1_macvtap: entered promiscuous mode [ 307.786622][T16081] lo speed is unknown, defaulting to 1000 [ 307.801651][T15875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.810073][T16081] lo speed is unknown, defaulting to 1000 [ 307.813750][T15875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.842884][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.866164][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4098'. [ 307.877422][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.893925][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.952458][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.973565][T16130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4099'. [ 307.985362][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.020517][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.046964][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.078717][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.232423][T16159] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.259899][T16159] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.312195][T16168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.336468][T16168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.354733][T16159] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.471366][T16159] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.776177][T16192] program syz.3.4110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.793296][T16192] netlink: 'syz.3.4110': attribute type 1 has an invalid length. [ 308.801154][T16192] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4110'. [ 308.873581][T16202] program syz.1.4113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.885177][T16202] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 308.893057][T16202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4113'. [ 309.560439][T16253] syz.5.4124 (16253) used obsolete PPPIOCDETACH ioctl [ 309.728308][T16277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.776944][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.786953][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.796521][ T3412] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 309.804875][ T3412] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.183952][T16289] program syz.3.4130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.195684][T16289] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 310.418568][T16319] program syz.0.4135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.480246][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 310.480265][ T29] audit: type=1326 audit(1082.665:21659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.524439][T16324] FAULT_INJECTION: forcing a failure. [ 310.524439][T16324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.537646][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.1.4141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.537679][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.537713][T16324] Call Trace: [ 310.537721][T16324] [ 310.537730][T16324] __dump_stack+0x1d/0x30 [ 310.537754][T16324] dump_stack_lvl+0xe8/0x140 [ 310.537776][T16324] dump_stack+0x15/0x1b [ 310.537797][T16324] should_fail_ex+0x265/0x280 [ 310.537834][T16324] should_fail+0xb/0x20 [ 310.537859][T16324] should_fail_usercopy+0x1a/0x20 [ 310.537921][T16324] _copy_to_user+0x20/0xa0 [ 310.537964][T16324] simple_read_from_buffer+0xb5/0x130 [ 310.537994][T16324] proc_fail_nth_read+0x10e/0x150 [ 310.538039][T16324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.538072][T16324] vfs_read+0x1a5/0x770 [ 310.538098][T16324] ? __rcu_read_unlock+0x4f/0x70 [ 310.538122][T16324] ? __fget_files+0x184/0x1c0 [ 310.538166][T16324] ksys_read+0xda/0x1a0 [ 310.538196][T16324] __x64_sys_read+0x40/0x50 [ 310.538223][T16324] x64_sys_call+0x27bc/0x2ff0 [ 310.538301][T16324] do_syscall_64+0xd2/0x200 [ 310.538341][T16324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 310.538370][T16324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.538418][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.538512][T16324] RIP: 0033:0x7f230cd2d5bc [ 310.538531][T16324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.538554][T16324] RSP: 002b:00007f230b797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.538577][T16324] RAX: ffffffffffffffda RBX: 00007f230cf75fa0 RCX: 00007f230cd2d5bc [ 310.538593][T16324] RDX: 000000000000000f RSI: 00007f230b7970a0 RDI: 0000000000000007 [ 310.538622][T16324] RBP: 00007f230b797090 R08: 0000000000000000 R09: 0000000000000000 [ 310.538638][T16324] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 310.538653][T16324] R13: 00007f230cf76038 R14: 00007f230cf75fa0 R15: 00007ffdffffa8c8 [ 310.538692][T16324] [ 310.540840][ T29] audit: type=1326 audit(1082.665:21660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.765983][ T29] audit: type=1326 audit(1082.676:21661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.789203][ T29] audit: type=1326 audit(1082.676:21662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.812301][ T29] audit: type=1326 audit(1082.676:21663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.835595][ T29] audit: type=1326 audit(1082.676:21664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.858697][ T29] audit: type=1326 audit(1082.686:21665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 310.881786][ T29] audit: type=1326 audit(1082.697:21666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4a890f0a3c code=0x7ffc0000 [ 310.904779][ T29] audit: type=1326 audit(1082.697:21667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4a890f0974 code=0x7ffc0000 [ 310.904837][ T29] audit: type=1326 audit(1082.697:21668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16314 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4a890f0974 code=0x7ffc0000 [ 311.125149][T16316] __nla_validate_parse: 3 callbacks suppressed [ 311.125243][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4138'. [ 311.152989][T16349] SELinux: security_context_str_to_sid (ÛO*) failed with errno=-22 [ 311.197405][T16351] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4152'. [ 311.233839][T16277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.281817][T16277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.329635][T16277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.409609][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.438291][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.448318][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.457799][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.507275][T16359] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.546731][T16359] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.566431][T16363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.581099][T16363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.594411][ T3825] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 311.596663][T16359] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.602902][ T3825] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.660860][T16359] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.733965][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.745296][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.753682][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.762168][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.854804][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.866514][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.878055][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.889402][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.090622][T16384] SELinux: failed to load policy [ 312.416451][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4162'. [ 312.626111][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4163'. [ 312.679132][T16409] serio: Serial port ptm1 [ 312.685683][T16403] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.707702][T16411] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.720092][T16403] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.735471][T16414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.744429][T16414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.753416][ T3825] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 312.762669][ T3825] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.774514][T16415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.783267][T16415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.794203][ T3825] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 312.795968][T16411] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.802753][ T3825] hid-generic 