last executing test programs: 2m0.129054895s ago: executing program 4 (id=374): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sigaltstack(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid={'resgid', 0x3d, r0}}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='incremental-fs\x00', 0x4000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x7, 0xf) (fail_nth: 3) 2m0.043903542s ago: executing program 4 (id=376): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000580)={@hci={0x1f, 0xe000, 0x2}, {&(0x7f00000004c0)=""/170, 0xaa}, &(0x7f0000000200), 0x38}, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd2a, 0x65dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x2}, {0xffff, 0x40cd4855f32955eb}, {0x7, 0x3}}, [{0x8, 0xb, 0xffffffc0}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0xb4}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9*6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000200000000000c00020001000000150000000c000c80060001f9ff0000000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x400c088}, 0x4000080) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f00000007c0)="aea22180e8ca545e6bec422011313b2670bcfe14ac7c8531589912f88173eed495988acc04ca1f7160", 0x29) 1m59.783521703s ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$binfmt_elf64(r2, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xc, 0x4, 0x2}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m59.755760615s ago: executing program 4 (id=381): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143441, 0x4e) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3fffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2006) dup2(r3, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f0000000080), 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m59.636367275s ago: executing program 4 (id=382): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 1m58.154627136s ago: executing program 4 (id=395): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x0, 0x448, &(0x7f0000000bc0)="$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") (fail_nth: 10) 1m58.117422968s ago: executing program 32 (id=395): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x0, 0x448, &(0x7f0000000bc0)="$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") (fail_nth: 10) 3.773522393s ago: executing program 1 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x8, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) epoll_create1(0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x24, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) readv(r7, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) close(r2) 2.622992966s ago: executing program 1 (id=2919): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000180)=""/73, 0x49, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) ioperm(0x0, 0x1, 0x1) 2.617029396s ago: executing program 3 (id=2921): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {0x0, 0x4d}, @raw32={[0x0, 0x0, 0xfffffffc]}}], 0x1c) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r6 = io_uring_setup(0x556d, &(0x7f0000000180)={0x0, 0x8d48, 0x400, 0x1, 0x2b2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0x5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000040), 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002deb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r8, 0x89e6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.519106975s ago: executing program 2 (id=2926): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 2.472763698s ago: executing program 1 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400030000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) 2.425185272s ago: executing program 1 (id=2929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x41341) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2) 2.240769757s ago: executing program 3 (id=2931): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sendto$inet6(r0, &(0x7f0000000000)="900000001d001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a497a3000000000000c0c80cefd28581d158ba86c9d2896c6d3bca2d00000015009e02a6560641263da4de1d", 0x7e, 0x804, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a7, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.807113013s ago: executing program 2 (id=2932): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000005c0)="08c6611a45f6f252a372ca2afba269d5a52514c45aa590420c48cb6d9868cda4285aadd398c19d753e39d258280619bd605b270c592855b965e1d2b621cec50b03b48a737cb239a51bcd527ca8d2307b5a8a3c74ca249e5f5cd871a2fff1df7f965e25714cecc2a4180811f25363c2380dfa59606a102540e6a89b64dd7b67a4bc6f41073d3396324c1397cf0ea17dad2f13f55271318f270f127b60c739ab3f78e34fd65c2d146c0eb2a88643666fd3e5452c3c209aa117af809d35164db65ab39ecb8cb5b9341bbfc31896", 