last executing test programs: 14.932215713s ago: executing program 1 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x8, 0x20000, 0xfffffffc, 0xffffffff, 0x0, 0x1}) 14.856219343s ago: executing program 1 (id=1359): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bind$tipc(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) r6 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0xffffffff, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r9, &(0x7f00000019c0)=""/4107, 0x100b) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000034c0)={0x3, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x736f}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3524, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1e47, 0x1) write$cgroup_pressure(r10, &(0x7f0000000080)={'full', 0x20, 0x5b9, 0x20, 0x4}, 0x1d) r11 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x40086602, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.809854823s ago: executing program 1 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 14.682081883s ago: executing program 1 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x81, &(0x7f0000000180)=0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) io_submit(r3, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x2, r4, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}, 0x1, 0x0, 0x0, 0x4042000}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d00f07251ca60bc24eab556a71a251e6182949a3651f60a84c910d5938037e786a6d0bdd7fcf50e4509985300782c37ba90adcd1500000080bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) syz_usb_connect(0x4, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5c, 0x67, 0x12, 0x8, 0x403, 0xf3c2, 0x8411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x8377, 0x4, 0x1, {0x22, 0xff3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x7, 0xf7}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES32=r1], 0x28}}, 0x1) 13.495022961s ago: executing program 1 (id=1379): syz_emit_ethernet(0xd9, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x800, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @empty]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x7, "4b6ceec500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x7, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}, "a815a2"}}}}}, 0x0) 13.47787756s ago: executing program 1 (id=1380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) (async) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r6, 0xfffffffffffffc01, 0x0) r7 = gettid() tkill(r7, 0x1d) (async) write$binfmt_aout(r5, &(0x7f0000000280)={{0x107, 0x2, 0x9, 0x28b, 0x2f7, 0x10001, 0x48, 0xfffffffc}, "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"}, 0x11a) (async) close_range(r0, 0xffffffffffffffff, 0x0) 770.496602ms ago: executing program 0 (id=1589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7b58, &(0x7f0000000c40)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000190100001000000010"], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 654.401451ms ago: executing program 0 (id=1598): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xf8, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0xf8}}, 0x0) 620.847271ms ago: executing program 0 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff88020000000000004000000000000000feffffffffffffff0f00000006003800010000000200000003000000970f000001000000000000000d00000000000000c801000000000000000100"], 0xbe) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=ANY=[@ANYBLOB="bc0a0000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xabc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x8, 0x1, 0x40, 0x42, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) readahead(r6, 0x8, 0x4) 567.544751ms ago: executing program 0 (id=1603): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c746572000030000480080002406b10a61d140003007465616d5f736c6176655f3000000000080002404e73b858080001"], 0x130}}, 0x0) 497.538491ms ago: executing program 0 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) 464.447401ms ago: executing program 4 (id=1609): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x7b58, &(0x7f0000000c40)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000190100001000000010"], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 406.758081ms ago: executing program 4 (id=1613): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 368.930901ms ago: executing program 0 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x18}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x40000}, 0x18) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) 340.384391ms ago: executing program 4 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x8, 0x20000, 0xfffffffc, 0xffffffff, 0x0, 0x1}) 339.319901ms ago: executing program 2 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xbf42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0xffff, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 290.856891ms ago: executing program 4 (id=1617): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 290.596501ms ago: executing program 3 (id=1618): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 290.195561ms ago: executing program 4 (id=1619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48}}, 0x0) 287.081731ms ago: executing program 2 (id=1620): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 250.844831ms ago: executing program 3 (id=1621): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xf8, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0xf8}}, 0x0) 196.151821ms ago: executing program 2 (id=1622): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 195.812851ms ago: executing program 4 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x18}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x40000}, 0x18) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) 195.410421ms ago: executing program 3 (id=1624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x8, 0x20000, 0xfffffffc, 0xffffffff, 0x0, 0x1}) 159.8765ms ago: executing program 2 (id=1625): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) 149.529521ms ago: executing program 3 (id=1627): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 53.10296ms ago: executing program 3 (id=1628): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 50.331741ms ago: executing program 2 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x8, 0x20000, 0xfffffffc, 0xffffffff, 0x0, 0x1}) 401.37µs ago: executing program 3 (id=1630): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x10000, {0x0, 0x0, 0x0, r3, {0xc}}}, 0x24}}, 0x4045014) 0s ago: executing program 2 (id=1631): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c10000280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ff ff ff f7 d8 64 89 01 48 [ 53.163336][ T4751] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 53.171777][ T4751] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 53.179927][ T4751] RDX: 0000000000089901 RSI: 0000000020000640 RDI: ffffffffffffff9c [ 53.187928][ T4751] RBP: 00007fe7558a7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.195909][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.203888][ T4751] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 53.211942][ T4751] [ 53.243638][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 53.253517][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 53.395715][ T4778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.442'. [ 53.436710][ T3372] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 53.444407][ T3372] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 53.462237][ T3372] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 53.490169][ T3372] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 53.711310][ T4788] pimreg: entered allmulticast mode [ 53.722790][ T4788] pimreg: left allmulticast mode [ 53.784918][ T4792] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.448'. [ 54.285466][ T4832] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 54.304320][ T4832] SELinux: failed to load policy [ 54.477428][ T4842] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 54.484311][ T4842] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 54.713976][ T3373] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 54.721711][ T3373] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 54.730202][ T3373] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 54.747325][ T3373] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 54.951602][ T4868] binfmt_misc: register: failed to install interpreter file ./file0 [ 55.008972][ T4870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.151596][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 55.365575][ T4890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4890 comm=syz.1.489 [ 55.452297][ T4901] FAULT_INJECTION: forcing a failure. [ 55.452297][ T4901] name failslab, interval 1, probability 0, space 0, times 0 [ 55.465683][ T4901] CPU: 0 UID: 0 PID: 4901 Comm: syz.1.492 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 55.476293][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.486411][ T4901] Call Trace: [ 55.489759][ T4901] [ 55.492699][ T4901] dump_stack_lvl+0xf2/0x150 [ 55.497401][ T4901] dump_stack+0x15/0x1a [ 55.501637][ T4901] should_fail_ex+0x223/0x230 [ 55.506331][ T4901] should_failslab+0x8f/0xb0 [ 55.510962][ T4901] kmem_cache_alloc_noprof+0x52/0x320 [ 55.516342][ T4901] ? mas_alloc_nodes+0x1e3/0x490 [ 55.521369][ T4901] ? __mod_memcg_state+0x122/0x280 [ 55.527002][ T4901] mas_alloc_nodes+0x1e3/0x490 [ 55.531868][ T4901] mas_preallocate+0x44a/0x650 [ 55.536679][ T4901] vma_link+0x93/0x370 [ 55.540769][ T4901] insert_vm_struct+0x17b/0x210 [ 55.545774][ T4901] alloc_bprm+0x36d/0x5d0 [ 55.550155][ T4901] do_execveat_common+0x134/0x800 [ 55.555396][ T4901] ? getname_flags+0x15a/0x3b0 [ 55.560222][ T4901] __x64_sys_execveat+0x75/0x90 [ 55.566306][ T4901] x64_sys_call+0x291e/0x2dc0 [ 55.571035][ T4901] do_syscall_64+0xc9/0x1c0 [ 55.575575][ T4901] ? clear_bhb_loop+0x55/0xb0 [ 55.580263][ T4901] ? clear_bhb_loop+0x55/0xb0 [ 55.584965][ T4901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.590954][ T4901] RIP: 0033:0x7f0f90b45d29 [ 55.595459][ T4901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.616307][ T4901] RSP: 002b:00007f0f8f1b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 55.625616][ T4901] RAX: ffffffffffffffda RBX: 00007f0f90d35fa0 RCX: 00007f0f90b45d29 [ 55.633595][ T4901] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 55.641868][ T4901] RBP: 00007f0f8f1b1090 R08: 0000000000001000 R09: 0000000000000000 [ 55.649917][ T4901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.657880][ T4901] R13: 0000000000000000 R14: 00007f0f90d35fa0 R15: 00007fff46fab448 [ 55.665851][ T4901] [ 55.767060][ T4910] SELinux: syz.4.495 (4910) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.813778][ T4910] 9pnet: Could not find request transport: tc [ 56.647253][ T4938] FAULT_INJECTION: forcing a failure. [ 56.647253][ T4938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.660542][ T4938] CPU: 1 UID: 0 PID: 4938 Comm: syz.2.507 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 56.671140][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.681349][ T4938] Call Trace: [ 56.684637][ T4938] [ 56.687562][ T4938] dump_stack_lvl+0xf2/0x150 [ 56.692213][ T4938] dump_stack+0x15/0x1a [ 56.696502][ T4938] should_fail_ex+0x223/0x230 [ 56.701230][ T4938] should_fail+0xb/0x10 [ 56.705446][ T4938] should_fail_usercopy+0x1a/0x20 [ 56.710533][ T4938] _copy_from_iter+0xd5/0xd00 [ 56.715269][ T4938] ? __build_skb_around+0x196/0x1f0 [ 56.720476][ T4938] ? __virt_addr_valid+0x1ed/0x250 [ 56.725592][ T4938] ? __check_object_size+0x364/0x520 [ 56.730888][ T4938] pppol2tp_sendmsg+0x303/0x440 [ 56.735755][ T4938] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 56.741128][ T4938] __sock_sendmsg+0x140/0x180 [ 56.745959][ T4938] sock_write_iter+0x15e/0x1a0 [ 56.750763][ T4938] do_iter_readv_writev+0x394/0x450 [ 56.755976][ T4938] vfs_writev+0x2d4/0x880 [ 56.760341][ T4938] ? proc_fail_nth_write+0x12a/0x150 [ 56.765646][ T4938] do_writev+0xf4/0x220 [ 56.769814][ T4938] __x64_sys_writev+0x45/0x50 [ 56.774545][ T4938] x64_sys_call+0x1fab/0x2dc0 [ 56.779231][ T4938] do_syscall_64+0xc9/0x1c0 [ 56.783773][ T4938] ? clear_bhb_loop+0x55/0xb0 [ 56.788507][ T4938] ? clear_bhb_loop+0x55/0xb0 [ 56.793187][ T4938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.799085][ T4938] RIP: 0033:0x7f0068035d29 [ 56.803540][ T4938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.823159][ T4938] RSP: 002b:00007f00666a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.831629][ T4938] RAX: ffffffffffffffda RBX: 00007f0068225fa0 RCX: 00007f0068035d29 [ 56.839743][ T4938] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 56.847742][ T4938] RBP: 00007f00666a1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.855703][ T4938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.863666][ T4938] R13: 0000000000000000 R14: 00007f0068225fa0 R15: 00007fff2080e6d8 [ 56.871645][ T4938] [ 57.119215][ T4968] FAULT_INJECTION: forcing a failure. [ 57.119215][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.132323][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.2.520 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 57.142935][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.153064][ T4968] Call Trace: [ 57.156423][ T4968] [ 57.159349][ T4968] dump_stack_lvl+0xf2/0x150 [ 57.164051][ T4968] dump_stack+0x15/0x1a [ 57.168206][ T4968] should_fail_ex+0x223/0x230 [ 57.172882][ T4968] should_fail+0xb/0x10 [ 57.177097][ T4968] should_fail_usercopy+0x1a/0x20 [ 57.182225][ T4968] _copy_to_user+0x20/0xa0 [ 57.186643][ T4968] simple_read_from_buffer+0xa0/0x110 [ 57.192015][ T4968] proc_fail_nth_read+0xf9/0x140 [ 57.196961][ T4968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.202588][ T4968] vfs_read+0x1a2/0x700 [ 57.206798][ T4968] ? __rcu_read_unlock+0x4e/0x70 [ 57.212390][ T4968] ? __fget_files+0x17c/0x1c0 [ 57.217106][ T4968] ksys_read+0xe8/0x1b0 [ 57.221257][ T4968] __x64_sys_read+0x42/0x50 [ 57.225761][ T4968] x64_sys_call+0x2874/0x2dc0 [ 57.230559][ T4968] do_syscall_64+0xc9/0x1c0 [ 57.235054][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 57.239738][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 57.244572][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.250513][ T4968] RIP: 0033:0x7f006803473c [ 57.254924][ T4968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.274595][ T4968] RSP: 002b:00007f00666a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.283013][ T4968] RAX: ffffffffffffffda RBX: 00007f0068225fa0 RCX: 00007f006803473c [ 57.291033][ T4968] RDX: 000000000000000f RSI: 00007f00666a10a0 RDI: 0000000000000004 [ 57.299029][ T4968] RBP: 00007f00666a1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.307002][ T4968] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 57.315121][ T4968] R13: 0000000000000000 R14: 00007f0068225fa0 R15: 00007fff2080e6d8 [ 57.323100][ T4968] [ 57.396988][ T4966] netlink: 36 bytes leftover after parsing attributes in process `syz.4.519'. [ 57.451524][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 57.480431][ T4974] bond1: entered promiscuous mode [ 57.485542][ T4974] bond1: entered allmulticast mode [ 57.504090][ T4974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.867076][ T4989] FAULT_INJECTION: forcing a failure. [ 57.867076][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.880200][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: +}[@ Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 57.890424][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.900485][ T4989] Call Trace: [ 57.903818][ T4989] [ 57.906745][ T4989] dump_stack_lvl+0xf2/0x150 [ 57.911379][ T4989] dump_stack+0x15/0x1a [ 57.915559][ T4989] should_fail_ex+0x223/0x230 [ 57.920309][ T4989] should_fail+0xb/0x10 [ 57.924530][ T4989] should_fail_usercopy+0x1a/0x20 [ 57.929568][ T4989] _copy_from_user+0x1e/0xb0 [ 57.934159][ T4989] copy_msghdr_from_user+0x54/0x2a0 [ 57.939368][ T4989] ? __fget_files+0x17c/0x1c0 [ 57.944061][ T4989] __sys_sendmsg+0x13e/0x230 [ 57.948670][ T4989] __x64_sys_sendmsg+0x46/0x50 [ 57.953441][ T4989] x64_sys_call+0x2734/0x2dc0 [ 57.958168][ T4989] do_syscall_64+0xc9/0x1c0 [ 57.962679][ T4989] ? clear_bhb_loop+0x55/0xb0 [ 57.967455][ T4989] ? clear_bhb_loop+0x55/0xb0 [ 57.972150][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.978057][ T4989] RIP: 0033:0x7fac2ce45d29 [ 57.982460][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.002161][ T4989] RSP: 002b:00007fac2b4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.010571][ T4989] RAX: ffffffffffffffda RBX: 00007fac2d035fa0 RCX: 00007fac2ce45d29 [ 58.018603][ T4989] RDX: 0000000020044000 RSI: 0000000020000540 RDI: 0000000000000005 [ 58.026662][ T4989] RBP: 00007fac2b4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 58.034744][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.042818][ T4989] R13: 0000000000000000 R14: 00007fac2d035fa0 R15: 00007ffea89db198 [ 58.050837][ T4989] [ 58.119144][ T4993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.530'. [ 58.152803][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 58.152818][ T29] audit: type=1400 audit(1736960818.448:3029): avc: denied { ioctl } for pid=4994 comm="syz.0.531" path="socket:[9676]" dev="sockfs" ino=9676 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.210241][ T29] audit: type=1400 audit(1736960818.448:3030): avc: denied { write } for pid=4994 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.394812][ T5020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5020 comm=syz.4.540 [ 58.457135][ T9] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 58.464883][ T9] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 58.484607][ T9] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 58.515027][ T9] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 58.550105][ T5028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.543'. [ 58.559455][ T5029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5029 comm=syz.4.540 [ 58.573064][ T29] audit: type=1400 audit(1736960818.858:3031): avc: denied { nlmsg_read } for pid=5019 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 58.830849][ T29] audit: type=1326 audit(1736960819.128:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 58.854213][ T29] audit: type=1326 audit(1736960819.128:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 58.877539][ T29] audit: type=1326 audit(1736960819.128:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 58.901195][ T29] audit: type=1326 audit(1736960819.128:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 58.924598][ T29] audit: type=1326 audit(1736960819.128:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 59.001512][ T5035] netlink: 576 bytes leftover after parsing attributes in process `syz.3.545'. [ 59.011738][ T29] audit: type=1400 audit(1736960819.178:3037): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.033399][ T29] audit: type=1326 audit(1736960819.248:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 59.041314][ T3372] IPVS: starting estimator thread 0... [ 59.071164][ T5036] IPVS: ip_vs_add_dest(): server weight less than zero [ 59.154676][ T5048] IPVS: using max 2880 ests per chain, 144000 per kthread [ 59.396087][ T5079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 59.889978][ T5126] syz.0.580[5126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.890176][ T5126] syz.0.580[5126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.931075][ T5126] syz.0.580[5126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.952629][ T5136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.970405][ T5136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.978075][ T5136] vhci_hcd vhci_hcd.0: Device attached [ 60.161316][ T5137] vhci_hcd: connection closed [ 60.161514][ T4355] vhci_hcd: stop threads [ 60.170523][ T4355] vhci_hcd: release socket [ 60.174961][ T4355] vhci_hcd: disconnect device [ 60.179682][ T3373] vhci_hcd: vhci_device speed not set [ 60.734145][ T5163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.590'. [ 61.386866][ T3376] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 61.394553][ T3376] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 61.404619][ T3376] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 61.424603][ T3376] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 61.525446][ T5207] ref_ctr increment failed for inode: 0x256 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117e83480 [ 61.545309][ T5206] uprobe: syz.3.609:5206 failed to unregister, leaking uprobe [ 61.966601][ T5230] IPv6: Can't replace route, no match found [ 62.309602][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 62.317426][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 62.364611][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 62.382649][ T3372] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 62.960915][ T3376] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 62.968647][ T3376] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 62.994832][ T3376] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 63.015015][ T3376] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.087843][ T5310] netlink: 56 bytes leftover after parsing attributes in process `syz.2.649'. [ 63.136927][ T5318] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 63.144638][ T5318] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 63.197559][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 63.197574][ T29] audit: type=1400 audit(1736960823.498:3200): avc: denied { ioctl } for pid=5309 comm="syz.2.649" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.229160][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.246880][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.413948][ T29] audit: type=1400 audit(1736960823.708:3201): avc: denied { create } for pid=5335 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.462035][ T29] audit: type=1400 audit(1736960823.738:3202): avc: denied { write } for pid=5335 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.509994][ T5336] infiniband syz!: set down [ 63.514689][ T5336] infiniband syz!: added team_slave_0 [ 63.540214][ T5336] RDS/IB: syz!: added [ 63.547515][ T5336] smc: adding ib device syz! with port count 1 [ 63.554753][ T5336] smc: ib device syz! port 1 has pnetid [ 63.900336][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 63.908089][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 63.916065][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 63.924810][ T9] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.954291][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 63.962001][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 63.970254][ T9] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 63.977938][ T29] audit: type=1400 audit(1736960824.278:3203): avc: denied { create } for pid=5351 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.978441][ T9] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 64.003385][ T29] audit: type=1400 audit(1736960824.298:3204): avc: denied { sys_admin } for pid=5351 comm="syz.4.668" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.044884][ T5365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.673'. [ 64.059232][ T5365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.673'. [ 64.070776][ T29] audit: type=1400 audit(1736960824.368:3205): avc: denied { read } for pid=5364 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.107429][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.677'. [ 64.231199][ T5392] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 64.239948][ T5392] bridge1: entered promiscuous mode [ 64.266534][ T29] audit: type=1326 audit(1736960824.568:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 64.307337][ T29] audit: type=1326 audit(1736960824.568:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 64.314300][ T5400] random: crng reseeded on system resumption [ 64.330733][ T29] audit: type=1326 audit(1736960824.568:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 64.360138][ T29] audit: type=1326 audit(1736960824.568:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 64.811205][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.695'. [ 65.198169][ T5431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.699'. [ 65.537519][ T5439] FAULT_INJECTION: forcing a failure. [ 65.537519][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 65.550237][ T5439] CPU: 0 UID: 0 PID: 5439 Comm: syz.0.703 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 65.560823][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.570900][ T5439] Call Trace: [ 65.574189][ T5439] [ 65.577114][ T5439] dump_stack_lvl+0xf2/0x150 [ 65.581772][ T5439] dump_stack+0x15/0x1a [ 65.585936][ T5439] should_fail_ex+0x223/0x230 [ 65.590844][ T5439] should_failslab+0x8f/0xb0 [ 65.595577][ T5439] kmem_cache_alloc_node_noprof+0x59/0x320 [ 65.601404][ T5439] ? __alloc_skb+0x10b/0x310 [ 65.606027][ T5439] __alloc_skb+0x10b/0x310 [ 65.610454][ T5439] netlink_alloc_large_skb+0xad/0xe0 [ 65.615750][ T5439] netlink_sendmsg+0x3b4/0x6e0 [ 65.620527][ T5439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.625819][ T5439] __sock_sendmsg+0x140/0x180 [ 65.630509][ T5439] ____sys_sendmsg+0x312/0x410 [ 65.635280][ T5439] __sys_sendmsg+0x19d/0x230 [ 65.639893][ T5439] __x64_sys_sendmsg+0x46/0x50 [ 65.644688][ T5439] x64_sys_call+0x2734/0x2dc0 [ 65.649439][ T5439] do_syscall_64+0xc9/0x1c0 [ 65.653942][ T5439] ? clear_bhb_loop+0x55/0xb0 [ 65.658616][ T5439] ? clear_bhb_loop+0x55/0xb0 [ 65.663380][ T5439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.669383][ T5439] RIP: 0033:0x7fac2ce45d29 [ 65.673806][ T5439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.693459][ T5439] RSP: 002b:00007fac2b4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.701943][ T5439] RAX: ffffffffffffffda RBX: 00007fac2d035fa0 RCX: 00007fac2ce45d29 [ 65.710004][ T5439] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000005 [ 65.718016][ T5439] RBP: 00007fac2b4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 65.725990][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.734000][ T5439] R13: 0000000000000000 R14: 00007fac2d035fa0 R15: 00007ffea89db198 [ 65.741977][ T5439] [ 65.884739][ T5452] Falling back ldisc for ttyS3. [ 66.013696][ T5460] capability: warning: `syz.3.712' uses deprecated v2 capabilities in a way that may be insecure [ 66.057690][ T5465] netlink: 56 bytes leftover after parsing attributes in process `syz.1.724'. [ 66.133764][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.143340][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.205842][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 66.284813][ T5482] Falling back ldisc for ttyS3. [ 66.457485][ T5496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.723'. [ 66.476033][ T3373] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 66.483718][ T3373] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 66.497193][ T3373] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 66.506702][ T3373] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 