last executing test programs: 1m28.765657639s ago: executing program 2 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2, 0x0, 0xb}, 0x18) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1m28.707252904s ago: executing program 2 (id=585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5, 0x0, 0xb}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1m28.325811178s ago: executing program 2 (id=588): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802d65f000000000000000000000000850000007b00000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7fffffff}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="000e125611f9", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 1m28.295960041s ago: executing program 2 (id=589): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@barrier}, {@bh}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x53, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000480), 0x8, 0x3e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d542bdfb7cec880a02de9e1d7300", "aa0188a189c56a4293348f5a3995fa1e7569d23bebe2efe5982f417d5500", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508eb4eaf1a49e0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515c054b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x3ffffff, 0x120000, 0x1}}) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x3, 0x7, 0x3ff, 0x40, r0, 0x2, '\x00', r2, r6, 0x2, 0x3, 0x4, 0xa}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000d80)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a00000609000200ffff0000000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r13, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dd:\xff\xffe{') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = pidfd_getfd(r6, r9, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r14, 0x54a0) 1m27.917772685s ago: executing program 2 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2, 0x0, 0xb}, 0x18) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1m27.653369758s ago: executing program 2 (id=599): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceed"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffbfffffc}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000940), 0x0, 0x2600c050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) process_vm_writev(0x0, &(0x7f0000004400)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000700)=""/124, 0x7c}, {&(0x7f0000000840)=""/163, 0xa3}, {0x0}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000003300)=""/217, 0xd9}, {&(0x7f0000003400)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f0000000980), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x804) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nodelalloc}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNM+z8wzL99n5pmd2Wd2AmhbA9mfJKI3In6JiL48u7DAQP7v+tUL439evTCexOzsC38klXLXrl4YL4uW820uMoNpRPp2ErtrrHfq3PmTY5OTE2eL/PD0qdeGp86df/jEqbHjE8cnTo8ePnzo4Mhjj44+0lQcF5eZnsV1bdebZ/bsPPLSe8+Oz8bL332cbW9vMb06jlx/U+ttZCAGYrYwP7ar8vf+VS/9v2VLRHQX6WTDOm8MTeuIiGx3dVbaf190xPzO64tn3prLfLVOGwjcNNln07YlYzuK/+nc5xdwO0q0cWhT5Sd+dv9bDmt5/bHerjyZ/Z2oxH+9GH54Lq+bNLuX7c/v2DvqzP//GuN65pOzfcusvzcijs789X42RM3vIRpImi4JADDni+z656Fa13/pgmubrUUfSn9E7I+I7RHxv4jYEelcmTsi4s4Vrn9gUX7p9c9PG1e4yBXJrv8eL/q2yiGfUsaVzOW2VOLvTF45MTlxoKiTwejszvIjDdbx5dM/v1tv2kDV9V82ZOsvrwWL7fh9Q/fCeY6NTY+tIuQFrlyKJDbUij+Z6wnIamBnROxqYflZnZ148KM9WXrr5qXTl4+/gRvQzzT7YcQD+f6fiUXxl5J8TfX6J4d7YnLiwHB5VCz1/Y+Xn6/Od1alF8Tf01xMPa0GW8OVSxGbah7/RfxlMyj7a6eK/Ne9Ta/j8q/v1L2nWbr/kzg6U12iOP43zldbdvx3JS9W0l3FuDfGpqfPjkR8XoxYMH50fmllviyfxT+4b2H8+X1xmp3j/vmgmG93RGQH8V0RcXdE7C22/Z6IuDci9jWI/9un7nu1cQ21ePzfAFn8xxrt/4j+pLq/voVEx8lvPqu3/ubOf4cqqcFiTPX5r6vOcpvdwNXWHwAAANwK0kofdJIOVT2/XdoRm9LJM1PT+wfi9dPH8r7q/uhMy2+6+qq+Dx0pvhsu86OL8gcjYlvlSaONlfzQ+JnJLesUM5DbXNX+83NBmg4N5dN+q/fQC3D7WFE/WvVDZ598euM3BlhTfq8J7Uv7h/al/UP70v6hfdVq/xcjrq/DpgBrrNXP/8UPDAC3Htf/0L60f2hf2j+0paU/iS9et5KdE1r/yf/k9iOreWPAzU/M9rU+e9SfNLPyBXY0V7h8+0XTS26ucBJRhpM2iKtGItL5MX8Xb5OsjOnMy3Q1v6lrn0iXLfPEcrXRuaJ3YvTUqI29RaI7IppdzsU1q9XyDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//knXm/A==") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x2, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2390024, 0x0) chdir(&(0x7f0000000140)='./file0\x00') connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x8, 0x2, 0xa, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m27.630567151s ago: executing program 32 (id=599): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffbfffffc}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000940), 0x0, 0x2600c050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) process_vm_writev(0x0, &(0x7f0000004400)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000700)=""/124, 0x7c}, {&(0x7f0000000840)=""/163, 0xa3}, {0x0}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000003300)=""/217, 0xd9}, {&(0x7f0000003400)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f0000000980), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x804) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nodelalloc}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x2, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2390024, 0x0) chdir(&(0x7f0000000140)='./file0\x00') connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x8, 0x2, 0xa, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3.66790475s ago: executing program 0 (id=2077): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000240)='./file1\x00', 0x2, &(0x7f0000000b00)=ANY=[], 0x1, 0x583, &(0x7f00000034c0)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x104081, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x801002, &(0x7f00000029c0)=ANY=[@ANYRES32=r1], 0x1, 0x11f4, &(0x7f0000001280)="$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") chdir(&(0x7f0000000000)='./file0\x00') 2.480289627s ago: executing program 0 (id=2096): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mount$cgroup2(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6661766f7264796e6d6f64732c6d656d6f72795f68756765746c625f6163636f756e74696e672c6d656d6f72795f6875675aaf0c8740860b69fc46a35485c6e4de65746c625f6163636f7e6e74696e672c6d656d6f72795f72656375727369766570726f742c6e65742c7069"]) unlinkat(0xffffffffffffff9c, 0x0, 0x0) shmget(0x0, 0x4000, 0x10, &(0x7f0000160000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.311409862s ago: executing program 5 (id=2101): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYRES8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = syz_io_uring_setup(0xa82, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) io_uring_enter(r9, 0x5535, 0x3acd, 0x22, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRESOCT=r11], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="1c00000008efffff55bb1c85d4508df7feff00000057cb41ecb1e8173ec27c4d48ca75e3b1c43fe27166293a5827e1dbdbca1be4c74102acf330f626b2de8512c71444172af0e543a714f7e45c6587447d24a1b1d5644d30dcd732bdb20e502f2e632b26d10fc31871f452c58eace83c98aa2b80fe00"/128, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, 0x0, 0x310) 1.591332117s ago: executing program 0 (id=2111): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1r0, {0x2}}, './file0\x00'}) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000001380)={@remote}, &(0x7f0000001ec0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x808, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x4, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x6, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x1ff, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0xfffff143, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff5, 0x0, 0x1, 0x1, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0x0, 0x9, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x962, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x9, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x3, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x10000001, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0xc3aa, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x2, 0x6, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x100, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x100101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x9, 0x401, 0x800, 0x5, 0x6, 0x6, 0xd, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x6, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x8, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x9, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x1dbb, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x0, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff4, 0x2, 0xb8ec, 0x8, 0x1, 0x0, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0x1, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xb, 0x8, 0x0, 0x22, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x3, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000001c80)=r3}, 0x20) 1.564074689s ago: executing program 0 (id=2113): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x96, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, 0x0) (rerun: 32) clock_nanosleep(0x2, 0x0, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x7) (async) futex(&(0x7f000000cffc)=0x2, 0x6, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0xfffffffe, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff5000/0x4000)=nil, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 1.514329304s ago: executing program 0 (id=2114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x8402) 1.513684224s ago: executing program 4 (id=2115): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/217], 0x138) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.435749151s ago: executing program 4 (id=2116): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setresgid(0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0xc010}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r8, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fsetxattr$security_selinux(r9, &(0x7f0000000480), &(0x7f0000000140)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.2261442s ago: executing program 1 (id=2117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x1, 0x9}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x8, 0x99c, 0x10001, 0x8, 0x34, 0x4, 0x3}, 0x9c) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1.207632062s ago: executing program 4 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4b4, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0x16e}, &(0x7f0000010080), &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.163669366s ago: executing program 1 (id=2119): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2c3}], 0x2, 0x166, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="00000000000000b4c5eb14d81147990000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000037"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x98c59000) readv(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xe5, 0x9, 0x9, 0x1}}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x3a}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000012c0)="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", 0x96, 0x4035, &(0x7f0000000440)={0x11, 0x8100, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b40)=ANY=[@ANYBLOB='t\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000300030000008c00018008000300020000001400020076657468305f746f5f6873720000000014000200766972745f776966693000000000000014000200766c616e300000000000000000000000140002006d6163736563300000000000000000001400020076657468305f766c616e0000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32, @ANYBLOB="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"], 0x774}, 0x1, 0x0, 0x0, 0x4050c81}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.093698222s ago: executing program 5 (id=2120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000480)=""/32, 0x20}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x2, 0x80000000}, {0x6, 0x0, 0x3}]}) write$ppp(r2, &(0x7f0000000400)='k\'', 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='rxrpc_resend\x00', r3, 0x0, 0x100000001}, 0x18) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) symlinkat(&(0x7f00000005c0)='./file0/../file0\x00', r5, &(0x7f0000000640)='./file0/../file0/file0\x00') readlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) fcntl$setpipe(r2, 0x407, 0x734) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0x5ae9}, {0x20, 0x7f, 0x4, 0xc598}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) recvmmsg(r8, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10000004}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x2, 0x40000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x34}}, 0x0) sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x17, 0x0, 0x0, 0x0, "3829ca068cf3e1a48be29f49be03d784452eb79ee07176231f55ddf72b137ca7517b4d2ca2f799b88120a4566794bc9caeba55aa9de0cdcb55aa52e55ebf06f4"}, 0x48}, 0x1, 0x0, 0x0, 0x20000100}, 0x24040045) syz_read_part_table(0x5e1, &(0x7f0000000ec0)="$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") 936.775186ms ago: executing program 1 (id=2121): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 10) sendfile(r1, r0, 0x0, 0x7ffff000) 619.523645ms ago: executing program 0 (id=2122): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd6}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xf}, {0xfff1}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f00, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 602.011026ms ago: executing program 3 (id=2123): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noinit_itable}, {@mblk_io_submit}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@resuid={'resuid', 0x3d, r2}}, {@dioread_lock}, {@nodiscard}]}, 0x0, 0x479, &(0x7f0000001300)="$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") mount$9p_unix(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x2830000, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d756e69782c706f73697861636c2c63616368653d6e6f6e652c70726976706f72742c6673757569643d65336437363539332d350761332d323437332d636433652d33636238376436342c6f626a5f726f6c653d272f245b2c2c04736e616d653d6e6f696e69745f697461626c652c00"]) 526.066653ms ago: executing program 3 (id=2124): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 525.582633ms ago: executing program 3 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 2) 172.119015ms ago: executing program 3 (id=2126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 171.132485ms ago: executing program 4 (id=2127): bind$unix(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff404}]}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r3, &(0x7f0000000a00)=[{0x6, 0xf8, 0x4, 0x26, @time={0x70c, 0x5}, {0x83, 0x8}, {0xc, 0xdd}, @ext={0x0, 0x0}}, {0xfc, 0x4d, 0x40, 0x75, @time={0x8001, 0xfffffffe}, {0x2, 0x1}, {0x81, 0x5}, @note={0x56, 0x5, 0x9, 0x38, 0x83}}], 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f0000000080)={0x8, 0x8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x490283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x8}, 0x7606, 0x8, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 135.357068ms ago: executing program 3 (id=2128): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000300), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x200, 0xffff, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000002300000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 50.611796ms ago: executing program 5 (id=2129): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x7a25, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 49.813466ms ago: executing program 1 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 49.337686ms ago: executing program 5 (id=2131): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2c3}], 0x2, 0x166, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="00000000000000b4c5eb14d81147990000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000037"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x98c59000) readv(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x7c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xe5, 0x9, 0x9, 0x1}}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x3a}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000012c0)="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", 0x96, 0x4035, &(0x7f0000000440)={0x11, 0x8100, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b40)=ANY=[@ANYBLOB='t\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000300030000008c00018008000300020000001400020076657468305f746f5f6873720000000014000200766972745f776966693000000000000014000200766c616e300000000000000000000000140002006d6163736563300000000000000000001400020076657468305f766c616e0000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32, @ANYBLOB="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"], 0x774}, 0x1, 0x0, 0x0, 0x4050c81}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 10.82232ms ago: executing program 3 (id=2132): r0 = gettid() rt_sigsuspend(0x0, 0x0) tkill(r0, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffed4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_shrink_slab_end\x00', r1}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="020afc00020000002802000000dbdf252d8444615455b06d1ed83934c068a12396781f7c2d32a75bd822de76f3bc509890a5"], 0x10}}, 0x40408c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semtimedop(0x0, &(0x7f0000000140)=[{0x4, 0x6000}], 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) shmdt(0x0) 10.41807ms ago: executing program 4 (id=2133): r0 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0x1cb}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xcf, 0x4, 0x0, 0x2, 0x0, 0x8000000000000001, 0x92063, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa47, 0x2, @perf_config_ext={0x101, 0x1}, 0x100040, 0xffffffff, 0xfffffffa, 0xb, 0xda0, 0xffffffff, 0x205, 0x0, 0x405, 0x0, 0x8000000000000001}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 0s ago: executing program 1 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sysinfo(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): 24] dump_stack+0x15/0x1b [ 117.178967][ T7224] should_fail_ex+0x265/0x280 [ 117.178997][ T7224] should_fail+0xb/0x20 [ 117.179023][ T7224] should_fail_usercopy+0x1a/0x20 [ 117.179073][ T7224] strncpy_from_user+0x27/0x260 [ 117.179167][ T7224] __se_sys_memfd_create+0x206/0x6b0 [ 117.179212][ T7224] __x64_sys_memfd_create+0x31/0x40 [ 117.179440][ T7224] x64_sys_call+0x28cb/0x3000 [ 117.179473][ T7224] do_syscall_64+0xca/0x2b0 [ 117.179637][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.179656][ T7224] RIP: 0033:0x7f1a59f4f749 [ 117.179669][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.179707][ T7224] RSP: 002b:00007f1a589b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 117.179729][ T7224] RAX: ffffffffffffffda RBX: 000000000000062c RCX: 00007f1a59f4f749 [ 117.179743][ T7224] RDX: 00007f1a589b6ef0 RSI: 0000000000000000 RDI: 00007f1a59fd4960 [ 117.179758][ T7224] RBP: 00002000000000c0 R08: 00007f1a589b6bb7 R09: 00007f1a589b6e40 [ 117.179771][ T7224] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 117.179785][ T7224] R13: 00007f1a589b6ef0 R14: 00007f1a589b6eb0 R15: 0000200000000040 [ 117.179806][ T7224] [ 117.392659][ T7230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1341'. [ 117.402315][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1341'. [ 117.411368][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1341'. [ 117.648524][ T7239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 117.700191][ T3482] hid_parser_main: 11 callbacks suppressed [ 117.700213][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 117.713953][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 117.721764][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.729742][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.737809][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.745558][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.753272][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.760979][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.768697][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.776392][ T3482] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 117.786650][ T3482] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 117.856231][ T7254] FAULT_INJECTION: forcing a failure. [ 117.856231][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 117.868915][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.4.1352 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.868997][ T7254] Tainted: [W]=WARN [ 117.869005][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.869020][ T7254] Call Trace: [ 117.869104][ T7254] [ 117.869113][ T7254] __dump_stack+0x1d/0x30 [ 117.869155][ T7254] dump_stack_lvl+0x95/0xd0 [ 117.869183][ T7254] dump_stack+0x15/0x1b [ 117.869273][ T7254] should_fail_ex+0x265/0x280 [ 117.869303][ T7254] should_failslab+0x8c/0xb0 [ 117.869327][ T7254] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 117.869350][ T7254] ? __alloc_skb+0x2ff/0x4b0 [ 117.869410][ T7254] __alloc_skb+0x2ff/0x4b0 [ 117.869432][ T7254] ? __alloc_skb+0x228/0x4b0 [ 117.869457][ T7254] netlink_alloc_large_skb+0xbf/0xf0 [ 117.869527][ T7254] netlink_sendmsg+0x3cf/0x6b0 [ 117.869582][ T7254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.869694][ T7254] __sock_sendmsg+0x145/0x180 [ 117.869715][ T7254] ____sys_sendmsg+0x31e/0x4a0 [ 117.869751][ T7254] ___sys_sendmsg+0x17b/0x1d0 [ 117.869842][ T7254] __x64_sys_sendmsg+0xd4/0x160 [ 117.869872][ T7254] x64_sys_call+0x17ba/0x3000 [ 117.869972][ T7254] do_syscall_64+0xca/0x2b0 [ 117.870037][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.870062][ T7254] RIP: 0033:0x7fd4fdabf749 [ 117.870080][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.870123][ T7254] RSP: 002b:00007fd4fc527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.870140][ T7254] RAX: ffffffffffffffda RBX: 00007fd4fdd15fa0 RCX: 00007fd4fdabf749 [ 117.870152][ T7254] RDX: 0000000000042094 RSI: 0000200000000140 RDI: 0000000000000003 [ 117.870163][ T7254] RBP: 00007fd4fc527090 R08: 0000000000000000 R09: 0000000000000000 [ 117.870174][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.870185][ T7254] R13: 00007fd4fdd16038 R14: 00007fd4fdd15fa0 R15: 00007fff3ffd93b8 [ 117.870212][ T7254] [ 118.338742][ T7269] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.348699][ T7269] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.395937][ T7269] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.405937][ T7269] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.475391][ T7269] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.485332][ T7269] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.596702][ T7269] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.606612][ T7269] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.703811][ T887] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.712122][ T887] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.733027][ T887] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.741412][ T887] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.785380][ T887] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.793717][ T887] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.838341][ T7285] tipc: Enabled bearer , priority 0 [ 118.845698][ T7284] tipc: Resetting bearer [ 118.859328][ T7284] tipc: Disabling bearer [ 118.872979][ T887] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.881442][ T887] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.015325][ T7287] tipc: Enabled bearer , priority 0 [ 119.117482][ T7283] tipc: Resetting bearer [ 119.129729][ T7283] tipc: Disabling bearer [ 119.136738][ T7291] tipc: Enabled bearer , priority 0 [ 119.198297][ T7288] tipc: Resetting bearer [ 119.217258][ T7288] tipc: Disabling bearer [ 119.277362][ T9] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 119.324939][ T7298] fido_id[7298]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.454546][ T7304] siw: device registration error -23 [ 119.512264][ T7312] tipc: Enabled bearer , priority 0 [ 119.519638][ T7311] tipc: Resetting bearer [ 119.553047][ T7311] tipc: Disabling bearer [ 119.556697][ T3320] block device autoloading is deprecated and will be removed. [ 119.559664][ T7310] block device autoloading is deprecated and will be removed. [ 119.875457][ T7330] geneve2: entered promiscuous mode [ 119.880804][ T7330] geneve2: entered allmulticast mode [ 119.982636][ T7347] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1387'. [ 120.023429][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1387'. [ 120.032480][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1387'. [ 120.081109][ T7346] tipc: Enabled bearer , priority 0 [ 120.088626][ T7345] tipc: Resetting bearer [ 120.102482][ T7345] tipc: Disabling bearer [ 120.333970][ T3424] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 120.417451][ T7367] fido_id[7367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.672906][ T7380] loop3: detected capacity change from 0 to 2048 [ 120.734405][ T3309] loop3: p1 < > p4 [ 120.739187][ T3309] loop3: p4 size 8388608 extends beyond EOD, truncated [ 120.748603][ T7380] loop3: p1 < > p4 [ 120.756500][ T7380] loop3: p4 size 8388608 extends beyond EOD, truncated [ 120.766062][ T3005] udevd[3005]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 120.774929][ T3005] udevd[3005]: worker [3309] failed while handling '/devices/virtual/block/loop3' [ 120.807647][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 120.818061][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 120.841076][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 120.851402][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 120.935890][ T7386] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.063874][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 121.063890][ T29] audit: type=1326 audit(1767918664.574:21188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23bcf265e7 code=0x7ffc0000 [ 121.126434][ T7400] tipc: Enabled bearer , priority 0 [ 121.138288][ T29] audit: type=1326 audit(1767918664.604:21189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ba86a2005 code=0x7ffc0000 [ 121.161864][ T29] audit: type=1326 audit(1767918664.604:21190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23bcecb829 code=0x7ffc0000 [ 121.185422][ T29] audit: type=1326 audit(1767918664.604:21191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23bcf265e7 code=0x7ffc0000 [ 121.208870][ T29] audit: type=1326 audit(1767918664.604:21192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23bcecb829 code=0x7ffc0000 [ 121.232335][ T29] audit: type=1326 audit(1767918664.604:21193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f23bcf2f749 code=0x7ffc0000 [ 121.255740][ T29] audit: type=1326 audit(1767918664.614:21194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.0.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ba86a2005 code=0x7ffc0000 [ 121.279286][ T29] audit: type=1326 audit(1767918664.614:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23bcf265e7 code=0x7ffc0000 [ 121.302792][ T29] audit: type=1326 audit(1767918664.614:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23bcecb829 code=0x7ffc0000 [ 121.326347][ T29] audit: type=1326 audit(1767918664.614:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7354 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f23bcf2f749 code=0x7ffc0000 [ 121.350486][ T7396] tipc: Resetting bearer [ 121.366639][ T7396] tipc: Disabling bearer [ 121.511824][ T7417] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.531294][ T7420] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.558823][ T9] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 121.613506][ T7427] fido_id[7427]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.669422][ T7436] FAULT_INJECTION: forcing a failure. [ 121.669422][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 121.682154][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.3.1419 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.682181][ T7436] Tainted: [W]=WARN [ 121.682188][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.682259][ T7436] Call Trace: [ 121.682266][ T7436] [ 121.682274][ T7436] __dump_stack+0x1d/0x30 [ 121.682310][ T7436] dump_stack_lvl+0x95/0xd0 [ 121.682336][ T7436] dump_stack+0x15/0x1b [ 121.682385][ T7436] should_fail_ex+0x265/0x280 [ 121.682412][ T7436] should_failslab+0x8c/0xb0 [ 121.682437][ T7436] kmem_cache_alloc_noprof+0x69/0x4b0 [ 121.682459][ T7436] ? audit_log_start+0x342/0x720 [ 121.682477][ T7436] audit_log_start+0x342/0x720 [ 121.682563][ T7436] ? kstrtouint+0x76/0xc0 [ 121.682586][ T7436] audit_seccomp+0x48/0x100 [ 121.682659][ T7436] ? __seccomp_filter+0x832/0x1260 [ 121.682689][ T7436] __seccomp_filter+0x843/0x1260 [ 121.682713][ T7436] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.682806][ T7436] ? vfs_write+0x7e8/0x960 [ 121.682827][ T7436] ? __rcu_read_unlock+0x4f/0x70 [ 121.682851][ T7436] ? __fget_files+0x184/0x1c0 [ 121.682954][ T7436] __secure_computing+0x82/0x150 [ 121.682985][ T7436] syscall_trace_enter+0xcf/0x1e0 [ 121.683059][ T7436] do_syscall_64+0xa4/0x2b0 [ 121.683094][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.683155][ T7436] RIP: 0033:0x7f1a59f4f749 [ 121.683177][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.683199][ T7436] RSP: 002b:00007f1a589b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 121.683262][ T7436] RAX: ffffffffffffffda RBX: 00007f1a5a1a5fa0 RCX: 00007f1a59f4f749 [ 121.683276][ T7436] RDX: ffffffffffffffa9 RSI: 0000200000000080 RDI: 0000000000000006 [ 121.683290][ T7436] RBP: 00007f1a589b7090 R08: 0000000000000000 R09: 0000000000001500 [ 121.683337][ T7436] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 121.683352][ T7436] R13: 00007f1a5a1a6038 R14: 00007f1a5a1a5fa0 R15: 00007ffc4becbd68 [ 121.683411][ T7436] [ 121.833428][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.898355][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.946143][ T7429] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 121.954664][ T7429] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 122.552973][ T7458] lo speed is unknown, defaulting to 1000 [ 122.751788][ T7482] syz_tun: entered allmulticast mode [ 