0000:0000:0000.0082: hidraw1: HID v0.00 Device [syz1] on syz0 [ 312.851071][T16403] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.870953][T16411] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.884340][T16419] siw: device registration error -23 [ 312.908771][T16403] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.946846][T16411] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.055147][T16430] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 313.215468][T16436] program syz.0.4183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.291942][T16449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4186'. [ 313.541599][T16457] program syz.1.4189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.552573][T16457] netlink: 'syz.1.4189': attribute type 1 has an invalid length. [ 313.560516][T16457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4189'. [ 313.743083][T16460] siw: device registration error -23 [ 314.032035][T16470] program syz.1.4194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.143117][T16486] serio: Serial port ptm1 [ 314.998376][T16496] program syz.1.4200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.023407][T16496] netlink: 'syz.1.4200': attribute type 1 has an invalid length. [ 315.031197][T16496] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4200'. [ 315.278557][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 315.278573][ T29] audit: type=1326 audit(1087.693:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 315.344097][ T29] audit: type=1326 audit(1087.735:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 315.367327][ T29] audit: type=1326 audit(1087.746:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 315.390597][ T29] audit: type=1326 audit(1087.756:22124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 315.413798][ T29] audit: type=1326 audit(1087.756:22125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c345bebe3 code=0x7ffc0000 [ 315.641687][ T29] audit: type=1326 audit(1088.071:22126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 315.664906][ T29] audit: type=1326 audit(1088.071:22127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 315.688009][ T29] audit: type=1326 audit(1088.071:22128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 315.711243][ T29] audit: type=1326 audit(1088.071:22129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 315.734402][ T29] audit: type=1326 audit(1088.071:22130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16507 comm="syz.1.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 315.842858][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4201'. [ 315.937314][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'. [ 315.952833][T16526] program syz.1.4207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.989878][T16528] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.025057][T16528] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.040206][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.050449][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.059944][ T3825] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 316.071977][T16528] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.082039][ T3825] hid-generic 0000:0000:0000.0083: hidraw2: HID v0.00 Device [syz1] on syz0 [ 316.117008][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.129021][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.138420][T16528] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.154245][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.168188][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.182694][T16545] program syz.1.4213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.193518][T16545] netlink: 'syz.1.4213': attribute type 1 has an invalid length. [ 316.201342][T16545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4213'. [ 316.225519][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.251704][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.261506][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.270577][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.330192][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.346108][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.366778][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.375021][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.415576][T16559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'. [ 316.578743][T16570] siw: device registration error -23 [ 316.820110][T16584] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.863631][T16584] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.892542][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.915764][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.929944][T16584] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.934976][ T23] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 316.954692][ T23] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.015776][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4233'. [ 317.052087][T16606] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.073917][T16584] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.102916][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.111772][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.121797][ T23] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 317.133731][ T23] hid-generic 0000:0000:0000.0085: hidraw1: HID v0.00 Device [syz1] on syz0 [ 317.169110][T16606] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.229172][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.245101][T16606] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.272563][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.288289][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.314772][T16606] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.335472][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.462425][T16592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4232'. [ 317.930180][T16629] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.979646][T16632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.988278][T16632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.998704][T16629] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.000459][ T9] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 318.034499][ T9] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.082724][T16629] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.168233][T16629] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.182777][T16633] lo speed is unknown, defaulting to 1000 [ 318.652752][T16665] program syz.5.4252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.261654][T16710] FAULT_INJECTION: forcing a failure. [ 319.261654][T16710] name failslab, interval 1, probability 0, space 0, times 0 [ 319.274471][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.0.4264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.274565][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.274581][T16710] Call Trace: [ 319.274590][T16710] [ 319.274600][T16710] __dump_stack+0x1d/0x30 [ 319.274701][T16710] dump_stack_lvl+0xe8/0x140 [ 319.274723][T16710] dump_stack+0x15/0x1b [ 319.274739][T16710] should_fail_ex+0x265/0x280 [ 319.274766][T16710] should_failslab+0x8c/0xb0 [ 319.274868][T16710] kmem_cache_alloc_noprof+0x50/0x310 [ 319.274895][T16710] ? audit_log_start+0x365/0x6c0 [ 319.274936][T16710] audit_log_start+0x365/0x6c0 [ 319.274981][T16710] audit_seccomp+0x48/0x100 [ 319.275020][T16710] ? __seccomp_filter+0x68c/0x10d0 [ 319.275081][T16710] __seccomp_filter+0x69d/0x10d0 [ 319.275109][T16710] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.275146][T16710] ? vfs_write+0x7e8/0x960 [ 319.275172][T16710] ? __rcu_read_unlock+0x4f/0x70 [ 319.275227][T16710] ? __fget_files+0x184/0x1c0 [ 319.275263][T16710] __secure_computing+0x82/0x150 [ 319.275364][T16710] syscall_trace_enter+0xcf/0x1e0 [ 319.275389][T16710] do_syscall_64+0xac/0x200 [ 319.275426][T16710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.275537][T16710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.275576][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.275605][T16710] RIP: 0033:0x7f8c345beba9 [ 319.275695][T16710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.275717][T16710] RSP: 002b:00007f8c3301f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 319.275740][T16710] RAX: ffffffffffffffda RBX: 00007f8c34805fa0 RCX: 00007f8c345beba9 [ 319.275794][T16710] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 319.275806][T16710] RBP: 00007f8c3301f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.275854][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.275865][T16710] R13: 