66.556277][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.730'. [ 66.565271][ T5503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.730'. [ 66.766791][ T3373] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 66.774486][ T3373] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 66.792401][ T3373] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 66.801228][ T3373] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 66.920907][ T3373] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 66.928642][ T3373] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 66.944730][ T3373] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 66.962974][ T3373] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.091379][ T5539] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 67.567875][ T5577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40767 sclass=netlink_route_socket pid=5577 comm=syz.3.758 [ 67.600586][ T5584] bridge_slave_0: left allmulticast mode [ 67.606329][ T5584] bridge_slave_0: left promiscuous mode [ 67.612020][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.623276][ T5584] bridge_slave_1: left allmulticast mode [ 67.628998][ T5584] bridge_slave_1: left promiscuous mode [ 67.634664][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.648991][ T5584] bond0: (slave bond_slave_0): Releasing backup interface [ 67.659610][ T5584] bond0: (slave bond_slave_1): Releasing backup interface [ 67.670216][ T5584] team_slave_0: left promiscuous mode [ 67.678073][ T5584] team0: Port device team_slave_0 removed [ 67.684677][ T5584] team_slave_1: left promiscuous mode [ 67.695347][ T5584] team0: Port device team_slave_1 removed [ 67.706205][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.713608][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.722702][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.730304][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.741853][ T5584] hsr0: left allmulticast mode [ 67.746746][ T5584] hsr_slave_0: left allmulticast mode [ 67.752132][ T5584] hsr_slave_1: left allmulticast mode [ 67.757556][ T5584] hsr0: left promiscuous mode [ 67.762452][ T5584] bridge0: port 3(hsr0) entered disabled state [ 67.792375][ T5588] batman_adv: batadv0: Adding interface: dummy0 [ 67.798789][ T5588] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.827011][ T5588] batman_adv: batadv0: Interface activated: dummy0 [ 68.104945][ T5614] Falling back ldisc for ttyS3. [ 68.178429][ T5619] syz.0.774 (5619) used obsolete PPPIOCDETACH ioctl [ 69.072679][ T5644] bridge0: port 1(hsr0) entered blocking state [ 69.078940][ T5644] bridge0: port 1(hsr0) entered disabled state [ 69.098929][ T5644] hsr0: entered allmulticast mode [ 69.104003][ T5644] hsr_slave_0: entered allmulticast mode [ 69.109665][ T5644] hsr_slave_1: entered allmulticast mode [ 69.127851][ T5644] hsr0: entered promiscuous mode [ 69.141010][ T5644] bridge0: port 1(hsr0) entered blocking state [ 69.147257][ T5644] bridge0: port 1(hsr0) entered forwarding state [ 69.355056][ T5660] Falling back ldisc for ttyS3. [ 69.497543][ T5675] __nla_validate_parse: 2 callbacks suppressed [ 69.497557][ T5675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.791'. [ 69.625009][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 69.632745][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 69.641910][ T9] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 69.657554][ T9] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 69.745540][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 69.745554][ T29] audit: type=1400 audit(1736960830.048:3627): avc: denied { ioctl } for pid=5681 comm="syz.1.797" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.830026][ T29] audit: type=1400 audit(1736960830.128:3628): avc: denied { read } for pid=5681 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.099671][ T5697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.801'. [ 70.156246][ T5703] netlink: 56 bytes leftover after parsing attributes in process `syz.4.803'. [ 70.218253][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.230663][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.246497][ T5714] netlink: 'syz.1.808': attribute type 4 has an invalid length. [ 70.255707][ T5710] netlink: 56 bytes leftover after parsing attributes in process `syz.2.806'. [ 70.290015][ T29] audit: type=1400 audit(1736960830.588:3629): avc: denied { checkpoint_restore } for pid=5713 comm="syz.1.808" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.335460][ T5722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.350957][ T5722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.546840][ T5736] FAULT_INJECTION: forcing a failure. [ 70.546840][ T5736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.559947][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: syz.1.817 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 70.570544][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.580600][ T5736] Call Trace: [ 70.583882][ T5736] [ 70.586811][ T5736] dump_stack_lvl+0xf2/0x150 [ 70.591461][ T5736] dump_stack+0x15/0x1a [ 70.595659][ T5736] should_fail_ex+0x223/0x230 [ 70.600340][ T5736] should_fail+0xb/0x10 [ 70.604507][ T5736] should_fail_usercopy+0x1a/0x20 [ 70.609620][ T5736] _copy_to_user+0x20/0xa0 [ 70.614092][ T5736] simple_read_from_buffer+0xa0/0x110 [ 70.619530][ T5736] proc_fail_nth_read+0xf9/0x140 [ 70.624476][ T5736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.630033][ T5736] vfs_read+0x1a2/0x700 [ 70.634287][ T5736] ? __rcu_read_unlock+0x4e/0x70 [ 70.639276][ T5736] ? __fget_files+0x17c/0x1c0 [ 70.644040][ T5736] ksys_read+0xe8/0x1b0 [ 70.648207][ T5736] __x64_sys_read+0x42/0x50 [ 70.652712][ T5736] x64_sys_call+0x2874/0x2dc0 [ 70.657427][ T5736] do_syscall_64+0xc9/0x1c0 [ 70.662018][ T5736] ? clear_bhb_loop+0x55/0xb0 [ 70.666699][ T5736] ? clear_bhb_loop+0x55/0xb0 [ 70.671414][ T5736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.677325][ T5736] RIP: 0033:0x7f0f90b4473c [ 70.681851][ T5736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.701470][ T5736] RSP: 002b:00007f0f8f1b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.709890][ T5736] RAX: ffffffffffffffda RBX: 00007f0f90d35fa0 RCX: 00007f0f90b4473c [ 70.717918][ T5736] RDX: 000000000000000f RSI: 00007f0f8f1b10a0 RDI: 0000000000000007 [ 70.725916][ T5736] RBP: 00007f0f8f1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 70.733883][ T5736] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 70.741859][ T5736] R13: 0000000000000000 R14: 00007f0f90d35fa0 R15: 00007fff46fab448 [ 70.749841][ T5736] [ 70.999402][ T5746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.820'. [ 71.135359][ T5751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'. [ 71.933838][ T5754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.987344][ T5754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.057498][ T5754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.127934][ T5754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.172210][ T5754] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.184599][ T5754] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.197463][ T5754] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.212088][ T5754] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.222357][ T5755] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.295276][ T5755] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.344400][ T5755] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.406398][ T5755] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.622546][ T29] audit: type=1326 audit(1736960832.918:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.646029][ T29] audit: type=1326 audit(1736960832.918:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.669506][ T29] audit: type=1326 audit(1736960832.918:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.692935][ T29] audit: type=1326 audit(1736960832.918:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.693008][ T29] audit: type=1326 audit(1736960832.918:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.693032][ T29] audit: type=1326 audit(1736960832.918:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.693055][ T29] audit: type=1326 audit(1736960832.918:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 72.856966][ T5798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.841'. [ 73.071173][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 73.080130][ T5809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.846'. [ 73.105643][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 73.415279][ T5839] FAULT_INJECTION: forcing a failure. [ 73.415279][ T5839] name failslab, interval 1, probability 0, space 0, times 0 [ 73.428029][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz.2.859 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 73.438680][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.448774][ T5839] Call Trace: [ 73.452051][ T5839] [ 73.454985][ T5839] dump_stack_lvl+0xf2/0x150 [ 73.459651][ T5839] dump_stack+0x15/0x1a [ 73.463892][ T5839] should_fail_ex+0x223/0x230 [ 73.468578][ T5839] should_failslab+0x8f/0xb0 [ 73.473233][ T5839] kmem_cache_alloc_node_noprof+0x59/0x320 [ 73.479064][ T5839] ? __alloc_skb+0x10b/0x310 [ 73.483743][ T5839] __alloc_skb+0x10b/0x310 [ 73.488167][ T5839] netlink_alloc_large_skb+0xad/0xe0 [ 73.493460][ T5839] netlink_sendmsg+0x3b4/0x6e0 [ 73.498276][ T5839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.503575][ T5839] __sock_sendmsg+0x140/0x180 [ 73.508338][ T5839] ____sys_sendmsg+0x312/0x410 [ 73.513195][ T5839] __sys_sendmsg+0x19d/0x230 [ 73.517809][ T5839] __x64_sys_sendmsg+0x46/0x50 [ 73.522580][ T5839] x64_sys_call+0x2734/0x2dc0 [ 73.527312][ T5839] do_syscall_64+0xc9/0x1c0 [ 73.531820][ T5839] ? clear_bhb_loop+0x55/0xb0 [ 73.536561][ T5839] ? clear_bhb_loop+0x55/0xb0 [ 73.541251][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.547171][ T5839] RIP: 0033:0x7f0068035d29 [ 73.551592][ T5839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.571198][ T5839] RSP: 002b:00007f00666a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.579670][ T5839] RAX: ffffffffffffffda RBX: 00007f0068225fa0 RCX: 00007f0068035d29 [ 73.587633][ T5839] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 73.595595][ T5839] RBP: 00007f00666a1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.603565][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.611816][ T5839] R13: 0000000000000000 R14: 00007f0068225fa0 R15: 00007fff2080e6d8 [ 73.619784][ T5839] [ 73.625451][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.633824][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.834928][ T5847] Falling back ldisc for ttyS3. [ 74.510542][ T5889] bridge0: port 2(vlan2) entered blocking state [ 74.517055][ T5889] bridge0: port 2(vlan2) entered disabled state [ 74.523602][ T5889] vlan2: entered allmulticast mode [ 74.529536][ T5889] vlan2: left allmulticast mode [ 74.629225][ T5900] __nla_validate_parse: 2 callbacks suppressed [ 74.629240][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 74.775741][ T5911] FAULT_INJECTION: forcing a failure. [ 74.775741][ T5911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.789144][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.2.889 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 74.799732][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.809869][ T5911] Call Trace: [ 74.813144][ T5911] [ 74.816065][ T5911] dump_stack_lvl+0xf2/0x150 [ 74.820731][ T5911] dump_stack+0x15/0x1a [ 74.824892][ T5911] should_fail_ex+0x223/0x230 [ 74.829572][ T5911] should_fail_alloc_page+0xfd/0x110 [ 74.834865][ T5911] __alloc_pages_noprof+0x109/0x340 [ 74.840080][ T5911] alloc_pages_mpol_noprof+0xb8/0x260 [ 74.845456][ T5911] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 74.850898][ T5911] handle_mm_fault+0xdd7/0x2ac0 [ 74.855757][ T5911] exc_page_fault+0x296/0x650 [ 74.860505][ T5911] ? pagemap_pte_hole+0x24c/0x280 [ 74.865632][ T5911] asm_exc_page_fault+0x26/0x30 [ 74.870495][ T5911] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 74.876385][ T5911] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 74.895997][ T5911] RSP: 0018:ffffc900001e3d58 EFLAGS: 00050206 [ 74.902142][ T5911] RAX: ffff8881089e4c78 RBX: 0000000020007240 RCX: 0000000000000240 [ 74.910200][ T5911] RDX: 0000000000000000 RSI: ffff888108a74dc0 RDI: 0000000020007000 [ 74.918227][ T5911] RBP: 0000000000001000 R08: 0000000080000000 R09: 0000000000000000 [ 74.926195][ T5911] R10: 0001888108a74000 R11: 0001888108a74fff R12: 0000000000001000 [ 74.934241][ T5911] R13: 00007ffffffff000 R14: 0000000020006240 R15: ffff888108a74000 [ 74.942228][ T5911] _copy_to_user+0x7c/0xa0 [ 74.946680][ T5911] pagemap_read+0x3af/0x610 [ 74.951201][ T5911] ? __pfx_pagemap_read+0x10/0x10 [ 74.956320][ T5911] vfs_read+0x1a2/0x700 [ 74.960478][ T5911] ? __fget_files+0x17c/0x1c0 [ 74.965237][ T5911] ? __rcu_read_unlock+0x4e/0x70 [ 74.970184][ T5911] ? __fget_files+0x17c/0x1c0 [ 74.974953][ T5911] __x64_sys_pread64+0xf6/0x150 [ 74.979893][ T5911] x64_sys_call+0x26ee/0x2dc0 [ 74.984590][ T5911] do_syscall_64+0xc9/0x1c0 [ 74.989134][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 74.993830][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 74.998507][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.004424][ T5911] RIP: 0033:0x7f0068035d29 [ 75.008913][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.028515][ T5911] RSP: 002b:00007f00666a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 75.037019][ T5911] RAX: ffffffffffffffda RBX: 