last executing test programs: 1m17.923759381s ago: executing program 4 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000dc79acda40e87c75110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x942b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m17.855761792s ago: executing program 4 (id=120): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000"], 0x0, 0x56, 0x0, 0x1}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000600)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000880)=""/133, 0x85}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000940)=""/112, 0x70}, 0x4}, {{&(0x7f0000002f40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000b00)=""/111, 0x6f}, {&(0x7f0000000b80)=""/158, 0x9e}], 0x3}, 0x6}, {{&(0x7f0000000c40)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000cc0)=""/152, 0x98}, {&(0x7f0000000d80)=""/96, 0x60}], 0x2, &(0x7f0000000e00)=""/69, 0x45}, 0xffffff5b}, {{&(0x7f0000000e80)=@un=@abs, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001000)=""/203, 0xcb}, {&(0x7f0000001100)=""/75, 0x4b}, {&(0x7f0000001180)=""/190, 0xbe}], 0x4}, 0x3}, {{&(0x7f0000001280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)=""/31, 0x1f}], 0x1, &(0x7f0000001380)=""/57, 0x39}, 0x6}, {{&(0x7f00000013c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001440)=""/52, 0x34}, {&(0x7f00000024c0)=""/56, 0x38}, {&(0x7f0000002500)=""/216, 0xd8}, {&(0x7f0000002600)=""/63, 0x3f}, {&(0x7f0000002640)=""/72, 0x48}, {&(0x7f00000026c0)=""/63, 0x3f}, {&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002800)=""/124, 0x7c}], 0x8, &(0x7f0000002900)=""/118, 0x76}, 0x6}, {{&(0x7f0000002980)=@caif=@dbg, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/15, 0xf}, {&(0x7f0000002a40)=""/11, 0xb}, {&(0x7f0000002a80)=""/225, 0xe1}], 0x3, &(0x7f0000002bc0)=""/99, 0x63}, 0x5}, {{&(0x7f0000002c40)=@nl=@proc, 0x80, &(0x7f0000004100)=[{&(0x7f0000002cc0)=""/1, 0x1}, {&(0x7f0000002d00)=""/179, 0xb3}, {&(0x7f0000002dc0)=""/167, 0xa7}, {&(0x7f0000002e80)=""/132, 0x84}, {&(0x7f0000006a40)=""/4107, 0x100b}, {&(0x7f0000003f40)=""/143, 0x8f}, {&(0x7f0000004000)=""/9, 0x9}, {&(0x7f0000004040)=""/181, 0xb5}], 0x8}, 0x6}, {{&(0x7f0000004180)=@hci, 0x80, &(0x7f0000005700)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/28, 0x1c}, {&(0x7f0000005240)=""/9, 0x9}, {&(0x7f0000005280)}, {&(0x7f00000052c0)=""/207, 0xcf}, {&(0x7f00000053c0)=""/178, 0xb2}, {&(0x7f0000005480)=""/163, 0xa3}, {0x0}, {0x0}], 0x9, &(0x7f00000057c0)=""/4096, 0x1000}, 0x200}], 0x9, 0x40000001, &(0x7f0000006a00)) fstat(r1, &(0x7f0000000100)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) 1m17.661353126s ago: executing program 4 (id=122): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) 1m16.743263494s ago: executing program 4 (id=139): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4890}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x38, r3, 0x10ada85e65c25359, 0xfffffffe, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408cd, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cc733d429cf5bada976657273696f6e3d3970323030302e752c61636365737339f3786e7ba90a6f5130cb4136646ef9d6504a0731e93aea296dc3b7742ae3aaeb2e52736f2a1fdcabfc16048386c08037fe2aa2357eb14fd469ed6cf2aaf8fe067372f9b64d04c7c0246b659d9f08a6f1f299b944062283f8a4810039c99b25a23cace378e6931ff852fe4925ad4fb3dcca2ae6c093a5aad58336b1b80712d051b6b94150b6d193cf40d87a5e8d2dac46b19bf624876e453176951a6300"/203]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x38]}}]}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1m16.243048303s ago: executing program 4 (id=155): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) 1m15.38236368s ago: executing program 4 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m15.347068211s ago: executing program 32 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m6.576439s ago: executing program 5 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0, 0x0, 0x100003c}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0x7fffffff, 0x105}) 1m6.480784182s ago: executing program 5 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000080215403b938000085000000a100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b74097efcd346af8d60000000c8ce69f72b43e26000000b7000000000000009500000000000000e553cc2b64d736f51e7316974c815f1c9aa41927"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xfe, &(0x7f0000000400)=""/254, 0x41100, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 1m6.406035394s ago: executing program 5 (id=289): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$vcsn(0x0, 0x5, 0x420000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@ipv4_deladdr={0x20, 0x15, 0x23, 0x70bd2b, 0x25dfdbfb, {0x2, 0x38, 0x3, 0xff}, [@IFA_ADDRESS={0x5, 0x1, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x60) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000380)) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@void, 0x1, 0x4d}}}) io_setup(0x2004, &(0x7f0000000680)) 1m6.279536626s ago: executing program 5 (id=290): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4890}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x38, r3, 0x10ada85e65c25359, 0xfffffffe, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408cd, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cc733d429cf5bada976657273696f6e3d3970323030302e752c61636365737339f3786e7ba90a6f5130cb4136646ef9d6504a0731e93aea296dc3b7742ae3aaeb2e52736f2a1fdcabfc16048386c08037fe2aa2357eb14fd469ed6cf2aaf8fe067372f9b64d04c7c0246b659d9f08a6f1f299b944062283f8a4810039c99b25a23cace378e6931ff852fe4925ad4fb3dcca2ae6c093a5aad58336b1b80712d051b6b94150b6d193cf40d87a5e8d2dac46b19bf624876e453176951a6300"/203]) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x38]}}]}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1m5.824379055s ago: executing program 5 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) r1 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x29cd, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 1m5.57249726s ago: executing program 5 (id=300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r1, 0x2) dup3(r1, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x152) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2) 1m5.5722619s ago: executing program 33 (id=300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r1, 0x2) dup3(r1, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x152) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2) 18.388237134s ago: executing program 0 (id=1091): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 2.239429466s ago: executing program 0 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4) r1 = getgid() chown(&(0x7f0000000080)='./file0\x00', 0xee01, r1) 2.238936856s ago: executing program 0 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.238721096s ago: executing program 0 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0xfffffffffffffffe}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) 2.237774536s ago: executing program 0 (id=1109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.221972807s ago: executing program 3 (id=1112): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)=ANY=[]) 2.220747027s ago: executing program 0 (id=1113): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 2.219988637s ago: executing program 3 (id=1116): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000002c0)={@loopback, @local, 0x0}, &(0x7f0000000900)=0xc) bind$packet(r0, &(0x7f0000000940)={0x11, 0x5, r1, 0x1, 0x3, 0x6, @link_local}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xf45c, 0x2}, 0x0, 0x10000, 0x5, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x480, 0x7f, 0x0, 0x1, 0x8, 0x10020005, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r4, 0x0, 0xfffffffffffffff4}, 0x18) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000002bc0), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r6}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r7, 0xbdd94000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x6, 0x6, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x42, 0x9, 0xffff3a61}}) socket$nl_route(0x10, 0x3, 0x0) 2.04751298s ago: executing program 1 (id=1123): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2], 0x24}}, 0x0) 1.816799474s ago: executing program 3 (id=1124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f00000005c0)=ANY=[]) 1.816116764s ago: executing program 1 (id=1125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) listen(r1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x29cd, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.811089105s ago: executing program 3 (id=1126): syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = epoll_create(0xaf2) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.692487337s ago: executing program 2 (id=1127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) 903.109092ms ago: executing program 3 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 873.731943ms ago: executing program 6 (id=1141): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000580)='./file0\x00', 0x1c1501, 0x6) 864.334693ms ago: executing program 2 (id=1142): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508dd", 0x5f, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 829.607464ms ago: executing program 2 (id=1143): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x28, r1, 0x10ada85e65c25359, 0xfffffffe, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 827.808474ms ago: executing program 2 (id=1144): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f0000001440)=ANY=[], 0xff, 0x54f, &(0x7f0000000380)="$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") (fail_nth: 3) 808.115034ms ago: executing program 6 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000640), &(0x7f0000000740)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 589.198148ms ago: executing program 1 (id=1146): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, &(0x7f0000000080)=0x6, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x240040c8) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4ce, &(0x7f0000000f80)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004e66858820f965ecf5130a09aaef6f10a1d793d0ad4f052fe187515516a458c18ae1ea0b6c946cea446304b"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000008000440000000000900010073797a30000000000800034000000005520000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 587.114298ms ago: executing program 2 (id=1147): socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000600)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe80000000000000000000"], 0x0) 555.609819ms ago: executing program 1 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) 555.038439ms ago: executing program 6 (id=1149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x800, 0x196, &(0x7f0000000240)={0x0, 0x1, 0x5b, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x14132, 0x0, 0x1, 0x1, 0x2, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0xfc, 0x6, @local}, 0x14) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f0000000080), 0x1004) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000004c0)=""/168, &(0x7f00000001c0)=0xa8) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 554.656699ms ago: executing program 1 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x888b, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) close(r0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 532.82247ms ago: executing program 1 (id=1151): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 371.866872ms ago: executing program 6 (id=1152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e657665000034000280050009000000000005000900", @ANYRES32], 0x6c}}, 0x40) 322.827453ms ago: executing program 6 (id=1153): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="8972ccbd841ca4eb0ef7b7d0ba332c52b2cb25f255557622a6e9b117ef377286c9de94f1e010746228ed692eea64a65cc258b8147f1590c74ddcd709cd8ba6768a90efc284910a8f0373df08", 0x4c}], 0x1, 0x23db, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) migrate_pages(0x0, 0x8000000000000000, 0x0, &(0x7f00000006c0)=0x6) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000580)='./file0\x00', 0x1c1501, 0x6) 304.000684ms ago: executing program 6 (id=1154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) close_range(0xffffffffffffffff, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x29cd, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 378.36µs ago: executing program 2 (id=1155): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@prjquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x1cc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf5", 0x2) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@sr0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x6) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000001c0000ed9935853504dc90"], 0x10}}], 0x2, 0x40000050) syncfs(0xffffffffffffffff) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) syz_clone3(&(0x7f0000000900)={0x100000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000380)=0x0, {0x37}, &(0x7f00000003c0)=""/32, 0x20, &(0x7f00000004c0)=""/198, &(0x7f00000006c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58) syz_open_procfs(r5, &(0x7f0000000700)='net/igmp6\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='spi_message_done\x00', r6}, 0x18) mq_open(&(0x7f0000000000)=']}]\x00', 0x40, 0x105, &(0x7f0000000040)={0x1, 0x1, 0x7fffffff, 0x9}) 0s ago: executing program 3 (id=1156): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) syz_usb_connect(0x3, 0xfffffffffffffdd4, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setuid(0xee01) kernel console output (not intermixed with test programs): 61.577893][ T4582] R13: 00007f7dea986038 R14: 00007f7dea985fa0 R15: 00007ffef850e598 [ 61.577937][ T4582] [ 61.904225][ T4437] hsr_slave_0: entered promiscuous mode [ 61.926933][ T4437] hsr_slave_1: entered promiscuous mode [ 61.928457][ T4583] vhci_hcd: connection closed [ 61.933651][ T4437] debugfs: 'hsr0' already exists in 'hsr' [ 61.944120][ T4437] Cannot create hsr debugfs directory [ 61.953008][ T4589] random: crng reseeded on system resumption [ 61.959373][ T51] vhci_hcd: stop threads [ 61.963647][ T51] vhci_hcd: release socket [ 61.968148][ T51] vhci_hcd: disconnect device [ 61.977214][ T4590] ref_ctr increment failed for inode: 0x14d offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811e879cc0 [ 61.979201][ T4592] hub 9-0:1.0: USB hub found [ 61.993626][ T4592] hub 9-0:1.0: 8 ports detected [ 62.185273][ T4437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.205788][ T4437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.220452][ T4619] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 62.232745][ T4437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.252972][ T4437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.266222][ T4590] uprobe: syz.3.331:4590 failed to unregister, leaking uprobe [ 62.345282][ T4437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.363252][ T4437] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.393261][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.400377][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.413448][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.420742][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.539675][ T4639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 62.546370][ T4639] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.553849][ T4639] vhci_hcd vhci_hcd.0: Device attached [ 62.557579][ T4437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.593962][ T4651] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 62.600734][ T4651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.608710][ T4651] vhci_hcd vhci_hcd.0: Device attached [ 62.637508][ T4660] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 62.644204][ T4660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.651898][ T4660] vhci_hcd vhci_hcd.0: Device attached [ 62.695342][ T4639] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 62.701985][ T4639] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.709805][ T4639] vhci_hcd vhci_hcd.0: Device attached [ 62.739069][ T4639] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.758474][ T4667] vhci_hcd: connection closed [ 62.758670][ T4648] vhci_hcd: connection closed [ 62.763260][ T4655] vhci_hcd: connection closed [ 62.768453][ T4661] vhci_hcd: connection closed [ 62.773360][ T37] vhci_hcd: stop threads [ 62.782413][ T37] vhci_hcd: release socket [ 62.786925][ T37] vhci_hcd: disconnect device [ 62.826991][ T37] vhci_hcd: stop threads [ 62.831402][ T37] vhci_hcd: release socket [ 62.835857][ T37] vhci_hcd: disconnect device [ 62.848629][ T37] vhci_hcd: stop threads [ 62.852939][ T37] vhci_hcd: release socket [ 62.854005][ T4677] netlink: zone id is out of range [ 62.857444][ T37] vhci_hcd: disconnect device [ 62.867767][ T37] vhci_hcd: stop threads [ 62.872248][ T37] vhci_hcd: release socket [ 62.873980][ T4677] netlink: zone id is out of range [ 62.876699][ T37] vhci_hcd: disconnect device [ 62.881843][ T4677] netlink: zone id is out of range [ 62.883113][ T4677] netlink: zone id is out of range [ 62.897101][ T4677] netlink: zone id is out of range [ 62.912301][ T4677] netlink: zone id is out of range [ 62.917471][ T4677] netlink: zone id is out of range [ 62.922750][ T4677] netlink: zone id is out of range [ 62.928028][ T4677] netlink: zone id is out of range [ 63.026341][ T4437] veth0_vlan: entered promiscuous mode [ 63.081396][ T4437] veth1_vlan: entered promiscuous mode [ 63.098553][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 63.115367][ T4437] veth0_macvtap: entered promiscuous mode [ 63.126311][ T4437] veth1_macvtap: entered promiscuous mode [ 63.144937][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.159441][ T4437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.167108][ T4705] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 63.173648][ T4705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.181239][ T4705] vhci_hcd vhci_hcd.0: Device attached [ 63.186287][ T3506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.201446][ T3506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213372][ T3506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.226537][ T3506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.320174][ T4710] usbip_core: unknown command [ 63.325018][ T4710] vhci_hcd: unknown pdu 2447233587 [ 63.330263][ T4710] usbip_core: unknown command [ 63.342837][ T3506] vhci_hcd: stop threads [ 63.347138][ T3506] vhci_hcd: release socket [ 63.351845][ T3506] vhci_hcd: disconnect device [ 63.368292][ T3400] vhci_hcd: vhci_device speed not set [ 63.395822][ T4724] syz_tun: entered allmulticast mode [ 63.403177][ T4724] netlink: 104 bytes leftover after parsing attributes in process `syz.0.351'. [ 63.412510][ T4724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.351'. [ 63.422524][ T4723] syz_tun: left allmulticast mode [ 63.469900][ T4729] FAULT_INJECTION: forcing a failure. [ 63.469900][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 63.482753][ T4729] CPU: 0 UID: 0 PID: 4729 Comm: syz.0.353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.482784][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 63.482796][ T4729] Call Trace: [ 63.482803][ T4729] [ 63.482811][ T4729] __dump_stack+0x1d/0x30 [ 63.482831][ T4729] dump_stack_lvl+0xe8/0x140 [ 63.482922][ T4729] dump_stack+0x15/0x1b [ 63.483000][ T4729] should_fail_ex+0x265/0x280 [ 63.483025][ T4729] should_failslab+0x8c/0xb0 [ 63.483050][ T4729] kmem_cache_alloc_noprof+0x50/0x310 [ 63.483130][ T4729] ? skb_clone+0x151/0x1f0 [ 63.483168][ T4729] skb_clone+0x151/0x1f0 [ 63.483242][ T4729] __netlink_deliver_tap+0x2c9/0x500 [ 63.483326][ T4729] netlink_unicast+0x66b/0x690 [ 63.483395][ T4729] netlink_sendmsg+0x58b/0x6b0 [ 63.483423][ T4729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.483523][ T4729] __sock_sendmsg+0x145/0x180 [ 63.483557][ T4729] ____sys_sendmsg+0x31e/0x4e0 [ 63.483587][ T4729] ___sys_sendmsg+0x17b/0x1d0 [ 63.483691][ T4729] __x64_sys_sendmsg+0xd4/0x160 [ 63.483723][ T4729] x64_sys_call+0x191e/0x2ff0 [ 63.483751][ T4729] do_syscall_64+0xd2/0x200 [ 63.483803][ T4729] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.483885][ T4729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.483916][ T4729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.483937][ T4729] RIP: 0033:0x7f702789eba9 [ 63.483952][ T4729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.483985][ T4729] RSP: 002b:00007f7026307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.484004][ T4729] RAX: ffffffffffffffda RBX: 00007f7027ae5fa0 RCX: 00007f702789eba9 [ 63.484016][ T4729] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 63.484082][ T4729] RBP: 00007f7026307090 R08: 0000000000000000 R09: 0000000000000000 [ 63.484093][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.484105][ T4729] R13: 00007f7027ae6038 R14: 00007f7027ae5fa0 R15: 00007ffd91c606a8 [ 63.484200][ T4729] [ 63.484225][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 63.763212][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 63.937289][ T4742] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 63.943946][ T4742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.951441][ T4742] vhci_hcd vhci_hcd.0: Device attached [ 63.973740][ T4742] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 63.980399][ T4742] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.988069][ T4742] vhci_hcd vhci_hcd.0: Device attached [ 64.012001][ T4742] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 64.018660][ T4742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.026337][ T4742] vhci_hcd vhci_hcd.0: Device attached [ 64.075061][ T4761] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 64.081710][ T4761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.089350][ T4761] vhci_hcd vhci_hcd.0: Device attached [ 64.123719][ T4742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.132172][ T3381] vhci_hcd: vhci_device speed not set [ 64.158072][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 64.158089][ T29] audit: type=1326 audit(1758245415.297:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.188728][ T3381] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 64.197515][ T4770] FAULT_INJECTION: forcing a failure. [ 64.197515][ T4770] name failslab, interval 1, probability 0, space 0, times 0 [ 64.210273][ T4770] CPU: 1 UID: 0 PID: 4770 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.210352][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.210368][ T4770] Call Trace: [ 64.210376][ T4770] [ 64.210442][ T4770] __dump_stack+0x1d/0x30 [ 64.210467][ T4770] dump_stack_lvl+0xe8/0x140 [ 64.210491][ T4770] dump_stack+0x15/0x1b [ 64.210511][ T4770] should_fail_ex+0x265/0x280 [ 64.210535][ T4770] should_failslab+0x8c/0xb0 [ 64.210561][ T4770] kmem_cache_alloc_noprof+0x50/0x310 [ 64.210668][ T4770] ? getname_flags+0x80/0x3b0 [ 64.210705][ T4770] getname_flags+0x80/0x3b0 [ 64.210772][ T4770] path_setxattrat+0x223/0x310 [ 64.210820][ T4770] __x64_sys_lsetxattr+0x71/0x90 [ 64.210853][ T4770] x64_sys_call+0x2877/0x2ff0 [ 64.210914][ T4770] do_syscall_64+0xd2/0x200 [ 64.210950][ T4770] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.211045][ T4770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.211074][ T4770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.211129][ T4770] RIP: 0033:0x7f702789eba9 [ 64.211148][ T4770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.211169][ T4770] RSP: 002b:00007f70262c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 64.211192][ T4770] RAX: ffffffffffffffda RBX: 00007f7027ae6180 RCX: 00007f702789eba9 [ 64.211285][ T4770] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000240 [ 64.211299][ T4770] RBP: 00007f70262c5090 R08: 0000000000000001 R09: 0000000000000000 [ 64.211310][ T4770] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 64.211322][ T4770] R13: 00007f7027ae6218 R14: 00007f7027ae6180 R15: 00007ffd91c606a8 [ 64.211341][ T4770] [ 64.215685][ T4754] vhci_hcd: connection closed [ 64.225490][ T4762] vhci_hcd: connection closed [ 64.245814][ T4746] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 64.252918][ T4751] vhci_hcd: connection closed [ 64.294636][ T4745] vhci_hcd: connection closed [ 64.318351][ T29] audit: type=1326 audit(1758245415.337:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.322450][ T178] vhci_hcd: stop threads [ 64.340590][ T29] audit: type=1326 audit(1758245415.337:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.348805][ T178] vhci_hcd: release socket [ 64.348822][ T178] vhci_hcd: disconnect device [ 64.349989][ T178] vhci_hcd: stop threads [ 64.356988][ T29] audit: type=1326 audit(1758245415.337:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.364982][ T178] vhci_hcd: release socket [ 64.372972][ T29] audit: type=1326 audit(1758245415.337:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.373009][ T29] audit: type=1326 audit(1758245415.337:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.381049][ T178] vhci_hcd: disconnect device [ 64.389128][ T29] audit: type=1326 audit(1758245415.337:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.508007][ T178] vhci_hcd: stop threads [ 64.509322][ T29] audit: type=1326 audit(1758245415.337:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.509399][ T29] audit: type=1326 audit(1758245415.337:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.509426][ T29] audit: type=1326 audit(1758245415.337:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 64.658272][ T178] vhci_hcd: release socket [ 64.662709][ T178] vhci_hcd: disconnect device [ 64.688657][ T178] vhci_hcd: stop threads [ 64.692985][ T178] vhci_hcd: release socket [ 64.697422][ T178] vhci_hcd: disconnect device [ 65.584647][ T4838] 9pnet_fd: Insufficient options for proto=fd [ 65.728352][ T4847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 65.735031][ T4847] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.742668][ T4847] vhci_hcd vhci_hcd.0: Device attached [ 65.787160][ T4854] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 65.793813][ T4854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.801759][ T4854] vhci_hcd vhci_hcd.0: Device attached [ 65.827470][ T4847] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 65.834265][ T4847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.841972][ T4847] vhci_hcd vhci_hcd.0: Device attached [ 65.880547][ T4847] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 65.887343][ T4847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.895072][ T4847] vhci_hcd vhci_hcd.0: Device attached [ 65.908817][ T4847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.929919][ T4855] vhci_hcd: connection closed [ 65.930277][ T4851] vhci_hcd: connection closed [ 65.935314][ T4857] vhci_hcd: connection closed [ 65.935878][ T4860] FAULT_INJECTION: forcing a failure. [ 65.935878][ T4860] name failslab, interval 1, probability 0, space 0, times 0 [ 65.940083][ T3506] vhci_hcd: stop threads [ 65.940091][ T3506] vhci_hcd: release socket [ 65.940103][ T3506] vhci_hcd: disconnect device [ 65.940141][ T4861] vhci_hcd: connection closed [ 65.944835][ T4860] CPU: 0 UID: 0 PID: 4860 Comm: syz.6.381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.944873][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.944891][ T4860] Call Trace: [ 65.944902][ T4860] [ 65.944912][ T4860] __dump_stack+0x1d/0x30 [ 65.944943][ T4860] dump_stack_lvl+0xe8/0x140 [ 65.944968][ T4860] dump_stack+0x15/0x1b [ 65.945024][ T4860] should_fail_ex+0x265/0x280 [ 65.945059][ T4860] should_failslab+0x8c/0xb0 [ 65.945095][ T4860] kmem_cache_alloc_noprof+0x50/0x310 [ 65.945139][ T4860] ? getname_flags+0x80/0x3b0 [ 65.945181][ T4860] getname_flags+0x80/0x3b0 [ 65.945239][ T4860] path_setxattrat+0x223/0x310 [ 65.945300][ T4860] __x64_sys_lsetxattr+0x71/0x90 [ 65.945337][ T4860] x64_sys_call+0x2877/0x2ff0 [ 65.945367][ T4860] do_syscall_64+0xd2/0x200 [ 65.945436][ T4860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.945471][ T4860] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.945558][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.945587][ T4860] RIP: 0033:0x7fef1e21eba9 [ 65.945602][ T4860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.945624][ T4860] RSP: 002b:00007fef1cc87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 65.945650][ T4860] RAX: ffffffffffffffda RBX: 00007fef1e465fa0 RCX: 00007fef1e21eba9 [ 65.945671][ T4860] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000200000000100 [ 65.945689][ T4860] RBP: 00007fef1cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 65.945725][ T4860] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 65.945742][ T4860] R13: 00007fef1e466038 R14: 00007fef1e465fa0 R15: 00007ffc36df3128 [ 65.945769][ T4860] [ 66.018336][ T3506] vhci_hcd: stop threads [ 66.156790][ T3506] vhci_hcd: release socket [ 66.161261][ T3506] vhci_hcd: disconnect device [ 66.168610][ T3506] vhci_hcd: stop threads [ 66.172884][ T3506] vhci_hcd: release socket [ 66.177317][ T3506] vhci_hcd: disconnect device [ 66.182237][ T3506] vhci_hcd: stop threads [ 66.186507][ T3506] vhci_hcd: release socket [ 66.191025][ T3506] vhci_hcd: disconnect device [ 66.261548][ T1047] usb 1-1: enqueue for inactive port 0 [ 66.267143][ T1047] usb 1-1: enqueue for inactive port 0 [ 66.340253][ T1047] vhci_hcd: vhci_device speed not set [ 66.434853][ T4871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.385'. [ 66.640706][ T4883] FAULT_INJECTION: forcing a failure. [ 66.640706][ T4883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.654106][ T4883] CPU: 0 UID: 0 PID: 4883 Comm: syz.2.391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.654200][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.654213][ T4883] Call Trace: [ 66.654220][ T4883] [ 66.654227][ T4883] __dump_stack+0x1d/0x30 [ 66.654249][ T4883] dump_stack_lvl+0xe8/0x140 [ 66.654269][ T4883] dump_stack+0x15/0x1b [ 66.654285][ T4883] should_fail_ex+0x265/0x280 [ 66.654352][ T4883] should_fail_alloc_page+0xf2/0x100 [ 66.654380][ T4883] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.654420][ T4883] alloc_pages_mpol+0xb3/0x250 [ 66.654645][ T4883] vma_alloc_folio_noprof+0x1aa/0x300 [ 66.654683][ T4883] do_wp_page+0x5db/0x24e0 [ 66.654706][ T4883] ? consume_skb+0x49/0x150 [ 66.654730][ T4883] ? nlmon_xmit+0x4f/0x60 [ 66.654830][ T4883] ? __rcu_read_lock+0x37/0x50 [ 66.654854][ T4883] handle_mm_fault+0x77d/0x2c20 [ 66.654921][ T4883] ? __rcu_read_unlock+0x4f/0x70 [ 66.654969][ T4883] do_user_addr_fault+0x3fe/0x1090 [ 66.655010][ T4883] exc_page_fault+0x62/0xa0 [ 66.655039][ T4883] asm_exc_page_fault+0x26/0x30 [ 66.655115][ T4883] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 66.655142][ T4883] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 66.655160][ T4883] RSP: 0018:ffffc9001481b9e8 EFLAGS: 00050202 [ 66.655176][ T4883] RAX: ffff8881218d0aa0 RBX: ffffc9001481be90 RCX: 0000000000000e5c [ 66.655190][ T4883] RDX: 0000000000000000 RSI: ffff888118dc1000 RDI: 0000200000004700 [ 66.655203][ T4883] RBP: 0000000000000000 R08: 00000000000008ff R09: 0000000000000000 [ 66.655215][ T4883] R10: 0001888118dc1000 R11: 0001888118dc1e5b R12: ffffc9001481be78 [ 66.655228][ T4883] R13: 0000000000000e5c R14: 0000000000000e5c R15: 0000000000000e5c [ 66.655263][ T4883] _copy_to_iter+0x2df/0xe70 [ 66.655299][ T4883] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 66.655325][ T4883] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 66.655375][ T4883] __skb_datagram_iter+0xc6/0x690 [ 66.655403][ T4883] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 66.655433][ T4883] skb_copy_datagram_iter+0x3d/0x110 [ 66.655488][ T4883] netlink_recvmsg+0x1a8/0x550 [ 66.655639][ T4883] ? __pfx_netlink_recvmsg+0x10/0x10 [ 66.655711][ T4883] sock_recvmsg+0x139/0x170 [ 66.655803][ T4883] ____sys_recvmsg+0xf5/0x280 [ 66.655839][ T4883] ___sys_recvmsg+0x11f/0x370 [ 66.655878][ T4883] __x64_sys_recvmsg+0xd1/0x160 [ 66.655911][ T4883] x64_sys_call+0x2b42/0x2ff0 [ 66.655963][ T4883] do_syscall_64+0xd2/0x200 [ 66.655996][ T4883] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.656021][ T4883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.656071][ T4883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.656093][ T4883] RIP: 0033:0x7fd6e5c6eba9 [ 66.656108][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.656126][ T4883] RSP: 002b:00007fd6e46cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 66.656144][ T4883] RAX: ffffffffffffffda RBX: 00007fd6e5eb5fa0 RCX: 00007fd6e5c6eba9 [ 66.656214][ T4883] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.656227][ T4883] RBP: 00007fd6e46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.656238][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.656251][ T4883] R13: 00007fd6e5eb6038 R14: 00007fd6e5eb5fa0 R15: 00007ffe41990bd8 [ 66.656273][ T4883] [ 67.061563][ T4888] hub 9-0:1.0: USB hub found [ 67.066313][ T4888] hub 9-0:1.0: 8 ports detected [ 67.213825][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 67.251616][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 67.792551][ T4918] netlink: 24 bytes leftover after parsing attributes in process `syz.6.403'. [ 68.065492][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.409'. [ 68.189080][ T4938] bridge_slave_1: left allmulticast mode [ 68.194870][ T4938] bridge_slave_1: left promiscuous mode [ 68.200561][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.229542][ T4938] bridge_slave_0: left allmulticast mode [ 68.235315][ T4938] bridge_slave_0: left promiscuous mode [ 68.241109][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.425551][ T4947] pim6reg: entered allmulticast mode [ 68.445437][ T4947] pim6reg: left allmulticast mode [ 68.479607][ T4943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 68.499819][ T4954] tipc: Started in network mode [ 68.504766][ T4954] tipc: Node identity ac141413, cluster identity 4711 [ 68.512561][ T4954] tipc: New replicast peer: 10.1.1.2 [ 68.517945][ T4954] tipc: Enabled bearer , priority 10 [ 68.761705][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 68.791895][ T4977] syz.2.421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.910326][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 69.166684][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 69.196709][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 69.196727][ T29] audit: type=1326 audit(1758245420.337:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 69.226713][ T29] audit: type=1326 audit(1758245420.337:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 69.250248][ T29] audit: type=1326 audit(1758245420.337:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 69.273576][ T29] audit: type=1326 audit(1758245420.337:1552): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 69.297280][ T29] audit: type=1326 audit(1758245420.337:1553): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 69.328413][ T3381] usb 5-1: enqueue for inactive port 0 [ 69.333994][ T3381] usb 5-1: enqueue for inactive port 0 [ 69.350298][ T29] audit: type=1400 audit(1758245420.497:1554): avc: denied { mount } for pid=5008 comm="syz.6.431" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.372939][ T29] audit: type=1400 audit(1758245420.517:1555): avc: denied { append } for pid=5008 comm="syz.6.431" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.393916][ T29] audit: type=1400 audit(1758245420.517:1556): avc: denied { open } for pid=5008 comm="syz.6.431" path="/17/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.418345][ T3381] vhci_hcd: vhci_device speed not set [ 69.440431][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 69.449392][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 69.454531][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 69.509105][ T1047] tipc: Node number set to 2886997011 [ 69.530465][ T5019] vhci_hcd: invalid port number 23 [ 69.689616][ T29] audit: type=1400 audit(1758245420.827:1557): avc: denied { create } for pid=5030 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.691439][ T5031] gtp0: entered promiscuous mode [ 69.709416][ T29] audit: type=1400 audit(1758245420.837:1558): avc: denied { setopt } for pid=5030 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.303004][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 70.460490][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 70.509734][ C0] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.519264][ T178] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 70.692094][ T5083] netlink: 'syz.2.458': attribute type 7 has an invalid length. [ 70.699855][ T5083] netlink: 'syz.2.458': attribute type 8 has an invalid length. [ 71.343295][ T5140] net_ratelimit: 43 callbacks suppressed [ 71.343394][ T5140] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.584904][ T5083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.636598][ T5083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.664973][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.477'. [ 71.711815][ T5083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.761834][ T5083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.796275][ T5182] vhci_hcd: invalid port number 23 [ 71.836071][ T2913] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.848155][ T2913] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.858982][ T2913] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.870145][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.037109][ T5194] FAULT_INJECTION: forcing a failure. [ 72.037109][ T5194] name failslab, interval 1, probability 0, space 0, times 0 [ 72.050048][ T5194] CPU: 0 UID: 0 PID: 5194 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.050117][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.050174][ T5194] Call Trace: [ 72.050185][ T5194] [ 72.050192][ T5194] __dump_stack+0x1d/0x30 [ 72.050221][ T5194] dump_stack_lvl+0xe8/0x140 [ 72.050245][ T5194] dump_stack+0x15/0x1b [ 72.050263][ T5194] should_fail_ex+0x265/0x280 [ 72.050291][ T5194] should_failslab+0x8c/0xb0 [ 72.050372][ T5194] kmem_cache_alloc_noprof+0x50/0x310 [ 72.050397][ T5194] ? security_file_alloc+0x32/0x100 [ 72.050478][ T5194] security_file_alloc+0x32/0x100 [ 72.050506][ T5194] init_file+0x5c/0x1d0 [ 72.050532][ T5194] alloc_empty_file+0x8b/0x200 [ 72.050589][ T5194] path_openat+0x68/0x2170 [ 72.050606][ T5194] ? mntput+0x4b/0x80 [ 72.050631][ T5194] ? terminate_walk+0x27f/0x2a0 [ 72.050743][ T5194] ? path_openat+0x1bf8/0x2170 [ 72.050766][ T5194] ? _parse_integer_limit+0x170/0x190 [ 72.050791][ T5194] do_filp_open+0x109/0x230 [ 72.050819][ T5194] do_open_execat+0xd8/0x260 [ 72.050914][ T5194] alloc_bprm+0x25/0x350 [ 72.050932][ T5194] do_execveat_common+0x12e/0x750 [ 72.050956][ T5194] __x64_sys_execve+0x5c/0x70 [ 72.050975][ T5194] x64_sys_call+0x2716/0x2ff0 [ 72.051004][ T5194] do_syscall_64+0xd2/0x200 [ 72.051044][ T5194] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.051078][ T5194] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.051160][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.051178][ T5194] RIP: 0033:0x7fbe5c13eba9 [ 72.051192][ T5194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.051252][ T5194] RSP: 002b:00007fbe5ab9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 72.051269][ T5194] RAX: ffffffffffffffda RBX: 00007fbe5c385fa0 RCX: 00007fbe5c13eba9 [ 72.051285][ T5194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 72.051300][ T5194] RBP: 00007fbe5ab9f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.051316][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.051330][ T5194] R13: 00007fbe5c386038 R14: 00007fbe5c385fa0 R15: 00007fff243b8da8 [ 72.051401][ T5194] [ 72.310541][ T5199] vhci_hcd: invalid port number 23 [ 72.342799][ T5200] veth1_macvtap: left promiscuous mode [ 72.348600][ T5200] macsec0: entered promiscuous mode [ 72.353838][ T5200] macsec0: entered allmulticast mode [ 72.402311][ T5207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 72.408952][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.416412][ T5207] vhci_hcd vhci_hcd.0: Device attached [ 72.444176][ T5214] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.453158][ T5207] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 72.459810][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.467680][ T5207] vhci_hcd vhci_hcd.0: Device attached [ 72.474072][ T5207] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 72.480710][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.488426][ T5207] vhci_hcd vhci_hcd.0: Device attached [ 72.494647][ T5207] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 72.501279][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.508963][ T5207] vhci_hcd vhci_hcd.0: Device attached [ 72.515391][ T5207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.529220][ T5219] vhci_hcd: connection closed [ 72.529652][ T2913] vhci_hcd: stop threads [ 72.529676][ T5215] vhci_hcd: connection closed [ 72.534390][ T2913] vhci_hcd: release socket [ 72.547776][ T2913] vhci_hcd: disconnect device [ 72.552638][ T5212] vhci_hcd: connection closed [ 72.554351][ T5217] vhci_hcd: connection closed [ 72.585652][ T2913] vhci_hcd: stop threads [ 72.594665][ T2913] vhci_hcd: release socket [ 72.599274][ T2913] vhci_hcd: disconnect device [ 72.608410][ T3400] vhci_hcd: vhci_device speed not set [ 72.623743][ T2913] vhci_hcd: stop threads [ 72.628193][ T2913] vhci_hcd: release socket [ 72.632748][ T2913] vhci_hcd: disconnect device [ 72.664316][ T2913] vhci_hcd: stop threads [ 72.668802][ T2913] vhci_hcd: release socket [ 72.673238][ T2913] vhci_hcd: disconnect device [ 72.679050][ T3400] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 72.686518][ T3400] usb 5-1: enqueue for inactive port 0 [ 72.698612][ T3400] usb 5-1: enqueue for inactive port 0 [ 72.708442][ T3400] usb 5-1: enqueue for inactive port 0 [ 72.788727][ T3400] vhci_hcd: vhci_device speed not set [ 73.082257][ T5256] team0 (unregistering): Port device team_slave_0 removed [ 73.091464][ T5256] team0 (unregistering): Port device team_slave_1 removed [ 73.411374][ T5275] vhci_hcd: invalid port number 23 [ 73.619988][ C1] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.631103][ T12] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 73.653085][ T5277] __nla_validate_parse: 1 callbacks suppressed [ 73.653103][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.510'. [ 74.064395][ T5317] vhci_hcd: invalid port number 23 [ 74.121873][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 74.262400][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.523'. [ 74.461597][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 74.461635][ T29] audit: type=1400 audit(1758245425.607:2030): avc: denied { create } for pid=5343 comm="syz.6.