00007f8c34806038 R14: 00007f8c34805fa0 R15: 00007ffe860eddb8 [ 319.275952][T16710] [ 319.527386][T16718] serio: Serial port ptm2 [ 319.705324][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.718825][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.734122][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.742844][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.797436][T16733] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4267'. [ 319.829501][T16731] lo speed is unknown, defaulting to 1000 [ 320.507028][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 320.507043][ T29] audit: type=1326 audit(1093.183:22419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16743 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 320.543962][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4268'. [ 320.602159][ T29] audit: type=1326 audit(1093.215:22420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16743 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a890eeba9 code=0x7ffc0000 [ 320.626552][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 320.792615][ T29] audit: type=1326 audit(1093.488:22421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.815966][ T29] audit: type=1326 audit(1093.488:22422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.839091][ T29] audit: type=1326 audit(1093.488:22423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.862254][ T29] audit: type=1326 audit(1093.488:22424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.885455][ T29] audit: type=1326 audit(1093.488:22425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.908588][ T29] audit: type=1326 audit(1093.488:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.931704][ T29] audit: type=1326 audit(1093.488:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.954837][ T29] audit: type=1326 audit(1093.488:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16772 comm="syz.5.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 320.985023][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.994908][T16781] program syz.3.4274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.006501][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.056918][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.090651][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.104813][T16799] serio: Serial port ptm0 [ 321.187161][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4279'. [ 321.205299][T16807] FAULT_INJECTION: forcing a failure. [ 321.205299][T16807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.218473][T16807] CPU: 1 UID: 0 PID: 16807 Comm: syz.3.4281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.218511][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.218527][T16807] Call Trace: [ 321.218535][T16807] [ 321.218545][T16807] __dump_stack+0x1d/0x30 [ 321.218572][T16807] dump_stack_lvl+0xe8/0x140 [ 321.218646][T16807] dump_stack+0x15/0x1b [ 321.218666][T16807] should_fail_ex+0x265/0x280 [ 321.218698][T16807] should_fail+0xb/0x20 [ 321.218722][T16807] should_fail_usercopy+0x1a/0x20 [ 321.218839][T16807] _copy_from_user+0x1c/0xb0 [ 321.218878][T16807] ___sys_sendmsg+0xc1/0x1d0 [ 321.218945][T16807] __x64_sys_sendmsg+0xd4/0x160 [ 321.218983][T16807] x64_sys_call+0x191e/0x2ff0 [ 321.219009][T16807] do_syscall_64+0xd2/0x200 [ 321.219093][T16807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.219123][T16807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.219158][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.219210][T16807] RIP: 0033:0x7f4a890eeba9 [ 321.219229][T16807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.219252][T16807] RSP: 002b:00007f4a87b4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.219275][T16807] RAX: ffffffffffffffda RBX: 00007f4a89335fa0 RCX: 00007f4a890eeba9 [ 321.219290][T16807] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 321.219305][T16807] RBP: 00007f4a87b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.219391][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.219406][T16807] R13: 00007f4a89336038 R14: 00007f4a89335fa0 R15: 00007fff668d2ad8 [ 321.219429][T16807] [ 321.448668][T16811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4282'. [ 321.496505][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4283'. [ 321.664777][T16817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4285'. [ 321.695489][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4284'. [ 322.046658][T16832] lo speed is unknown, defaulting to 1000 [ 322.313588][T16849] siw: device registration error -23 [ 322.336841][T16852] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4298'. [ 322.726718][T16861] siw: device registration error -23 [ 322.850545][T16868] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.888413][T16874] program syz.1.4306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.898780][T16874] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 322.902960][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.906698][T16874] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4306'. [ 322.916861][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.934728][T16868] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.987917][T16868] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.045283][T16868] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.138767][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.156725][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.165552][T16884] serio: Serial port ptm1 [ 323.170496][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.187242][T16887] siw: device registration error -23 [ 323.194656][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.227581][T16886] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.277628][T16892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.286150][T16892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.295875][T16886] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.307181][ T3483] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 323.315152][ T3483] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.396864][T16898] futex_wake_op: syz.0.4313 tries to shift op by 36; fix this program [ 323.418380][T16886] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.455085][T16893] lo speed is unknown, defaulting to 1000 [ 323.488848][T16886] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.558306][ T1963] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.580267][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.592852][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.608919][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.724814][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4315'. [ 323.852387][T16915] program syz.0.4320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.616602][T16961] siw: device registration error -23 [ 325.139339][T16977] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4343'. [ 325.150922][T16977] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4343'. [ 325.252840][T16980] batadv1: entered promiscuous mode [ 325.258203][T16980] batadv1: entered allmulticast mode [ 325.289826][T16977] batadv1: entered promiscuous mode [ 325.295211][T16977] batadv1: entered allmulticast mode [ 325.895213][T17000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.918010][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 325.918029][ T29] audit: type=1400 audit(1098.862:23005): avc: denied { bind } for pid=17004 comm="syz.3.4351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.943283][ T29] audit: type=1400 audit(1098.862:23006): avc: denied { name_bind } for pid=17004 comm="syz.3.4351" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 325.964721][ T29] audit: type=1400 audit(1098.862:23007): avc: denied { node_bind } for pid=17004 comm="syz.3.4351" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 325.990555][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.007447][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.054746][ T29] audit: type=1326 audit(1098.988:23008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.078010][ T29] audit: type=1326 audit(1098.988:23009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.101281][ T29] audit: type=1326 audit(1098.988:23010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.124531][ T29] audit: type=1326 audit(1098.988:23011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.147652][ T29] audit: type=1326 audit(1098.988:23012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.163173][T17000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.170821][ T29] audit: type=1326 audit(1098.988:23013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.203695][ T29] audit: type=1326 audit(1098.988:23014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17008 comm="syz.1.