0xcc}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="0d375af72a73441b31ecee5e43000467b7748d9c4e2fd12aed6c3227be311127196fd82cc8714452027043e34e6704c48cfe0e44ecba2d48aa75f2ec650c425865124093690cfb9ff423aa", 0x4b}, {&(0x7f0000000700)}, {&(0x7f0000000840)="a2e69761b12950261f443c8b0e62e62a87acfcbf9f446279654a73d7b55579a46c243ecf94905d3286e9e9d94fafcd51ae156e299a1c457444e9d61fb26beba4036cd6d1f43bdf8fcf4b47a37abf2635ee7620b36818ae947a1e29ffb8a87927a5abb8a3ac5596916aa857c9c39ca95ae2358b5da2a1760464551bfb958653dad479e1c4f7899aad72eb21de8cbcdb0d0f5892817948a55ced", 0x99}, {&(0x7f0000000900)="6d2e1d5bfd2cff2a08c0f272bba959658b41275099ab4f194543d1e4c5840a4cb1d76a2299073842c1ed61858d53867ea29e38caaf0602eb89e4ef1c901ee5e99f84af5e2f0c5afbc5fb2c48233fe4cfc279e1c735b399ab283187187cb61139646cb85d29a40efd91a8af386031cbe906844877f2b05915d8b281c29062b7bfda783ac102b3c424a39ddba0ff92d989df9605c0e7c121f1bf287a31d4b203b5e21511e896a508c1cd0ce66f70e752abc5d87faffea9fd19dd3c064c283818ecccd56df9ceb01496f1a1eb", 0xcb}, {&(0x7f0000001f80)="37e65f14cf8681cd0071088d284db2396e62cd77261dd7956e307970f4f2ad3685975520c2c8a4f8184021d0fb3dac64cba074eae24d5afb1b3799815997b0511fe4d967887ec50e514011b05c57503710fd22fb822e8ecc41826558daa1f367", 0x60}, {&(0x7f0000002100)="8f2d297db1fd96a742c700a700d49acc566563192ae424db5d3ff70e62963ecf9fa13675", 0x24}], 0x8, &(0x7f0000002240)=[{0xc8, 0x10d, 0x6, "fdd212f6f064906ea33268eead3e18692538eac3077a896cd620310ddaa1bf6c8060c2b6f42a4031953fc38bc8b2a3ba6f6b58b768d8d60da6204fa634f97b7cb098a5c937289fbe6ca5613ce50bf8565efe65d3f0abe462c4f0f28848239e9f897402a96aef1251b5f41ae22bba37834199a0fdccb15cbd7c9794603a51f5d32383607a3b088c15342d55202e2f1b1183f0c3703294a748824d8703a0e0d41ace94ee81d810a0253b4fd355edbfb0ec5cd810fb29"}], 0xc8}, 0x80b4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@jmp={0x5, 0x0, 0x2, 0x4, 0x6, 0x1, 0x17}, @call={0x85, 0x0, 0x0, 0xc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000000240)=""/176, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002340)={0x1, 0xd, 0x8, 0x7}, 0x10, r0, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x5, 0x3, 0x7}, {0x3, 0x205, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x111, 0x2}}, 0x20) close(r1) 1.806416443s ago: executing program 2 (id=2933): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000005c0)="08c6611a45f6f252a372ca2afba269d5a52514c45aa590420c48cb6d9868cda4285aadd398c19d753e39d258280619bd605b270c592855b965e1d2b621cec50b03b48a737cb239a51bcd527ca8d2307b5a8a3c74ca249e5f5cd871a2fff1df7f965e25714cecc2a4180811f25363c2380dfa59606a102540e6a89b64dd7b67a4bc6f41073d3396324c1397cf0ea17dad2f13f55271318f270f127b60c739ab3f78e34fd65c2d146c0eb2a88643666fd3e5452c3c209aa117af809d35164db65ab39ecb8cb5b9341bbfc31896", 0xcc}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="0d375af72a73441b31ecee5e43000467b7748d9c4e2fd12aed6c3227be311127196fd82cc8714452027043e34e6704c48cfe0e44ecba2d48aa75f2ec650c425865124093690cfb9ff423aa", 0x4b}, {&(0x7f0000000700)}, {&(0x7f0000000840)="a2e69761b12950261f443c8b0e62e62a87acfcbf9f446279654a73d7b55579a46c243ecf94905d3286e9e9d94fafcd51ae156e299a1c457444e9d61fb26beba4036cd6d1f43bdf8fcf4b47a37abf2635ee7620b36818ae947a1e29ffb8a87927a5abb8a3ac5596916aa857c9c39ca95ae2358b5da2a1760464551bfb958653dad479e1c4f7899aad72eb21de8cbcdb0d0f5892817948a55ced", 0x99}, {&(0x7f0000000900)="6d2e1d5bfd2cff2a08c0f272bba959658b41275099ab4f194543d1e4c5840a4cb1d76a2299073842c1ed61858d53867ea29e38caaf0602eb89e4ef1c901ee5e99f84af5e2f0c5afbc5fb2c48233fe4cfc279e1c735b399ab283187187cb61139646cb85d29a40efd91a8af386031cbe906844877f2b05915d8b281c29062b7bfda783ac102b3c424a39ddba0ff92d989df9605c0e7c121f1bf287a31d4b203b5e21511e896a508c1cd0ce66f70e752abc5d87faffea9fd19dd3c064c283818ecccd56df9ceb01496f1a1eb", 0xcb}, {&(0x7f0000001f80)="37e65f14cf8681cd0071088d284db2396e62cd77261dd7956e307970f4f2ad3685975520c2c8a4f8184021d0fb3dac64cba074eae24d5afb1b3799815997b0511fe4d967887ec50e514011b05c57503710fd22fb822e8ecc41826558daa1f367", 0x60}, {&(0x7f0000002100)="8f2d297db1fd96a742c700a700d49acc566563192ae424db5d3ff70e62963ecf9fa13675", 0x24}], 0x8, &(0x7f0000002240)=[{0xc8, 0x10d, 0x6, "fdd212f6f064906ea33268eead3e18692538eac3077a896cd620310ddaa1bf6c8060c2b6f42a4031953fc38bc8b2a3ba6f6b58b768d8d60da6204fa634f97b7cb098a5c937289fbe6ca5613ce50bf8565efe65d3f0abe462c4f0f28848239e9f897402a96aef1251b5f41ae22bba37834199a0fdccb15cbd7c9794603a51f5d32383607a3b088c15342d55202e2f1b1183f0c3703294a748824d8703a0e0d41ace94ee81d810a0253b4fd355edbfb0ec5cd810fb29"}], 0xc8}, 0x80b4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@jmp={0x5, 0x0, 0x2, 0x4, 0x6, 0x1, 0x17}, @call={0x85, 0x0, 0x0, 0xc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000000240)=""/176, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002340)={0x1, 0xd, 0x8, 0x7}, 0x10, r0, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x5, 0x3, 0x7}, {0x3, 0x205, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x111, 