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 74.472588][ T5344] FAULT_INJECTION: forcing a failure. [ 74.472588][ T5344] name failslab, interval 1, probability 0, space 0, times 0 [ 74.500929][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.6.527 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.500964][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.500980][ T5344] Call Trace: [ 74.500988][ T5344] [ 74.501000][ T5344] __dump_stack+0x1d/0x30 [ 74.501028][ T5344] dump_stack_lvl+0xe8/0x140 [ 74.501054][ T5344] dump_stack+0x15/0x1b [ 74.501076][ T5344] should_fail_ex+0x265/0x280 [ 74.501109][ T5344] should_failslab+0x8c/0xb0 [ 74.501212][ T5344] kmem_cache_alloc_noprof+0x50/0x310 [ 74.501251][ T5344] ? getname_flags+0x80/0x3b0 [ 74.501288][ T5344] getname_flags+0x80/0x3b0 [ 74.501391][ T5344] user_path_at+0x28/0x130 [ 74.501473][ T5344] do_fchmodat+0x9c/0x180 [ 74.501502][ T5344] __x64_sys_chmod+0x38/0x50 [ 74.501549][ T5344] x64_sys_call+0x291c/0x2ff0 [ 74.501573][ T5344] do_syscall_64+0xd2/0x200 [ 74.501687][ T5344] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.501720][ T5344] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.501761][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.501790][ T5344] RIP: 0033:0x7fef1e21eba9 [ 74.501809][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.501849][ T5344] RSP: 002b:00007fef1cc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 74.501875][ T5344] RAX: ffffffffffffffda RBX: 00007fef1e465fa0 RCX: 00007fef1e21eba9 [ 74.501891][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 74.501980][ T5344] RBP: 00007fef1cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 74.501994][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.502006][ T5344] R13: 00007fef1e466038 R14: 00007fef1e465fa0 R15: 00007ffc36df3128 [ 74.502032][ T5344] [ 74.736764][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.529'. [ 74.762790][ T5349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.803929][ T5351] bond1: (slave batadv1): Opening slave failed [ 74.939575][ T29] audit: type=1326 audit(1758245426.087:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 74.962976][ T29] audit: type=1326 audit(1758245426.087:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 75.076741][ T29] audit: type=1326 audit(1758245426.127:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 75.100058][ T29] audit: type=1326 audit(1758245426.127:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 75.123510][ T29] audit: type=1326 audit(1758245426.127:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.6.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 75.177621][ T5380] vhci_hcd: invalid port number 23 [ 75.197987][ T5384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.260891][ T29] audit: type=1400 audit(1758245426.407:2036): avc: denied { map } for pid=5375 comm="syz.0.533" path="socket:[11045]" dev="sockfs" ino=11045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.284299][ T29] audit: type=1400 audit(1758245426.407:2037): avc: denied { read } for pid=5375 comm="syz.0.533" path="socket:[11045]" dev="sockfs" ino=11045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.317269][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.536'. [ 75.327618][ T29] audit: type=1400 audit(1758245426.407:2038): avc: denied { map } for pid=5375 comm="syz.0.533" path="socket:[11046]" dev="sockfs" ino=11046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.350683][ T29] audit: type=1400 audit(1758245426.407:2039): avc: denied { read } for pid=5375 comm="syz.0.533" path="socket:[11046]" dev="sockfs" ino=11046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.396029][ T5391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.451239][ T5391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.528001][ T5391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.561863][ T5391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.626932][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.642001][ T5416] vhci_hcd: invalid port number 23 [ 75.646791][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.665208][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677272][ T5418] tipc: Enabling of bearer rejected, failed to enable media [ 75.686436][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992056][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 76.126977][ T5434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 76.387323][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 76.735161][ T5465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.819383][ T5465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.919251][ T5465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.968090][ T5479] FAULT_INJECTION: forcing a failure. [ 76.968090][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.981391][ T5479] CPU: 0 UID: 0 PID: 5479 Comm: syz.1.562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.981424][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.981440][ T5479] Call Trace: [ 76.981447][ T5479] [ 76.981457][ T5479] __dump_stack+0x1d/0x30 [ 76.981484][ T5479] dump_stack_lvl+0xe8/0x140 [ 76.981587][ T5479] dump_stack+0x15/0x1b [ 76.981608][ T5479] should_fail_ex+0x265/0x280 [ 76.981652][ T5479] should_fail+0xb/0x20 [ 76.981678][ T5479] should_fail_usercopy+0x1a/0x20 [ 76.981710][ T5479] _copy_to_user+0x20/0xa0 [ 76.981761][ T5479] simple_read_from_buffer+0xb5/0x130 [ 76.981789][ T5479] proc_fail_nth_read+0x10e/0x150 [ 76.981879][ T5479] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.981930][ T5479] vfs_read+0x1a5/0x770 [ 76.981951][ T5479] ? __rcu_read_unlock+0x4f/0x70 [ 76.981976][ T5479] ? __fget_files+0x184/0x1c0 [ 76.982012][ T5479] ksys_read+0xda/0x1a0 [ 76.982094][ T5479] __x64_sys_read+0x40/0x50 [ 76.982116][ T5479] x64_sys_call+0x27bc/0x2ff0 [ 76.982141][ T5479] do_syscall_64+0xd2/0x200 [ 76.982182][ T5479] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.982275][ T5479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.982331][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.982373][ T5479] RIP: 0033:0x7fbe5c13d5bc [ 76.982394][ T5479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.982416][ T5479] RSP: 002b:00007fbe5ab9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.982439][ T5479] RAX: ffffffffffffffda RBX: 00007fbe5c385fa0 RCX: 00007fbe5c13d5bc [ 76.982454][ T5479] RDX: 000000000000000f RSI: 00007fbe5ab9f0a0 RDI: 0000000000000005 [ 76.982467][ T5479] RBP: 00007fbe5ab9f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.982482][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.982509][ T5479] R13: 00007fbe5c386038 R14: 00007fbe5c385fa0 R15: 00007fff243b8da8 [ 76.982540][ T5479] [ 77.210113][ T5465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.278002][ T178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.294348][ T178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306269][ T178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330925][ T178] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.341078][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 77.572944][ T3503] hid-generic 0000:FFFFFFFF:0008.0002: unknown main item tag 0x0 [ 77.580862][ T3503] hid-generic 0000:FFFFFFFF:0008.0002: unknown main item tag 0x0 [ 77.589373][ T3503] hid-generic 0000:FFFFFFFF:0008.0002: hidraw0: HID v0.00 Device [] on [ 77.623029][ T5506] fido_id[5506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.210287][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 78.397951][ T5522] geneve2: entered promiscuous mode [ 78.403261][ T5522] geneve2: entered allmulticast mode [ 78.564518][ T3400] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 78.572423][ T3400] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 78.582550][ T3400] hid-generic 0000:FFFFFFFF:0008.0003: hidraw0: HID v0.00 Device [] on [ 78.609080][ T5534] fido_id[5534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.711182][ T5544] __nla_validate_parse: 2 callbacks suppressed [ 78.711198][ T5544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.591'. [ 78.884510][ T3400] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 78.892534][ T3400] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 78.911173][ T3400] hid-generic 0000:FFFFFFFF:0008.0004: hidraw0: HID v0.00 Device [] on [ 78.958868][ T5560] fido_id[5560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.100091][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 79.320181][ T5584] FAULT_INJECTION: forcing a failure. [ 79.320181][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 79.333008][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.1.606 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.333056][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.333071][ T5584] Call Trace: [ 79.333079][ T5584] [ 79.333089][ T5584] __dump_stack+0x1d/0x30 [ 79.333173][ T5584] dump_stack_lvl+0xe8/0x140 [ 79.333198][ T5584] dump_stack+0x15/0x1b [ 79.333219][ T5584] should_fail_ex+0x265/0x280 [ 79.333249][ T5584] should_failslab+0x8c/0xb0 [ 79.333278][ T5584] kmem_cache_alloc_noprof+0x50/0x310 [ 79.333407][ T5584] ? audit_log_start+0x365/0x6c0 [ 79.333450][ T5584] audit_log_start+0x365/0x6c0 [ 79.333495][ T5584] audit_seccomp+0x48/0x100 [ 79.333527][ T5584] ? __seccomp_filter+0x68c/0x10d0 [ 79.333568][ T5584] __seccomp_filter+0x69d/0x10d0 [ 79.333608][ T5584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.333644][ T5584] ? vfs_write+0x7e8/0x960 [ 79.333691][ T5584] __secure_computing+0x82/0x150 [ 79.333771][ T5584] syscall_trace_enter+0xcf/0x1e0 [ 79.333798][ T5584] do_syscall_64+0xac/0x200 [ 79.333834][ T5584] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.333864][ T5584] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.333958][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.334066][ T5584] RIP: 0033:0x7fbe5c13eba9 [ 79.334100][ T5584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.334151][ T5584] RSP: 002b:00007fbe5ab9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 79.334181][ T5584] RAX: ffffffffffffffda RBX: 00007fbe5c385fa0 RCX: 00007fbe5c13eba9 [ 79.334196][ T5584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.334211][ T5584] RBP: 00007fbe5ab9f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.334224][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.334235][ T5584] R13: 00007fbe5c386038 R14: 00007fbe5c385fa0 R15: 00007fff243b8da8 [ 79.334255][ T5584] [ 79.535722][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 79.535735][ T29] audit: type=1326 audit(1758245430.677:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbe5c13d5bc code=0x7ffc0000 [ 79.565256][ T29] audit: type=1326 audit(1758245430.677:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe5c13d65f code=0x7ffc0000 [ 79.588551][ T29] audit: type=1326 audit(1758245430.677:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe5c13d80a code=0x7ffc0000 [ 79.611810][ T29] audit: type=1326 audit(1758245430.677:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c13eba9 code=0x7ffc0000 [ 79.635369][ T29] audit: type=1326 audit(1758245430.677:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5c13eba9 code=0x7ffc0000 [ 79.755544][ T29] audit: type=1400 audit(1758245430.897:2123): avc: denied { create } for pid=5608 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 79.794483][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 79.803428][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 79.833246][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 79.842355][ T5610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 79.984867][ T5618] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 79.991514][ T5618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.999021][ T5618] vhci_hcd vhci_hcd.0: Device attached [ 80.008800][ T5618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.019126][ T5618] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 80.025800][ T5618] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.033462][ T5618] vhci_hcd vhci_hcd.0: Device attached [ 80.059105][ T5618] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 80.065742][ T5618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.073405][ T5618] vhci_hcd vhci_hcd.0: Device attached [ 80.081057][ T5618] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 80.087818][ T5618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.095446][ T5618] vhci_hcd vhci_hcd.0: Device attached [ 80.103391][ T5618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.118771][ T5627] vhci_hcd: connection closed [ 80.118960][ T5625] vhci_hcd: connection closed [ 80.123697][ T12] vhci_hcd: stop threads [ 80.132734][ T12] vhci_hcd: release socket [ 80.137164][ T12] vhci_hcd: disconnect device [ 80.141952][ T5621] vhci_hcd: connection closed [ 80.142388][ T5623] vhci_hcd: connection closed [ 80.148777][ T12] vhci_hcd: stop threads [ 80.157705][ T12] vhci_hcd: release socket [ 80.157739][ T12] vhci_hcd: disconnect device [ 80.158336][ T12] vhci_hcd: stop threads [ 80.171230][ T12] vhci_hcd: release socket [ 80.175660][ T12] vhci_hcd: disconnect device [ 80.181226][ T12] vhci_hcd: stop threads [ 80.185495][ T12] vhci_hcd: release socket [ 80.189990][ T12] vhci_hcd: disconnect device [ 80.201641][ T36] vhci_hcd: vhci_device speed not set [ 80.212261][ T29] audit: type=1326 audit(1758245431.357:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 80.279409][ T29] audit: type=1326 audit(1758245431.377:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 80.302805][ T29] audit: type=1326 audit(1758245431.377:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 80.326400][ T29] audit: type=1326 audit(1758245431.377:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 80.548492][ T5647] vhci_hcd: invalid port number 23 [ 80.620377][ T5651] 9pnet_fd: Insufficient options for proto=fd [ 81.553216][ T5681] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 81.559779][ T5681] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.567325][ T5681] vhci_hcd vhci_hcd.0: Device attached [ 81.610956][ T5694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.655822][ T5681] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 81.662479][ T5681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.670205][ T5681] vhci_hcd vhci_hcd.0: Device attached [ 81.697576][ T5681] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 81.704231][ T5681] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.712126][ T5681] vhci_hcd vhci_hcd.0: Device attached [ 81.748318][ T3393] vhci_hcd: vhci_device speed not set [ 81.761545][ T5694] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 81.768254][ T5694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.775968][ T5694] vhci_hcd vhci_hcd.0: Device attached [ 81.808302][ T3393] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 81.817006][ T5681] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.865347][ T5697] vhci_hcd: connection closed [ 81.865685][ T178] vhci_hcd: stop threads [ 81.868330][ T5688] vhci_hcd: connection reset by peer [ 81.870522][ T178] vhci_hcd: release socket [ 81.875647][ T5699] vhci_hcd: connection closed [ 81.880024][ T178] vhci_hcd: disconnect device [ 81.893938][ T5704] vhci_hcd: connection closed [ 81.917721][ T178] vhci_hcd: stop threads [ 81.926775][ T178] vhci_hcd: release socket [ 81.931373][ T178] vhci_hcd: disconnect device [ 81.946782][ T178] vhci_hcd: stop threads [ 81.951247][ T178] vhci_hcd: release socket [ 81.955678][ T178] vhci_hcd: disconnect device [ 81.973949][ T178] vhci_hcd: stop threads [ 81.978293][ T178] vhci_hcd: release socket [ 81.982791][ T178] vhci_hcd: disconnect device [ 82.397034][ T5722] geneve2: entered promiscuous mode [ 82.402514][ T5722] geneve2: entered allmulticast mode [ 