00007f0068225fa0 RCX: 00007f0068035d29 [ 75.045009][ T5911] RDX: 0000000000200000 RSI: 0000000020001240 RDI: 0000000000000008 [ 75.053030][ T5911] RBP: 00007f00666a1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.060998][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.068967][ T5911] R13: 0000000000000000 R14: 00007f0068225fa0 R15: 00007fff2080e6d8 [ 75.076941][ T5911] [ 75.197117][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 75.197131][ T29] audit: type=1326 audit(1736960835.498:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.241128][ T29] audit: type=1326 audit(1736960835.528:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.264485][ T29] audit: type=1326 audit(1736960835.528:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.287873][ T29] audit: type=1326 audit(1736960835.528:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.311274][ T29] audit: type=1326 audit(1736960835.528:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.319634][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 75.334655][ T29] audit: type=1326 audit(1736960835.528:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.334680][ T29] audit: type=1326 audit(1736960835.528:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.390042][ T29] audit: type=1326 audit(1736960835.528:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.413443][ T29] audit: type=1326 audit(1736960835.528:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.436744][ T29] audit: type=1326 audit(1736960835.528:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 75.613747][ T5960] pim6reg1: entered promiscuous mode [ 75.619181][ T5960] pim6reg1: entered allmulticast mode [ 75.684762][ T5966] syz.4.913[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.684836][ T5966] syz.4.913[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.696282][ T5966] syz.4.913[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.787962][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.915'. [ 76.405630][ T5979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5979 comm=syz.3.917 [ 76.409640][ T5755] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.428881][ T5755] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.440084][ T5755] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.452393][ T5755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492808][ T5991] FAULT_INJECTION: forcing a failure. [ 76.492808][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.505910][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.922 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 76.516551][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.526780][ T5991] Call Trace: [ 76.530076][ T5991] [ 76.532989][ T5991] dump_stack_lvl+0xf2/0x150 [ 76.537593][ T5991] dump_stack+0x15/0x1a [ 76.541834][ T5991] should_fail_ex+0x223/0x230 [ 76.546493][ T5991] should_fail+0xb/0x10 [ 76.550663][ T5991] should_fail_usercopy+0x1a/0x20 [ 76.555699][ T5991] _copy_from_user+0x1e/0xb0 [ 76.560454][ T5991] do_sys_poll+0x153/0xc20 [ 76.564871][ T5991] ? selinux_file_open+0x34a/0x3b0 [ 76.570117][ T5991] __se_sys_poll+0xe1/0x200 [ 76.574620][ T5991] __x64_sys_poll+0x43/0x50 [ 76.579185][ T5991] x64_sys_call+0x2a72/0x2dc0 [ 76.583850][ T5991] do_syscall_64+0xc9/0x1c0 [ 76.588468][ T5991] ? clear_bhb_loop+0x55/0xb0 [ 76.593144][ T5991] ? clear_bhb_loop+0x55/0xb0 [ 76.597815][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.603729][ T5991] RIP: 0033:0x7fac2ce45d29 [ 76.608140][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.627916][ T5991] RSP: 002b:00007fac2b4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 76.636344][ T5991] RAX: ffffffffffffffda RBX: 00007fac2d035fa0 RCX: 00007fac2ce45d29 [ 76.644399][ T5991] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000000020000000 [ 76.652376][ T5991] RBP: 00007fac2b4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 76.660337][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.668404][ T5991] R13: 0000000000000000 R14: 00007fac2d035fa0 R15: 00007ffea89db198 [ 76.676511][ T5991] [ 76.709441][ T6004] FAULT_INJECTION: forcing a failure. [ 76.709441][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 76.722159][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.3.927 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 76.732752][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.742860][ T6004] Call Trace: [ 76.746177][ T6004] [ 76.749136][ T6004] dump_stack_lvl+0xf2/0x150 [ 76.753731][ T6004] dump_stack+0x15/0x1a [ 76.757932][ T6004] should_fail_ex+0x223/0x230 [ 76.762684][ T6004] should_failslab+0x8f/0xb0 [ 76.767361][ T6004] kmem_cache_alloc_noprof+0x52/0x320 [ 76.772830][ T6004] ? vm_area_alloc+0xac/0x130 [ 76.777508][ T6004] vm_area_alloc+0xac/0x130 [ 76.782075][ T6004] __mmap_region+0x6b5/0x1400 [ 76.786757][ T6004] mmap_region+0x18c/0x1e0 [ 76.791308][ T6004] do_mmap+0x732/0xbb0 [ 76.795382][ T6004] vm_mmap_pgoff+0x133/0x290 [ 76.800063][ T6004] ksys_mmap_pgoff+0x2de/0x330 [ 76.804868][ T6004] x64_sys_call+0x1940/0x2dc0 [ 76.809542][ T6004] do_syscall_64+0xc9/0x1c0 [ 76.814042][ T6004] ? clear_bhb_loop+0x55/0xb0 [ 76.818708][ T6004] ? clear_bhb_loop+0x55/0xb0 [ 76.823374][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.829346][ T6004] RIP: 0033:0x7f8bc62c5d29 [ 76.833748][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.853862][ T6004] RSP: 002b:00007f8bc4937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.862498][ T6004] RAX: ffffffffffffffda RBX: 00007f8bc64b5fa0 RCX: 00007f8bc62c5d29 [ 76.870462][ T6004] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 76.878426][ T6004] RBP: 00007f8bc4937090 R08: ffffffffffffffff R09: 0000000000000000 [ 76.886430][ T6004] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 76.894539][ T6004] R13: 0000000000000001 R14: 00007f8bc64b5fa0 R15: 00007ffeb6bee218 [ 76.902580][ T6004] [ 76.958494][ T6013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.930'. [ 77.019233][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.027762][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.054821][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.936'. [ 77.703551][ T6042] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.712306][ T6042] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.721013][ T6042] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.729720][ T6042] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.738686][ T6042] vxlan0: entered promiscuous mode [ 77.743804][ T6042] vxlan0: entered allmulticast mode [ 77.750469][ T6042] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.759424][ T6042] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.768328][ T6042] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.777233][ T6042] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.906467][ T6052] FAULT_INJECTION: forcing a failure. [ 77.906467][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.919670][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.0.944 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 77.930344][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.940452][ T6052] Call Trace: [ 77.943747][ T6052] [ 77.946735][ T6052] dump_stack_lvl+0xf2/0x150 [ 77.951330][ T6052] dump_stack+0x15/0x1a [ 77.955497][ T6052] should_fail_ex+0x223/0x230 [ 77.960170][ T6052] should_fail+0xb/0x10 [ 77.964314][ T6052] should_fail_usercopy+0x1a/0x20 [ 77.969402][ T6052] _copy_from_iter+0xd5/0xd00 [ 77.974076][ T6052] ? alloc_pages_mpol_noprof+0x20c/0x260 [ 77.979735][ T6052] copy_page_from_iter+0x14f/0x280 [ 77.984845][ T6052] tun_get_user+0x68b/0x25c0 [ 77.989436][ T6052] ? _parse_integer+0x27/0x30 [ 77.994168][ T6052] ? ref_tracker_alloc+0x1f5/0x2f0 [ 77.999278][ T6052] tun_chr_write_iter+0x188/0x240 [ 78.004304][ T6052] vfs_write+0x77f/0x920 [ 78.008596][ T6052] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 78.014206][ T6052] ksys_write+0xe8/0x1b0 [ 78.018498][ T6052] __x64_sys_write+0x42/0x50 [ 78.023083][ T6052] x64_sys_call+0x287e/0x2dc0 [ 78.027795][ T6052] do_syscall_64+0xc9/0x1c0 [ 78.032614][ T6052] ? clear_bhb_loop+0x55/0xb0 [ 78.037297][ T6052] ? clear_bhb_loop+0x55/0xb0 [ 78.042030][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.047932][ T6052] RIP: 0033:0x7fac2ce447df [ 78.052353][ T6052] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 78.071949][ T6052] RSP: 002b:00007fac2b4b1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 78.080395][ T6052] RAX: ffffffffffffffda RBX: 00007fac2d035fa0 RCX: 00007fac2ce447df [ 78.088426][ T6052] RDX: 0000000000000036 RSI: 0000000020007500 RDI: 00000000000000c8 [ 78.096387][ T6052] RBP: 00007fac2b4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 78.104404][ T6052] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 78.112462][ T6052] R13: 0000000000000000 R14: 00007fac2d035fa0 R15: 00007ffea89db198 [ 78.120490][ T6052] [ 78.349952][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.953'. [ 78.620750][ T6063] Set syz1 is full, maxelem 65536 reached [ 79.022315][ T6098] syz.0.963[6098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.022384][ T6098] syz.0.963[6098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.034663][ T6098] syz.0.963[6098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.228830][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x1 [ 79.247660][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.255109][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.262495][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.269965][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.277413][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.286721][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.294122][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.301596][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.309010][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.316546][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.323983][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.331460][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.338934][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.346422][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.353818][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.361406][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.368850][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.376323][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.383902][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.391367][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.399077][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.406559][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.413939][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.421442][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.428834][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.436257][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.443632][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.451143][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.458664][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.466214][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.473594][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.480994][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.488590][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.496027][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.503482][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.510891][ T3372] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 79.519204][ T3372] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 79.535012][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 79.572519][ T3376] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 79.580312][ T3376] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 79.594042][ T3376] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 79.611903][ T3376] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 79.628149][ T3376] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 79.635942][ T3376] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 79.643591][ T3376] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 79.651597][ T3376] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 79.662966][ T6134] netlink: 36 bytes leftover after parsing attributes in process `syz.4.977'. [ 79.878432][ T6148] FAULT_INJECTION: forcing a failure. [ 79.878432][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 79.891124][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: syz.0.984 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 79.901724][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.911831][ T6148] Call Trace: [ 79.915107][ T6148] [ 79.918070][ T6148] dump_stack_lvl+0xf2/0x150 [ 79.922698][ T6148] dump_stack+0x15/0x1a [ 79.926858][ T6148] should_fail_ex+0x223/0x230 [ 79.931601][ T6148] ? audit_log_d_path+0x96/0x250 [ 79.936548][ T6148] should_failslab+0x8f/0xb0 [ 79.941207][ T6148] __kmalloc_cache_noprof+0x4e/0x320 [ 79.946517][ T6148] audit_log_d_path+0x96/0x250 [ 79.951366][ T6148] ? __rcu_read_unlock+0x4e/0x70 [ 79.956319][ T6148] audit_log_d_path_exe+0x42/0x70 [ 79.961419][ T6148] audit_log_task+0x192/0x1c0 [ 79.966113][ T6148] audit_seccomp+0x68/0x130 [ 79.970693][ T6148] __seccomp_filter+0x6fa/0x1180 [ 79.975638][ T6148] ? do_vfs_ioctl+0x96e/0x1530 [ 79.980408][ T6148] __secure_computing+0x9f/0x1c0 [ 79.985348][ T6148] syscall_trace_enter+0xd1/0x1f0 [ 79.990373][ T6148] do_syscall_64+0xaa/0x1c0 [ 79.994917][ T6148] ? clear_bhb_loop+0x55/0xb0 [ 79.999604][ T6148] ? clear_bhb_loop+0x55/0xb0 [ 80.004271][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.010216][ T6148] RIP: 0033:0x7fac2ce4473c [ 80.014627][ T6148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.034290][ T6148] RSP: 002b:00007fac2b490030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.042694][ T6148] RAX: ffffffffffffffda RBX: 00007fac2d036080 RCX: 00007fac2ce4473c [ 80.050795][ T6148] RDX: 000000000000000f RSI: 00007fac2b4900a0 RDI: 000000000000000b [ 80.058755][ T6148] RBP: 00007fac2b490090 R08: 0000000000000000 R09: 0000000000000000 [ 80.066713][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.074773][ T6148] R13: 0000000000000000 R14: 00007fac2d036080 R15: 00007ffea89db198 [ 80.082739][ T6148] [ 80.516553][ T3372] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 80.524479][ T3372] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 80.532680][ T3372] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x3 [ 80.540969][ T3372] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.591221][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 80.591236][ T29] audit: type=1326 audit(1736960840.888:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.622225][ T29] audit: type=1326 audit(1736960840.888:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.645647][ T29] audit: type=1326 audit(1736960840.888:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.669089][ T29] audit: type=1326 audit(1736960840.888:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.692480][ T29] audit: type=1326 audit(1736960840.888:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.715801][ T29] audit: type=1326 audit(1736960840.888:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.739120][ T29] audit: type=1326 audit(1736960840.888:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.762426][ T29] audit: type=1326 audit(1736960840.888:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.774177][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.997'. [ 80.785724][ T29] audit: type=1326 audit(1736960840.888:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 80.785802][ T29] audit: type=1326 audit(1736960840.888:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 81.086911][ T6202] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1007'. [ 81.109567][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1006'. [ 81.148399][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.156985][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.733087][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 81.790580][ T6209] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.313244][ T3373] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 82.321006][ T3373] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 82.328763][ T3373] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x3 [ 82.336792][ T3373] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.934017][ T6243] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 83.280455][ T6264] FAULT_INJECTION: forcing a failure. [ 83.280455][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 83.293164][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.4.1032 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 83.303916][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.313995][ T6264] Call Trace: [ 83.317267][ T6264] [ 83.320231][ T6264] dump_stack_lvl+0xf2/0x150 [ 83.324923][ T6264] dump_stack+0x15/0x1a [ 83.329127][ T6264] should_fail_ex+0x223/0x230 [ 83.333843][ T6264] should_failslab+0x8f/0xb0 [ 83.338452][ T6264] kmem_cache_alloc_node_noprof+0x59/0x320 [ 83.344342][ T6264] ? __alloc_skb+0x10b/0x310 [ 83.349018][ T6264] __alloc_skb+0x10b/0x310 [ 83.353439][ T6264] alloc_skb_with_frags+0x80/0x450 [ 83.358588][ T6264] ? _raw_spin_unlock+0x26/0x50 [ 83.363437][ T6264] ? free_unref_folios+0x706/0x730 [ 83.368592][ T6264] sock_alloc_send_pskb+0x435/0x4f0 [ 83.373947][ T6264] __ip_append_data+0x182d/0x22e0 [ 83.379011][ T6264] ? memcg_list_lru_alloc+0xce/0x4e0 [ 83.384373][ T6264] ? mod_objcg_state+0x2ea/0x4f0 [ 83.389393][ T6264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 83.395036][ T6264] ? mod_objcg_state+0x2ea/0x4f0 [ 83.399981][ T6264] ip_make_skb+0x13f/0x2c0 [ 83.404396][ T6264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 83.409942][ T6264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 83.415481][ T6264] udp_sendmsg+0x1228/0x12f0 [ 83.420063][ T6264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 83.425607][ T6264] ? __pfx_udp_sendmsg+0x10/0x10 [ 83.430595][ T6264] inet_sendmsg+0xaf/0xd0 [ 83.434928][ T6264] __sock_sendmsg+0x102/0x180 [ 83.439670][ T6264] ____sys_sendmsg+0x312/0x410 [ 83.444479][ T6264] __sys_sendmmsg+0x227/0x4b0 [ 83.449178][ T6264] __x64_sys_sendmmsg+0x57/0x70 [ 83.454020][ T6264] x64_sys_call+0x29aa/0x2dc0 [ 83.458689][ T6264] do_syscall_64+0xc9/0x1c0 [ 83.463182][ T6264] ? clear_bhb_loop+0x55/0xb0 [ 83.467849][ T6264] ? clear_bhb_loop+0x55/0xb0 [ 83.472579][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.478472][ T6264] RIP: 0033:0x7fe757235d29 [ 83.482933][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.502534][ T6264] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.511039][ T6264] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 83.519000][ T6264] RDX: 0000000000000002 RSI: 0000000020008c80 RDI: 0000000000000003 [ 83.526961][ T6264] RBP: 00007fe7558a7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.534918][ T6264] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 83.542874][ T6264] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 83.550839][ T6264] [ 83.953684][ T6286] FAULT_INJECTION: forcing a failure. [ 83.953684][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 83.966380][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.4.1041 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 83.977080][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.987136][ T6286] Call Trace: [ 83.990405][ T6286] [ 83.993328][ T6286] dump_stack_lvl+0xf2/0x150 [ 83.998005][ T6286] dump_stack+0x15/0x1a [ 84.002151][ T6286] should_fail_ex+0x223/0x230 [ 84.006818][ T6286] should_failslab+0x8f/0xb0 [ 84.011482][ T6286] kmem_cache_alloc_node_noprof+0x59/0x320 [ 84.017271][ T6286] ? __alloc_skb+0x10b/0x310 [ 84.021843][ T6286] __alloc_skb+0x10b/0x310 [ 84.026244][ T6286] alloc_skb_with_frags+0x80/0x450 [ 84.031350][ T6286] ? avc_has_perm+0xd4/0x160 [ 84.035926][ T6286] sock_alloc_send_pskb+0x435/0x4f0 [ 84.041154][ T6286] ? __rcu_read_unlock+0x4e/0x70 [ 84.046078][ T6286] packet_sendmsg+0x2485/0x3670 [ 84.050918][ T6286] ? terminate_walk+0x260/0x280 [ 84.055842][ T6286] ? avc_has_perm+0xd4/0x160 [ 84.060498][ T6286] ? selinux_socket_sendmsg+0x185/0x1c0 [ 84.066041][ T6286] ? __pfx_packet_sendmsg+0x10/0x10 [ 84.071311][ T6286] __sock_sendmsg+0x140/0x180 [ 84.076125][ T6286] __sys_sendto+0x1a8/0x230 [ 84.080696][ T6286] __x64_sys_sendto+0x78/0x90 [ 84.085384][ T6286] x64_sys_call+0x29fa/0x2dc0 [ 84.090134][ T6286] do_syscall_64+0xc9/0x1c0 [ 84.094697][ T6286] ? clear_bhb_loop+0x55/0xb0 [ 84.099415][ T6286] ? clear_bhb_loop+0x55/0xb0 [ 84.104176][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.110091][ T6286] RIP: 0033:0x7fe757235d29 [ 84.114563][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.134251][ T6286] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 84.142651][ T6286] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 84.150646][ T6286] RDX: 000000000000000e RSI: 00000000200002c0 RDI: 0000000000000004 [ 84.158605][ T6286] RBP: 00007fe7558a7090 R08: 0000000020000140 R09: 0000000000000014 [ 84.166572][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.174535][ T6286] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 84.182516][ T6286] [ 84.212505][ T6292] FAULT_INJECTION: forcing a failure. [ 84.212505][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 84.225244][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.4.1044 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 84.235997][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.246555][ T6292] Call Trace: [ 84.249828][ T6292] [ 84.252744][ T6292] dump_stack_lvl+0xf2/0x150 [ 84.257392][ T6292] dump_stack+0x15/0x1a [ 84.261532][ T6292] should_fail_ex+0x223/0x230 [ 84.266245][ T6292] should_failslab+0x8f/0xb0 [ 84.270908][ T6292] __kmalloc_node_noprof+0xad/0x410 [ 84.276177][ T6292] ? __kvmalloc_node_noprof+0x72/0x170 [ 84.281710][ T6292] __kvmalloc_node_noprof+0x72/0x170 [ 84.287131][ T6292] io_ring_ctx_alloc+0x51a/0xcc0 [ 84.292153][ T6292] io_uring_create+0x40/0x6d0 [ 84.296858][ T6292] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 84.302315][ T6292] __x64_sys_io_uring_setup+0x31/0x40 [ 84.307763][ T6292] x64_sys_call+0x270c/0x2dc0 [ 84.312423][ T6292] do_syscall_64+0xc9/0x1c0 [ 84.316908][ T6292] ? clear_bhb_loop+0x55/0xb0 [ 84.321575][ T6292] ? clear_bhb_loop+0x55/0xb0 [ 84.326255][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.332163][ T6292] RIP: 0033:0x7fe757235d29 [ 84.336583][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.356301][ T6292] RSP: 002b:00007fe7558a6fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 84.364789][ T6292] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 84.372927][ T6292] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000003fa1 [ 84.380910][ T6292] RBP: 0000000020000300 R08: 0000000000000000 R09: 0000000000000000 [ 84.388931][ T6292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 84.396902][ T6292] R13: 0000000000000000 R14: 0000000000003fa1 R15: 0000000000000000 [ 84.404968][ T6292] [ 84.641836][ T6332] FAULT_INJECTION: forcing a failure. [ 84.641836][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 84.654500][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.2.1059 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 84.665261][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.675397][ T6332] Call Trace: [ 84.678679][ T6332] [ 84.681619][ T6332] dump_stack_lvl+0xf2/0x150 [ 84.686292][ T6332] dump_stack+0x15/0x1a [ 84.690478][ T6332] should_fail_ex+0x223/0x230 [ 84.695214][ T6332] ? allocate_cgrp_cset_links+0x7f/0x1f0 [ 84.700964][ T6332] should_failslab+0x8f/0xb0 [ 84.705648][ T6332] __kmalloc_cache_noprof+0x4e/0x320 [ 84.710962][ T6332] allocate_cgrp_cset_links+0x7f/0x1f0 [ 84.716423][ T6332] find_css_set+0x59f/0xd60 [ 84.720941][ T6332] ? evict+0x50e/0x570 [ 84.725030][ T6332] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 84.730834][ T6332] cgroup_attach_task+0x1c2/0x460 [ 84.735947][ T6332] __cgroup_procs_write+0x1af/0x210 [ 84.741205][ T6332] ? __pfx_cgroup_procs_write+0x10/0x10 [ 84.746901][ T6332] cgroup_procs_write+0x29/0x50 [ 84.751855][ T6332] ? __pfx_cgroup_procs_write+0x10/0x10 [ 84.757474][ T6332] cgroup_file_write+0x16f/0x320 [ 84.762516][ T6332] ? __check_object_size+0x364/0x520 [ 84.767919][ T6332] ? __pfx_cgroup_file_write+0x10/0x10 [ 84.773435][ T6332] kernfs_fop_write_iter+0x1c8/0x2c0 [ 84.778833][ T6332] vfs_write+0x77f/0x920 [ 84.783145][ T6332] ? __schedule+0x6fa/0x930 [ 84.787804][ T6332] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 84.793670][ T6332] ksys_write+0xe8/0x1b0 [ 84.797931][ T6332] __x64_sys_write+0x42/0x50 [ 84.802551][ T6332] x64_sys_call+0x287e/0x2dc0 [ 84.807327][ T6332] do_syscall_64+0xc9/0x1c0 [ 84.811847][ T6332] ? clear_bhb_loop+0x55/0xb0 [ 84.816536][ T6332] ? clear_bhb_loop+0x55/0xb0 [ 84.821225][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.827179][ T6332] RIP: 0033:0x7f0068035d29 [ 84.831920][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.851740][ T6332] RSP: 002b:00007f00666a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.860165][ T6332] RAX: ffffffffffffffda RBX: 00007f0068225fa0 RCX: 00007f0068035d29 [ 84.868144][ T6332] RDX: 0000000000000051 RSI: 0000000020000080 RDI: 000000000000000f [ 84.876133][ T6332] RBP: 00007f00666a1090 R08: 0000000000000000 R09: 0000000000000000 [ 84.884169][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.892202][ T6332] R13: 0000000000000000 R14: 00007f0068225fa0 R15: 00007fff2080e6d8 [ 84.900238][ T6332] [ 85.163852][ T3373] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 85.171586][ T3373] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 85.183747][ T3373] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 85.198801][ T3373] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 85.372052][ T6365] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.618238][ T6378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1075'. [ 85.898712][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 85.898727][ T29] audit: type=1400 audit(1736960846.198:4301): avc: denied { module_request } for pid=6386 comm="syz.2.1081" kmod="snd-timer-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.938893][ T6387] ALSA: seq fatal error: cannot create timer (-19) [ 85.965663][ T29] audit: type=1400 audit(1736960846.268:4302): avc: denied { map_create } for pid=6389 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.985102][ T29] audit: type=1400 audit(1736960846.268:4303): avc: denied { bpf } for pid=6389 comm="syz.2.1082" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.007515][ T29] audit: type=1400 audit(1736960846.288:4304): avc: denied { map_read map_write } for pid=6389 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.028212][ T29] audit: type=1326 audit(1736960846.308:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.051694][ T29] audit: type=1326 audit(1736960846.308:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.075502][ T29] audit: type=1326 audit(1736960846.308:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.098953][ T29] audit: type=1326 