122.825309][ T7481] syz_tun: left allmulticast mode [ 122.863096][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.872411][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.911412][ T7471] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 122.920000][ T7471] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 123.065485][ T7496] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.194363][ T7503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 123.938227][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.946723][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.990055][ T7530] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 123.998668][ T7530] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 124.112143][ T7539] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 124.205449][ T7551] siw: device registration error -23 [ 124.264854][ T7554] siw: device registration error -23 [ 124.620845][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1473'. [ 124.630511][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1473'. [ 124.639628][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1473'. [ 124.720187][ T9] hid_parser_main: 74 callbacks suppressed [ 124.720203][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 124.733788][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 124.741435][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.749109][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.756864][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.764658][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.772333][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.780017][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.787691][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.795389][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 124.807132][ T9] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 124.821512][ T3005] udevd[3005]: worker [3628] terminated by signal 33 (Unknown signal 33) [ 124.830687][ T3005] udevd[3005]: worker [3628] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.0011/hidraw/hidraw0' [ 124.900364][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.917068][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.034219][ T7589] siw: device registration error -23 [ 125.205419][ T7598] siw: device registration error -23 [ 125.312650][ T7609] tipc: Enabled bearer , priority 0 [ 125.320397][ T7607] tipc: Resetting bearer [ 125.335289][ T7607] tipc: Disabling bearer [ 125.435156][ T7613] geneve2: entered promiscuous mode [ 125.440535][ T7613] geneve2: entered allmulticast mode [ 125.716943][ T7617] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 125.909467][ T7622] FAULT_INJECTION: forcing a failure. [ 125.909467][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.922720][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.1.1493 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.922753][ T7622] Tainted: [W]=WARN [ 125.922760][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.922823][ T7622] Call Trace: [ 125.922830][ T7622] [ 125.922837][ T7622] __dump_stack+0x1d/0x30 [ 125.922864][ T7622] dump_stack_lvl+0x95/0xd0 [ 125.922884][ T7622] dump_stack+0x15/0x1b [ 125.922900][ T7622] should_fail_ex+0x265/0x280 [ 125.922975][ T7622] should_fail+0xb/0x20 [ 125.922995][ T7622] should_fail_usercopy+0x1a/0x20 [ 125.923021][ T7622] strncpy_from_user+0x27/0x260 [ 125.923150][ T7622] getname_flags+0xae/0x3b0 [ 125.923174][ T7622] user_path_at+0x28/0x130 [ 125.923200][ T7622] do_utimes+0xd9/0x210 [ 125.923225][ T7622] __x64_sys_utimes+0xc6/0x180 [ 125.923254][ T7622] ? syscall_trace_enter+0x102/0x1e0 [ 125.923287][ T7622] x64_sys_call+0x20ac/0x3000 [ 125.923313][ T7622] do_syscall_64+0xca/0x2b0 [ 125.923349][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.923444][ T7622] RIP: 0033:0x7f23bcf2f749 [ 125.923456][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.923472][ T7622] RSP: 002b:00007f23bb997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 125.923495][ T7622] RAX: ffffffffffffffda RBX: 00007f23bd185fa0 RCX: 00007f23bcf2f749 [ 125.923531][ T7622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 125.923543][ T7622] RBP: 00007f23bb997090 R08: 0000000000000000 R09: 0000000000000000 [ 125.923555][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.923567][ T7622] R13: 00007f23bd186038 R14: 00007f23bd185fa0 R15: 00007fffb965c988 [ 125.923639][ T7622] [ 126.100432][ T29] kauditd_printk_skb: 3143 callbacks suppressed [ 126.100448][ T29] audit: type=1326 audit(1767918669.414:24339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.130315][ T29] audit: type=1326 audit(1767918669.414:24340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.153874][ T29] audit: type=1326 audit(1767918669.414:24341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.177448][ T29] audit: type=1326 audit(1767918669.414:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.0.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba86665e7 code=0x7ffc0000 [ 126.200854][ T29] audit: type=1326 audit(1767918669.414:24344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.0.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ba860b829 code=0x7ffc0000 [ 126.224382][ T29] audit: type=1326 audit(1767918669.414:24345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7599 comm="syz.0.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7ba866f749 code=0x7ffc0000 [ 126.247875][ T29] audit: type=1326 audit(1767918669.414:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.271463][ T29] audit: type=1326 audit(1767918669.414:24346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.294988][ T29] audit: type=1326 audit(1767918669.414:24347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.318516][ T29] audit: type=1326 audit(1767918669.414:24348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 126.451554][ T7632] tipc: Enabled bearer , priority 0 [ 126.475284][ T7631] tipc: Resetting bearer [ 126.484747][ T9] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 126.511569][ T7631] tipc: Disabling bearer [ 126.534703][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.583637][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.602279][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.212765][ T7664] SELinux: security_context_str_to_sid () failed with errno=-22 [ 127.512843][ T7688] SELinux: security_context_str_to_sid () failed with errno=-22 [ 127.583396][ T7693] tipc: Started in network mode [ 127.588413][ T7693] tipc: Node identity 728eaa768a19, cluster identity 4711 [ 127.595643][ T7693] tipc: Enabled bearer , priority 0 [ 127.604576][ T7692] tipc: Resetting bearer [ 127.618059][ T7692] tipc: Disabling bearer [ 127.671498][ T7700] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 127.671498][ T7700] program syz.5.1526 not setting count and/or reply_len properly [ 127.696778][ T7700] __nla_validate_parse: 5 callbacks suppressed [ 127.696789][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'. [ 127.712326][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.719759][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.728407][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.735883][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.778975][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 127.925754][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 127.980222][ T7713] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.020915][ T7715] sctp: [Deprecated]: syz.5.1533 (pid 7715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.020915][ T7715] Use struct sctp_sack_info instead [ 128.073226][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 128.134859][ T7729] tipc: Enabled bearer , priority 0 [ 128.151303][ T7728] tipc: Resetting bearer [ 128.183277][ T7728] tipc: Disabling bearer [ 128.252423][ T7742] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.260524][ T7738] syz_tun: entered allmulticast mode [ 128.278692][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 128.291397][ T7738] syz_tun (unregistering): left allmulticast mode [ 128.584288][ T7764] siw: device registration error -23 [ 128.614358][ T3638] IPVS: starting estimator thread 0... [ 128.703715][ T7770] IPVS: using max 2112 ests per chain, 105600 per kthread [ 128.927063][ T9] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 128.962754][ T7799] fido_id[7799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.005649][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 129.015499][ T7806] FAULT_INJECTION: forcing a failure. [ 129.015499][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 129.028250][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.3.1568 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.028309][ T7806] Tainted: [W]=WARN [ 129.028317][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.028331][ T7806] Call Trace: [ 129.028337][ T7806] [ 129.028345][ T7806] __dump_stack+0x1d/0x30 [ 129.028367][ T7806] dump_stack_lvl+0x95/0xd0 [ 129.028455][ T7806] dump_stack+0x15/0x1b [ 129.028486][ T7806] should_fail_ex+0x265/0x280 [ 129.028508][ T7806] should_failslab+0x8c/0xb0 [ 129.028529][ T7806] kmem_cache_alloc_noprof+0x69/0x4b0 [ 129.028601][ T7806] ? skb_clone+0x151/0x1f0 [ 129.028636][ T7806] skb_clone+0x151/0x1f0 [ 129.028735][ T7806] __netlink_deliver_tap+0x2c9/0x500 [ 129.028767][ T7806] ? netlink_attachskb+0x2cc/0x650 [ 129.028842][ T7806] netlink_sendskb+0x126/0x150 [ 129.028869][ T7806] netlink_unicast+0x2a2/0x690 [ 129.028962][ T7806] nl80211_get_reg_do+0x320/0x350 [ 129.029049][ T7806] ? rtnl_unlock+0xe/0x20 [ 129.029081][ T7806] genl_family_rcv_msg_doit+0x143/0x1b0 [ 129.029110][ T7806] genl_rcv_msg+0x422/0x460 [ 129.029132][ T7806] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.029172][ T7806] ? __pfx_nl80211_get_reg_do+0x10/0x10 [ 129.029209][ T7806] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.029250][ T7806] netlink_rcv_skb+0x123/0x220 [ 129.029286][ T7806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.029376][ T7806] genl_rcv+0x28/0x40 [ 129.029400][ T7806] netlink_unicast+0x5c0/0x690 [ 129.029513][ T7806] netlink_sendmsg+0x58b/0x6b0 [ 129.029570][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.029617][ T7806] __sock_sendmsg+0x145/0x180 [ 129.029637][ T7806] ____sys_sendmsg+0x31e/0x4a0 [ 129.029688][ T7806] ___sys_sendmsg+0x17b/0x1d0 [ 129.029732][ T7806] __x64_sys_sendmsg+0xd4/0x160 [ 129.029807][ T7806] x64_sys_call+0x17ba/0x3000 [ 129.029833][ T7806] do_syscall_64+0xca/0x2b0 [ 129.029869][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.029906][ T7806] RIP: 0033:0x7f1a59f4f749 [ 129.029919][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.029936][ T7806] RSP: 002b:00007f1a589b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.029959][ T7806] RAX: ffffffffffffffda RBX: 00007f1a5a1a5fa0 RCX: 00007f1a59f4f749 [ 129.029971][ T7806] RDX: 0000000000048080 RSI: 00002000000004c0 RDI: 0000000000000003 [ 129.029982][ T7806] RBP: 00007f1a589b7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.030020][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.030031][ T7806] R13: 00007f1a5a1a6038 R14: 00007f1a5a1a5fa0 R15: 00007ffc4becbd68 [ 129.030049][ T7806] [ 129.377597][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'. [ 129.703455][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.713127][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.772690][ T7829] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 129.781212][ T7829] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 129.854893][ T7857] siw: device registration error -23 [ 129.865990][ T7850] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 129.890595][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1593'. [ 130.011018][ T7871] tipc: Enabled bearer , priority 0 [ 130.018327][ T7870] tipc: Resetting bearer [ 130.036478][ T7870] tipc: Disabling bearer [ 130.099694][ T9] hid_parser_main: 53 callbacks suppressed [ 130.099713][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 130.113416][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 130.121235][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.128928][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.136618][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.144284][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.151987][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.159668][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.167373][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.175116][ T9] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 130.234102][ T9] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 130.271576][ T7877] fido_id[7877]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.354514][ T7879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.361997][ T7879] net_ratelimit: 11 callbacks suppressed [ 130.362007][ T7879] batadv0: mtu less than device minimum [ 130.374023][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.385001][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.395991][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.406927][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.417951][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.428979][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.440037][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.451066][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.462214][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.486996][ T7879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.551414][ T7849] syz.3.1586 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.562421][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.3.1586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.562491][ T7849] Tainted: [W]=WARN [ 130.562497][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.562507][ T7849] Call Trace: [ 130.562513][ T7849] [ 130.562519][ T7849] __dump_stack+0x1d/0x30 [ 130.562545][ T7849] dump_stack_lvl+0x95/0xd0 [ 130.562586][ T7849] dump_stack+0x15/0x1b [ 130.562603][ T7849] dump_header+0x81/0x240 [ 130.562620][ T7849] oom_kill_process+0x295/0x350 [ 130.562644][ T7849] out_of_memory+0x97b/0xb80 [ 130.562735][ T7849] try_charge_memcg+0x610/0xa10 [ 130.562773][ T7849] charge_memcg+0x51/0xc0 [ 130.562852][ T7849] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 130.562906][ T7849] __read_swap_cache_async+0x17b/0x2d0 [ 130.562948][ T7849] swap_cluster_readahead+0x262/0x3c0 [ 130.563067][ T7849] swapin_readahead+0xde/0x820 [ 130.563096][ T7849] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 130.563125][ T7849] ? __rcu_read_unlock+0x34/0x70 [ 130.563149][ T7849] ? __rcu_read_unlock+0x4f/0x70 [ 130.563233][ T7849] ? swap_cache_get_folio+0x277/0x280 [ 130.563266][ T7849] do_swap_page+0x2b4/0x21e0 [ 130.563360][ T7849] ? __pfx_default_wake_function+0x10/0x10 [ 130.563397][ T7849] handle_mm_fault+0x9d8/0x2c60 [ 130.563465][ T7849] do_user_addr_fault+0x630/0x1080 [ 130.563503][ T7849] exc_page_fault+0x62/0xa0 [ 130.563585][ T7849] asm_exc_page_fault+0x26/0x30 [ 130.563692][ T7849] RIP: 0033:0x7f1a59e21a20 [ 