82.528544][ T5733] netlink: 96 bytes leftover after parsing attributes in process `syz.6.652'. [ 82.750540][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 83.030931][ T5761] bridge0: entered promiscuous mode [ 83.036294][ T5761] macvtap1: entered allmulticast mode [ 83.041729][ T5761] bridge0: entered allmulticast mode [ 83.064150][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 83.080386][ T5761] bridge0: port 3(macvtap1) entered blocking state [ 83.087003][ T5761] bridge0: port 3(macvtap1) entered disabled state [ 83.115717][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.661'. [ 83.129537][ T5761] bridge0: left allmulticast mode [ 83.134656][ T5761] bridge0: left promiscuous mode [ 83.533687][ T5801] vhci_hcd: invalid port number 23 [ 83.594245][ T36] hid-generic 0000:FFFFFFFF:0008.0005: unknown main item tag 0x0 [ 83.602081][ T36] hid-generic 0000:FFFFFFFF:0008.0005: unknown main item tag 0x0 [ 83.629932][ T36] hid-generic 0000:FFFFFFFF:0008.0005: hidraw0: HID v0.00 Device [] on [ 83.817278][ T5819] __nla_validate_parse: 4 callbacks suppressed [ 83.817294][ T5819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 83.947295][ T3400] hid-generic 0000:FFFFFFFF:0008.0006: unknown main item tag 0x0 [ 83.955240][ T3400] hid-generic 0000:FFFFFFFF:0008.0006: unknown main item tag 0x0 [ 83.972553][ T3400] hid-generic 0000:FFFFFFFF:0008.0006: hidraw0: HID v0.00 Device [] on [ 84.000235][ T5833] fido_id[5833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.058884][ T5838] geneve2: entered promiscuous mode [ 84.064193][ T5838] geneve2: entered allmulticast mode [ 84.077265][ T5836] geneve2: entered promiscuous mode [ 84.082671][ T5836] geneve2: entered allmulticast mode [ 84.260079][ T5852] 9pnet_fd: Insufficient options for proto=fd [ 84.662894][ T5863] netlink: 56 bytes leftover after parsing attributes in process `syz.2.705'. [ 84.727555][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 84.727575][ T29] audit: type=1326 audit(1758245435.867:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.772584][ T5873] geneve2: entered promiscuous mode [ 84.777862][ T5873] geneve2: entered allmulticast mode [ 84.779792][ T29] audit: type=1326 audit(1758245435.867:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.806326][ T29] audit: type=1326 audit(1758245435.867:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5868 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.837402][ T5877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5877 comm=syz.2.712 [ 84.838835][ T5875] 9pnet_fd: Insufficient options for proto=fd [ 84.883131][ T29] audit: type=1326 audit(1758245436.007:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.906740][ T29] audit: type=1326 audit(1758245436.007:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.930497][ T29] audit: type=1326 audit(1758245436.017:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.953914][ T29] audit: type=1326 audit(1758245436.017:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 84.965319][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.6.714'. [ 84.977457][ T29] audit: type=1326 audit(1758245436.017:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 85.009639][ T29] audit: type=1326 audit(1758245436.017:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 85.033400][ T29] audit: type=1326 audit(1758245436.017:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 85.098441][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 85.142172][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 85.239220][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 85.327941][ T5899] 9pnet_fd: Insufficient options for proto=fd [ 86.017627][ T5928] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 86.150887][ T5934] hub 9-0:1.0: USB hub found [ 86.155746][ T5934] hub 9-0:1.0: 8 ports detected [ 86.195022][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 86.281938][ T5950] hub 9-0:1.0: USB hub found [ 86.286869][ T5950] hub 9-0:1.0: 8 ports detected [ 86.386110][ T5954] geneve2: entered promiscuous mode [ 86.391391][ T5954] geneve2: entered allmulticast mode [ 86.775721][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 86.903743][ T3393] usb 7-1: enqueue for inactive port 0 [ 86.916613][ T3393] usb 7-1: enqueue for inactive port 0 [ 87.018329][ T3393] vhci_hcd: vhci_device speed not set [ 87.054796][ T5991] netlink: 'syz.0.752': attribute type 7 has an invalid length. [ 87.062548][ T5991] netlink: 'syz.0.752': attribute type 8 has an invalid length. [ 87.398776][ C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.411502][ T51] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 87.768051][ T6012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 87.774633][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.782262][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 87.789685][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.757'. [ 87.801548][ T6012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.810342][ T6012] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 87.816963][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.824595][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 87.831688][ T6012] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 87.838315][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.845998][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 87.869295][ T6012] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 87.875979][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.883732][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 87.890967][ T6012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.903900][ T6020] vhci_hcd: connection closed [ 87.903917][ T6022] vhci_hcd: connection closed [ 87.904192][ T37] vhci_hcd: stop threads [ 87.917649][ T37] vhci_hcd: release socket [ 87.922098][ T37] vhci_hcd: disconnect device [ 87.937664][ T6018] vhci_hcd: connection closed [ 87.937861][ T6015] vhci_hcd: connection closed [ 87.937893][ T37] vhci_hcd: stop threads [ 87.946863][ T5991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.947328][ T37] vhci_hcd: release socket [ 87.947339][ T37] vhci_hcd: disconnect device [ 87.950323][ T37] vhci_hcd: stop threads [ 87.974783][ T37] vhci_hcd: release socket [ 87.979424][ T37] vhci_hcd: disconnect device [ 87.986414][ T37] vhci_hcd: stop threads [ 87.990777][ T37] vhci_hcd: release socket [ 87.995251][ T37] vhci_hcd: disconnect device [ 88.001400][ T36] vhci_hcd: vhci_device speed not set [ 88.030200][ T5991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.082547][ T6031] geneve2: entered promiscuous mode [ 88.087934][ T6031] geneve2: entered allmulticast mode [ 88.101166][ T5991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.210271][ T5991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.269792][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298463][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.306675][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.335379][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.495414][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.770'. [ 88.542073][ T6064] netlink: 'syz.3.777': attribute type 6 has an invalid length. [ 88.681103][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.681287][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.692598][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.692769][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.737011][ T6078] netlink: 666 bytes leftover after parsing attributes in process `syz.6.783'. [ 88.750441][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'. [ 88.751375][ T6080] ALSA: seq fatal error: cannot create timer (-22) [ 88.874008][ T6085] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 88.880646][ T6085] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.888138][ T6085] vhci_hcd vhci_hcd.0: Device attached [ 88.895605][ T6085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 88.915360][ T6085] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 88.922023][ T6085] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.929740][ T6085] vhci_hcd vhci_hcd.0: Device attached [ 88.957005][ T6093] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 88.963696][ T6093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.971528][ T6093] vhci_hcd vhci_hcd.0: Device attached [ 89.024368][ T6085] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 89.031075][ T6085] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.038728][ T6085] vhci_hcd vhci_hcd.0: Device attached [ 89.042276][ T6099] FAULT_INJECTION: forcing a failure. [ 89.042276][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 89.054848][ T6093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.056917][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz.0.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.057012][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.057030][ T6099] Call Trace: [ 89.057095][ T6099] [ 89.057104][ T6099] __dump_stack+0x1d/0x30 [ 89.057133][ T6099] dump_stack_lvl+0xe8/0x140 [ 89.057161][ T6099] dump_stack+0x15/0x1b [ 89.057183][ T6099] should_fail_ex+0x265/0x280 [ 89.057257][ T6099] should_failslab+0x8c/0xb0 [ 89.057293][ T6099] kmem_cache_alloc_node_noprof+0x57/0x320 [ 89.057421][ T6099] ? __alloc_skb+0x101/0x320 [ 89.057526][ T6099] ? selinux_capable+0x31/0x40 [ 89.057569][ T6099] __alloc_skb+0x101/0x320 [ 89.057602][ T6099] netlink_alloc_large_skb+0xba/0xf0 [ 89.057634][ T6099] netlink_sendmsg+0x3cf/0x6b0 [ 89.057705][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.057743][ T6099] __sock_sendmsg+0x145/0x180 [ 89.057834][ T6099] ____sys_sendmsg+0x31e/0x4e0 [ 89.057876][ T6099] ___sys_sendmsg+0x17b/0x1d0 [ 89.057933][ T6099] __x64_sys_sendmsg+0xd4/0x160 [ 89.057978][ T6099] x64_sys_call+0x191e/0x2ff0 [ 89.058082][ T6099] do_syscall_64+0xd2/0x200 [ 89.058127][ T6099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.058161][ T6099] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.058211][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.058245][ T6099] RIP: 0033:0x7f702789eba9 [ 89.058268][ T6099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.058293][ T6099] RSP: 002b:00007f7026307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.058319][ T6099] RAX: ffffffffffffffda RBX: 00007f7027ae5fa0 RCX: 00007f702789eba9 [ 89.058357][ T6099] RDX: 0000000000008804 RSI: 0000200000000440 RDI: 0000000000000006 [ 89.058374][ T6099] RBP: 00007f7026307090 R08: 0000000000000000 R09: 0000000000000000 [ 89.058442][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.058454][ T6099] R13: 00007f7027ae6038 R14: 00007f7027ae5fa0 R15: 00007ffd91c606a8 [ 89.058479][ T6099] [ 89.083652][ T6101] 9pnet_fd: Insufficient options for proto=fd [ 89.085543][ T3400] vhci_hcd: vhci_device speed not set [ 89.281632][ T6089] vhci_hcd: connection closed [ 89.282152][ T6096] vhci_hcd: connection closed [ 89.284974][ T6091] vhci_hcd: connection closed [ 89.293053][ T6094] vhci_hcd: connection closed [ 89.297812][ T37] vhci_hcd: stop threads [ 89.306928][ T37] vhci_hcd: release socket [ 89.311418][ T37] vhci_hcd: disconnect device [ 89.319680][ T37] vhci_hcd: stop threads [ 89.323960][ T37] vhci_hcd: release socket [ 89.328454][ T37] vhci_hcd: disconnect device [ 89.341484][ T37] vhci_hcd: stop threads [ 89.345776][ T37] vhci_hcd: release socket [ 89.350264][ T37] vhci_hcd: disconnect device [ 89.385456][ T37] vhci_hcd: stop threads [ 89.389900][ T37] vhci_hcd: release socket [ 89.394345][ T37] vhci_hcd: disconnect device [ 89.409479][ T3400] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 89.422914][ T3400] usb 7-1: enqueue for inactive port 0 [ 89.432753][ T3400] usb 7-1: enqueue for inactive port 0 [ 89.438422][ T3400] usb 7-1: enqueue for inactive port 0 [ 89.460498][ T6113] netlink: 'syz.2.793': attribute type 7 has an invalid length. [ 89.468206][ T6113] netlink: 'syz.2.793': attribute type 8 has an invalid length. [ 89.540620][ T6108] __nla_validate_parse: 1 callbacks suppressed [ 89.540636][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 89.577616][ T3400] vhci_hcd: vhci_device speed not set [ 89.733453][ T6119] netlink: 'syz.1.794': attribute type 6 has an invalid length. [ 89.869218][ T6125] vhci_hcd: invalid port number 23 [ 89.941315][ T6132] netlink: 'syz.3.801': attribute type 6 has an invalid length. [ 90.082727][ T6141] vhci_hcd: invalid port number 23 [ 90.295403][ T6155] netlink: 'syz.1.810': attribute type 7 has an invalid length. [ 90.303187][ T6155] netlink: 'syz.1.810': attribute type 8 has an invalid length. [ 90.330523][ T6149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 90.337074][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.344614][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 90.351882][ T6149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.369719][ T6149] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 90.370495][ T6113] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.376433][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.393790][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 90.409410][ T6149] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 90.416063][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.423734][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 90.439409][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 90.439423][ T29] audit: type=1326 audit(1758245441.587:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.468994][ T29] audit: type=1326 audit(1758245441.587:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.499925][ T6162] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 90.506630][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.514265][ T6162] vhci_hcd vhci_hcd.0: Device attached [ 90.520905][ T6113] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.550144][ T6149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.555375][ T29] audit: type=1326 audit(1758245441.587:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.581807][ T29] audit: type=1326 audit(1758245441.587:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.591762][ T6156] vhci_hcd: connection closed [ 90.605265][ T29] audit: type=1326 audit(1758245441.587:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.633350][ T6158] vhci_hcd: connection closed [ 90.633355][ T29] audit: type=1326 audit(1758245441.587:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.661510][ T29] audit: type=1326 audit(1758245441.597:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.668384][ T6163] vhci_hcd: connection closed [ 90.684938][ T29] audit: type=1326 