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230cd2eba9 code=0x7ffc0000 [ 326.206676][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.256437][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.271512][T17018] serio: Serial port ptm1 [ 326.294433][T17000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.331774][T17000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.395019][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.423514][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.432333][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.441380][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.804901][T17026] siw: device registration error -23 [ 327.087560][T17043] __nla_validate_parse: 2 callbacks suppressed [ 327.087621][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 327.104107][T17043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4365'. [ 327.140302][T17045] netlink: 'syz.1.4366': attribute type 1 has an invalid length. [ 327.148096][T17045] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4366'. [ 327.239190][T17047] siw: device registration error -23 [ 327.318530][T17054] FAULT_INJECTION: forcing a failure. [ 327.318530][T17054] name failslab, interval 1, probability 0, space 0, times 0 [ 327.331374][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.1.4369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 327.331408][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.331421][T17054] Call Trace: [ 327.331428][T17054] [ 327.331498][T17054] __dump_stack+0x1d/0x30 [ 327.331524][T17054] dump_stack_lvl+0xe8/0x140 [ 327.331549][T17054] dump_stack+0x15/0x1b [ 327.331571][T17054] should_fail_ex+0x265/0x280 [ 327.331603][T17054] should_failslab+0x8c/0xb0 [ 327.331684][T17054] kmem_cache_alloc_noprof+0x50/0x310 [ 327.331724][T17054] ? audit_log_start+0x365/0x6c0 [ 327.331830][T17054] audit_log_start+0x365/0x6c0 [ 327.331874][T17054] audit_seccomp+0x48/0x100 [ 327.331906][T17054] ? __seccomp_filter+0x68c/0x10d0 [ 327.331934][T17054] __seccomp_filter+0x69d/0x10d0 [ 327.332005][T17054] ? _raw_spin_unlock+0x26/0x50 [ 327.332033][T17054] __secure_computing+0x82/0x150 [ 327.332055][T17054] syscall_trace_enter+0xcf/0x1e0 [ 327.332087][T17054] do_syscall_64+0xac/0x200 [ 327.332160][T17054] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 327.332236][T17054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 327.332274][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.332318][T17054] RIP: 0033:0x7f230cd2eba9 [ 327.332349][T17054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.332370][T17054] RSP: 002b:00007f230b797038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 327.332394][T17054] RAX: ffffffffffffffda RBX: 00007f230cf75fa0 RCX: 00007f230cd2eba9 [ 327.332414][T17054] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 327.332439][T17054] RBP: 00007f230b797090 R08: 0000000000000000 R09: 0000000000000000 [ 327.332454][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.332467][T17054] R13: 00007f230cf76038 R14: 00007f230cf75fa0 R15: 00007ffdffffa8c8 [ 327.332486][T17054] [ 327.557169][T17057] netlink: 'syz.1.4370': attribute type 21 has an invalid length. [ 327.563047][T17052] lo speed is unknown, defaulting to 1000 [ 327.565502][T17057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4370'. [ 327.579945][T17057] netlink: 'syz.1.4370': attribute type 1 has an invalid length. [ 328.027009][T17077] siw: device registration error -23 [ 328.139955][T17088] FAULT_INJECTION: forcing a failure. [ 328.139955][T17088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.153292][T17088] CPU: 0 UID: 0 PID: 17088 Comm: syz.4.4381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 328.153332][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.153349][T17088] Call Trace: [ 328.153356][T17088] [ 328.153363][T17088] __dump_stack+0x1d/0x30 [ 328.153418][T17088] dump_stack_lvl+0xe8/0x140 [ 328.153438][T17088] dump_stack+0x15/0x1b [ 328.153458][T17088] should_fail_ex+0x265/0x280 [ 328.153485][T17088] should_fail+0xb/0x20 [ 328.153507][T17088] should_fail_usercopy+0x1a/0x20 [ 328.153599][T17088] strncpy_from_user+0x25/0x230 [ 328.153637][T17088] path_setxattrat+0xeb/0x310 [ 328.153728][T17088] __x64_sys_lsetxattr+0x71/0x90 [ 328.153755][T17088] x64_sys_call+0x2877/0x2ff0 [ 328.153778][T17088] do_syscall_64+0xd2/0x200 [ 328.153840][T17088] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 328.153865][T17088] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 328.153897][T17088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.153919][T17088] RIP: 0033:0x7f549d69eba9 [ 328.153935][T17088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.154012][T17088] RSP: 002b:00007f549c107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 328.154032][T17088] RAX: ffffffffffffffda RBX: 00007f549d8e5fa0 RCX: 00007f549d69eba9 [ 328.154045][T17088] RDX: 00002000000006c0 RSI: 00002000000000c0 RDI: 0000200000000080 [ 328.154058][T17088] RBP: 00007f549c107090 R08: 0000000000000000 R09: 0000000000000000 [ 328.154070][T17088] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 328.154083][T17088] R13: 00007f549d8e6038 R14: 00007f549d8e5fa0 R15: 00007fff8d8ff6c8 [ 328.154159][T17088] [ 328.611171][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4386'. [ 328.623795][T17104] program syz.1.4388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.649544][T17104] netlink: 'syz.1.4388': attribute type 1 has an invalid length. [ 328.657410][T17104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4388'. [ 328.668060][T17107] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4389'. [ 328.705895][T17107] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4389'. [ 328.858790][T17114] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.914356][T17114] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.940406][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.966311][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.975287][T17114] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.976246][ T23] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 328.994073][ T23] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.037362][T17114] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.110350][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.122367][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.133942][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.151976][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.400213][T17139] lo speed is unknown, defaulting to 1000 [ 329.675873][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4399'. [ 329.757438][T17161] program syz.4.4406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.767204][T17161] netlink: 'syz.4.4406': attribute type 1 has an invalid length. [ 329.775004][T17161] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4406'. [ 330.311358][T17186] siw: device registration error -23 [ 330.636912][T17201] program syz.5.4423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.671952][T17201] netlink: 'syz.5.4423': attribute type 1 has an invalid length. [ 330.690004][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 330.690067][ T29] audit: type=1326 audit(1103.880:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.812074][ T29] audit: type=1326 audit(1103.911:23292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.835399][ T29] audit: type=1326 audit(1103.922:23293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.858465][ T29] audit: type=1326 audit(1103.932:23294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.881535][ T29] audit: type=1326 audit(1103.932:23295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17205 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c345f1465 code=0x7ffc0000 [ 330.904699][ T29] audit: type=1326 audit(1103.932:23296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.927799][ T29] audit: type=1326 audit(1103.932:23297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.950889][ T29] audit: type=1326 audit(1103.932:23298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c3455ada9 code=0x7ffc0000 [ 330.973933][ T29] audit: type=1326 audit(1103.932:23299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 330.996990][ T29] audit: type=1326 audit(1103.943:23300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17202 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 331.166678][T17212] serio: Serial