130.563726][ T7849] Code: 05 5d 3d eb 00 48 83 ed 01 83 e5 03 c6 40 01 00 0f 85 93 fa ff ff 48 8b 05 45 3d eb 00 c6 40 02 00 e9 83 fa ff ff 0f 1f 40 00 fb d4 00 00 e9 45 f9 ff ff 66 0f 1f 44 00 00 e8 3b dd 00 00 e9 [ 130.563750][ T7849] RSP: 002b:00007ffc4becbe60 EFLAGS: 00010202 [ 130.563770][ T7849] RAX: 00007f1a5a1a5fa0 RBX: 00007f1a5acd5720 RCX: 0000000000000001 [ 130.563787][ T7849] RDX: 00007f1a5a1a6038 RSI: 0000000000000011 RDI: 00007f1a5acd5720 [ 130.563815][ T7849] RBP: 00007f1a5a1a6038 R08: 0000000000000001 R09: 0000000000000026 [ 130.563832][ T7849] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000000001 [ 130.563849][ T7849] R13: 0000000000000026 R14: ffffffffffffffff R15: 00007ffc4becbfe0 [ 130.563874][ T7849] [ 130.776072][ T7849] memory: usage 307200kB, limit 307200kB, failcnt 420 [ 130.782840][ T7849] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 130.790811][ T7849] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 130.798118][ T7849] Memory cgroup stats for /syz3: [ 130.800589][ T7849] cache 0 [ 130.808569][ T7849] rss 0 [ 130.811335][ T7849] shmem 0 [ 130.814301][ T7849] mapped_file 0 [ 130.817783][ T7849] dirty 0 [ 130.820827][ T7849] writeback 0 [ 130.824133][ T7849] workingset_refault_anon 62 [ 130.828753][ T7849] workingset_refault_file 901 [ 130.833446][ T7849] swap 204800 [ 130.836791][ T7849] swapcached 4096 [ 130.840431][ T7849] pgpgin 104519 [ 130.844031][ T7849] pgpgout 104518 [ 130.847608][ T7849] pgfault 93493 [ 130.851063][ T7849] pgmajfault 33 [ 130.854525][ T7849] inactive_anon 4096 [ 130.858416][ T7849] active_anon 0 [ 130.861887][ T7849] inactive_file 0 [ 130.865554][ T7849] active_file 0 [ 130.869028][ T7849] unevictable 0 [ 130.872487][ T7849] hierarchical_memory_limit 314572800 [ 130.877881][ T7849] hierarchical_memsw_limit 9223372036854771712 [ 130.884205][ T7849] total_cache 0 [ 130.887668][ T7849] total_rss 0 [ 130.890982][ T7849] total_shmem 0 [ 130.894483][ T7849] total_mapped_file 0 [ 130.898493][ T7849] total_dirty 0 [ 130.901959][ T7849] total_writeback 0 [ 130.905810][ T7849] total_workingset_refault_anon 62 [ 130.911057][ T7849] total_workingset_refault_file 901 [ 130.916398][ T7849] total_swap 204800 [ 130.920251][ T7849] total_swapcached 4096 [ 130.924465][ T7849] total_pgpgin 104519 [ 130.928454][ T7849] total_pgpgout 104518 [ 130.932585][ T7849] total_pgfault 93493 [ 130.936637][ T7849] total_pgmajfault 33 [ 130.940673][ T7849] total_inactive_anon 4096 [ 130.945109][ T7849] total_active_anon 0 [ 130.949109][ T7849] total_inactive_file 0 [ 130.953318][ T7849] total_active_file 0 [ 130.957391][ T7849] total_unevictable 0 [ 130.961447][ T7849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1586,pid=7849,uid=0 [ 130.969118][ T7884] syzkaller1: entered promiscuous mode [ 130.976270][ T7849] Memory cgroup out of memory: Killed process 7849 (syz.3.1586) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:136kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 130.981563][ T7884] syzkaller1: entered allmulticast mode [ 131.114167][ T7896] siw: device registration error -23 [ 131.175834][ T3424] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 131.225086][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.235903][ T29] kauditd_printk_skb: 2514 callbacks suppressed [ 131.235916][ T29] audit: type=1326 audit(1767918674.744:26863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.243934][ T7903] tipc: Enabled bearer , priority 0 [ 131.284597][ T7912] fido_id[7912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.306884][ T29] audit: type=1326 audit(1767918674.774:26864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.330450][ T29] audit: type=1326 audit(1767918674.774:26865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.354096][ T29] audit: type=1326 audit(1767918674.774:26866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.377677][ T29] audit: type=1326 audit(1767918674.774:26867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.401269][ T29] audit: type=1326 audit(1767918674.774:26868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.424875][ T29] audit: type=1326 audit(1767918674.774:26869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.448506][ T29] audit: type=1326 audit(1767918674.774:26870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 131.472013][ T29] audit: type=1326 audit(1767918674.774:26871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4fdab65e7 code=0x7ffc0000 [ 131.495528][ T29] audit: type=1326 audit(1767918674.774:26872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd4fda5b829 code=0x7ffc0000 [ 131.519698][ T7902] tipc: Resetting bearer [ 131.544993][ T7902] tipc: Disabling bearer [ 131.714214][ T7928] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 132.332019][ T7928] syz.5.1617 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 132.346203][ T7928] CPU: 1 UID: 0 PID: 7928 Comm: syz.5.1617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.346270][ T7928] Tainted: [W]=WARN [ 132.346276][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.346287][ T7928] Call Trace: [ 132.346293][ T7928] [ 132.346300][ T7928] __dump_stack+0x1d/0x30 [ 132.346355][ T7928] dump_stack_lvl+0x95/0xd0 [ 132.346374][ T7928] dump_stack+0x15/0x1b [ 132.346458][ T7928] dump_header+0x81/0x240 [ 132.346542][ T7928] oom_kill_process+0x295/0x350 [ 132.346567][ T7928] out_of_memory+0x97b/0xb80 [ 132.346588][ T7928] try_charge_memcg+0x610/0xa10 [ 132.346703][ T7928] obj_cgroup_charge_pages+0xa6/0x150 [ 132.346732][ T7928] __memcg_kmem_charge_page+0x9f/0x170 [ 132.346789][ T7928] __alloc_frozen_pages_noprof+0x18f/0x360 [ 132.346824][ T7928] alloc_pages_mpol+0xb3/0x260 [ 132.346889][ T7928] alloc_pages_noprof+0x90/0x130 [ 132.346925][ T7928] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 132.346987][ T7928] __kvmalloc_node_noprof+0x492/0x6b0 [ 132.347052][ T7928] ? ip_set_alloc+0x24/0x30 [ 132.347151][ T7928] ? ip_set_alloc+0x24/0x30 [ 132.347193][ T7928] ip_set_alloc+0x24/0x30 [ 132.347342][ T7928] hash_netiface_create+0x282/0x740 [ 132.347397][ T7928] ? __pfx_hash_netiface_create+0x10/0x10 [ 132.347512][ T7928] ip_set_create+0x3cc/0x970 [ 132.347645][ T7928] ? __nla_parse+0x40/0x60 [ 132.347682][ T7928] nfnetlink_rcv_msg+0x4c6/0x590 [ 132.347736][ T7928] netlink_rcv_skb+0x123/0x220 [ 132.347771][ T7928] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.347917][ T7928] nfnetlink_rcv+0x167/0x16c0 [ 132.347941][ T7928] ? kmem_cache_free+0xe3/0x3a0 [ 132.347966][ T7928] ? __kfree_skb+0x109/0x150 [ 132.347999][ T7928] ? nlmon_xmit+0x4f/0x60 [ 132.348024][ T7928] ? consume_skb+0x49/0x150 [ 132.348135][ T7928] ? nlmon_xmit+0x4f/0x60 [ 132.348157][ T7928] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 132.348192][ T7928] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 132.348316][ T7928] ? __dev_queue_xmit+0x148/0x1ee0 [ 132.348356][ T7928] ? ref_tracker_free+0x37d/0x3e0 [ 132.348404][ T7928] ? __netlink_deliver_tap+0x4dc/0x500 [ 132.348451][ T7928] netlink_unicast+0x5c0/0x690 [ 132.348485][ T7928] netlink_sendmsg+0x58b/0x6b0 [ 132.348566][ T7928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.348608][ T7928] __sock_sendmsg+0x145/0x180 [ 132.348634][ T7928] ____sys_sendmsg+0x31e/0x4a0 [ 132.348711][ T7928] ___sys_sendmsg+0x17b/0x1d0 [ 132.348754][ T7928] __x64_sys_sendmsg+0xd4/0x160 [ 132.348845][ T7928] x64_sys_call+0x17ba/0x3000 [ 132.348871][ T7928] do_syscall_64+0xca/0x2b0 [ 132.348918][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.348947][ T7928] RIP: 0033:0x7f37db10f749 [ 132.348966][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.349070][ T7928] RSP: 002b:00007f37d9b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.349093][ T7928] RAX: ffffffffffffffda RBX: 00007f37db365fa0 RCX: 00007f37db10f749 [ 132.349109][ T7928] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 132.349125][ T7928] RBP: 00007f37db193f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.349141][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.349158][ T7928] R13: 00007f37db366038 R14: 00007f37db365fa0 R15: 00007ffdac962108 [ 132.349229][ T7928] [ 132.349238][ T7928] memory: usage 307200kB, limit 307200kB, failcnt 258 [ 132.684165][ T7928] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 132.692162][ T7928] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 132.699487][ T7928] Memory cgroup stats for /syz5: [ 132.699670][ T7928] cache 0 [ 132.707637][ T7928] rss 0 [ 132.710411][ T7928] shmem 0 [ 132.713359][ T7928] mapped_file 0 [ 132.716869][ T7928] dirty 0 [ 132.719826][ T7928] writeback 0 [ 132.723150][ T7928] workingset_refault_anon 89 [ 132.727786][ T7928] workingset_refault_file 1728 [ 132.732563][ T7928] swap 380928 [ 132.735878][ T7928] swapcached 0 [ 132.739303][ T7928] pgpgin 111160 [ 132.742848][ T7928] pgpgout 111159 [ 132.746486][ T7928] pgfault 68507 [ 132.750005][ T7928] pgmajfault 48 [ 132.753466][ T7928] inactive_anon 0 [ 132.757135][ T7928] active_anon 0 [ 132.760598][ T7928] inactive_file 0 [ 132.764366][ T7928] active_file 4096 [ 132.768092][ T7928] unevictable 0 [ 132.771558][ T7928] hierarchical_memory_limit 314572800 [ 132.776974][ T7928] hierarchical_memsw_limit 9223372036854771712 [ 132.783178][ T7928] total_cache 0 [ 132.786668][ T7928] total_rss 0 [ 132.789955][ T7928] total_shmem 0 [ 132.793416][ T7928] total_mapped_file 0 [ 132.797435][ T7928] total_dirty 0 [ 132.800945][ T7928] total_writeback 0 [ 132.804794][ T7928] total_workingset_refault_anon 89 [ 132.809953][ T7928] total_workingset_refault_file 1728 [ 132.815317][ T7928] total_swap 380928 [ 132.819131][ T7928] total_swapcached 0 [ 132.823039][ T7928] total_pgpgin 111160 [ 132.827121][ T7928] total_pgpgout 111159 [ 132.831195][ T7928] total_pgfault 68507 [ 132.835234][ T7928] total_pgmajfault 48 [ 132.839300][ T7928] total_inactive_anon 0 [ 132.843470][ T7928] total_active_anon 0 [ 132.847534][ T7928] total_inactive_file 0 [ 132.851738][ T7928] total_active_file 4096 [ 132.856050][ T7928] total_unevictable 0 [ 132.860108][ T7928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1617,pid=7927,uid=0 [ 132.874828][ T7928] Memory cgroup out of memory: Killed process 7927 (syz.5.1617) total-vm:93968kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:216kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 133.121923][ T7969] tipc: Enabled bearer , priority 0 [ 133.129535][ T7967] tipc: Resetting bearer [ 133.165866][ T7967] tipc: Disabling bearer [ 133.197392][ T3424] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 133.233095][ T7973] fido_id[7973]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.240746][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.260733][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.314827][ T7965] __nla_validate_parse: 7 callbacks suppressed [ 133.314896][ T7965] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 133.329654][ T7965] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 133.354417][ T7980] siw: device registration error -23 [ 133.465139][ T7985] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.517807][ T7985] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.556201][ T7985] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.615761][ T7985] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.685115][ T5897] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.703349][ T5897] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.712395][ T5897] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.727648][ T5897] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.834912][ T7994] geneve2: entered promiscuous mode [ 133.840191][ T7994] geneve2: entered allmulticast mode [ 133.914067][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1641'. [ 134.058261][ T8002] tipc: Enabled bearer , priority 0 [ 134.077118][ T8001] tipc: Resetting bearer [ 134.104591][ T8001] tipc: Disabling bearer [ 134.147223][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 134.158223][ T3323] CPU: 0 UID: 0 PID: 3323 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.158248][ T3323] Tainted: [W]=WARN [ 134.158254][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.158321][ T3323] Call Trace: [ 134.158325][ T3323] [ 134.158331][ T3323] __dump_stack+0x1d/0x30 [ 134.158399][ T3323] dump_stack_lvl+0x95/0xd0 [ 134.158428][ T3323] dump_stack+0x15/0x1b [ 134.158473][ T3323] dump_header+0x81/0x240 [ 134.158498][ T3323] oom_kill_process+0x295/0x350 [ 134.158521][ T3323] out_of_memory+0x97b/0xb80 [ 134.158544][ T3323] try_charge_memcg+0x610/0xa10 [ 134.158617][ T3323] charge_memcg+0x51/0xc0 [ 134.158647][ T3323] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 134.158727][ T3323] __read_swap_cache_async+0x17b/0x2d0 [ 134.158819][ T3323] swap_cluster_readahead+0x362/0x3c0 [ 134.158865][ T3323] swapin_readahead+0xde/0x820 [ 134.158959][ T3323] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 134.158978][ T3323] ? bpf_get_stack_raw_tp+0x106/0x130 [ 134.159017][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 134.159036][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 134.159055][ T3323] ? swap_cache_get_folio+0x277/0x280 [ 134.159171][ T3323] do_swap_page+0x2b4/0x21e0 [ 134.159203][ T3323] ? _raw_spin_unlock+0x26/0x50 [ 134.159233][ T3323] ? __schedule+0x85f/0xcd0 [ 134.159312][ T3323] ? __pfx_default_wake_function+0x10/0x10 [ 134.159352][ T3323] handle_mm_fault+0x9d8/0x2c60 [ 134.159401][ T3323] do_user_addr_fault+0x630/0x1080 [ 134.159462][ T3323] exc_page_fault+0x62/0xa0 [ 134.159576][ T3323] asm_exc_page_fault+0x26/0x30 [ 134.159610][ T3323] RIP: 0033:0x7fd4fdaf1fc5 [ 134.159626][ T3323] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 134.159641][ T3323] RSP: 002b:00007fff3ffd96f8 EFLAGS: 00010246 [ 134.159654][ T3323] RAX: 0000000000000000 RBX: 00000000000002e4 RCX: 00007fd4fdaf1fc3 [ 134.159665][ T3323] RDX: 00007fff3ffd9710 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.159730][ T3323] RBP: 00007fff3ffd977c R08: 00000000045ce15f R09: 0000000000000000 [ 134.159744][ T3323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 134.159757][ T3323] R13: 00000000000927c0 R14: 0000000000020ae8 R15: 00007fff3ffd97d0 [ 134.159779][ T3323] [ 134.159786][ T3323] memory: usage 295760kB, limit 307200kB, failcnt 863 [ 134.395133][ T3323] memory+swap: usage 243408kB, limit 9007199254740988kB, failcnt 0 [ 134.403115][ T3323] kmem: usage 243064kB, limit 9007199254740988kB, failcnt 0 [ 134.410434][ T3323] Memory cgroup stats for /syz4: [ 134.411193][ T3323] cache 0 [ 134.419189][ T3323] rss 28672 [ 134.422394][ T3323] shmem 0 [ 134.425383][ T3323] mapped_file 0 [ 134.428852][ T3323] dirty 0 [ 134.431797][ T3323] writeback 0 [ 134.435189][ T3323] workingset_refault_anon 200 [ 134.439916][ T3323] workingset_refault_file 1346 [ 134.444877][ T3323] swap 172032 [ 134.448436][ T3323] swapcached 24576 [ 134.452162][ T3323] pgpgin 120911 [ 134.455642][ T3323] pgpgout 120904 [ 134.459199][ T3323] pgfault 123137 [ 134.462777][ T3323] pgmajfault 135 [ 134.466360][ T3323] inactive_anon 16384 [ 134.470360][ T3323] active_anon 12288 [ 134.474239][ T3323] inactive_file 0 [ 134.477923][ T3323] active_file 0 [ 134.481386][ T3323] unevictable 0 [ 134.484890][ T3323] hierarchical_memory_limit 314572800 [ 134.490273][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 134.496459][ T3323] total_cache 0 [ 134.499926][ T3323] total_rss 28672 [ 134.503697][ T3323] total_shmem 0 [ 134.507166][ T3323] total_mapped_file 0 [ 134.511155][ T3323] total_dirty 0 [ 134.514776][ T3323] total_writeback 0 [ 134.518723][ T3323] total_workingset_refault_anon 200 [ 134.524004][ T3323] total_workingset_refault_file 1346 [ 134.529305][ T3323] total_swap 172032 [ 134.533174][ T3323] total_swapcached 24576 [ 134.537433][ T3323] total_pgpgin 120911 [ 134.541415][ T3323] total_pgpgout 120904 [ 134.545514][ T3323] total_pgfault 123137 [ 134.549596][ T3323] total_pgmajfault 135 [ 134.553715][ T3323] total_inactive_anon 16384 [ 134.558221][ T3323] total_active_anon 12288 [ 134.562589][ T3323] total_inactive_file 0 [ 134.566817][ T3323] total_active_file 0 [ 134.570814][ T3323] total_unevictable 0 [ 134.574820][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1637,pid=7987,uid=0 [ 134.589537][ T3323] Memory cgroup out of memory: Killed process 7987 (syz.4.1637) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:88kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 134.714653][ T8013] siw: device registration error -23 [ 134.746668][ T8023] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.756649][ T8023] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 134.870963][ T8023] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 134.881016][ T8023] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 134.900987][ T8035] tipc: Enabled bearer , priority 0 [ 134.908486][ T8033] tipc: Resetting bearer [ 134.920206][ T9] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 134.960752][ T8033] tipc: Disabling bearer [ 134.971962][ T8042] fido_id[8042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.999772][ T8023] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.009760][ T8023] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.021183][ T8039] tipc: Enabled bearer , priority 0 [ 135.029469][ T5906] tipc: Resetting bearer [ 135.044081][ T8038] tipc: Resetting bearer [ 135.089570][ T8038] tipc: Disabling bearer [ 135.097682][ T8023] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.107649][ T8023] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.172143][ T5906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.180514][ T5906] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.211372][ T5906] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.219866][ T5906] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.323652][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.352212][ T5906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.360573][ T5906] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.373623][ T5906] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.381938][ T5906] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 135.578835][ T8064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1667'. [ 135.588803][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1667'. [ 135.597817][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1667'. [ 135.699604][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 135.796470][ T8077] FAULT_INJECTION: forcing a failure. [ 135.796470][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.809710][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.5.1670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.809744][ T8077] Tainted: [W]=WARN [ 135.809778][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.809788][ T8077] Call Trace: [ 135.809794][ T8077] [ 135.809800][ T8077] __dump_stack+0x1d/0x30 [ 135.809822][ T8077] dump_stack_lvl+0x95/0xd0 [ 135.809844][ T8077] dump_stack+0x15/0x1b [ 135.809927][ T8077] should_fail_ex+0x265/0x280 [ 135.809946][ T8077] should_fail+0xb/0x20 [ 135.809967][ T8077] should_fail_usercopy+0x1a/0x20 [ 135.809989][ T8077] strncpy_from_user+0x27/0x260 [ 135.810102][ T8077] getname_flags+0xae/0x3b0 [ 135.810130][ T8077] do_sys_openat2+0x60/0x150 [ 135.810161][ T8077] __x64_sys_openat+0xf2/0x120 [ 135.810239][ T8077] x64_sys_call+0x2b07/0x3000 [ 135.810314][ T8077] do_syscall_64+0xca/0x2b0 [ 135.810351][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.810388][ T8077] RIP: 0033:0x7f37db10f749 [ 135.810404][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.810421][ T8077] RSP: 002b:00007f37d9b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.810436][ T8077] RAX: ffffffffffffffda RBX: 00007f37db366090 RCX: 00007f37db10f749 [ 135.810447][ T8077] RDX: 000000000000c100 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 135.810458][ T8077] RBP: 00007f37d9b56090 R08: 0000000000000000 R09: 0000000000000000 [ 135.810472][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.810500][ T8077] R13: 00007f37db366128 R14: 00007f37db366090 R15: 00007ffdac962108 [ 135.810521][ T8077] [ 136.014619][ T8076] tipc: Enabled bearer , priority 0 [ 136.033544][ T8075] tipc: Resetting bearer [ 136.053266][ T8075] tipc: Disabling bearer [ 136.154968][ T1037] hid_parser_main: 74 callbacks suppressed [ 136.154986][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 136.168711][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 136.176421][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.184139][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.191858][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.199619][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.207395][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.215053][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.220338][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.222696][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.222743][ T1037] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 136.235041][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.254352][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 136.254367][ T29] audit: type=1326 audit(1767918679.764:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a59f465e7 code=0x7ffc0000 [ 136.289268][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1676'. [ 136.293832][ T1037] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 136.310439][ T8091] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.327337][ T8081] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 136.335873][ T8081] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 136.344924][ T29] audit: type=1326 audit(1767918679.794:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.365348][ T8095] udevd[8095]: failed to send result of seq 11984 to main daemon: Connection refused [ 136.368753][ T29] audit: type=1326 audit(1767918679.794:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 136.401393][ T29] audit: type=1326 audit(1767918679.794:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8056 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a59f465e7 code=0x7ffc0000 [ 136.424951][ T29] audit: type=1326 audit(1767918679.794:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.448584][ T29] audit: type=1326 audit(1767918679.794:27611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.472213][ T29] audit: type=1326 audit(1767918679.794:27612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.495768][ T29] audit: type=1326 audit(1767918679.794:27613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.519297][ T29] audit: type=1326 audit(1767918679.794:27614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.542904][ T29] audit: type=1326 audit(1767918679.794:27615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8082 comm="syz.5.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37db142005 code=0x7ffc0000 [ 136.626870][ T8105] tipc: Enabled bearer , priority 0 [ 136.634222][ T8104] tipc: Resetting bearer [ 136.648752][ T8104] tipc: Disabling bearer [ 136.911775][ T8116] tipc: Enabled bearer , priority 0 [ 136.919355][ T8115] tipc: Resetting bearer [ 136.932565][ T8115] tipc: Disabling bearer [ 136.959448][ T8122] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 136.972822][ T8122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.992913][ T8122] bond1: (slave geneve2): making interface the new active one [ 137.003939][ T8122] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 137.294255][ T9] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 137.400227][ T8176] syz_tun: entered allmulticast mode [ 137.406921][ T8175] syz_tun: left allmulticast mode [ 137.430238][ T8162] geneve2: entered promiscuous mode [ 137.435498][ T8162] geneve2: entered allmulticast mode [ 137.484952][ T8181] siw: device registration error -23 [ 137.584816][ T8186] lo speed is unknown, defaulting to 1000 [ 137.960688][ T8219] siw: device registration error -23 [ 139.389376][ T8233] net_ratelimit: 11 callbacks suppressed [ 139.389394][ T8233] veth1_macvtap: mtu less than device minimum [ 139.810681][ T8252] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 139.810681][ T8252] program syz.3.1735 not setting count and/or reply_len properly [ 139.868281][ T8252] __nla_validate_parse: 6 callbacks suppressed [ 139.868300][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 139.884037][ T8252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.891441][ T8252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.004143][ T8252] batman_adv: batadv0: Interface deactivated: dummy0 [ 140.011044][ T8252] batman_adv: batadv0: Removing interface: dummy0 [ 140.804854][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.813412][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.851761][ T8272] netlink: 9087 bytes leftover after parsing attributes in process `syz.0.1743'. [ 140.874488][ T8270] tipc: Enabled bearer , priority 0 [ 140.888868][ T8269] tipc: Resetting bearer [ 140.914704][ T8269] tipc: Disabling bearer [ 141.015850][ T8282] tipc: Enabled bearer , priority 0 [ 141.028656][ T8288] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 141.028656][ T8288] program syz.1.1748 not setting count and/or reply_len properly [ 141.046813][ T8281] tipc: Resetting bearer [ 141.060963][ T8281] tipc: Disabling bearer [ 141.076035][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 141.090032][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.097664][ T8288] batadv0: mtu less than device minimum [ 141.103958][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.114898][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.125852][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.136961][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.148156][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.159182][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.170332][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.181234][ T8288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.183958][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'. [ 141.202335][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.242916][ T8288] batman_adv: batadv0: Interface deactivated: dummy0 [ 141.249802][ T8288] batman_adv: batadv0: Removing interface: dummy0 [ 141.439431][ T8297] lo speed is unknown, defaulting to 1000 [ 141.605646][ T29] kauditd_printk_skb: 2125 callbacks suppressed [ 141.605662][ T29] audit: type=1400 audit(1767918685.114:29741): avc: denied { shutdown } for pid=8302 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.830105][ T29] audit: type=1400 audit(1767918685.294:29742): avc: denied { read } for pid=8302 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.968255][ T29] audit: type=1400 audit(1767918685.474:29743): avc: denied { getattr } for pid=8304 comm="syz.5.1754" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.067139][ T8321] tipc: Enabled bearer , priority 0 [ 142.083266][ T8320] tipc: Resetting bearer [ 142.096949][ T8320] tipc: Disabling bearer [ 142.178785][ T8329] tipc: Enabled bearer , priority 0 [ 142.194094][ T8327] tipc: Resetting bearer [ 142.208646][ T8327] tipc: Disabling bearer [ 142.594344][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.607156][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.656367][ T8335] bridge0: entered promiscuous mode [ 142.673156][ T8335] bridge0: port 3(macvtap1) entered blocking state [ 142.679786][ T8335] bridge0: port 3(macvtap1) entered disabled state [ 142.733165][ T8335] macvtap1: entered allmulticast mode [ 142.738751][ T8335] bridge0: entered allmulticast mode [ 142.810486][ T8335] macvtap1: left allmulticast mode [ 142.815800][ T8335] bridge0: left allmulticast mode [ 142.855205][ T8335] bridge0: left promiscuous mode [ 142.960557][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8353 comm=syz.5.1771 [ 142.964209][ T29] audit: type=1400 audit(1767918686.444:29744): avc: denied { mount } for pid=8352 comm="syz.5.1771" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 142.980301][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8353 comm=syz.5.1771 [ 142.995856][ T29] audit: type=1326 audit(1767918686.454:29745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.031853][ T29] audit: type=1326 audit(1767918686.454:29746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.055409][ T29] audit: type=1326 audit(1767918686.454:29747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.079003][ T29] audit: type=1326 audit(1767918686.454:29748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.102647][ T29] audit: type=1326 audit(1767918686.454:29749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.126271][ T29] audit: type=1326 audit(1767918686.454:29750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 143.198881][ T8369] tipc: Enabled bearer , priority 0 [ 143.206552][ T8368] tipc: Resetting bearer [ 143.214453][ T8365] siw: device registration error -23 [ 143.230282][ T8368] tipc: Disabling bearer [ 143.245689][ T8371] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 143.264541][ T8371] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 143.294660][ T8375] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 143.294660][ T8375] program syz.5.1776 not setting count and/or reply_len properly [ 143.344231][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'. [ 143.643571][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.694951][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'. [ 143.716651][ T8405] tipc: Enabled bearer , priority 0 [ 143.726343][ T8404] tipc: Resetting bearer [ 143.745011][ T8404] tipc: Disabling bearer [ 143.810388][ T8411] tipc: Enabled bearer , priority 0 [ 143.818322][ T8410] tipc: Resetting bearer [ 143.837456][ T8410] tipc: Disabling bearer [ 143.954175][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.977221][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.990619][ T8420] tipc: Enabled bearer , priority 0 [ 143.998230][ T8419] tipc: Resetting bearer [ 144.012988][ T8419] tipc: Disabling bearer [ 144.072180][ T8407] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 144.080836][ T8407] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 144.129895][ T8429] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 144.129895][ T8429] program syz.4.1795 not setting count and/or reply_len properly [ 144.194152][ T8425] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.235836][ T8425] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.254286][ T8436] siw: device registration error -23 [ 144.296709][ T8444] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 144.296709][ T8444] program syz.0.1801 not setting count and/or reply_len properly [ 144.314907][ T8425] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.326517][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 144.336234][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.343718][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.375647][ T8425] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.493302][ T5878] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.543862][ T5878] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.560564][ T5878] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.569943][ T5878] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.629629][ T36] hid_parser_main: 32 callbacks suppressed [ 144.629651][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.642965][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.650368][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.655440][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 144.657791][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.674029][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x2 [ 144.681415][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.688880][ T36] hid-generic 0003:0000:0000.001A: unknown main item tag 0x0 [ 144.696299][ T36] hid-generic 0003:0000:0000.001A: item fetching failed at offset 8/34 [ 144.699645][ T8454] FAULT_INJECTION: forcing a failure. [ 144.699645][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 144.717453][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.1.1804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.717489][ T8454] Tainted: [W]=WARN [ 144.717496][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.717514][ T8454] Call Trace: [ 144.717530][ T8454] [ 144.717538][ T8454] __dump_stack+0x1d/0x30 [ 144.717629][ T8454] dump_stack_lvl+0x95/0xd0 [ 144.717653][ T8454] dump_stack+0x15/0x1b [ 144.717675][ T8454] should_fail_ex+0x265/0x280 [ 144.717738][ T8454] should_failslab+0x8c/0xb0 [ 144.717761][ T8454] __kmalloc_node_noprof+0xbe/0x5c0 [ 144.717787][ T8454] ? crypto_create_tfm_node+0x5c/0x250 [ 144.717820][ T8454] ? crypto_ahash_init_tfm+0x332/0x3e0 [ 144.717911][ T8454] crypto_create_tfm_node+0x5c/0x250 [ 144.717977][ T8454] ? crypto_mod_get+0x5a/0x90 [ 144.718008][ T8454] crypto_spawn_tfm2+0x43/0x80 [ 144.718028][ T8454] crypto_gcm_init_tfm+0x56/0x120 [ 144.718118][ T8454] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 144.718153][ T8454] crypto_aead_init_tfm+0xba/0xd0 [ 144.718226][ T8454] crypto_create_tfm_node+0x108/0x250 [ 144.718262][ T8454] crypto_alloc_tfm_node+0xdc/0x2b0 [ 144.718298][ T8454] crypto_alloc_aead+0x2d/0x40 [ 144.718324][ T8454] macsec_validate_attr+0xa4/0x2e0 [ 144.718369][ T8454] rtnl_newlink+0x87c/0x1360 [ 144.718481][ T8454] ? trace_event_raw_event_bpf_trace_printk+0xe6/0x160 [ 144.718565][ T8454] ? skb_network_protocol+0x329/0x420 [ 144.718629][ T8454] ? rb_commit+0x3e9/0x420 [ 144.718655][ T8454] ? __rcu_read_unlock+0x4f/0x70 [ 144.718703][ T8454] ? avc_has_perm_noaudit+0xab/0x130 [ 144.718741][ T8454] ? cred_has_capability+0x210/0x280 [ 144.718846][ T8454] ? selinux_capable+0x31/0x40 [ 144.718869][ T8454] ? security_capable+0x83/0x90 [ 144.718941][ T8454] ? ns_capable+0x7d/0xb0 [ 144.718971][ T8454] ? __pfx_rtnl_newlink+0x10/0x10 [ 144.719006][ T8454] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 144.719122][ T8454] netlink_rcv_skb+0x123/0x220 [ 144.719219][ T8454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.719302][ T8454] rtnetlink_rcv+0x1c/0x30 [ 144.719333][ T8454] netlink_unicast+0x5c0/0x690 [ 144.719364][ T8454] netlink_sendmsg+0x58b/0x6b0 [ 144.719479][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.719511][ T8454] __sock_sendmsg+0x145/0x180 [ 144.719531][ T8454] ____sys_sendmsg+0x31e/0x4a0 [ 144.719617][ T8454] ___sys_sendmsg+0x17b/0x1d0 [ 144.719699][ T8454] __x64_sys_sendmsg+0xd4/0x160 [ 144.719727][ T8454] x64_sys_call+0x17ba/0x3000 [ 144.719749][ T8454] do_syscall_64+0xca/0x2b0 [ 144.719849][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.719907][ T8454] RIP: 0033:0x7f23bcf2f749 [ 144.719920][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.719936][ T8454] RSP: 002b:00007f23bb997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.719953][ T8454] RAX: ffffffffffffffda RBX: 00007f23bd185fa0 RCX: 00007f23bcf2f749 [ 144.719963][ T8454] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 144.720019][ T8454] RBP: 00007f23bb997090 R08: 0000000000000000 R09: 0000000000000000 [ 144.720030][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.720040][ T8454] R13: 00007f23bd186038 R14: 00007f23bd185fa0 R15: 00007fffb965c988 [ 144.720057][ T8454] [ 144.783115][ T36] hid-generic 0003:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 145.208563][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 145.464062][ T8488] tipc: Enabled bearer , priority 0 [ 145.471670][ T8487] tipc: Resetting bearer [ 145.495094][ T8487] tipc: Disabling bearer [ 145.693871][ T8501] geneve2: entered promiscuous mode [ 145.699224][ T8501] geneve2: entered allmulticast mode [ 147.055594][ T29] kauditd_printk_skb: 1101 callbacks suppressed [ 147.055609][ T29] audit: type=1400 audit(1767918690.564:30852): avc: denied { create } for pid=8524 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 147.091896][ T29] audit: type=1400 audit(1767918690.584:30853): avc: denied { read } for pid=8524 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 147.151408][ T29] audit: type=1400 audit(1767918690.654:30854): avc: denied { connect } for pid=8524 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.171079][ T29] audit: type=1400 audit(1767918690.654:30855): avc: denied { write } for pid=8524 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.234217][ T8534] syz_tun: entered allmulticast mode [ 147.240311][ T8532] tipc: Enabled bearer , priority 0 [ 147.251050][ T8531] tipc: Resetting bearer [ 147.265664][ T8531] tipc: Disabling bearer [ 147.321706][ T8533] syz_tun: left allmulticast mode [ 147.399733][ T8546] siw: device registration error -23 [ 147.434657][ T8545] siw: device registration error -23 [ 147.575753][ T29] audit: type=1400 audit(1767918691.014:30856): avc: denied { create } for pid=8554 comm="syz.3.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.633526][ T29] audit: type=1326 audit(1767918691.134:30857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 147.657159][ T29] audit: type=1326 audit(1767918691.134:30858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 147.680721][ T29] audit: type=1326 audit(1767918691.134:30859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 147.704307][ T29] audit: type=1326 audit(1767918691.134:30860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 147.727922][ T29] audit: type=1326 audit(1767918691.134:30861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fdabf749 code=0x7ffc0000 [ 148.047574][ T8573] tipc: Enabled bearer , priority 0 [ 148.067004][ T8572] tipc: Resetting bearer [ 148.081949][ T8572] tipc: Disabling bearer [ 148.167713][ T8579] siw: device registration error -23 [ 148.188305][ T8580] siw: device registration error -23 [ 148.209282][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 148.224667][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 148.336619][ T8587] vlan0: entered allmulticast mode [ 148.508125][ T8600] FAULT_INJECTION: forcing a failure. [ 148.508125][ T8600] name failslab, interval 1, probability 0, space 0, times 0 [ 148.520857][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz.4.1856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.520890][ T8600] Tainted: [W]=WARN [ 148.520947][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.521018][ T8600] Call Trace: [ 148.521024][ T8600] [ 148.521032][ T8600] __dump_stack+0x1d/0x30 [ 148.521062][ T8600] dump_stack_lvl+0x95/0xd0 [ 148.521088][ T8600] dump_stack+0x15/0x1b [ 148.521111][ T8600] should_fail_ex+0x265/0x280 [ 148.521218][ T8600] should_failslab+0x8c/0xb0 [ 148.521242][ T8600] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 148.521276][ T8600] ? __alloc_skb+0x2ff/0x4b0 [ 148.521375][ T8600] __alloc_skb+0x2ff/0x4b0 [ 148.521395][ T8600] ? __alloc_skb+0x228/0x4b0 [ 148.521465][ T8600] netlink_alloc_large_skb+0xbf/0xf0 [ 148.521498][ T8600] netlink_sendmsg+0x3cf/0x6b0 [ 148.521539][ T8600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.521644][ T8600] __sock_sendmsg+0x145/0x180 [ 148.521716][ T8600] ____sys_sendmsg+0x31e/0x4a0 [ 148.521751][ T8600] ___sys_sendmsg+0x17b/0x1d0 [ 148.521797][ T8600] __x64_sys_sendmsg+0xd4/0x160 [ 148.521895][ T8600] x64_sys_call+0x17ba/0x3000 [ 148.521924][ T8600] do_syscall_64+0xca/0x2b0 [ 148.521962][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.522034][ T8600] RIP: 0033:0x7fd4fdabf749 [ 148.522051][ T8600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.522072][ T8600] RSP: 002b:00007fd4fc527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.522094][ T8600] RAX: ffffffffffffffda RBX: 00007fd4fdd15fa0 RCX: 00007fd4fdabf749 [ 148.522109][ T8600] RDX: 0000000000008000 RSI: 0000200000001200 RDI: 0000000000000003 [ 148.522178][ T8600] RBP: 00007fd4fc527090 R08: 0000000000000000 R09: 0000000000000000 [ 148.522191][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.522203][ T8600] R13: 00007fd4fdd16038 R14: 00007fd4fdd15fa0 R15: 00007fff3ffd93b8 [ 148.522219][ T8600] [ 148.967832][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 149.007442][ T9] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 149.015411][ T9] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 149.023333][ T9] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 149.033916][ T9] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.081586][ T8638] 9p: Bad value for 'defcontext' [ 149.094424][ T8641] syz_tun: entered allmulticast mode [ 149.100988][ T8640] syz_tun: left allmulticast mode [ 149.491335][ T1037] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.645162][ T8676] 9p: Bad value for 'defcontext' [ 149.813000][ T8681] syz_tun: entered allmulticast mode [ 149.820015][ T8680] syz_tun: left allmulticast mode [ 149.981430][ T8697] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 149.981430][ T8697] program syz.5.1893 not setting count and/or reply_len properly [ 150.034698][ T8704] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 150.034698][ T8704] program syz.4.1896 not setting count and/or reply_len properly [ 150.059561][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 150.071459][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1893'. [ 150.080968][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.088422][ T8704] net_ratelimit: 12 callbacks suppressed [ 150.088484][ T8704] batadv0: mtu less than device minimum [ 150.100330][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.111217][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.119302][ T8709] FAULT_INJECTION: forcing a failure. [ 150.119302][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.122889][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.134766][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.1.1897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.134846][ T8709] Tainted: [W]=WARN [ 150.134858][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.134894][ T8709] Call Trace: [ 150.134912][ T8709] [ 150.134971][ T8709] __dump_stack+0x1d/0x30 [ 150.135039][ T8709] dump_stack_lvl+0x95/0xd0 [ 150.135105][ T8709] dump_stack+0x15/0x1b [ 150.135218][ T8709] should_fail_ex+0x265/0x280 [ 150.135280][ T8709] should_fail+0xb/0x20 [ 150.135332][ T8709] should_fail_usercopy+0x1a/0x20 [ 150.135406][ T8709] strncpy_from_user+0x27/0x260 [ 150.135578][ T8709] getname_flags+0xae/0x3b0 [ 150.135642][ T8709] __x64_sys_link+0x33/0x70 [ 150.135706][ T8709] x64_sys_call+0x1325/0x3000 [ 150.135847][ T8709] do_syscall_64+0xca/0x2b0 [ 150.135976][ T8709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.136036][ T8709] RIP: 0033:0x7f23bcf2f749 [ 150.136122][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.136184][ T8709] RSP: 002b:00007f23bb997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 150.136242][ T8709] RAX: ffffffffffffffda RBX: 00007f23bd185fa0 RCX: 00007f23bcf2f749 [ 150.136277][ T8709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.136311][ T8709] RBP: 00007f23bb997090 R08: 0000000000000000 R09: 0000000000000000 [ 150.136386][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.136415][ T8709] R13: 00007f23bd186038 R14: 00007f23bd185fa0 R15: 00007fffb965c988 [ 150.136462][ T8709] [ 150.308651][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.319748][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.331003][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.342164][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.353261][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.364283][ T8704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.381556][ T8704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.394437][ T8704] batman_adv: batadv0: Interface deactivated: dummy0 [ 150.401179][ T8704] batman_adv: batadv0: Removing interface: dummy0 [ 150.416466][ T8715] syz_tun: entered allmulticast mode [ 150.422407][ T8711] syz_tun: left allmulticast mode [ 150.451175][ T8720] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.461453][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.461533][ T8720] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.474162][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.474186][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.474207][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.474229][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.474322][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.474341][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8726 comm=syz.5.1902 [ 150.600238][ T8720] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.610192][ T8720] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.650392][ T8731] lo speed is unknown, defaulting to 1000 [ 150.716206][ T8720] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.726171][ T8720] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.745313][ T8736] siw: device registration error -23 [ 150.796899][ T8720] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.806897][ T8720] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.874930][ T5878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.883269][ T5878] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 150.912817][ T5878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.921260][ T5878] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 150.933120][ T5878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.941521][ T5878] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 