audit(1736960846.308:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.122392][ T29] audit: type=1326 audit(1736960846.308:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.145934][ T29] audit: type=1326 audit(1736960846.308:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 86.523386][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 87.119218][ T35] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x4 [ 87.126939][ T35] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x2 [ 87.134818][ T35] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x3 [ 87.144858][ T35] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 87.251928][ T35] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 87.259647][ T35] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 87.268637][ T35] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 87.276709][ T35] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 87.371638][ T6447] FAULT_INJECTION: forcing a failure. [ 87.371638][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.384808][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.1.1104 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 87.395552][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.405608][ T6447] Call Trace: [ 87.408882][ T6447] [ 87.411819][ T6447] dump_stack_lvl+0xf2/0x150 [ 87.416559][ T6447] dump_stack+0x15/0x1a [ 87.420803][ T6447] should_fail_ex+0x223/0x230 [ 87.425480][ T6447] should_fail+0xb/0x10 [ 87.429626][ T6447] should_fail_usercopy+0x1a/0x20 [ 87.434902][ T6447] _copy_to_user+0x20/0xa0 [ 87.439421][ T6447] simple_read_from_buffer+0xa0/0x110 [ 87.444790][ T6447] proc_fail_nth_read+0xf9/0x140 [ 87.449728][ T6447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.455324][ T6447] vfs_read+0x1a2/0x700 [ 87.459479][ T6447] ? __rcu_read_unlock+0x4e/0x70 [ 87.464430][ T6447] ? __fget_files+0x17c/0x1c0 [ 87.469111][ T6447] ksys_read+0xe8/0x1b0 [ 87.473340][ T6447] __x64_sys_read+0x42/0x50 [ 87.477836][ T6447] x64_sys_call+0x2874/0x2dc0 [ 87.482543][ T6447] do_syscall_64+0xc9/0x1c0 [ 87.487063][ T6447] ? clear_bhb_loop+0x55/0xb0 [ 87.491730][ T6447] ? clear_bhb_loop+0x55/0xb0 [ 87.496464][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.502355][ T6447] RIP: 0033:0x7f0f90b4473c [ 87.506761][ T6447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.526369][ T6447] RSP: 002b:00007f0f8f1b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.534773][ T6447] RAX: ffffffffffffffda RBX: 00007f0f90d35fa0 RCX: 00007f0f90b4473c [ 87.542819][ T6447] RDX: 000000000000000f RSI: 00007f0f8f1b10a0 RDI: 0000000000000007 [ 87.550846][ T6447] RBP: 00007f0f8f1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.558807][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.566768][ T6447] R13: 0000000000000000 R14: 00007f0f90d35fa0 R15: 00007fff46fab448 [ 87.574733][ T6447] [ 87.599980][ T35] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x4 [ 87.607822][ T35] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x2 [ 87.615602][ T35] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x3 [ 87.623664][ T35] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 87.717379][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 87.726432][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 87.740726][ T6468] syz_tun: entered promiscuous mode [ 87.747473][ T6468] syz_tun: left promiscuous mode [ 87.778431][ T6472] FAULT_INJECTION: forcing a failure. [ 87.778431][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 87.791271][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.4.1117 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 87.802091][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.812191][ T6472] Call Trace: [ 87.815478][ T6472] [ 87.818424][ T6472] dump_stack_lvl+0xf2/0x150 [ 87.823440][ T6472] dump_stack+0x15/0x1a [ 87.827606][ T6472] should_fail_ex+0x223/0x230 [ 87.832297][ T6472] should_failslab+0x8f/0xb0 [ 87.836927][ T6472] kmem_cache_alloc_node_noprof+0x59/0x320 [ 87.842972][ T6472] ? __alloc_skb+0x10b/0x310 [ 87.847577][ T6472] __alloc_skb+0x10b/0x310 [ 87.849037][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1116'. [ 87.852077][ T6472] netlink_alloc_large_skb+0xad/0xe0 [ 87.852106][ T6472] netlink_sendmsg+0x3b4/0x6e0 [ 87.871921][ T6472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.877228][ T6472] __sock_sendmsg+0x140/0x180 [ 87.881975][ T6472] ____sys_sendmsg+0x312/0x410 [ 87.886884][ T6472] __sys_sendmsg+0x19d/0x230 [ 87.891497][ T6472] __x64_sys_sendmsg+0x46/0x50 [ 87.896372][ T6472] x64_sys_call+0x2734/0x2dc0 [ 87.901380][ T6472] do_syscall_64+0xc9/0x1c0 [ 87.905875][ T6472] ? clear_bhb_loop+0x55/0xb0 [ 87.910561][ T6472] ? clear_bhb_loop+0x55/0xb0 [ 87.915266][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.921214][ T6472] RIP: 0033:0x7fe757235d29 [ 87.925655][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.945254][ T6472] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.953659][ T6472] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 87.961619][ T6472] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 87.969598][ T6472] RBP: 00007fe7558a7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.977558][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.985521][ T6472] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 87.993517][ T6472] [ 88.004737][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 88.013786][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 88.048216][ T6468] syz_tun: entered promiscuous mode [ 88.055841][ T6468] syz_tun: left promiscuous mode [ 88.135605][ T6481] FAULT_INJECTION: forcing a failure. [ 88.135605][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 88.148265][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.1.1120 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 88.158981][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.169044][ T6481] Call Trace: [ 88.172323][ T6481] [ 88.175254][ T6481] dump_stack_lvl+0xf2/0x150 [ 88.179918][ T6481] dump_stack+0x15/0x1a [ 88.184086][ T6481] should_fail_ex+0x223/0x230 [ 88.188767][ T6481] should_failslab+0x8f/0xb0 [ 88.193404][ T6481] kmem_cache_alloc_noprof+0x52/0x320 [ 88.198820][ T6481] ? security_file_alloc+0x32/0x100 [ 88.204070][ T6481] security_file_alloc+0x32/0x100 [ 88.209115][ T6481] init_file+0x5b/0x1b0 [ 88.213432][ T6481] alloc_empty_file+0xea/0x200 [ 88.218276][ T6481] path_openat+0x6a/0x1fa0 [ 88.222701][ T6481] ? mntput+0x49/0x70 [ 88.226691][ T6481] ? terminate_walk+0x260/0x280 [ 88.231544][ T6481] ? path_openat+0x1a5a/0x1fa0 [ 88.236874][ T6481] ? _parse_integer_limit+0x167/0x180 [ 88.242310][ T6481] do_filp_open+0x107/0x230 [ 88.246846][ T6481] do_open_execat+0xd0/0x280 [ 88.251460][ T6481] alloc_bprm+0x28/0x5d0 [ 88.255702][ T6481] do_execveat_common+0x134/0x800 [ 88.260811][ T6481] ? getname_flags+0x15a/0x3b0 [ 88.265573][ T6481] __x64_sys_execveat+0x75/0x90 [ 88.270437][ T6481] x64_sys_call+0x291e/0x2dc0 [ 88.275137][ T6481] do_syscall_64+0xc9/0x1c0 [ 88.279703][ T6481] ? clear_bhb_loop+0x55/0xb0 [ 88.284393][ T6481] ? clear_bhb_loop+0x55/0xb0 [ 88.289065][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.294963][ T6481] RIP: 0033:0x7f0f90b45d29 [ 88.299421][ T6481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.319778][ T6481] RSP: 002b:00007f0f8f1b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 88.328198][ T6481] RAX: ffffffffffffffda RBX: 00007f0f90d35fa0 RCX: 00007f0f90b45d29 [ 88.336177][ T6481] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 88.344158][ T6481] RBP: 00007f0f8f1b1090 R08: 0000000000001000 R09: 0000000000000000 [ 88.352208][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.360241][ T6481] R13: 0000000000000000 R14: 00007f0f90d35fa0 R15: 00007fff46fab448 [ 88.368387][ T6481] [ 88.455629][ T6488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1125'. [ 88.532356][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.542200][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.549661][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1128'. [ 88.585806][ T6509] vhci_hcd: invalid port number 13 [ 88.590951][ T6509] vhci_hcd: default hub control req: 0305 v1000 i000d l0 [ 88.599677][ T6509] xt_hashlimit: max too large, truncated to 1048576 [ 88.607026][ T6509] Cannot find set identified by id 0 to match [ 89.372909][ T35] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 89.380657][ T35] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 89.390002][ T35] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 89.396573][ T6528] block device autoloading is deprecated and will be removed. [ 89.398412][ T35] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 89.439785][ T6534] syz.1.1141[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.439856][ T6534] syz.1.1141[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.451382][ T6534] syz.1.1141[6534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.617211][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.640543][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.701972][ T6558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 89.725459][ T1061] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 89.733131][ T1061] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 89.741230][ T1061] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x3 [ 89.749369][ T1061] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 89.775286][ T6562] cgroup2: Bad value for 'fscontext' [ 89.781509][ T6562] Unknown options in mask 5 [ 90.565347][ T6588] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 90.651771][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.660392][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.690744][ T6601] __nla_validate_parse: 2 callbacks suppressed [ 90.690757][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1168'. [ 90.756229][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 90.776366][ T6610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1170'. [ 91.220304][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 91.220318][ T29] audit: type=1400 audit(1736960851.518:4612): avc: denied { write } for pid=6633 comm="syz.2.1182" name="icmp6" dev="proc" ino=4026532714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.251104][ T29] audit: type=1400 audit(1736960851.518:4613): avc: denied { create } for pid=6633 comm="syz.2.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 91.274935][ T29] audit: type=1326 audit(1736960851.578:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.298606][ T29] audit: type=1326 audit(1736960851.578:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.322212][ T29] audit: type=1326 audit(1736960851.578:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.345881][ T29] audit: type=1326 audit(1736960851.578:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.369443][ T29] audit: type=1326 audit(1736960851.578:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.392964][ T29] audit: type=1326 audit(1736960851.578:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.416393][ T29] audit: type=1326 audit(1736960851.578:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.440125][ T29] audit: type=1326 audit(1736960851.578:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 91.464631][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1188'. [ 91.532405][ T6657] loop4: detected capacity change from 0 to 1024 [ 91.539636][ T6657] EXT4-fs: Ignoring removed orlov option [ 91.549016][ T6657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.603805][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1192'. [ 91.908501][ T6674] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1194'. [ 91.974206][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.061432][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.084034][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 92.091760][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 92.099451][ T3373] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x3 [ 92.107604][ T3373] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.438266][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.485252][ T6699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1202'. [ 92.585124][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1206'. [ 92.866240][ T6722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6722 comm=syz.1.1212 [ 92.878976][ T6723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6723 comm=syz.1.1212 [ 93.248666][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1215'. [ 93.562701][ T6748] IPv6: Can't replace route, no match found [ 93.596668][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1221'. [ 93.959288][ T6776] FAULT_INJECTION: forcing a failure. [ 93.959288][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 93.971986][ T6776] CPU: 1 UID: 0 PID: 6776 Comm: syz.1.1230 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 93.982698][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.992776][ T6776] Call Trace: [ 93.996047][ T6776] [ 93.998976][ T6776] dump_stack_lvl+0xf2/0x150 [ 94.003600][ T6776] dump_stack+0x15/0x1a [ 94.007761][ T6776] should_fail_ex+0x223/0x230 [ 94.012441][ T6776] should_failslab+0x8f/0xb0 [ 94.017071][ T6776] kmem_cache_alloc_noprof+0x52/0x320 [ 94.022498][ T6776] ? getname_flags+0x81/0x3b0 [ 94.027168][ T6776] getname_flags+0x81/0x3b0 [ 94.031685][ T6776] getname+0x17/0x20 [ 94.035616][ T6776] do_sys_openat2+0x67/0x120 [ 94.040293][ T6776] __x64_sys_openat+0xf3/0x120 [ 94.045106][ T6776] x64_sys_call+0x2b30/0x2dc0 [ 94.049802][ T6776] do_syscall_64+0xc9/0x1c0 [ 