port ptm0 [ 331.444752][T17221] program syz.1.4427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.456228][T17221] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 331.568083][T17229] program syz.0.4430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.579646][T17229] netlink: 'syz.0.4430': attribute type 1 has an invalid length. [ 331.770209][T17243] 9pnet_fd: Insufficient options for proto=fd [ 332.106164][T17251] 9pnet_fd: Insufficient options for proto=fd [ 332.342718][T17257] program syz.3.4441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.391918][T17257] netlink: 'syz.3.4441': attribute type 1 has an invalid length. [ 332.399777][T17257] __nla_validate_parse: 5 callbacks suppressed [ 332.399793][T17257] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4441'. [ 332.480641][T17259] siw: device registration error -23 [ 333.190103][T17289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.247001][T17291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.290854][T17289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.329925][T17291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.362270][ T3483] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 333.379174][ T3483] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.444374][T17289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.495372][T17289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.562941][T17299] lo speed is unknown, defaulting to 1000 [ 333.568832][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.580225][ T1963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.600263][ T1963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.639341][ T1963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.709790][T17307] siw: device registration error -23 [ 334.007440][T17323] program syz.4.4462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.028507][T17323] netlink: 'syz.4.4462': attribute type 1 has an invalid length. [ 334.036302][T17323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4462'. [ 334.081190][T17328] 9pnet_fd: Insufficient options for proto=fd [ 334.200992][T17336] serio: Serial port ptm0 [ 334.357821][T17341] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4469'. [ 334.746015][T17352] FAULT_INJECTION: forcing a failure. [ 334.746015][T17352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.759334][T17352] CPU: 0 UID: 0 PID: 17352 Comm: syz.0.4472 Not tainted syzkaller #0 PREEMPT(voluntary) [ 334.759368][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.759386][T17352] Call Trace: [ 334.759395][T17352] [ 334.759430][T17352] __dump_stack+0x1d/0x30 [ 334.759509][T17352] dump_stack_lvl+0xe8/0x140 [ 334.759537][T17352] dump_stack+0x15/0x1b [ 334.759559][T17352] should_fail_ex+0x265/0x280 [ 334.759592][T17352] should_fail+0xb/0x20 [ 334.759625][T17352] should_fail_usercopy+0x1a/0x20 [ 334.759658][T17352] _copy_from_user+0x1c/0xb0 [ 334.759719][T17352] ___sys_sendmsg+0xc1/0x1d0 [ 334.759805][T17352] __sys_sendmmsg+0x178/0x300 [ 334.759863][T17352] __x64_sys_sendmmsg+0x57/0x70 [ 334.759978][T17352] x64_sys_call+0x1c4a/0x2ff0 [ 334.760067][T17352] do_syscall_64+0xd2/0x200 [ 334.760111][T17352] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 334.760154][T17352] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.760264][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.760365][T17352] RIP: 0033:0x7f8c345beba9 [ 334.760384][T17352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.760408][T17352] RSP: 002b:00007f8c3301f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.760455][T17352] RAX: ffffffffffffffda RBX: 00007f8c34805fa0 RCX: 00007f8c345beba9 [ 334.760470][T17352] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000003 [ 334.760486][T17352] RBP: 00007f8c3301f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.760501][T17352] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 334.760517][T17352] R13: 00007f8c34806038 R14: 00007f8c34805fa0 R15: 00007ffe860eddb8 [ 334.760543][T17352] [ 334.954419][T17354] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4473'. [ 334.966195][T17354] xt_l2tp: v2 tid > 0xffff: 37482740 [ 335.027798][T17358] block device autoloading is deprecated and will be removed. [ 335.064400][T17360] 9pnet_fd: Insufficient options for proto=fd [ 335.082684][T17362] loop1: detected capacity change from 0 to 512 [ 335.096492][T17362] /dev/loop1: Can't open blockdev [ 335.104380][T17358] FAT-fs (loop1): bogus number of reserved sectors [ 335.110936][T17358] FAT-fs (loop1): Can't find a valid FAT filesystem [ 335.147709][T17367] program syz.1.4479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.165290][T17367] netlink: 'syz.1.4479': attribute type 1 has an invalid length. [ 335.173174][T17367] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4479'. [ 335.238171][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4478'. [ 335.290439][T17384] serio: Serial port ptm0 [ 335.311138][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4468'. [ 335.382512][T17391] 9pnet_fd: Insufficient options for proto=fd [ 335.538465][T17405] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.592096][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.619331][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.620247][T17405] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.662308][T17413] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.705917][T17405] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.719770][T17417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.728892][T17417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.754531][T17413] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.791884][T17405] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.829428][T17413] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.896559][T17413] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.956696][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.977414][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.995747][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.040087][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.153515][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 336.153530][ T29] audit: type=1326 audit(1109.611:23755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.165926][T17434] program syz.4.4500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.183193][ T29] audit: type=1326 audit(1109.611:23756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.217205][ T29] audit: type=1326 audit(1109.653:23757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.240491][ T29] audit: type=1326 audit(1109.653:23758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.263624][ T29] audit: type=1326 audit(1109.653:23759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.286770][ T29] audit: type=1326 audit(1109.653:23760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.309889][ T29] audit: type=1326 audit(1109.653:23761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.333030][ T29] audit: type=1326 audit(1109.653:23762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fa83eba9 code=0x7ffc0000 [ 336.356261][ T29] audit: type=1326 audit(1109.653:23763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f67fa840a3c code=0x7ffc0000 [ 336.379366][ T29] audit: type=1326 audit(1109.653:23764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17424 comm="syz.5.