150.950531][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 150.958959][ T5878] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 151.017700][ T8750] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 151.017700][ T8750] program syz.3.1912 not setting count and/or reply_len properly [ 151.076371][ T8752] syz_tun: entered allmulticast mode [ 151.082429][ T8751] syz_tun: left allmulticast mode [ 151.096342][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 151.235234][ T8767] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1918'. [ 151.431475][ T8776] siw: device registration error -23 [ 151.777196][ T8796] tipc: Enabled bearer , priority 0 [ 151.785021][ T8795] tipc: Resetting bearer [ 151.794931][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 151.805770][ T8795] tipc: Disabling bearer [ 151.880199][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 151.890003][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 151.935894][ T8811] lo speed is unknown, defaulting to 1000 [ 151.994004][ T8813] vlan0: entered allmulticast mode [ 152.065377][ T29] kauditd_printk_skb: 1527 callbacks suppressed [ 152.065393][ T29] audit: type=1326 audit(1767918695.574:32389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba86665e7 code=0x7ffc0000 [ 152.095204][ T29] audit: type=1326 audit(1767918695.574:32390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ba860b829 code=0x7ffc0000 [ 152.118628][ T29] audit: type=1326 audit(1767918695.574:32391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7ba866f749 code=0x7ffc0000 [ 152.142107][ T29] audit: type=1326 audit(1767918695.574:32392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f37db1065e7 code=0x7ffc0000 [ 152.165549][ T29] audit: type=1326 audit(1767918695.574:32393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37db0ab829 code=0x7ffc0000 [ 152.188979][ T29] audit: type=1326 audit(1767918695.574:32394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f37db10f749 code=0x7ffc0000 [ 152.215726][ T29] audit: type=1326 audit(1767918695.604:32395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba86665e7 code=0x7ffc0000 [ 152.239200][ T29] audit: type=1326 audit(1767918695.604:32396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ba860b829 code=0x7ffc0000 [ 152.262641][ T29] audit: type=1326 audit(1767918695.604:32397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7ba866f749 code=0x7ffc0000 [ 152.286269][ T29] audit: type=1326 audit(1767918695.614:32398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.0.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba86665e7 code=0x7ffc0000 [ 152.360771][ T8824] sch_tbf: burst 4 is lower than device team_slave_0 mtu (1514) ! [ 152.407136][ T8827] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1938'. [ 152.421140][ T8827] SELinux: Context Ü is not valid (left unmapped). [ 152.432098][ T8829] tipc: Enabled bearer , priority 0 [ 152.456788][ T8828] tipc: Resetting bearer [ 152.479766][ T8828] tipc: Disabling bearer [ 152.608317][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 152.625386][ T8843] team0 (unregistering): Port device team_slave_0 removed [ 152.637028][ T8843] team0 (unregistering): Port device team_slave_1 removed [ 152.669576][ T8849] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 152.679250][ T8837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8837 comm=syz.0.1942 [ 152.820701][ T8870] geneve2: entered promiscuous mode [ 152.826032][ T8870] geneve2: entered allmulticast mode [ 153.645077][ T8891] lo speed is unknown, defaulting to 1000 [ 153.810263][ T8894] vxcan1: entered promiscuous mode [ 153.887316][ T8898] netlink: 94 bytes leftover after parsing attributes in process `syz.1.1966'. [ 153.919989][ T8898] pim6reg: entered allmulticast mode [ 153.928881][ T8897] pim6reg: left allmulticast mode [ 154.282926][ T8911] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.335566][ T8911] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.405345][ T8911] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.465379][ T8911] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.482898][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.490147][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.499212][ T8923] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 154.507036][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'. [ 154.516996][ T8923] tmpfs: Cannot retroactively limit inodes [ 154.533087][ T5878] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.554178][ T5878] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.574791][ T5878] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.592433][ T5878] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.654663][ T8928] siw: device registration error -23 [ 154.689324][ T8942] netlink: 'syz.5.1983': attribute type 1 has an invalid length. [ 154.702924][ T8942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.718051][ T8942] bond1: (slave ip6gretap1): making interface the new active one [ 154.726928][ T8942] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 154.744542][ T8942] veth3: entered promiscuous mode [ 154.751883][ T8942] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.762869][ T8942] erspan0: entered allmulticast mode [ 154.765403][ T8946] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 154.765403][ T8946] program syz.4.1985 not setting count and/or reply_len properly [ 154.781539][ T8942] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 154.794609][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 154.874294][ T8952] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.925633][ T8952] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.997807][ T8952] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.055635][ T8952] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.074919][ T8976] syz_tun: entered allmulticast mode [ 155.080924][ T8975] syz_tun: left allmulticast mode [ 155.240785][ T8988] SELinux: failed to load policy [ 155.302154][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.311170][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.506907][ T9001] FAULT_INJECTION: forcing a failure. [ 155.506907][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 155.519680][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.3.2003 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.519725][ T9001] Tainted: [W]=WARN [ 155.519731][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.519742][ T9001] Call Trace: [ 155.519747][ T9001] [ 155.519754][ T9001] __dump_stack+0x1d/0x30 [ 155.519779][ T9001] dump_stack_lvl+0x95/0xd0 [ 155.519836][ T9001] dump_stack+0x15/0x1b [ 155.519857][ T9001] should_fail_ex+0x265/0x280 [ 155.519925][ T9001] should_failslab+0x8c/0xb0 [ 155.519988][ T9001] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 155.520017][ T9001] ? cond_bools_copy+0x30/0x80 [ 155.520037][ T9001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 155.520082][ T9001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 155.520109][ T9001] kmemdup_noprof+0x2b/0x70 [ 155.520138][ T9001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 155.520154][ T9001] cond_bools_copy+0x30/0x80 [ 155.520225][ T9001] ? __pfx_cond_bools_destroy+0x10/0x10 [ 155.520244][ T9001] hashtab_duplicate+0x11e/0x360 [ 155.520275][ T9001] ? __pfx_cond_bools_copy+0x10/0x10 [ 155.520297][ T9001] cond_policydb_dup+0xd2/0x4e0 [ 155.520322][ T9001] security_set_bools+0xa0/0x340 [ 155.520388][ T9001] sel_commit_bools_write+0x1ea/0x270 [ 155.520410][ T9001] vfs_writev+0x406/0x8b0 [ 155.520502][ T9001] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 155.520580][ T9001] do_writev+0xe7/0x210 [ 155.520608][ T9001] __x64_sys_writev+0x45/0x50 [ 155.520631][ T9001] x64_sys_call+0x1ba5/0x3000 [ 155.520658][ T9001] do_syscall_64+0xca/0x2b0 [ 155.520708][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.520726][ T9001] RIP: 0033:0x7f1a59f4f749 [ 155.520738][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.520785][ T9001] RSP: 002b:00007f1a589b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 155.520803][ T9001] RAX: ffffffffffffffda RBX: 00007f1a5a1a5fa0 RCX: 00007f1a59f4f749 [ 155.520813][ T9001] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 155.520899][ T9001] RBP: 00007f1a589b7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.520917][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.520927][ T9001] R13: 00007f1a5a1a6038 R14: 00007f1a5a1a5fa0 R15: 00007ffc4becbd68 [ 155.520943][ T9001] [ 155.939099][ T9013] syz_tun: entered allmulticast mode [ 155.945849][ T9012] syz_tun: left allmulticast mode [ 156.126542][ T9031] lo speed is unknown, defaulting to 1000 [ 156.531825][ T9045] __nla_validate_parse: 5 callbacks suppressed [ 156.531840][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 156.564994][ T9056] lo: entered allmulticast mode [ 157.220268][ T29] kauditd_printk_skb: 1445 callbacks suppressed [ 157.220286][ T29] audit: type=1326 audit(1767918700.724:33844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a59f4f749 code=0x7ffc0000 [ 157.250690][ T29] audit: type=1326 audit(1767918700.724:33845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.274286][ T29] audit: type=1326 audit(1767918700.724:33846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.297715][ T29] audit: type=1326 audit(1767918700.724:33847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.321123][ T29] audit: type=1326 audit(1767918700.724:33848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.332753][ T9048] lo: left allmulticast mode [ 157.344601][ T29] audit: type=1326 audit(1767918700.724:33849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.372598][ T29] audit: type=1326 audit(1767918700.724:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.396003][ T29] audit: type=1326 audit(1767918700.724:33851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.419428][ T29] audit: type=1326 audit(1767918700.724:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.442846][ T29] audit: type=1326 audit(1767918700.724:33853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a59eeb829 code=0x7ffc0000 [ 157.551334][ T9075] lo speed is unknown, defaulting to 1000 [ 157.593955][ T9079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9079 comm=syz.4.2027 [ 157.634766][ T9079] SELinux: Context @ is not valid (left unmapped). [ 157.665510][ T9075] random: crng reseeded on system resumption [ 157.745609][ T9083] gretap0: entered promiscuous mode [ 157.764437][ T9083] gretap0: left promiscuous mode [ 157.862215][ T9088] FAULT_INJECTION: forcing a failure. [ 157.862215][ T9088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.875478][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.0.2032 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.875565][ T9088] Tainted: [W]=WARN [ 157.875571][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.875581][ T9088] Call Trace: [ 157.875586][ T9088] [ 157.875592][ T9088] __dump_stack+0x1d/0x30 [ 157.875667][ T9088] dump_stack_lvl+0x95/0xd0 [ 157.875689][ T9088] dump_stack+0x15/0x1b [ 157.875741][ T9088] should_fail_ex+0x265/0x280 [ 157.875764][ T9088] should_fail+0xb/0x20 [ 157.875779][ T9088] should_fail_usercopy+0x1a/0x20 [ 157.875799][ T9088] _copy_from_iter+0x21c/0xe70 [ 157.875858][ T9088] ? selinux_socket_sendmsg+0x175/0x1b0 [ 157.875885][ T9088] bcm_sendmsg+0xc7/0x480 [ 157.875907][ T9088] ? __pfx_bcm_sendmsg+0x10/0x10 [ 157.875925][ T9088] __sock_sendmsg+0x145/0x180 [ 157.875951][ T9088] ____sys_sendmsg+0x31e/0x4a0 [ 157.875977][ T9088] ___sys_sendmsg+0x17b/0x1d0 [ 157.876021][ T9088] __x64_sys_sendmsg+0xd4/0x160 [ 157.876058][ T9088] x64_sys_call+0x17ba/0x3000 [ 157.876105][ T9088] do_syscall_64+0xca/0x2b0 [ 157.876156][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.876180][ T9088] RIP: 0033:0x7f7ba866f749 [ 157.876197][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.876216][ T9088] RSP: 002b:00007f7ba70cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.876235][ T9088] RAX: ffffffffffffffda RBX: 00007f7ba88c5fa0 RCX: 00007f7ba866f749 [ 157.876249][ T9088] RDX: 000000000404c0d1 RSI: 0000200000000640 RDI: 0000000000000004 [ 157.876261][ T9088] RBP: 00007f7ba70cf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.876324][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.876334][ T9088] R13: 00007f7ba88c6038 R14: 00007f7ba88c5fa0 R15: 00007ffc2026bab8 [ 157.876354][ T9088] [ 157.885424][ T9083] bond1: option all_slaves_active: invalid value (255) [ 158.083109][ T9083] bond1 (unregistering): Released all slaves [ 158.092764][ T9090] netlink: 'syz.4.2031': attribute type 3 has an invalid length. [ 158.139916][ T9094] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 158.139916][ T9094] program syz.0.2033 not setting count and/or reply_len properly [ 158.176973][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 158.225069][ T9101] syz_tun: entered allmulticast mode [ 158.230903][ T9099] syz_tun: left allmulticast mode [ 158.245061][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 158.459288][ T9120] 9p: Bad value for 'context' [ 158.588229][ T9131] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 158.588229][ T9131] program syz.3.2047 not setting count and/or reply_len properly [ 158.612044][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 158.675310][ T9133] syz_tun: entered allmulticast mode [ 158.681480][ T9132] syz_tun: left allmulticast mode [ 158.708875][ T9137] FAULT_INJECTION: forcing a failure. [ 158.708875][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 158.721582][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.3.2049 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.721616][ T9137] Tainted: [W]=WARN [ 158.721624][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.721638][ T9137] Call Trace: [ 158.721644][ T9137] [ 158.721652][ T9137] __dump_stack+0x1d/0x30 [ 158.721679][ T9137] dump_stack_lvl+0x95/0xd0 [ 158.721701][ T9137] dump_stack+0x15/0x1b [ 158.721775][ T9137] should_fail_ex+0x265/0x280 [ 158.721800][ T9137] should_failslab+0x8c/0xb0 [ 158.721824][ T9137] __kmalloc_noprof+0xb9/0x5a0 [ 158.721848][ T9137] ? io_cache_alloc_new+0x2a/0xb0 [ 158.721952][ T9137] io_cache_alloc_new+0x2a/0xb0 [ 158.721981][ T9137] io_recvmsg_prep+0x51f/0x930 [ 158.722015][ T9137] io_submit_sqes+0x70f/0x11b0 [ 158.722143][ T9137] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 158.722180][ T9137] ? 