audit(1758245441.597:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.713216][ T29] audit: type=1326 audit(1758245441.597:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.736876][ T29] audit: type=1326 audit(1758245441.597:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 90.748767][ T6160] vhci_hcd: connection closed [ 90.760343][ T36] vhci_hcd: vhci_device speed not set [ 90.764503][ T178] vhci_hcd: stop threads [ 90.774742][ T178] vhci_hcd: release socket [ 90.779269][ T178] vhci_hcd: disconnect device [ 90.811628][ T178] vhci_hcd: stop threads [ 90.815928][ T178] vhci_hcd: release socket [ 90.820419][ T178] vhci_hcd: disconnect device [ 90.828516][ T36] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 90.835994][ T36] usb 1-1: enqueue for inactive port 0 [ 90.837024][ T6113] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.841518][ T36] usb 1-1: enqueue for inactive port 0 [ 90.841591][ T36] usb 1-1: enqueue for inactive port 0 [ 90.862730][ T178] vhci_hcd: stop threads [ 90.866993][ T178] vhci_hcd: release socket [ 90.871467][ T178] vhci_hcd: disconnect device [ 90.877044][ T178] vhci_hcd: stop threads [ 90.881367][ T178] vhci_hcd: release socket [ 90.885829][ T178] vhci_hcd: disconnect device [ 90.930553][ T6113] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.948295][ T36] vhci_hcd: vhci_device speed not set [ 90.995702][ T178] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.017830][ T178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.048517][ T178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.056812][ T178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262499][ T6166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.293263][ T6166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.354176][ T6166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.403346][ T6166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.474691][ T178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.504689][ T178] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523794][ T178] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.538317][ T178] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.586936][ T6189] geneve2: entered promiscuous mode [ 91.592228][ T6189] geneve2: entered allmulticast mode [ 91.957740][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.827'. [ 92.419776][ T6223] geneve2: entered promiscuous mode [ 92.425034][ T6223] geneve2: entered allmulticast mode [ 92.547024][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.834'. [ 92.693249][ T6237] 9pnet_fd: Insufficient options for proto=fd [ 93.091280][ T6259] 9pnet_fd: Insufficient options for proto=fd [ 93.106559][ T6259] netlink: 'syz.2.845': attribute type 4 has an invalid length. [ 93.114406][ T6259] netlink: 152 bytes leftover after parsing attributes in process `syz.2.845'. [ 93.144735][ T6259] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 93.187707][ T3382] hid-generic 0000:FFFFFFFF:0008.0007: unknown main item tag 0x0 [ 93.195611][ T3382] hid-generic 0000:FFFFFFFF:0008.0007: unknown main item tag 0x0 [ 93.215872][ T3382] hid-generic 0000:FFFFFFFF:0008.0007: hidraw0: HID v0.00 Device [] on [ 93.257805][ T6268] fido_id[6268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.708857][ T6297] geneve2: entered promiscuous mode [ 93.714126][ T6297] geneve2: entered allmulticast mode [ 93.802481][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.862'. [ 94.065506][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.6.865'. [ 94.176496][ T6316] geneve2: entered promiscuous mode [ 94.182156][ T6316] geneve2: entered allmulticast mode [ 94.627253][ T6328] vhci_hcd: invalid port number 23 [ 95.456057][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 95.456074][ T29] audit: type=1326 audit(1758245446.597:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 95.485966][ T29] audit: type=1326 audit(1758245446.597:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 95.509424][ T29] audit: type=1326 audit(1758245446.597:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 95.533234][ T29] audit: type=1326 audit(1758245446.597:2881): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 95.557050][ T29] audit: type=1326 audit(1758245446.597:2882): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e5c6eba9 code=0x7ffc0000 [ 95.615667][ T6364] 9pnet_fd: Insufficient options for proto=fd [ 95.651863][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 95.677078][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 95.892271][ T6380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6380 comm=syz.0.890 [ 95.933816][ T29] audit: type=1326 audit(1758245447.077:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 95.960534][ T29] audit: type=1326 audit(1758245447.107:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 95.984395][ T29] audit: type=1326 audit(1758245447.107:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 96.008097][ T29] audit: type=1326 audit(1758245447.107:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 96.047797][ T29] audit: type=1326 audit(1758245447.177:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 96.113862][ T10] hid-generic 0000:FFFFFFFF:0008.0008: unknown main item tag 0x0 [ 96.121815][ T10] hid-generic 0000:FFFFFFFF:0008.0008: unknown main item tag 0x0 [ 96.141794][ T10] hid-generic 0000:FFFFFFFF:0008.0008: hidraw0: HID v0.00 Device [] on [ 96.196492][ T6390] fido_id[6390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.249236][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 96.312729][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 96.696455][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 96.709851][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 96.827898][ T6438] 9pnet_fd: Insufficient options for proto=fd [ 96.972869][ T6448] geneve2: entered promiscuous mode [ 96.978679][ T6448] geneve2: entered allmulticast mode [ 97.213757][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.925'. [ 97.234679][ T6465] 9pnet_fd: Insufficient options for proto=fd [ 97.373834][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 97.508798][ T6495] 9pnet_fd: Insufficient options for proto=fd [ 97.523060][ T6497] netlink: 'syz.3.940': attribute type 7 has an invalid length. [ 97.530797][ T6497] netlink: 'syz.3.940': attribute type 8 has an invalid length. [ 97.809024][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6510 comm=syz.6.946 [ 98.002632][ T6516] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.100742][ T6516] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.140744][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.952'. [ 98.160685][ T6516] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.210431][ T6516] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.290725][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.303048][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.330161][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.955'. [ 98.347072][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.353507][ T6537] FAULT_INJECTION: forcing a failure. [ 98.353507][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 98.367999][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.368032][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.368048][ T6537] Call Trace: [ 98.368111][ T6537] [ 98.368121][ T6537] __dump_stack+0x1d/0x30 [ 98.368147][ T6537] dump_stack_lvl+0xe8/0x140 [ 98.368168][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.368253][ T6537] dump_stack+0x15/0x1b [ 98.368278][ T6537] should_fail_ex+0x265/0x280 [ 98.368315][ T6537] should_failslab+0x8c/0xb0 [ 98.368389][ T6537] kmem_cache_alloc_noprof+0x50/0x310 [ 98.368502][ T6537] ? alloc_empty_file+0x76/0x200 [ 98.368545][ T6537] ? mntput+0x4b/0x80 [ 98.368602][ T6537] alloc_empty_file+0x76/0x200 [ 98.368645][ T6537] path_openat+0x68/0x2170 [ 98.368672][ T6537] ? _parse_integer_limit+0x170/0x190 [ 98.368724][ T6537] ? kstrtoull+0x111/0x140 [ 98.368755][ T6537] ? kstrtouint+0x76/0xc0 [ 98.368855][ T6537] do_filp_open+0x109/0x230 [ 98.368940][ T6537] do_sys_openat2+0xa6/0x110 [ 98.369047][ T6537] __x64_sys_openat+0xf2/0x120 [ 98.369095][ T6537] x64_sys_call+0x2e9c/0x2ff0 [ 98.369125][ T6537] do_syscall_64+0xd2/0x200 [ 98.369184][ T6537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.369218][ T6537] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.369336][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.369365][ T6537] RIP: 0033:0x7fbe5c13eba9 [ 98.369386][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.369413][ T6537] RSP: 002b:00007fbe5ab7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.369439][ T6537] RAX: ffffffffffffffda RBX: 00007fbe5c386090 RCX: 00007fbe5c13eba9 [ 98.369506][ T6537] RDX: 0000000000004040 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 98.369524][ T6537] RBP: 00007fbe5ab7e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.369540][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.369557][ T6537] R13: 00007fbe5c386128 R14: 00007fbe5c386090 R15: 00007fff243b8da8 [ 98.369583][ T6537] [ 98.422210][ T1047] hid-generic 0000:FFFFFFFF:0008.0009: unknown main item tag 0x0 [ 98.521158][ T6541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6541 comm=syz.1.958 [ 98.529983][ T1047] hid-generic 0000:FFFFFFFF:0008.0009: unknown main item tag 0x0 [ 98.550483][ T1047] hid-generic 0000:FFFFFFFF:0008.0009: hidraw0: HID v0.00 Device [] on [ 98.686321][ T6544] team0 (unregistering): Port device team_slave_0 removed [ 98.757089][ T6544] team0 (unregistering): Port device team_slave_1 removed [ 98.981311][ T6568] vhci_hcd: invalid port number 23 [ 99.052793][ T36] hid-generic 0000:FFFFFFFF:0008.000A: unknown main item tag 0x0 [ 99.060677][ T36] hid-generic 0000:FFFFFFFF:0008.000A: unknown main item tag 0x0 [ 99.099131][ T36] hid-generic 0000:FFFFFFFF:0008.000A: hidraw0: HID v0.00 Device [] on [ 99.135667][ T6574] fido_id[6574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.366924][ T6594] geneve2: entered promiscuous mode [ 99.372431][ T6594] geneve2: entered allmulticast mode [ 99.422808][ T6599] vhci_hcd: invalid port number 23 [ 99.528810][ T6601] bridge_slave_0: left allmulticast mode [ 99.534509][ T6601] bridge_slave_0: left promiscuous mode [ 99.540952][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.574136][ T6601] bridge_slave_1: left allmulticast mode [ 99.579949][ T6601] bridge_slave_1: left promiscuous mode [ 99.585660][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.635366][ T3381] hid-generic 0000:FFFFFFFF:0008.000B: unknown main item tag 0x0 [ 99.643201][ T3381] hid-generic 0000:FFFFFFFF:0008.000B: unknown main item tag 0x0 [ 99.653512][ T3381] hid-generic 0000:FFFFFFFF:0008.000B: hidraw0: HID v0.00 Device [] on [ 99.665842][ T6601] bond0: (slave bond_slave_0): Releasing backup interface [ 99.692806][ T6601] bond0: (slave bond_slave_1): Releasing backup interface [ 99.698545][ T6604] fido_id[6604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.734581][ T6601] team0: Port device team_slave_0 removed [ 99.750774][ T6601] team0: Port device team_slave_1 removed [ 99.767980][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.775647][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.800191][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.807681][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.929073][ T6614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6614 comm=syz.0.988 [ 100.251630][ T3393] hid-generic 0000:FFFFFFFF:0008.000C: unknown main item tag 0x0 [ 100.259530][ T3393] hid-generic 0000:FFFFFFFF:0008.000C: unknown main item tag 0x0 [ 100.280969][ T3393] hid-generic 0000:FFFFFFFF:0008.000C: hidraw0: HID v0.00 Device [] on [ 100.349508][ T6637] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 100.356154][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.363621][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 100.421902][ T6637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.441079][ T6637] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 100.447717][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.455363][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 100.480420][ T6637] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 100.487067][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.494750][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 100.517423][ T6637] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 100.524148][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.531820][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 100.539672][ T6637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.555753][ T6646] vhci_hcd: connection closed [ 100.555803][ T6644] vhci_hcd: connection closed [ 100.561181][ T6640] vhci_hcd: connection closed [ 100.565922][ T6642] vhci_hcd: connection closed [ 100.570797][ T36] vhci_hcd: vhci_device speed not set [ 100.573766][ T6652] netlink: 'syz.6.997': attribute type 30 has an invalid length. [ 100.576208][ T37] vhci_hcd: stop threads [ 100.593529][ T37] vhci_hcd: release socket [ 100.597966][ T37] vhci_hcd: disconnect device [ 100.628620][ T37] vhci_hcd: stop threads [ 100.633040][ T37] vhci_hcd: release socket [ 100.637494][ T37] vhci_hcd: disconnect device [ 100.644942][ T37] vhci_hcd: stop threads [ 100.649287][ T37] vhci_hcd: release socket [ 100.654193][ T37] vhci_hcd: disconnect device [ 100.659628][ T36] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 100.670024][ T36] usb 7-1: enqueue for inactive port 0 [ 100.672728][ T6659] netlink: 'syz.0.1001': attribute type 7 has an invalid length. [ 100.675654][ T36] usb 7-1: enqueue for inactive port 0 [ 100.683367][ T6659] netlink: 'syz.0.1001': attribute type 8 has an invalid length. [ 100.689617][ T36] usb 7-1: enqueue for inactive port 0 [ 100.702235][ T37] vhci_hcd: stop threads [ 100.706581][ T37] vhci_hcd: release socket [ 100.711141][ T37] vhci_hcd: disconnect device [ 100.778309][ T36] vhci_hcd: vhci_device speed not set [ 100.796179][ T6663] __nla_validate_parse: 4 callbacks suppressed [ 100.796199][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 101.100288][ T6668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.157666][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 101.157682][ T29] audit: type=1326 audit(1758245452.297:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.192095][ T6668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.214844][ T29] audit: type=1326 audit(1758245452.337:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.238554][ T29] audit: type=1326 audit(1758245452.337:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.262111][ T29] audit: type=1326 