0x2}}, 0x20) close(r1) 1.786795624s ago: executing program 2 (id=2934): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = gettid() syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x4]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000880)="a4cb", 0x2}], 0x1) 1.566249323s ago: executing program 1 (id=2935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[], 0x48) syz_open_dev$usbfs(0x0, 0x77, 0x41341) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2) 1.380957857s ago: executing program 3 (id=2937): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) write$ppp(r0, &(0x7f0000000200)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x80, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 1.028491336s ago: executing program 3 (id=2938): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 972.428661ms ago: executing program 3 (id=2939): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400030000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) 952.175442ms ago: executing program 3 (id=2940): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) write$ppp(r0, &(0x7f0000000200)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x80, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 932.400564ms ago: executing program 2 (id=2941): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)={0x28, r5, 0x309, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000032f683368cdab20107", @ANYRES16=r0, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 661.588246ms ago: executing program 1 (id=2943): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 412.532346ms ago: executing program 0 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x11, 0xa, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x60110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 398.321328ms ago: executing program 5 (id=2950): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)='\x00', 0x1}], 0x1}}], 0x1, 0xcc10) 371.23556ms ago: executing program 5 (id=2951): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 325.547294ms ago: executing program 5 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 324.999374ms ago: executing program 5 (id=2953): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x46602) 263.250089ms ago: executing program 5 (id=2954): r0 = socket(0x22, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0xfff9, 0x7, 0x2, 0x4, 0x1, 0x622]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x12}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x1}, {0x1, 0x4}, {0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xea6f, 0x7fff, 0x1, 0x81, 0x9, 0x1cd2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x4}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x9}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x1}, {0x6, 0x8}, {0x6, 0x1b}, {0x6, 0x4}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf82, 0xe, 0x800, 0x80, 0x8, 0x8, 0x3, 0x4]}}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x23, 0x18}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0x23}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "573c96e44b51d915048d025d8faa7fb8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "5ada48bcc0d39c22bd14fbc9c98449f3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b9c1d4d3a7b68acc6092740019fb7724"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.log\x00', 0x200, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000540)={0x6c4, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4c0, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x23}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbc1a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6c, 0x0, 0x18, 0xc, 0x36, 0x5, 0x5, 0x2, 0x3, 0x1b, 0x12, 0x0, 0x2, 0x3, 0x2, 0x30, 0x60, 0xb, 0x2, 0x48, 0xc, 0x16, 0x30, 0x28, 0x5, 0x9, 0x9]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x2, 0x8000, 0x2, 0x6, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0xb, 0x6, 0x18, 0x30, 0x4, 0x36, 0x30, 0x1, 0x3, 0x4, 0x16, 0x1b, 0x5, 0x6c, 0xb, 0x30, 0x1, 0x24, 0x36, 0x1b, 0x1, 0x5, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x2}, {0x4, 0x5}, {0x6, 0x9}, {0x7}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0x1}, {0x1}, {0x1, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd00, 0x1, 0x8dc, 0x1, 0xfffd, 0x6, 0x1, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3ff, 0xfe01, 0x6, 0x5d, 0x0, 0x4, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x7}, {0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x4}, {0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x6, 0xa}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x2, 0x9, 0x3, 0x3ffb, 0x4b61, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x40, 0x3ff, 0xe, 0xfff, 0x39, 0x3, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f32, 0x8, 0x14, 0x3, 0x6, 0x4, 