0xffffffff81000000 [ 158.722195][ T9137] ? __rcu_read_unlock+0x4f/0x70 [ 158.722219][ T9137] ? proc_fail_nth_write+0x13b/0x160 [ 158.722249][ T9137] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.722301][ T9137] ? vfs_write+0x7e8/0x960 [ 158.722320][ T9137] ? __rcu_read_unlock+0x4f/0x70 [ 158.722341][ T9137] ? __fget_files+0x184/0x1c0 [ 158.722366][ T9137] ? mutex_unlock+0x4f/0x90 [ 158.722429][ T9137] ? fput+0x8f/0xc0 [ 158.722482][ T9137] __x64_sys_io_uring_enter+0x78/0x90 [ 158.722651][ T9137] x64_sys_call+0x27e4/0x3000 [ 158.722678][ T9137] do_syscall_64+0xca/0x2b0 [ 158.722714][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.722809][ T9137] RIP: 0033:0x7f1a59f4f749 [ 158.722826][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.722843][ T9137] RSP: 002b:00007f1a589b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 158.722940][ T9137] RAX: ffffffffffffffda RBX: 00007f1a5a1a5fa0 RCX: 00007f1a59f4f749 [ 158.722955][ T9137] RDX: 0000000000004000 RSI: 00000000000047f8 RDI: 0000000000000004 [ 158.722967][ T9137] RBP: 00007f1a589b7090 R08: 0000000000000000 R09: 000000000000001f [ 158.722978][ T9137] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 158.722989][ T9137] R13: 00007f1a5a1a6038 R14: 00007f1a5a1a5fa0 R15: 00007ffc4becbd68 [ 158.723008][ T9137] [ 158.969049][ T5897] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.984713][ T5897] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.001859][ T5897] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.014543][ T5897] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.159294][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2054'. [ 159.241840][ T9153] lo speed is unknown, defaulting to 1000 [ 159.281763][ T9157] netlink: 'syz.0.2054': attribute type 6 has an invalid length. [ 159.641393][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 159.666127][ T9174] ip6gre2: entered allmulticast mode [ 160.008081][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 160.431904][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 160.464498][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 160.722613][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 160.822414][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.923569][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.974640][ T9244] FAULT_INJECTION: forcing a failure. [ 160.974640][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.987782][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.4.2091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.987813][ T9244] Tainted: [W]=WARN [ 160.987868][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.987937][ T9244] Call Trace: [ 160.987944][ T9244] [ 160.987953][ T9244] __dump_stack+0x1d/0x30 [ 160.987976][ T9244] dump_stack_lvl+0x95/0xd0 [ 160.987997][ T9244] dump_stack+0x15/0x1b [ 160.988014][ T9244] should_fail_ex+0x265/0x280 [ 160.988072][ T9244] should_fail+0xb/0x20 [ 160.988162][ T9244] should_fail_usercopy+0x1a/0x20 [ 160.988190][ T9244] _copy_from_user+0x1c/0xb0 [ 160.988272][ T9244] restore_altstack+0x4b/0x2d0 [ 160.988295][ T9244] ? __set_task_blocked+0x23a/0x2a0 [ 160.988333][ T9244] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 160.988371][ T9244] ? arch_do_signal_or_restart+0x2c3/0x450 [ 160.988440][ T9244] ? exit_to_user_mode_loop+0xf1/0x740 [ 160.988466][ T9244] ? __rcu_read_unlock+0x4f/0x70 [ 160.988555][ T9244] x64_sys_call+0x274a/0x3000 [ 160.988629][ T9244] do_syscall_64+0xca/0x2b0 [ 160.988708][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.988730][ T9244] RIP: 0033:0x7fd4fda5b829 [ 160.988749][ T9244] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 160.988860][ T9244] RSP: 002b:00007fd4fc526a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 160.988879][ T9244] RAX: ffffffffffffffda RBX: 00007fd4fdd15fa0 RCX: 00007fd4fda5b829 [ 160.988894][ T9244] RDX: 00007fd4fc526a80 RSI: 00007fd4fc526bb0 RDI: 0000000000000021 [ 160.988976][ T9244] RBP: 00007fd4fc527090 R08: 0000000000000000 R09: 0000000000000000 [ 160.988993][ T9244] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 160.989074][ T9244] R13: 00007fd4fdd16038 R14: 00007fd4fdd15fa0 R15: 00007fff3ffd93b8 [ 160.989100][ T9244] [ 161.282916][ T9259] siw: device registration error -23 [ 161.407583][ T9272] FAULT_INJECTION: forcing a failure. [ 161.407583][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 161.420436][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.5.2103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.420491][ T9272] Tainted: [W]=WARN [ 161.420497][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.420509][ T9272] Call Trace: [ 161.420515][ T9272] [ 161.420601][ T9272] __dump_stack+0x1d/0x30 [ 161.420625][ T9272] dump_stack_lvl+0x95/0xd0 [ 161.420646][ T9272] dump_stack+0x15/0x1b [ 161.420664][ T9272] should_fail_ex+0x265/0x280 [ 161.420686][ T9272] should_failslab+0x8c/0xb0 [ 161.420712][ T9272] kmem_cache_alloc_noprof+0x69/0x4b0 [ 161.420734][ T9272] ? alloc_empty_file+0x76/0x200 [ 161.420760][ T9272] alloc_empty_file+0x76/0x200 [ 161.420785][ T9272] path_openat+0x63/0x23b0 [ 161.420858][ T9272] ? _parse_integer_limit+0x170/0x190 [ 161.420878][ T9272] ? _parse_integer+0x27/0x40 [ 161.420895][ T9272] ? kstrtoull+0x111/0x140 [ 161.421001][ T9272] ? kstrtouint+0x76/0xc0 [ 161.421020][ T9272] do_filp_open+0x109/0x230 [ 161.421057][ T9272] do_sys_openat2+0xa6/0x150 [ 161.421144][ T9272] __x64_sys_openat+0xf2/0x120 [ 161.421171][ T9272] x64_sys_call+0x2b07/0x3000 [ 161.421194][ T9272] do_syscall_64+0xca/0x2b0 [ 161.421237][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.421272][ T9272] RIP: 0033:0x7f37db10f749 [ 161.421287][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.421303][ T9272] RSP: 002b:00007f37d9b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.421320][ T9272] RAX: ffffffffffffffda RBX: 00007f37db365fa0 RCX: 00007f37db10f749 [ 161.421332][ T9272] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 161.421380][ T9272] RBP: 00007f37d9b77090 R08: 0000000000000000 R09: 0000000000000000 [ 161.421394][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.421406][ T9272] R13: 00007f37db366038 R14: 00007f37db365fa0 R15: 00007ffdac962108 [ 161.421499][ T9272] [ 161.711106][ T9273] __nla_validate_parse: 1 callbacks suppressed [ 161.711266][ T9273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2102'. [ 161.735277][ T9279] process 'syz.4.2104' launched './file0' with NULL argv: empty string added [ 161.755640][ T9279] Invalid argument reading file caps for ./file0 [ 161.832733][ T9283] sctp: [Deprecated]: syz.4.2106 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.832733][ T9283] Use struct sctp_sack_info instead [ 162.154352][ T9297] siw: device registration error -23 [ 162.217364][ T9309] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 162.227331][ T29] kauditd_printk_skb: 1678 callbacks suppressed [ 162.227349][ T29] audit: type=1400 audit(1767918705.734:35532): avc: denied { relabelto } for pid=9308 comm="syz.4.2116" name="" dev="pipefs" ino=29234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 162.273552][ T29] audit: type=1400 audit(1767918705.744:35533): avc: denied { firmware_load } for pid=9308 comm="syz.4.2116" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 162.298764][ T29] audit: type=1400 audit(1767918705.744:35534): avc: denied { read } for pid=9310 comm="syz.1.2112" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 162.320055][ T29] audit: type=1400 audit(1767918705.754:35535): avc: denied { open } for pid=9310 comm="syz.1.2112" path="net:[4026532510]" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 162.343424][ T29] audit: type=1400 audit(1767918705.754:35536): avc: denied { name_bind } for pid=9310 comm="syz.1.2112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 162.365166][ T29] audit: type=1400 audit(1767918705.754:35537): avc: denied { node_bind } for pid=9310 comm="syz.1.2112" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 162.399761][ T9313] lo speed is unknown, defaulting to 1000 [ 162.620248][ T29] audit: type=1400 audit(1767918705.944:35538): avc: denied { read append } for pid=9304 comm="syz.0.2114" name="event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.644325][ T29] audit: type=1400 audit(1767918705.944:35539): avc: denied { open } for pid=9304 comm="syz.0.2114" path="/dev/input/event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.668528][ T29] audit: type=1400 audit(1767918706.104:35540): avc: denied { read append } for pid=9321 comm="syz.5.2120" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.691925][ T29] audit: type=1400 audit(1767918706.104:35541): avc: denied { open } for pid=9321 comm="syz.5.2120" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.773203][ T9318] geneve3: entered promiscuous mode [ 162.778639][ T9318] geneve3: entered allmulticast mode [ 162.792639][ T9327] FAULT_INJECTION: forcing a failure. [ 162.792639][ T9327] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 162.806017][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: syz.1.2121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.806047][ T9327] Tainted: [W]=WARN [ 162.806055][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.806069][ T9327] Call Trace: [ 162.806074][ T9327] [ 162.806080][ T9327] __dump_stack+0x1d/0x30 [ 162.806102][ T9327] dump_stack_lvl+0x95/0xd0 [ 162.806167][ T9327] dump_stack+0x15/0x1b [ 162.806184][ T9327] should_fail_ex+0x265/0x280 [ 162.806203][ T9327] should_fail_alloc_page+0xf2/0x100 [ 162.806241][ T9327] alloc_pages_bulk_noprof+0x102/0x540 [ 162.806267][ T9327] copy_splice_read+0xf3/0x660 [ 162.806382][ T9327] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 162.806490][ T9327] splice_direct_to_actor+0x290/0x680 [ 162.806512][ T9327] ? __pfx_direct_splice_actor+0x10/0x10 [ 162.806532][ T9327] do_splice_direct+0xda/0x150 [ 162.806549][ T9327] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 162.806576][ T9327] do_sendfile+0x380/0x650 [ 162.806634][ T9327] __x64_sys_sendfile64+0x105/0x150 [ 162.806702][ T9327] x64_sys_call+0x2db1/0x3000 [ 162.806728][ T9327] do_syscall_64+0xca/0x2b0 [ 162.806766][ T9327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.806865][ T9327] RIP: 0033:0x7f23bcf2f749 [ 162.806881][ T9327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.806898][ T9327] RSP: 002b:00007f23bb997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.806919][ T9327] RAX: ffffffffffffffda RBX: 00007f23bd185fa0 RCX: 00007f23bcf2f749 [ 162.806933][ T9327] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 162.806947][ T9327] RBP: 00007f23bb997090 R08: 0000000000000000 R09: 0000000000000000 [ 162.806959][ T9327] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 162.806969][ T9327] R13: 00007f23bd186038 R14: 00007f23bd185fa0 R15: 00007fffb965c988 [ 162.806985][ T9327] [ 163.034077][ T6608] Bluetooth: hci0: command 0x1003 tx timeout [ 163.049983][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.161205][ T9336] lo: entered allmulticast mode [ 163.259560][ T9338] FAULT_INJECTION: forcing a failure. [ 163.259560][ T9338] name failslab, interval 1, probability 0, space 0, times 0 [ 163.272383][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.3.2125 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.272418][ T9338] Tainted: [W]=WARN [ 163.272426][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.272441][ T9338] Call Trace: [ 163.272458][ T9338] [ 163.272467][ T9338] __dump_stack+0x1d/0x30 [ 163.272492][ T9338] dump_stack_lvl+0x95/0xd0 [ 163.272583][ T9338] dump_stack+0x15/0x1b [ 163.272602][ T9338] should_fail_ex+0x265/0x280 [ 163.272630][ T9338] should_failslab+0x8c/0xb0 [ 163.272729][ T9338] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 163.272750][ T9338] ? __alloc_skb+0x2ff/0x4b0 [ 163.272811][ T9338] __alloc_skb+0x2ff/0x4b0 [ 163.272832][ T9338] ? __alloc_skb+0x228/0x4b0 [ 163.272852][ T9338] netlink_alloc_large_skb+0xbf/0xf0 [ 163.272936][ T9338] netlink_sendmsg+0x3cf/0x6b0 [ 163.272974][ T9338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.273002][ T9338] __sock_sendmsg+0x145/0x180 [ 163.273022][ T9338] ____sys_sendmsg+0x31e/0x4a0 [ 163.273088][ T9338] ___sys_sendmsg+0x17b/0x1d0 [ 163.273201][ T9338] __x64_sys_sendmsg+0xd4/0x160 [ 163.273235][ T9338] x64_sys_call+0x17ba/0x3000 [ 163.273257][ T9338] do_syscall_64+0xca/0x2b0 [ 163.273289][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.273372][ T9338] RIP: 0033:0x7f1a59f4f749 [ 163.273388][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.273473][ T9338] RSP: 002b:00007f1a589b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.273490][ T9338] RAX: ffffffffffffffda RBX: 00007f1a5a1a5fa0 RCX: 00007f1a59f4f749 [ 163.273505][ T9338] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 163.273517][ T9338] RBP: 00007f1a589b7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.273527][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.273537][ T9338] R13: 00007f1a5a1a6038 R14: 00007f1a5a1a5fa0 R15: 00007ffc4becbd68 [ 163.273558][ T9338] [ 163.542053][ T9345] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 163.542053][ T9345] program syz.4.2127 not setting count and/or reply_len properly [ 163.594760][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 163.623412][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 163.669722][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 163.707965][ T9365] ================================================================== [ 163.716088][ T9365] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 163.722793][ T9365] [ 163.725132][ T9365] write to 0xffff888141ffa190 of 96 bytes by task 3483 on cpu 0: [ 163.732854][ T9365] __bpf_get_stackid+0x737/0x7d0 [ 163.737819][ T9365] bpf_get_stackid+0xf3/0x130 [ 163.742510][ T9365] bpf_get_stackid_raw_tp+0xf6/0x120 [ 163.747813][ T9365] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 163.753284][ T9365] bpf_trace_run2+0x107/0x1d0 [ 163.757984][ T9365] __traceiter_kfree+0x2e/0x50 [ 163.762773][ T9365] kfree+0x353/0x3c0 [ 163.766675][ T9365] vfree+0x28d/0x3a0 [ 163.770576][ T9365] pcpu_balance_free+0x45c/0x580 [ 163.775528][ T9365] pcpu_balance_workfn+0xba8/0xc00 [ 163.780649][ T9365] process_scheduled_works+0x4ce/0x9d0 [ 163.786113][ T9365] worker_thread+0x582/0x770 [ 163.790711][ T9365] kthread+0x489/0x510 [ 163.794797][ T9365] ret_from_fork+0x149/0x290 [ 163.799403][ T9365] ret_from_fork_asm+0x1a/0x30 [ 163.804188][ T9365] [ 163.806520][ T9365] read to 0xffff888141ffa1c0 of 8 bytes by task 9365 on cpu 1: [ 163.814061][ T9365] bcmp+0x23/0x90 [ 163.817701][ T9365] __bpf_get_stackid+0x382/0x7d0 [ 163.822666][ T9365] bpf_get_stackid+0xf3/0x130 [ 163.827363][ T9365] bpf_get_stackid_raw_tp+0xf6/0x120 [ 163.832667][ T9365] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 163.838138][ T9365] bpf_trace_run2+0x107/0x1d0 [ 163.842852][ T9365] __traceiter_kfree+0x2e/0x50 [ 163.847674][ T9365] kfree+0x353/0x3c0 [ 163.851599][ T9365] audit_log_d_path+0xf4/0x150 [ 163.856375][ T9365] audit_log_d_path_exe+0x42/0x70 [ 163.861421][ T9365] audit_log_task+0x1e9/0x250 [ 163.866121][ T9365] audit_seccomp+0x61/0x100 [ 163.870647][ T9365] __seccomp_filter+0x843/0x1260 [ 163.875604][ T9365] __secure_computing+0x82/0x150 [ 163.880559][ T9365] syscall_trace_enter+0xcf/0x1e0 [ 163.885589][ T9365] do_syscall_64+0xa4/0x2b0 [ 163.890112][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.896007][ T9365] [ 163.898333][ T9365] value changed: 0xffffffff81575a49 -> 0xffffffff818083e8 [ 163.905459][ T9365] [ 163.907793][ T9365] Reported by Kernel Concurrency Sanitizer on: [ 163.913954][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.1.2134 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.925252][ T9365] Tainted: [W]=WARN [ 163.929054][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.939123][ T9365] ==================================================================