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f67fa840974 code=0x7ffc0000 [ 336.677841][T17452] 9pnet_fd: Insufficient options for proto=fd [ 336.686316][T17446] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.731427][T17456] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4508'. [ 336.767553][T17446] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.807181][T17457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.822144][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4499'. [ 336.840653][T17456] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4508'. [ 336.847734][T17457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.863326][ T6368] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 336.871893][ T6368] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.882973][T17446] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.926986][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.939948][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.948580][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.973338][T17446] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.998472][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.045593][T17472] FAULT_INJECTION: forcing a failure. [ 337.045593][T17472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.058873][T17472] CPU: 0 UID: 0 PID: 17472 Comm: syz.5.4515 Not tainted syzkaller #0 PREEMPT(voluntary) [ 337.058909][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.058926][T17472] Call Trace: [ 337.058934][T17472] [ 337.058943][T17472] __dump_stack+0x1d/0x30 [ 337.058971][T17472] dump_stack_lvl+0xe8/0x140 [ 337.059006][T17472] dump_stack+0x15/0x1b [ 337.059028][T17472] should_fail_ex+0x265/0x280 [ 337.059116][T17472] should_fail+0xb/0x20 [ 337.059143][T17472] should_fail_usercopy+0x1a/0x20 [ 337.059197][T17472] _copy_from_user+0x1c/0xb0 [ 337.059272][T17472] ___sys_sendmsg+0xc1/0x1d0 [ 337.059327][T17472] __x64_sys_sendmsg+0xd4/0x160 [ 337.059495][T17472] x64_sys_call+0x191e/0x2ff0 [ 337.059524][T17472] do_syscall_64+0xd2/0x200 [ 337.059565][T17472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 337.059597][T17472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.059724][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.059753][T17472] RIP: 0033:0x7f67fa83eba9 [ 337.059772][T17472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.059796][T17472] RSP: 002b:00007f67f929f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.059860][T17472] RAX: ffffffffffffffda RBX: 00007f67faa85fa0 RCX: 00007f67fa83eba9 [ 337.059883][T17472] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 337.059898][T17472] RBP: 00007f67f929f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.059914][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.060000][T17472] R13: 00007f67faa86038 R14: 00007f67faa85fa0 R15: 00007ffdaccea788 [ 337.060063][T17472] [ 337.301869][T17482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.320995][T17490] program syz.0.4512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.335530][T17482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.356954][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.365810][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.392919][T17482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.423626][T17482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.507104][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.519897][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.536658][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.566472][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.622550][T17498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.659947][T17498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.689850][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.698429][T17481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4518'. [ 337.699069][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.700800][ T3483] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 337.733252][ T3483] hid-generic 0000:0000:0000.008B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 337.754815][T17498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.785479][T17505] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4522'. [ 337.811301][T17498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.103099][T17510] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4524'. [ 338.113178][T17510] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4524'. [ 338.296766][T17514] siw: device registration error -23 [ 338.361365][T17523] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.373868][T17526] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.412390][T17523] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.420550][T17530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.431559][T17531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.435100][T17530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.440720][T17531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.455249][ T3483] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 338.463615][ T3483] hid-generic 0000:0000:0000.008C: hidraw2: HID v0.00 Device [syz1] on syz0 [ 338.474766][T17526] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.516221][T17523] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.573402][T17526] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.602109][T17523] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.649592][T17526] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.692949][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.704703][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.716611][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.728162][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.263141][T17541] tmpfs: Bad value for 'mpol' [ 339.460573][T17552] program syz.5.4540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.470864][T17552] netlink: 'syz.5.4540': attribute type 1 has an invalid length. [ 339.478737][T17552] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4540'. [ 339.601822][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.632013][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.640560][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.660025][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.684496][T17561] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4542'. [ 340.044897][ T1963] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.063757][ T1963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.072046][ T1963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.080558][ T1963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.473400][ T1963] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.496198][ T1963] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.504560][ T1963] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.513316][ T1963] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.577518][T17579] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4546'. [ 340.577851][T17579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4546'. [ 340.586833][T17578] loop1: detected capacity change from 0 to 512 [ 340.624753][T17578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.668662][T12641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.777261][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4552'. [ 340.890715][T17599] loop1: detected capacity change from 0 to 8192 [ 340.925803][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 340.925821][ T29] audit: type=1326 audit(1114.629:23964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 341.018368][ T29] audit: type=1326 audit(1114.650:23965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 341.042021][ T29] audit: type=1326 audit(1114.650:23966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 341.065486][ T29] audit: type=1326 audit(1114.650:23967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.0.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c345beba9 code=0x7ffc0000 [ 341.088592][ T29] audit: type=1326 audit(1114.713:23968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17607 comm="syz.0.4558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c345beba9 code=0x0 [ 341.562776][ T29] audit: type=1326 audit(1115.279:23969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 341.586339][ T29] audit: type=1326 audit(1115.279:23970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 341.609462][ T29] audit: type=1326 audit(1115.279:23971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 341.632708][ T29] audit: type=1326 audit(1115.279:23972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 341.655930][ T29] audit: type=1326 audit(1115.279:23973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549d69eba9 code=0x7ffc0000 [ 341.809466][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 342.069960][T17644] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.121231][T17640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.140380][T17640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.188711][T17644] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.279159][T17656] lo speed is unknown, defaulting to 1000 [ 342.293705][T17668] program syz.0.4574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.309297][T17644] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.515617][T17675] SELinux: Context @ is not valid (left unmapped). [ 342.528177][T17644] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.775428][T17689] __nla_validate_parse: 9 callbacks suppressed [ 342.775447][T17689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4581'. [ 343.108296][T17711] netlink: 'syz.5.4590': attribute type 10 has an invalid length. [ 343.126977][T17711] team0: Port device dummy0 added [ 343.136471][T17711] netlink: 'syz.5.4590': attribute type 10 has an invalid length. [ 