94.054303][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 94.058977][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 94.063648][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.069588][ T6776] RIP: 0033:0x7f0f90b45d29 [ 94.073994][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.093656][ T6776] RSP: 002b:00007f0f8f16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.102082][ T6776] RAX: ffffffffffffffda RBX: 00007f0f90d36160 RCX: 00007f0f90b45d29 [ 94.110060][ T6776] RDX: 0000000000000002 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 94.118174][ T6776] RBP: 00007f0f8f16f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.126150][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.134136][ T6776] R13: 0000000000000000 R14: 00007f0f90d36160 R15: 00007fff46fab448 [ 94.142133][ T6776] [ 94.748733][ T3373] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 94.756453][ T3373] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2 [ 94.764266][ T3373] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x3 [ 94.773255][ T3373] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.363310][ T6823] FAULT_INJECTION: forcing a failure. [ 95.363310][ T6823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.376478][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.4.1248 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 95.387383][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.397588][ T6823] Call Trace: [ 95.400862][ T6823] [ 95.403790][ T6823] dump_stack_lvl+0xf2/0x150 [ 95.408402][ T6823] dump_stack+0x15/0x1a [ 95.412645][ T6823] should_fail_ex+0x223/0x230 [ 95.417322][ T6823] should_fail+0xb/0x10 [ 95.421475][ T6823] should_fail_usercopy+0x1a/0x20 [ 95.426535][ T6823] _copy_from_user+0x1e/0xb0 [ 95.431144][ T6823] copy_msghdr_from_user+0x54/0x2a0 [ 95.436358][ T6823] ? __fget_files+0x17c/0x1c0 [ 95.441048][ T6823] __sys_recvmsg+0x140/0x260 [ 95.445753][ T6823] __x64_sys_recvmsg+0x46/0x50 [ 95.450532][ T6823] x64_sys_call+0xc64/0x2dc0 [ 95.455141][ T6823] do_syscall_64+0xc9/0x1c0 [ 95.459713][ T6823] ? clear_bhb_loop+0x55/0xb0 [ 95.464397][ T6823] ? clear_bhb_loop+0x55/0xb0 [ 95.469075][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.474997][ T6823] RIP: 0033:0x7fe757235d29 [ 95.479476][ T6823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.499172][ T6823] RSP: 002b:00007fe755865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 95.507588][ T6823] RAX: ffffffffffffffda RBX: 00007fe757426160 RCX: 00007fe757235d29 [ 95.515580][ T6823] RDX: 0000000000000700 RSI: 0000000020000580 RDI: 0000000000000006 [ 95.523576][ T6823] RBP: 00007fe755865090 R08: 0000000000000000 R09: 0000000000000000 [ 95.531559][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.539552][ T6823] R13: 0000000000000001 R14: 00007fe757426160 R15: 00007ffcb080b0a8 [ 95.547668][ T6823] [ 95.715792][ T6830] __nla_validate_parse: 1 callbacks suppressed [ 95.715834][ T6830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1252'. [ 95.813410][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.842251][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.017240][ T6842] Falling back ldisc for ttyS3. [ 96.164081][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'. [ 96.351942][ T35] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 96.359756][ T35] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 96.374174][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 96.374189][ T29] audit: type=1326 audit(1736960856.668:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.384743][ T35] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x3 [ 96.455072][ T29] audit: type=1326 audit(1736960856.708:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.478541][ T29] audit: type=1326 audit(1736960856.708:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.501978][ T29] audit: type=1326 audit(1736960856.708:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.504865][ T35] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.525356][ T29] audit: type=1326 audit(1736960856.708:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.558564][ T29] audit: type=1326 audit(1736960856.708:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.581971][ T29] audit: type=1326 audit(1736960856.708:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.605391][ T29] audit: type=1326 audit(1736960856.708:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.628827][ T29] audit: type=1326 audit(1736960856.708:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.652247][ T29] audit: type=1326 audit(1736960856.708:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe757235d29 code=0x7ffc0000 [ 96.745169][ T6871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 96.805068][ T6873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1270'. [ 97.037367][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 97.158103][ T6891] program syz.1.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.508674][ T6902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1280'. [ 97.872137][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1284'. [ 98.290012][ T6935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1292'. [ 98.867151][ T6949] SELinux: failed to load policy [ 98.899198][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1299'. [ 99.282498][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'. [ 99.555780][ T24] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 99.563503][ T24] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 99.628441][ T24] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x3 [ 99.639845][ T24] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 99.842358][ T6984] syz.4.1310[6984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.842463][ T6984] syz.4.1310[6984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.880471][ T6984] syz.4.1310[6984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.096043][ T7016] sg_write: data in/out 14238/14 bytes for SCSI command 0x0-- guessing data in; [ 100.096043][ T7016] program syz.1.1325 not setting count and/or reply_len properly [ 100.101400][ T7015] ipvlan2: entered allmulticast mode [ 100.129709][ T7015] macvlan0: entered allmulticast mode [ 100.135152][ T7015] veth1_vlan: entered allmulticast mode [ 100.210322][ T7026] FAULT_INJECTION: forcing a failure. [ 100.210322][ T7026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.223419][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.4.1329 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 100.234181][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.244228][ T7026] Call Trace: [ 100.247492][ T7026] [ 100.250412][ T7026] dump_stack_lvl+0xf2/0x150 [ 100.255005][ T7026] dump_stack+0x15/0x1a [ 100.259171][ T7026] should_fail_ex+0x223/0x230 [ 100.263848][ T7026] should_fail+0xb/0x10 [ 100.267992][ T7026] should_fail_usercopy+0x1a/0x20 [ 100.273010][ T7026] _copy_from_user+0x1e/0xb0 [ 100.277672][ T7026] copy_msghdr_from_user+0x54/0x2a0 [ 100.282894][ T7026] ? __fget_files+0x17c/0x1c0 [ 100.287656][ T7026] __sys_sendmsg+0x13e/0x230 [ 100.292249][ T7026] __x64_sys_sendmsg+0x46/0x50 [ 100.297003][ T7026] x64_sys_call+0x2734/0x2dc0 [ 100.301668][ T7026] do_syscall_64+0xc9/0x1c0 [ 100.306179][ T7026] ? clear_bhb_loop+0x55/0xb0 [ 100.310849][ T7026] ? clear_bhb_loop+0x55/0xb0 [ 100.315549][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.321461][ T7026] RIP: 0033:0x7fe757235d29 [ 100.325862][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.345526][ T7026] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.353926][ T7026] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 100.362020][ T7026] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 100.369982][ T7026] RBP: 00007fe7558a7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.377942][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.385904][ T7026] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 100.393869][ T7026] [ 100.740151][ T7059] __nla_validate_parse: 7 callbacks suppressed [ 100.740166][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'. [ 100.828618][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1341'. [ 100.883606][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1341'. [ 100.989760][ T7073] IPVS: set_ctl: invalid protocol: 0 172.20.20.59:20004 [ 101.074881][ T7078] FAULT_INJECTION: forcing a failure. [ 101.074881][ T7078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.088153][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.4.1350 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 101.098843][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.108905][ T7078] Call Trace: [ 101.112335][ T7078] [ 101.115285][ T7078] dump_stack_lvl+0xf2/0x150 [ 101.119896][ T7078] dump_stack+0x15/0x1a [ 101.124068][ T7078] should_fail_ex+0x223/0x230 [ 101.128750][ T7078] should_fail_alloc_page+0xfd/0x110 [ 101.134091][ T7078] __alloc_pages_noprof+0x109/0x340 [ 101.139346][ T7078] alloc_pages_mpol_noprof+0xb8/0x260 [ 101.144826][ T7078] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 101.150209][ T7078] handle_mm_fault+0xdd7/0x2ac0 [ 101.155068][ T7078] exc_page_fault+0x296/0x650 [ 101.159791][ T7078] asm_exc_page_fault+0x26/0x30 [ 101.164639][ T7078] RIP: 0010:filldir64+0x1ce/0x400 [ 101.169703][ T7078] Code: 89 f3 e8 c5 85 c5 ff 48 89 ef 4c 89 fe e8 ba 85 c5 ff 4c 39 fd 0f 82 ac 01 00 00 48 39 dd 0f 87 a3 01 00 00 0f 01 cb 0f ae e8 <4d> 89 67 08 4c 8b 24 24 48 8b 44 24 38 49 89 04 24 48 8b 44 24 10 [ 101.189319][ T7078] RSP: 0018:ffffc900037d3cb8 EFLAGS: 00050283 [ 101.195409][ T7078] RAX: 0000000000000000 RBX: 00007ffffffff000 RCX: ffff888117d1e300 [ 101.203386][ T7078] RDX: 0000000000000019 RSI: 0000000020002f40 RDI: 0000000020002f58 [ 101.211391][ T7078] RBP: 0000000020002f58 R08: ffffffff816d3856 R09: 0000000000000000 [ 101.219371][ T7078] R10: 0001ffffffffffff R11: 0001c900037d3eb8 R12: 0000000000000000 [ 101.227349][ T7078] R13: 0000000000000001 R14: ffffffff8625e1dc R15: 0000000020002f40 [ 101.235403][ T7078] ? filldir64+0x1b6/0x400 [ 101.239830][ T7078] ? filldir64+0x1b6/0x400 [ 101.244384][ T7078] ? __pfx_filldir64+0x10/0x10 [ 101.249189][ T7078] proc_map_files_readdir+0x150/0x690 [ 101.254576][ T7078] ? 0xffffffff81000000 [ 101.258720][ T7078] ? __rcu_read_unlock+0x4e/0x70 [ 101.263756][ T7078] ? get_pid_task+0x8e/0xc0 [ 101.268274][ T7078] iterate_dir+0x11d/0x310 [ 101.272699][ T7078] __se_sys_getdents64+0x87/0x1a0 [ 101.277775][ T7078] ? __pfx_filldir64+0x10/0x10 [ 101.282621][ T7078] __x64_sys_getdents64+0x43/0x50 [ 101.287689][ T7078] x64_sys_call+0x2d24/0x2dc0 [ 101.292394][ T7078] do_syscall_64+0xc9/0x1c0 [ 101.296899][ T7078] ? clear_bhb_loop+0x55/0xb0 [ 101.301638][ T7078] ? clear_bhb_loop+0x55/0xb0 [ 101.306352][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.312319][ T7078] RIP: 0033:0x7fe757235d29 [ 101.316744][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.336431][ T7078] RSP: 002b:00007fe7558a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 101.344845][ T7078] RAX: ffffffffffffffda RBX: 00007fe757425fa0 RCX: 00007fe757235d29 [ 101.352852][ T7078] RDX: 0000000000001002 RSI: 0000000020002f40 RDI: 0000000000000005 [ 101.360829][ T7078] RBP: 00007fe7558a7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.368794][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.376793][ T7078] R13: 0000000000000000 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 101.384813][ T7078] [ 101.666074][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1354'. [ 101.888068][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 101.888083][ T29] audit: type=1400 audit(1736960862.188:5061): avc: denied { setopt } for pid=7102 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.027176][ T29] audit: type=1400 audit(1736960862.328:5062): avc: denied { write } for pid=7107 comm="syz.1.1362" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.099214][ T29] audit: type=1326 audit(1736960862.398:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.123521][ T7114] netlink: 'syz.1.1362': attribute type 29 has an invalid length. [ 102.131423][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 102.186872][ T29] audit: type=1326 audit(1736960862.438:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.210400][ T29] audit: type=1326 audit(1736960862.438:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.233790][ T29] audit: type=1326 audit(1736960862.438:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.257256][ T29] audit: type=1326 audit(1736960862.438:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.280648][ T29] audit: type=1326 audit(1736960862.438:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.304264][ T29] audit: type=1326 audit(1736960862.438:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.327702][ T29] audit: type=1326 audit(1736960862.438:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bc62c5d29 code=0x7ffc0000 [ 102.374316][ T7122] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.419075][ T7124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1367'. [ 102.425532][ T7122] netlink: 'syz.3.1366': attribute type 3 has an invalid length. [ 102.435835][ T7122] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1366'. [ 102.487626][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'. [ 102.497475][ T7137] FAULT_INJECTION: forcing a failure. [ 102.497475][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 102.510140][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.4.1374 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 102.520818][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.530862][ T7137] Call Trace: [ 102.534128][ T7137] [ 102.537137][ T7137] dump_stack_lvl+0xf2/0x150 [ 102.541847][ T7137] dump_stack+0x15/0x1a [ 102.546128][ T7137] should_fail_ex+0x223/0x230 [ 102.550807][ T7137] should_failslab+0x8f/0xb0 [ 102.555395][ T7137] kmem_cache_alloc_noprof+0x52/0x320 [ 102.560785][ T7137] ? getname_flags+0x81/0x3b0 [ 102.565450][ T7137] getname_flags+0x81/0x3b0 [ 102.570008][ T7137] getname+0x17/0x20 [ 102.573911][ T7137] do_sys_openat2+0x67/0x120 [ 102.578490][ T7137] __x64_sys_openat+0xf3/0x120 [ 102.583338][ T7137] x64_sys_call+0x2b30/0x2dc0 [ 102.588016][ T7137] do_syscall_64+0xc9/0x1c0 [ 102.592540][ T7137] ? clear_bhb_loop+0x55/0xb0 [ 102.597253][ T7137] ? clear_bhb_loop+0x55/0xb0 [ 102.602015][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.608003][ T7137] RIP: 0033:0x7fe757234690 [ 102.612465][ T7137] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 102.632069][ T7137] RSP: 002b:00007fe7558a6a00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 102.640517][ T7137] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007fe757234690 [ 102.648484][ T7137] RDX: 0000000000080001 RSI: 00007fe757293ce0 RDI: 00000000ffffff9c [ 102.656485][ T7137] RBP: 00007fe757293ce0 R08: 0000000000000000 R09: 0000000000000000 [ 102.664444][ T7137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 102.672419][ T7137] R13: 00007fe7558a6aa0 R14: 00007fe757425fa0 R15: 00007ffcb080b0a8 [ 102.680385][ T7137] [ 102.706638][ T7138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1373'. [ 102.769552][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.778199][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.275574][ T24] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 103.283370][ T24] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 103.291302][ T24] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x3 [ 103.300348][ T24] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 103.326815][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 103.756646][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.766176][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.054391][ T7192] ref_ctr increment failed for inode: 0x608 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888127df4540 [ 104.066352][ T7191] uprobe: syz.2.1395:7191 failed to unregister, leaking uprobe [ 105.027565][ T1061] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 105.035312][ T1061] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 105.043192][ T1061] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 105.052094][ T1061] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.699175][ T35] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 106.706892][ T35] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 106.720494][ T35] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x3 [ 106.734240][ T35] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 107.733095][ T7263] __nla_validate_parse: 5 callbacks suppressed [ 107.733147][ T7263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1426'. [ 107.808841][ T24] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 107.816565][ T24] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 107.824257][ T24] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x3 [ 107.843355][ T24] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 108.195289][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1430'. [ 109.336150][ T7293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1438'. [ 109.593827][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1441'. [ 109.876915][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1447'. [ 110.071809][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 110.071824][ T29] audit: type=1400 audit(1736960870.368:5135): avc: denied { load_policy } for pid=7320 comm="syz.3.1450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.107278][ T7321] SELinux: failed to load policy [ 110.200255][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'. [ 110.340495][ T29] audit: type=1400 audit(1736960870.638:5136): avc: denied { create } for pid=7336 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.359508][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1459'. [ 110.420768][ T29] audit: type=1400 audit(1736960870.718:5137): avc: denied { bind } for pid=7336 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.444545][ T7337] batadv_slave_1: entered promiscuous mode [ 110.485474][ T29] audit: type=1400 audit(1736960870.738:5138): avc: denied { create } for pid=7344 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.489757][ T7337] batadv_slave_1: left promiscuous mode [ 110.505154][ T29] audit: type=1400 audit(1736960870.738:5139): avc: denied { bind } for pid=7344 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.530720][ T29] audit: type=1400 audit(1736960870.748:5140): avc: denied { connect } for pid=7344 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.550514][ T29] audit: type=1400 audit(1736960870.748:5141): avc: denied { write } for pid=7344 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.570080][ T29] audit: type=1400 audit(1736960870.748:5142): avc: denied { accept } for pid=7344 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.589668][ T29] audit: type=1326 audit(1736960870.748:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 110.613374][ T29] audit: type=1326 audit(1736960870.748:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 110.723939][ T7357] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 110.730486][ T7357] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.738212][ T7357] vhci_hcd vhci_hcd.0: Device attached [ 110.763780][ T7358] vhci_hcd: connection closed [ 110.764030][ T4319] vhci_hcd: stop threads [ 110.772995][ T4319] vhci_hcd: release socket [ 110.777466][ T4319] vhci_hcd: disconnect device [ 111.146523][ T7372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1471'. [ 111.233265][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 111.280307][ T7376] bond1: entered promiscuous mode [ 111.285396][ T7376] bond1: entered allmulticast mode [ 111.304844][ T7376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.811660][ T1061] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x4 [ 111.819597][ T1061] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x2 [ 111.851104][ T1061] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x3 [ 111.876492][ T1061] hid-generic 0000:3000000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 111.976716][ T7417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1483'. [ 113.115147][ T7449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1496'. [ 113.225609][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.234063][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.218553][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1517'. [ 114.468043][ T7522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1523'. [ 114.683294][ T3373] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x4 [ 114.691037][ T3373] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x2 [ 114.699844][ T3373] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x3 [ 114.708058][ T3373] hid-generic 0000:3000000:0000.002E: hidraw0: HID v0.00 Device [sy] on syz0 [ 114.760541][ T7540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1534'. [ 115.091521][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 115.091536][ T29] audit: type=1326 audit(1736960875.388:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.154509][ T29] audit: type=1326 audit(1736960875.428:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.178034][ T29] audit: type=1326 audit(1736960875.428:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.201786][ T29] audit: type=1326 audit(1736960875.428:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.273930][ T29] audit: type=1326 audit(1736960875.568:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.297512][ T29] audit: type=1326 audit(1736960875.568:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.2.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0068035d29 code=0x7ffc0000 [ 115.516662][ T29] audit: type=1326 audit(1736960875.818:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 115.540794][ T29] audit: type=1326 audit(1736960875.818:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 115.564246][ T29] audit: type=1326 audit(1736960875.818:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 115.618836][ T29] audit: type=1326 audit(1736960875.818:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2ce45d29 code=0x7ffc0000 [ 115.736986][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1581'. [ 115.807174][ T1061] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x4 [ 115.814985][ T1061] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x2 [ 115.828857][ T1061] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x3 [ 115.842616][ T1061] hid-generic 0000:3000000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 115.885469][ T7647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1588'. [ 116.126275][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1603'. [ 116.196104][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1606'. [ 116.464892][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1622'. [ 116.545021][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'. [ 116.661709][ T7731] macvlan1: entered promiscuous mode [ 116.689162][ T7731] vlan2: entered promiscuous mode [ 116.689211][ T4268] ================================================================== [ 116.694205][ T7731] macvlan0: entered promiscuous mode [ 116.702258][ T4268] BUG: KCSAN: data-race in __dev_open / is_upper_ndev_bond_master_filter [ 116.715954][ T4268] [ 116.718271][ T4268] read-write to 0xffff8881169fc0b0 of 4 bytes by task 7731 on cpu 0: [ 116.726329][ T4268] __dev_open+0x24b/0x2e0 [ 116.730659][ T4268] __dev_change_flags+0x155/0x410 [ 116.735694][ T4268] rtnl_newlink_create+0x2ac/0x5d0 [ 116.740819][ T4268] rtnl_newlink+0xe9f/0x1250 [ 116.745405][ T4268] rtnetlink_rcv_msg+0x651/0x710 [ 116.750345][ T4268] netlink_rcv_skb+0x12c/0x230 [ 116.755107][ T4268] rtnetlink_rcv+0x1c/0x30 [ 116.759525][ T4268] netlink_unicast+0x599/0x670 [ 116.761034][ T7735] FAULT_INJECTION: forcing a failure. [ 116.761034][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.764269][ T4268] netlink_sendmsg+0x5cc/0x6e0 [ 116.777399][ T7735] CPU: 0 UID: 0 PID: 7735 Comm: syz.2.1631 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 116.782087][ T4268] __sock_sendmsg+0x140/0x180 [ 116.792726][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.797376][ T4268] ____sys_sendmsg+0x312/0x410 [ 116.807407][ T7735] Call Trace: [ 116.807416][ T7735] [ 116.812139][ T4268] __sys_sendmsg+0x19d/0x230 [ 116.815399][ T7735] dump_stack_lvl+0xf2/0x150 [ 116.818309][ T4268] __x64_sys_sendmsg+0x46/0x50 [ 116.822918][ T7735] dump_stack+0x15/0x1a [ 116.827475][ T4268] x64_sys_call+0x2734/0x2dc0 [ 116.832212][ T7735] should_fail_ex+0x223/0x230 [ 116.836337][ T4268] do_syscall_64+0xc9/0x1c0 [ 116.836356][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.836383][ T4268] [ 116.836388][ T4268] read to 0xffff8881169fc0b0 of 4 bytes by task 4268 on cpu 1: [ 116.836401][ T4268] is_upper_ndev_bond_master_filter+0x2b/0xb0 [ 116.841051][ T7735] should_fail+0xb/0x10 [ 116.845695][ T4268] ib_enum_roce_netdev+0x124/0x1d0 [ 116.850169][ T7735] should_fail_usercopy+0x1a/0x20 [ 116.856030][ T4268] ib_enum_all_roce_netdevs+0x8a/0x100 [ 116.858339][ T7735] _copy_from_user+0x1e/0xb0 [ 116.865850][ T4268] netdevice_event_work_handler+0x67/0x3c0 [ 116.871895][ T7735] copy_msghdr_from_user+0x54/0x2a0 [ 116.876016][ T4268] process_scheduled_works+0x483/0x9a0 [ 116.881101][ T7735] ? __fget_files+0x17c/0x1c0 [ 116.886093][ T4268] worker_thread+0x51d/0x6f0 [ 116.891524][ T7735] __sys_sendmsg+0x13e/0x230 [ 116.896084][ T4268] kthread+0x1d1/0x210 [ 116.901887][ T7735] __x64_sys_sendmsg+0x46/0x50 [ 116.907037][ T4268] ret_from_fork+0x4b/0x60 [ 116.907056][ T4268] ret_from_fork_asm+0x1a/0x30 [ 116.907072][ T4268] [ 116.907075][ T4268] value changed: 0x0000f0a6 -> 0x0000f1a7 [ 116.907084][ T4268] [ 116.907087][ T4268] Reported by Kernel Concurrency Sanitizer on: [ 116.907095][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: kworker/u8:9 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 116.912527][ T7735] x64_sys_call+0x2734/0x2dc0 [ 116.917174][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.921733][ T7735] do_syscall_64+0xc9/0x1c0 [ 116.926295][ T4268] Workqueue: gid-cache-wq netdevice_event_work_handler [ 116.930336][ T7735] ? clear_bhb_loop+0x55/0xb0 [ 116.935067][ T4268] [ 116.935073][ T4268] ================================================================== [ 116.939453][ T7735] ? clear_bhb_loop+0x55/0xb0 [ 117.017723][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.023628][ T7735] RIP: 0033:0x7f0068035d29 [ 117.028085][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.047703][ T7735] RSP: 002b:00007f0066680038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.056144][ T7735] RAX: ffffffffffffffda RBX: 00007f0068226080 RCX: 00007f0068035d29 [ 117.064113][ T7735] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 117.072103][ T7735] RBP: 00007f0066680090 R08: 0000000000000000 R09: 0000000000000000 [ 117.080079][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.088055][ T7735] R13: 0000000000000001 R14: 00007f0068226080 R15: 00007fff2080e6d8 [ 117.096025][ T7735] [ 117.099261][ T7731] macvlan0: left promiscuous mode [ 117.280036][ T7734] macvlan1 (unregistering): left promiscuous mode