audit(1758245452.337:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.285654][ T29] audit: type=1326 audit(1758245452.337:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.309631][ T29] audit: type=1326 audit(1758245452.337:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.333327][ T29] audit: type=1326 audit(1758245452.337:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.356976][ T29] audit: type=1326 audit(1758245452.337:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.380420][ T29] audit: type=1326 audit(1758245452.337:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.404265][ T29] audit: type=1326 audit(1758245452.347:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702789eba9 code=0x7ffc0000 [ 101.441167][ T6668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.469659][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 101.507159][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6684 comm=syz.3.1010 [ 101.563372][ T6668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.646151][ T2913] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.663002][ T2913] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.683185][ T2913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.729448][ T2913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.834746][ T6703] geneve2: entered promiscuous mode [ 101.840086][ T6703] geneve2: entered allmulticast mode [ 101.855318][ T6713] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.858575][ T6701] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 101.870002][ T6701] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.877485][ T6701] vhci_hcd vhci_hcd.0: Device attached [ 101.893917][ T6713] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 101.900621][ T6713] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.908293][ T6713] vhci_hcd vhci_hcd.0: Device attached [ 101.996573][ T6718] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(18) [ 102.003332][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.010999][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 102.058342][ T3381] vhci_hcd: vhci_device speed not set [ 102.128492][ T3381] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 102.133143][ T6701] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 102.142599][ T6701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.150309][ T6701] vhci_hcd vhci_hcd.0: Device attached [ 102.194941][ T6732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6732 comm=syz.0.1023 [ 102.246894][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1024'. [ 102.263666][ T6701] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.300934][ T6714] vhci_hcd: connection closed [ 102.301079][ T6725] vhci_hcd: connection closed [ 102.308346][ T6707] vhci_hcd: connection reset by peer [ 102.318508][ T6719] vhci_hcd: connection closed [ 102.326548][ T2913] vhci_hcd: stop threads [ 102.335759][ T2913] vhci_hcd: release socket [ 102.340569][ T2913] vhci_hcd: disconnect device [ 102.367697][ T2913] vhci_hcd: stop threads [ 102.372123][ T2913] vhci_hcd: release socket [ 102.376834][ T2913] vhci_hcd: disconnect device [ 102.382995][ T6743] FAULT_INJECTION: forcing a failure. [ 102.382995][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.396201][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.1.1028 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.396235][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.396250][ T6743] Call Trace: [ 102.396257][ T6743] [ 102.396263][ T6743] __dump_stack+0x1d/0x30 [ 102.396284][ T6743] dump_stack_lvl+0xe8/0x140 [ 102.396369][ T6743] dump_stack+0x15/0x1b [ 102.396422][ T6743] should_fail_ex+0x265/0x280 [ 102.396447][ T6743] should_fail+0xb/0x20 [ 102.396531][ T6743] should_fail_usercopy+0x1a/0x20 [ 102.396562][ T6743] _copy_from_user+0x1c/0xb0 [ 102.396593][ T6743] memdup_user+0x5e/0xd0 [ 102.396672][ T6743] __se_sys_kexec_load+0x109/0x160 [ 102.396695][ T6743] __x64_sys_kexec_load+0x55/0x70 [ 102.396714][ T6743] x64_sys_call+0x2898/0x2ff0 [ 102.396793][ T6743] do_syscall_64+0xd2/0x200 [ 102.396830][ T6743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.396861][ T6743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.396902][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.396976][ T6743] RIP: 0033:0x7fbe5c13eba9 [ 102.396998][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.397052][ T6743] RSP: 002b:00007fbe5ab9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 102.397076][ T6743] RAX: ffffffffffffffda RBX: 00007fbe5c385fa0 RCX: 00007fbe5c13eba9 [ 102.397089][ T6743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.397105][ T6743] RBP: 00007fbe5ab9f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.397120][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.397135][ T6743] R13: 00007fbe5c386038 R14: 00007fbe5c385fa0 R15: 00007fff243b8da8 [ 102.397194][ T6743] [ 102.574423][ T6745] FAULT_INJECTION: forcing a failure. [ 102.574423][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 102.576777][ T2913] vhci_hcd: stop threads [ 102.587138][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.1027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.587168][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.587183][ T6745] Call Trace: [ 102.587192][ T6745] [ 102.587263][ T6745] __dump_stack+0x1d/0x30 [ 102.587292][ T6745] dump_stack_lvl+0xe8/0x140 [ 102.587321][ T6745] dump_stack+0x15/0x1b [ 102.587346][ T6745] should_fail_ex+0x265/0x280 [ 102.587378][ T6745] ? __se_sys_memfd_create+0x1cc/0x590 [ 102.587470][ T6745] should_failslab+0x8c/0xb0 [ 102.587506][ T6745] __kmalloc_cache_noprof+0x4c/0x320 [ 102.587546][ T6745] ? fput+0x8f/0xc0 [ 102.587706][ T6745] __se_sys_memfd_create+0x1cc/0x590 [ 102.587738][ T6745] __x64_sys_memfd_create+0x31/0x40 [ 102.587835][ T6745] x64_sys_call+0x2abe/0x2ff0 [ 102.587866][ T6745] do_syscall_64+0xd2/0x200 [ 102.587911][ T6745] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.587977][ T6745] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.588080][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.588110][ T6745] RIP: 0033:0x7f702789eba9 [ 102.588132][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.588157][ T6745] RSP: 002b:00007f70262e5d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 102.588184][ T6745] RAX: ffffffffffffffda RBX: 0000000000001060 RCX: 00007f702789eba9 [ 102.588201][ T6745] RDX: 00007f70262e5dec RSI: 0000000000000000 RDI: 00007f70279227e8 [ 102.588217][ T6745] RBP: 0000200000000000 R08: 00007f70262e5b07 R09: 0000000000000000 [ 102.588314][ T6745] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 102.588344][ T6745] R13: 00007f70262e5dec R14: 00007f70262e5df0 R15: 00007ffd91c606a8 [ 102.588370][ T6745] [ 102.768697][ T2913] vhci_hcd: release socket [ 102.773227][ T2913] vhci_hcd: disconnect device [ 102.782633][ T2913] vhci_hcd: stop threads [ 102.786891][ T2913] vhci_hcd: release socket [ 102.791371][ T2913] vhci_hcd: disconnect device [ 102.814006][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 102.820677][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.828164][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 102.846541][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.858563][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 102.865277][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.872901][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 102.910777][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 102.917420][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.925268][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 102.932940][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 102.956914][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 102.963541][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.971198][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 103.059249][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.077892][ T3402] vhci_hcd: vhci_device speed not set [ 103.094429][ T6760] vhci_hcd: connection closed [ 103.094455][ T6755] vhci_hcd: connection closed [ 103.094462][ T6758] vhci_hcd: connection closed [ 103.104104][ T12] vhci_hcd: stop threads [ 103.113146][ T12] vhci_hcd: release socket [ 103.117597][ T12] vhci_hcd: disconnect device [ 103.129849][ T6752] vhci_hcd: connection closed [ 103.138324][ T3402] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 103.159787][ T6753] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 103.165919][ T12] vhci_hcd: stop threads [ 103.170221][ T12] vhci_hcd: release socket [ 103.174772][ T12] vhci_hcd: disconnect device [ 103.197659][ T12] vhci_hcd: stop threads [ 103.202039][ T12] vhci_hcd: release socket [ 103.206496][ T12] vhci_hcd: disconnect device [ 103.212622][ T12] vhci_hcd: stop threads [ 103.216884][ T12] vhci_hcd: release socket [ 103.221491][ T12] vhci_hcd: disconnect device [ 103.242785][ T6769] 9pnet_fd: Insufficient options for proto=fd [ 103.374200][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 103.521194][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1041'. [ 103.522175][ T3393] hid-generic 0000:FFFFFFFF:0008.000D: unknown main item tag 0x0 [ 103.538066][ T3393] hid-generic 0000:FFFFFFFF:0008.000D: unknown main item tag 0x0 [ 103.552547][ T3393] hid-generic 0000:FFFFFFFF:0008.000D: hidraw0: HID v0.00 Device [] on [ 103.598927][ T6787] fido_id[6787]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.796708][ T6810] 9pnet_fd: Insufficient options for proto=fd [ 103.970314][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1058'. [ 104.035955][ T6829] FAULT_INJECTION: forcing a failure. [ 104.035955][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.049133][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.2.1059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.049165][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.049180][ T6829] Call Trace: [ 104.049188][ T6829] [ 104.049195][ T6829] __dump_stack+0x1d/0x30 [ 104.049221][ T6829] dump_stack_lvl+0xe8/0x140 [ 104.049275][ T6829] dump_stack+0x15/0x1b [ 104.049297][ T6829] should_fail_ex+0x265/0x280 [ 104.049330][ T6829] should_fail+0xb/0x20 [ 104.049355][ T6829] should_fail_usercopy+0x1a/0x20 [ 104.049449][ T6829] _copy_to_user+0x20/0xa0 [ 104.049558][ T6829] simple_read_from_buffer+0xb5/0x130 [ 104.049585][ T6829] proc_fail_nth_read+0x10e/0x150 [ 104.049622][ T6829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.049657][ T6829] vfs_read+0x1a5/0x770 [ 104.049724][ T6829] ? __rcu_read_unlock+0x4f/0x70 [ 104.049753][ T6829] ? __fget_files+0x184/0x1c0 [ 104.049789][ T6829] ksys_read+0xda/0x1a0 [ 104.049821][ T6829] __x64_sys_read+0x40/0x50 [ 104.049851][ T6829] x64_sys_call+0x27bc/0x2ff0 [ 104.049949][ T6829] do_syscall_64+0xd2/0x200 [ 104.049992][ T6829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.050024][ T6829] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.050099][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.050145][ T6829] RIP: 0033:0x7fd6e5c6d5bc [ 104.050166][ T6829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.050190][ T6829] RSP: 002b:00007fd6e46cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.050216][ T6829] RAX: ffffffffffffffda RBX: 00007fd6e5eb5fa0 RCX: 00007fd6e5c6d5bc [ 104.050233][ T6829] RDX: 000000000000000f RSI: 00007fd6e46cf0a0 RDI: 0000000000000003 [ 104.050249][ T6829] RBP: 00007fd6e46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.050264][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.050279][ T6829] R13: 00007fd6e5eb6038 R14: 00007fd6e5eb5fa0 R15: 00007ffe41990bd8 [ 104.050363][ T6829] [ 104.415946][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6835 comm=syz.2.1062 [ 104.927219][ T6858] netlink: 'syz.1.1070': attribute type 7 has an invalid length. [ 104.935113][ T6858] netlink: 'syz.1.1070': attribute type 8 has an invalid length. [ 105.044663][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 105.279525][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1079'. [ 105.485534][ T6885] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.538859][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 105.553715][ T6885] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.624517][ T6885] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.702861][ T6885] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.763377][ T3506] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.781839][ T3506] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.805559][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.823377][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.835901][ T3400] hid-generic 0000:FFFFFFFF:0008.000E: unknown main item tag 0x0 [ 105.843732][ T3400] hid-generic 0000:FFFFFFFF:0008.000E: unknown main item tag 0x0 [ 105.869694][ T3400] hid-generic 0000:FFFFFFFF:0008.000E: hidraw0: HID v0.00 Device [] on [ 105.905847][ T6893] fido_id[6893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.978325][ T6896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 105.984952][ T6896] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.992485][ T6896] vhci_hcd vhci_hcd.0: Device attached [ 105.998693][ T6896] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.029311][ T6896] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 106.036073][ T6896] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.043798][ T6896] vhci_hcd vhci_hcd.0: Device attached [ 106.071578][ T6896] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 106.078249][ T6896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.085972][ T6896] vhci_hcd vhci_hcd.0: Device attached [ 106.148804][ T6912] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 106.155483][ T6912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.163258][ T6912] vhci_hcd vhci_hcd.0: Device attached [ 106.178913][ T6896] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.191383][ T6913] vhci_hcd: connection closed [ 106.191867][ T6902] vhci_hcd: connection closed [ 106.194091][ T12] vhci_hcd: stop threads [ 106.196728][ T6908] vhci_hcd: connection closed [ 106.201306][ T12] vhci_hcd: release socket [ 106.215051][ T12] vhci_hcd: disconnect device [ 106.233246][ T6910] vhci_hcd: connection closed [ 106.280875][ T12] vhci_hcd: stop threads [ 106.289927][ T12] vhci_hcd: release socket [ 106.294361][ T12] vhci_hcd: disconnect device [ 106.307298][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 106.307312][ T29] audit: type=1400 audit(1758245457.447:3205): avc: denied { wake_alarm } for pid=6921 comm="syz.3.1093" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.344930][ T29] audit: type=1400 audit(1758245457.487:3206): avc: denied { write } for pid=6922 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.365882][ T12] vhci_hcd: stop threads [ 106.370208][ T12] vhci_hcd: release socket [ 106.374758][ T12] vhci_hcd: disconnect device [ 106.382042][ T12] vhci_hcd: stop threads [ 106.386306][ T12] vhci_hcd: release socket [ 106.390805][ T12] vhci_hcd: disconnect device [ 106.429730][ T29] audit: type=1326 audit(1758245457.577:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dea73eba9 code=0x7ffc0000 [ 106.453247][ T29] audit: type=1326 audit(1758245457.577:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f7dea73eba9 code=0x7ffc0000 [ 106.476780][ T29] audit: type=1326 audit(1758245457.577:3209): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dea73eba9 code=0x7ffc0000 [ 106.500680][ T29] audit: type=1326 audit(1758245457.577:3210): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dea73eba9 code=0x7ffc0000 [ 106.745043][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 106.995245][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 107.064596][ T29] audit: type=1400 audit(1758245458.207:3211): avc: denied { mounton } for pid=6955 comm="syz.3.1105" path="/188/file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 107.143137][ T29] audit: type=1400 audit(1758245458.287:3212): avc: denied { setopt } for pid=6958 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.220402][ T3381] usb 13-1: enqueue for inactive port 0 [ 107.226004][ T3381] usb 13-1: enqueue for inactive port 0 [ 107.321298][ T3381] vhci_hcd: vhci_device speed not set [ 107.424139][ T29] audit: type=1400 audit(1758245458.567:3213): avc: denied { read write } for pid=6955 comm="syz.3.1105" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.455097][ T29] audit: type=1400 audit(1758245458.567:3214): avc: denied { open } for pid=6955 comm="syz.3.1105" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.179668][ T3402] usb 3-1: enqueue for inactive port 0 [ 108.185183][ T3402] usb 3-1: enqueue for inactive port 0 [ 108.260549][ T3402] vhci_hcd: vhci_device speed not set [ 115.812672][ T6974] 9pnet_fd: Insufficient options for proto=fd [ 122.462334][ T6986] netlink: 'syz.2.1115': attribute type 1 has an invalid length. [ 122.529022][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 122.529128][ T29] audit: type=1326 audit(1758245473.667:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.558596][ T29] audit: type=1326 audit(1758245473.667:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.582315][ T29] audit: type=1326 audit(1758245473.667:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.606084][ T29] audit: type=1326 audit(1758245473.667:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.631820][ T29] audit: type=1326 audit(1758245473.677:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.655252][ T29] audit: type=1326 audit(1758245473.677:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.678740][ T29] audit: type=1326 audit(1758245473.677:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.702192][ T29] audit: type=1326 audit(1758245473.677:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.725745][ T29] audit: type=1326 audit(1758245473.677:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.749319][ T29] audit: type=1326 audit(1758245473.677:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.6.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1e21eba9 code=0x7ffc0000 [ 122.786383][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 122.871549][ T7015] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 122.878171][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.885642][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 122.891954][ T7015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.905617][ T7015] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 122.912252][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.919977][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 122.927001][ T7015] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 122.933635][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.941447][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 122.951223][ T7015] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 122.957854][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.965606][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 122.971530][ T7015] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.984664][ T7027] vhci_hcd: connection closed [ 122.984673][ T7023] vhci_hcd: connection closed [ 122.988492][ T178] vhci_hcd: stop threads [ 122.998362][ T178] vhci_hcd: release socket [ 123.002797][ T178] vhci_hcd: disconnect device [ 123.007821][ T7020] vhci_hcd: connection closed [ 123.007970][ T7018] vhci_hcd: connection closed [ 123.016609][ T178] vhci_hcd: stop threads [ 123.025722][ T178] vhci_hcd: release socket [ 123.030179][ T178] vhci_hcd: disconnect device [ 123.038257][ T178] vhci_hcd: stop threads [ 123.042592][ T178] vhci_hcd: release socket [ 123.047016][ T178] vhci_hcd: disconnect device [ 123.061297][ T178] vhci_hcd: stop threads [ 123.065628][ T178] vhci_hcd: release socket [ 123.070232][ T178] vhci_hcd: disconnect device [ 123.074961][ T1047] vhci_hcd: vhci_device speed not set [ 123.206389][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1136'. [ 123.383607][ T7051] FAULT_INJECTION: forcing a failure. [ 123.383607][ T7051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.396963][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.6.1138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.396994][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.397067][ T7051] Call Trace: [ 123.397074][ T7051] [ 123.397138][ T7051] __dump_stack+0x1d/0x30 [ 123.397171][ T7051] dump_stack_lvl+0xe8/0x140 [ 123.397193][ T7051] dump_stack+0x15/0x1b [ 123.397208][ T7051] should_fail_ex+0x265/0x280 [ 123.397259][ T7051] should_fail_alloc_page+0xf2/0x100 [ 123.397293][ T7051] __alloc_frozen_pages_noprof+0xff/0x360 [ 123.397342][ T7051] alloc_pages_mpol+0xb3/0x250 [ 123.397393][ T7051] vma_alloc_folio_noprof+0x1aa/0x300 [ 123.397441][ T7051] do_wp_page+0x5db/0x24e0 [ 123.397469][ T7051] ? consume_skb+0x49/0x150 [ 123.397496][ T7051] ? nlmon_xmit+0x4f/0x60 [ 123.397613][ T7051] ? __rcu_read_lock+0x37/0x50 [ 123.397643][ T7051] handle_mm_fault+0x77d/0x2c20 [ 123.397667][ T7051] ? __rcu_read_unlock+0x4f/0x70 [ 123.397778][ T7051] do_user_addr_fault+0x3fe/0x1090 [ 123.397825][ T7051] exc_page_fault+0x62/0xa0 [ 123.397986][ T7051] asm_exc_page_fault+0x26/0x30 [ 123.398006][ T7051] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 123.398036][ T7051] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 123.398058][ T7051] RSP: 0018:ffffc9000152f9e8 EFLAGS: 00050202 [ 123.398150][ T7051] RAX: ffff8881218d3c20 RBX: ffffc9000152fe90 RCX: 0000000000000e5c [ 123.398161][ T7051] RDX: 0000000000000000 RSI: ffff888119ff4000 RDI: 0000200000004700 [ 123.398173][ T7051] RBP: 0000000000000000 R08: 0000000000000034 R09: 0000000000000000 [ 123.398258][ T7051] R10: 0001888119ff4000 R11: 0001888119ff4e5b R12: ffffc9000152fe78 [ 123.398338][ T7051] R13: 0000000000000e5c R14: 0000000000000e5c R15: 0000000000000e5c [ 123.398362][ T7051] _copy_to_iter+0x2df/0xe70 [ 123.398399][ T7051] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 123.398458][ T7051] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 123.398490][ T7051] __skb_datagram_iter+0xc6/0x690 [ 123.398524][ T7051] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 123.398556][ T7051] skb_copy_datagram_iter+0x3d/0x110 [ 123.398671][ T7051] netlink_recvmsg+0x1a8/0x550 [ 123.398782][ T7051] ? __pfx_netlink_recvmsg+0x10/0x10 [ 123.398871][ T7051] sock_recvmsg+0x139/0x170 [ 123.398982][ T7051] ____sys_recvmsg+0xf5/0x280 [ 123.399045][ T7051] ___sys_recvmsg+0x11f/0x370 [ 123.399088][ T7051] __x64_sys_recvmsg+0xd1/0x160 [ 123.399127][ T7051] x64_sys_call+0x2b42/0x2ff0 [ 123.399152][ T7051] do_syscall_64+0xd2/0x200 [ 123.399258][ T7051] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.399287][ T7051] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.399324][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.399394][ T7051] RIP: 0033:0x7fef1e21eba9 [ 123.399417][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.399445][ T7051] RSP: 002b:00007fef1cc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 123.399468][ T7051] RAX: ffffffffffffffda RBX: 00007fef1e465fa0 RCX: 00007fef1e21eba9 [ 123.399484][ T7051] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.399578][ T7051] RBP: 00007fef1cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 123.399670][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.399684][ T7051] R13: 00007fef1e466038 R14: 00007fef1e465fa0 R15: 00007ffc36df3128 [ 123.399765][ T7051] [ 123.834084][ T7064] FAULT_INJECTION: forcing a failure. [ 123.834084][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 123.848301][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.2.1144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.848337][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.848351][ T7064] Call Trace: [ 123.848358][ T7064] [ 123.848401][ T7064] __dump_stack+0x1d/0x30 [ 123.848427][ T7064] dump_stack_lvl+0xe8/0x140 [ 123.848452][ T7064] dump_stack+0x15/0x1b [ 123.848472][ T7064] should_fail_ex+0x265/0x280 [ 123.848565][ T7064] should_failslab+0x8c/0xb0 [ 123.848597][ T7064] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 123.848634][ T7064] ? shmem_alloc_inode+0x34/0x50 [ 123.848664][ T7064] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 123.848701][ T7064] shmem_alloc_inode+0x34/0x50 [ 123.848781][ T7064] alloc_inode+0x40/0x170 [ 123.848952][ T7064] new_inode+0x1d/0xe0 [ 123.848984][ T7064] shmem_get_inode+0x244/0x750 [ 123.849014][ T7064] __shmem_file_setup+0x113/0x210 [ 123.849083][ T7064] shmem_file_setup+0x3b/0x50 [ 123.849107][ T7064] __se_sys_memfd_create+0x2c3/0x590 [ 123.849137][ T7064] __x64_sys_memfd_create+0x31/0x40 [ 123.849164][ T7064] x64_sys_call+0x2abe/0x2ff0 [ 123.849254][ T7064] do_syscall_64+0xd2/0x200 [ 123.849291][ T7064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.849316][ T7064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.849355][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.849384][ T7064] RIP: 0033:0x7fd6e5c6eba9 [ 123.849400][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.849419][ T7064] RSP: 002b:00007fd6e46cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 123.849437][ T7064] RAX: ffffffffffffffda RBX: 000000000000054f RCX: 00007fd6e5c6eba9 [ 123.849450][ T7064] RDX: 00007fd6e46ceef0 RSI: 0000000000000000 RDI: 00007fd6e5cf27e8 [ 123.849463][ T7064] RBP: 0000200000000380 R08: 00007fd6e46cebb7 R09: 00007fd6e46cee40 [ 123.849495][ T7064] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 123.849511][ T7064] R13: 00007fd6e46ceef0 R14: 00007fd6e46ceeb0 R15: 0000200000001440 [ 123.849544][ T7064] [ 124.291466][ T7087] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 124.299902][ T7087] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 124.311144][ T7087] geneve2: entered promiscuous mode [ 124.316414][ T7087] geneve2: entered allmulticast mode [ 124.409972][ T7091] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 124.416551][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.425449][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 124.433557][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.444173][ T7091] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 124.451049][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.459874][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 124.466391][ T7091] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 124.473018][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.480737][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 124.487306][ T7091] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 124.493931][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.501884][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 124.509645][ T7091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.524715][ T7099] vhci_hcd: connection closed [ 124.524819][ T7095] vhci_hcd: connection closed [ 124.524905][ T7097] vhci_hcd: connection closed [ 124.529729][ T7093] vhci_hcd: connection closed [ 124.538891][ T3506] vhci_hcd: stop threads [ 124.548111][ T3506] vhci_hcd: release socket [ 124.552609][ T3506] vhci_hcd: disconnect device [ 124.557380][ T3506] vhci_hcd: stop threads [ 124.561654][ T3506] vhci_hcd: release socket [ 124.566150][ T3506] vhci_hcd: disconnect device [ 124.571057][ T3506] vhci_hcd: stop threads [ 124.575307][ T3506] vhci_hcd: release socket [ 124.579802][ T3506] vhci_hcd: disconnect device [ 124.584636][ T3506] vhci_hcd: stop threads [ 124.588967][ T3506] vhci_hcd: release socket [ 124.593413][ T3506] vhci_hcd: disconnect device [ 124.609748][ T36] vhci_hcd: vhci_device speed not set [ 124.859516][ T7104] ================================================================== [ 124.867655][ T7104] BUG: KCSAN: data-race in touch_atime / touch_atime [ 124.874376][ T7104] [ 124.876711][ T7104] write to 0xffff88811a568990 of 8 bytes by task 7105 on cpu 0: [ 124.884350][ T7104] touch_atime+0x1d2/0x340 [ 124.888802][ T7104] shmem_file_splice_read+0x5b1/0x600 [ 124.894292][ T7104] splice_direct_to_actor+0x26c/0x680 [ 124.899686][ T7104] do_splice_direct+0xda/0x150 [ 124.904467][ T7104] do_sendfile+0x380/0x650 [ 124.908910][ T7104] __x64_sys_sendfile64+0x105/0x150 [ 124.914161][ T7104] x64_sys_call+0x2bb0/0x2ff0 [ 124.918864][ T7104] do_syscall_64+0xd2/0x200 [ 124.923406][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.929321][ T7104] [ 124.931659][ T7104] read to 0xffff88811a568990 of 8 bytes by task 7104 on cpu 1: [ 124.939207][ T7104] touch_atime+0x16a/0x340 [ 124.943645][ T7104] shmem_file_splice_read+0x5b1/0x600 [ 124.949040][ T7104] splice_direct_to_actor+0x26c/0x680 [ 124.954428][ T7104] do_splice_direct+0xda/0x150 [ 124.959204][ T7104] do_sendfile+0x380/0x650 [ 124.963651][ T7104] __x64_sys_sendfile64+0x105/0x150 [ 124.968885][ T7104] x64_sys_call+0x2bb0/0x2ff0 [ 124.973579][ T7104] do_syscall_64+0xd2/0x200 [ 124.978226][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.984132][ T7104] [ 124.986456][ T7104] value changed: 0x0000000068ccb263 -> 0x0000000068ccb264 [ 124.993581][ T7104] [ 124.995907][ T7104] Reported by Kernel Concurrency Sanitizer on: [ 125.002058][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.1155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.011788][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.021935][ T7104] ==================================================================