343.147142][T17711] team0: Port device dummy0 removed [ 343.155595][T17711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 343.198324][T17713] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.214609][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.233424][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.243289][T17713] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.256221][T17718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.264940][T17718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.274498][ T3399] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 343.284926][T17713] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.296813][ T3399] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.313275][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.331629][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.346870][T17713] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.621054][ T1963] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.629386][ T1963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.645717][ T1963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.658247][ T1963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.952726][T17737] lo speed is unknown, defaulting to 1000 [ 344.021846][T17750] FAULT_INJECTION: forcing a failure. [ 344.021846][T17750] name failslab, interval 1, probability 0, space 0, times 0 [ 344.034646][T17750] CPU: 1 UID: 0 PID: 17750 Comm: syz.5.4603 Not tainted syzkaller #0 PREEMPT(voluntary) [ 344.034682][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.034699][T17750] Call Trace: [ 344.034708][T17750] [ 344.034718][T17750] __dump_stack+0x1d/0x30 [ 344.034789][T17750] dump_stack_lvl+0xe8/0x140 [ 344.034827][T17750] dump_stack+0x15/0x1b [ 344.034847][T17750] should_fail_ex+0x265/0x280 [ 344.034872][T17750] should_failslab+0x8c/0xb0 [ 344.034941][T17750] kmem_cache_alloc_noprof+0x50/0x310 [ 344.035050][T17750] ? alloc_empty_file+0x76/0x200 [ 344.035084][T17750] alloc_empty_file+0x76/0x200 [ 344.035124][T17750] alloc_file_pseudo+0xc6/0x160 [ 344.035224][T17750] hugetlb_file_setup+0x2a6/0x3d0 [ 344.035250][T17750] ksys_mmap_pgoff+0x157/0x310 [ 344.035270][T17750] x64_sys_call+0x14a3/0x2ff0 [ 344.035299][T17750] do_syscall_64+0xd2/0x200 [ 344.035341][T17750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 344.035377][T17750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.035417][T17750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.035462][T17750] RIP: 0033:0x7f67fa83eba9 [ 344.035482][T17750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.035504][T17750] RSP: 002b:00007f67f929f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 344.035529][T17750] RAX: ffffffffffffffda RBX: 00007f67faa85fa0 RCX: 00007f67fa83eba9 [ 344.035545][T17750] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 344.035562][T17750] RBP: 00007f67f929f090 R08: ffffffffffffffff R09: 0000000000000000 [ 344.035641][T17750] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 344.035657][T17750] R13: 00007f67faa86038 R14: 00007f67faa85fa0 R15: 00007ffdaccea788 [ 344.035683][T17750] [ 344.047231][T17745] siw: device registration error -23 [ 344.317066][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 344.339398][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 344.384087][T17779] serio: Serial port ptm0 [ 344.406232][T17777] block device autoloading is deprecated and will be removed. [ 344.475562][T17783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4614'. [ 344.503926][T17786] FAULT_INJECTION: forcing a failure. [ 344.503926][T17786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.517120][T17786] CPU: 0 UID: 0 PID: 17786 Comm: syz.3.4615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 344.517172][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.517188][T17786] Call Trace: [ 344.517197][T17786] [ 344.517206][T17786] __dump_stack+0x1d/0x30 [ 344.517232][T17786] dump_stack_lvl+0xe8/0x140 [ 344.517258][T17786] dump_stack+0x15/0x1b [ 344.517354][T17786] should_fail_ex+0x265/0x280 [ 344.517386][T17786] should_fail+0xb/0x20 [ 344.517450][T17786] should_fail_usercopy+0x1a/0x20 [ 344.517482][T17786] _copy_from_iter+0xd2/0xe80 [ 344.517522][T17786] ? alloc_pages_mpol+0x201/0x250 [ 344.517567][T17786] copy_page_from_iter+0x178/0x2a0 [ 344.517630][T17786] tun_get_user+0x679/0x2680 [ 344.517660][T17786] ? ref_tracker_alloc+0x1f2/0x2f0 [ 344.517768][T17786] tun_chr_write_iter+0x15e/0x210 [ 344.517794][T17786] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 344.517860][T17786] vfs_write+0x527/0x960 [ 344.517898][T17786] ksys_write+0xda/0x1a0 [ 344.517929][T17786] __x64_sys_write+0x40/0x50 [ 344.517959][T17786] x64_sys_call+0x27fe/0x2ff0 [ 344.517985][T17786] do_syscall_64+0xd2/0x200 [ 344.518084][T17786] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 344.518112][T17786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.518199][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.518226][T17786] RIP: 0033:0x7f4a890ed65f [ 344.518246][T17786] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 344.518329][T17786] RSP: 002b:00007f4a87b4f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 344.518354][T17786] RAX: ffffffffffffffda RBX: 00007f4a89335fa0 RCX: 00007f4a890ed65f [ 344.518370][T17786] RDX: 0000000000000088 RSI: 0000200000000280 RDI: 00000000000000c8 [ 344.518384][T17786] RBP: 00007f4a87b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.518445][T17786] R10: 0000000000000088 R11: 0000000000000293 R12: 0000000000000001 [ 344.518461][T17786] R13: 00007f4a89336038 R14: 00007f4a89335fa0 R15: 00007fff668d2ad8 [ 344.518508][T17786] [ 344.748165][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4618'. [ 344.865221][T17801] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4620'. [ 344.875741][T17801] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4620'. [ 345.024699][T17812] FAULT_INJECTION: forcing a failure. [ 345.024699][T17812] name failslab, interval 1, probability 0, space 0, times 0 [ 345.037491][T17812] CPU: 0 UID: 0 PID: 17812 Comm: syz.0.4627 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.037515][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.037581][T17812] Call Trace: [ 345.037587][T17812] [ 345.037594][T17812] __dump_stack+0x1d/0x30 [ 345.037650][T17812] dump_stack_lvl+0xe8/0x140 [ 345.037667][T17812] dump_stack+0x15/0x1b [ 345.037681][T17812] should_fail_ex+0x265/0x280 [ 345.037775][T17812] should_failslab+0x8c/0xb0 [ 345.037802][T17812] __kmalloc_node_noprof+0xa9/0x410 [ 345.037834][T17812] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 345.037929][T17812] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 345.038005][T17812] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 345.038109][T17812] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 345.038195][T17812] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 345.038221][T17812] ? bpf_check+0xe0/0xd9e0 [ 345.038241][T17812] vzalloc_noprof+0x82/0xc0 [ 345.038355][T17812] ? bpf_check+0xe0/0xd9e0 [ 345.038375][T17812] bpf_check+0xe0/0xd9e0 [ 345.038468][T17812] ? __rcu_read_unlock+0x4f/0x70 [ 345.038523][T17812] ? __memcg_kmem_charge_page+0xd1/0x170 [ 345.038602][T17812] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 345.038636][T17812] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 345.038697][T17812] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 345.038725][T17812] ? pcpu_block_update+0x24e/0x3b0 [ 345.038798][T17812] ? _find_next_zero_bit+0x29/0xa0 [ 345.038817][T17812] ? pcpu_block_refresh_hint+0x157/0x170 [ 345.038837][T17812] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 345.038919][T17812] ? css_rstat_updated+0xb7/0x240 [ 345.038974][T17812] ? __rcu_read_unlock+0x4f/0x70 [ 345.038992][T17812] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 345.039010][T17812] ? should_fail_ex+0xdb/0x280 [ 345.039029][T17812] ? selinux_bpf_prog_load+0x36/0xf0 [ 345.039105][T17812] ? should_failslab+0x8c/0xb0 [ 345.039127][T17812] ? __kmalloc_cache_noprof+0x189/0x320 [ 345.039192][T17812] ? selinux_bpf_prog_load+0xbf/0xf0 [ 345.039263][T17812] ? security_bpf_prog_load+0x2c/0xa0 [ 345.039282][T17812] bpf_prog_load+0xedd/0x1070 [ 345.039321][T17812] ? security_bpf+0x2b/0x90 [ 345.039338][T17812] __sys_bpf+0x462/0x7b0 [ 345.039369][T17812] __x64_sys_bpf+0x41/0x50 [ 345.039447][T17812] x64_sys_call+0x2aea/0x2ff0 [ 345.039467][T17812] do_syscall_64+0xd2/0x200 [ 345.039558][T17812] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.039591][T17812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 345.039690][T17812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.039709][T17812] RIP: 0033:0x7f8c345beba9 [ 345.039722][T17812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.039737][T17812] RSP: 002b:00007f8c3301f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.039753][T17812] RAX: ffffffffffffffda RBX: 00007f8c34805fa0 RCX: 00007f8c345beba9 [ 345.039804][T17812] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 345.039814][T17812] RBP: 00007f8c3301f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.039825][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.039842][T17812] R13: 00007f8c34806038 R14: 00007f8c34805fa0 R15: 00007ffe860eddb8 [ 345.039859][T17812] [ 345.039866][T17812] syz.0.4627: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 345.377568][T17812] CPU: 0 UID: 0 PID: 17812 Comm: syz.0.4627 Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.377635][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.377651][T17812] Call Trace: [ 345.377658][T17812] [ 345.377666][T17812] __dump_stack+0x1d/0x30 [ 345.377691][T17812] dump_stack_lvl+0xe8/0x140 [ 345.377707][ T2984] ================================================================== [ 345.377717][T17812] dump_stack+0x15/0x1b [ 345.377776][T17812] warn_alloc+0x12b/0x1a0 [ 345.377822][T17812] ? should_failslab+0x8c/0xb0 [ 345.377864][T17812] __vmalloc_node_range_noprof+0x497/0xe00 [ 345.377963][T17812] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 345.378051][T17812] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 345.378240][T17812] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 345.378296][T17812] ? bpf_check+0xe0/0xd9e0 [ 345.378327][T17812] vzalloc_noprof+0x82/0xc0 [ 345.378450][T17812] ? bpf_check+0xe0/0xd9e0 [ 345.378480][T17812] bpf_check+0xe0/0xd9e0 [ 345.378508][T17812] ? __rcu_read_unlock+0x4f/0x70 [ 345.378543][T17812] ? __memcg_kmem_charge_page+0xd1/0x170 [ 345.378589][T17812] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 345.378643][T17812] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 345.378758][T17812] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 345.378836][T17812] ? pcpu_block_update+0x24e/0x3b0 [ 345.378900][T17812] ? _find_next_zero_bit+0x29/0xa0 [ 345.378931][T17812] ? pcpu_block_refresh_hint+0x157/0x170 [ 345.378965][T17812] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 345.379030][T17812] ? css_rstat_updated+0xb7/0x240 [ 345.379104][T17812] ? __rcu_read_unlock+0x4f/0x70 [ 345.379134][T17812] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 345.379203][T17812] ? should_fail_ex+0xdb/0x280 [ 345.379237][T17812] ? selinux_bpf_prog_load+0x36/0xf0 [ 345.379278][T17812] ? should_failslab+0x8c/0xb0 [ 345.379313][T17812] ? __kmalloc_cache_noprof+0x189/0x320 [ 345.379380][T17812] ? selinux_bpf_prog_load+0xbf/0xf0 [ 345.379411][T17812] ? security_bpf_prog_load+0x2c/0xa0 [ 345.379495][T17812] bpf_prog_load+0xedd/0x1070 [ 345.379548][T17812] ? security_bpf+0x2b/0x90 [ 345.379573][T17812] __sys_bpf+0x462/0x7b0 [ 345.379619][T17812] __x64_sys_bpf+0x41/0x50 [ 345.379674][T17812] x64_sys_call+0x2aea/0x2ff0 [ 345.379703][T17812] do_syscall_64+0xd2/0x200 [ 345.379747][T17812] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.379831][T17812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 345.379922][T17812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.379951][T17812] RIP: 0033:0x7f8c345beba9 [ 345.380036][T17812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.380061][T17812] RSP: 002b:00007f8c3301f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.380173][T17812] RAX: ffffffffffffffda RBX: 00007f8c34805fa0 RCX: 00007f8c345beba9 [ 345.380191][T17812] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 345.380209][T17812] RBP: 00007f8c3301f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.380224][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.380242][T17812] R13: 00007f8c34806038 R14: 00007f8c34805fa0 R15: 00007ffe860eddb8 [ 345.380275][T17812] [ 345.380302][T17812] Mem-Info: [ 345.387555][ T2984] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 345.397691][T17812] active_anon:10386 inactive_anon:8 isolated_anon:0 [ 345.397691][T17812] active_file:19608 inactive_file:2471 isolated_file:0 [ 345.397691][T17812] unevictable:0 dirty:248 writeback:0 [ 345.397691][T17812] slab_reclaimable:3180 slab_unreclaimable:14062 [ 345.397691][T17812] mapped:33135 shmem:3017 pagetables:1295 [ 345.397691][T17812] sec_pagetables:0 bounce:0 [ 345.397691][T17812] kernel_misc_reclaimable:0 [ 345.397691][T17812] free:1879097 free_pcp:3990 free_cma:0 [ 345.400942][ T2984] [ 345.400950][ T2984] write to 0xffffffff8686b018 of 8 bytes by task 17812 on cpu 0: [ 345.403942][T17812] Node 0 active_anon:41544kB inactive_anon:32kB active_file:78432kB inactive_file:9884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132540kB dirty:992kB writeback:0kB shmem:12068kB kernel_stack:3456kB pagetables:5180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.408231][ T2984] data_alloc+0x271/0x2b0 [ 345.412871][T17812] Node 0 [ 345.420928][ T2984] prb_reserve+0x808/0xaf0 [ 345.425126][T17812] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.429414][ T2984] vprintk_store+0x56d/0x860 [ 345.434220][T17812] lowmem_reserve[]: [ 345.440065][ T2984] vprintk_emit+0x178/0x650 [ 345.445634][T17812] 0 [ 345.451145][ T2984] vprintk_default+0x26/0x30 [ 345.451172][ T2984] vprintk+0x1d/0x30 [ 345.456970][T17812] 2883 7862 [ 345.461383][ T2984] _printk+0x79/0xa0 [ 345.461418][ T2984] dump_stack_print_info+0xee/0x1b0 [ 345.465915][T17812] 7862 [ 345.470324][ T2984] __dump_stack+0x11/0x30 [ 345.470347][ T2984] dump_stack_lvl+0xe8/0x140 [ 345.470367][ T2984] dump_stack+0x15/0x1b [ 345.470385][ T2984] warn_alloc+0x12b/0x1a0 [ 345.470418][ T2984] __vmalloc_node_range_noprof+0x497/0xe00 [ 345.470457][ T2984] vzalloc_noprof+0x82/0xc0 [ 345.470491][ T2984] bpf_check+0xe0/0xd9e0 [ 345.474791][T17812] Node 0 [ 345.479707][ T2984] bpf_prog_load+0xedd/0x1070 [ 345.485363][T17812] DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 345.491341][ T2984] __sys_bpf+0x462/0x7b0 [ 345.491376][ T2984] __x64_sys_bpf+0x41/0x50 [ 345.497013][T17812] lowmem_reserve[]: 0 [ 345.502936][ T2984] x64_sys_call+0x2aea/0x2ff0 [ 345.502965][ T2984] do_syscall_64+0xd2/0x200 [ 345.508105][T17812] 0 [ 345.513207][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.518882][T17812] 4978 [ 345.524913][ T2984] [ 345.524923][ T2984] read to 0xffffffff8686b018 of 16 bytes by task 2984 on cpu 1: [ 345.529960][T17812] 4978 [ 345.534874][ T2984] _prb_read_valid+0x1bc/0x920 [ 345.540783][T17812] [ 345.545520][ T2984] prb_read_valid+0x3c/0x60 [ 345.550822][T17812] Node 0 Normal free:4551736kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41544kB inactive_anon:32kB active_file:78432kB inactive_file:9884kB unevictable:0kB writepending:992kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:12428kB local_pcp:9964kB free_cma:0kB [ 345.555579][ T2984] syslog_print+0x23a/0x540 [ 345.561144][T17812] lowmem_reserve[]: 0 [ 345.566423][ T2984] do_syslog+0x52b/0x7e0 [ 345.566463][ T2984] __x64_sys_syslog+0x41/0x50 [ 345.566493][ T2984] x64_sys_call+0x2f36/0x2ff0 [ 345.571852][T17812] 0 0 [ 345.576520][ T2984] do_syscall_64+0xd2/0x200 [ 345.581046][T17812] 0 [ 345.585281][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.585311][ T2984] [ 345.585315][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 345.585329][ T2984] CPU: 1 UID: 0 PID: 2984 Comm: klogd Not tainted syzkaller #0 PREEMPT(voluntary) [ 345.589745][T17812] Node 0 DMA: [ 345.594416][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.594435][ T2984] ================================================================== [ 345.649943][T17819] program syz.5.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.657329][T17812] 0*4kB [ 345.668910][T17819] netlink: 'syz.5.4630': attribute type 1 has an invalid length. [ 345.673679][T17812] 0*8kB [ 345.681396][T17819] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4630'. [ 345.689369][T17812] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 346.132608][T17812] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 346.132912][T17812] Node 0 Normal: 163*4kB (UM) 1398*8kB (UM) 812*16kB (UME) 574*32kB (UME) 266*64kB (UME) 130*128kB (UME) 34*256kB (UM) 35*512kB (UME) 32*1024kB (UM) 17*2048kB (UE) 1069*4096kB (UM) = 4549692kB [ 346.133233][T17812] Node 0 hugepages_total=8 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 346.133254][T17812] 25130 total pagecache pages [ 346.133276][T17812] 10 pages in swap cache [ 346.133322][T17812] Free swap = 124956kB [ 346.133328][T17812] Total swap = 124996kB [ 346.133335][T17812] 2097051 pages RAM [ 346.133341][T17812] 0 pages HighMem/MovableOnly [ 346.133349][T17812] 80445 pages reserved