0xa, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x12, 0x5, 0x5, 0x6, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x7, 0x7ff, 0x26a1, 0x3, 0x2db2, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0xff, 0x2, 0x3, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffff, 0xfffb, 0x7, 0xf95, 0x2, 0x1000, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x62f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x5}, {0x5, 0x6}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0xe}, {0x3, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x7}, {0x7, 0x7}, {0x6, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x3}, {0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0xb]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x2}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x4}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x2, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x7, 0x9}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x6}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x2}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {}, {0x0, 0xa}, {0x4, 0x3}, {0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x52a, 0x7, 0x1, 0xe, 0x7, 0xffff, 0x7, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xccf}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x147}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0xfc}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x2, 0x2, 0x36, 0x9, 0x4, 0x6c, 0x24, 0xb, 0x2, 0x5, 0x4, 0x1b, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xb, 0x4, 0x24d, 0x8, 0x4, 0x82d8]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x0, 0x1, 0x10, 0xa, 0x9, 0x48a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x7, 0x7, 0x2, 0x7, 0x4, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x101, 0x616, 0xe, 0x1, 0x8, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x6}, {0x1}, {0x0, 0x3}, {0x4}, {0x2, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x3, 0xdb85, 0x7, 0x7fff, 0x0, 0x50]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x3, 0x8}, {0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x0, 0x4}, {0x7}, {0x0, 0x9}, {0x6}, {0x4, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x1}, {0x3, 0xf}, {0x1, 0x2}, {0x3, 0xa}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x1}, {0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0x2}, {0x2, 0x6}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}]}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x4000091}, 0x40) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x801200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x150, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x73, 0xa8, @random="2dfe7ef01563eb0b2c2b09721e81d0da8ce399ec99e22296821c5c88aceb1c471379904b85e04993db76d3eec1ba8471f3e5a618bbe36f8fa4948a57f090fc05159dd59730756c372d8e1f296ad4c50cb6d3931d9e8144e9e5961616de2f98f97f73ccc22b4c9326250e9b08d57a47"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1e, 0xa8, @random="2db2c6436702188e18c1246346d602450febccc3e667ca8d8461"}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) faccessat2(r4, &(0x7f0000001080)='./file0\x00', 0x93cab917dd430e2b, 0x1200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f00000010c0)) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000001100)=0x16) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r6) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x48890) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44004) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x240088c0) r10 = socket$inet6(0xa, 0x4, 0x10000) accept(r10, &(0x7f00000014c0)=@nfc_llcp, &(0x7f0000001540)=0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000001740)={&(0x7f0000001580), 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x84, r12, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4003fd049f4138a8f71107da8e7b79e5daf6421f28204336c110f9538b4b813f"}]}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x91c6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8014d2cebdf31f7f594d79e29cf66be7"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) fcntl$getownex(r4, 0x10, &(0x7f0000001800)={0x0, 0x0}) perf_event_open(&(0x7f0000001780)={0x1, 0x80, 0x6, 0x40, 0x3, 0x0, 0x0, 0xaf, 0x40, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x23a8, 0x9}, 0x109808, 0x5, 0xd7, 0x4, 0xffffffffffffffff, 0x5, 0xfffd, 0x0, 0x5, 0x0, 0x2}, r14, 0xc, r4, 0x3) 262.130749ms ago: executing program 5 (id=2955): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_clone(0x905400, &(0x7f0000000280)="304c9f8938af467d0879955efb2bb517e762dbc0713ee3c29327966a85e0abc04a9af37c0cf2eb25d7135c87400fb1a7aab5b33890fbf449dad26e6f004f45f7", 0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="9e96dbf2978d91f07fc3c284597482fe59fc49a32d3179bfbc71e304b8962499e42104d75b00677e6290cccf4c7ca1a975f945b9a467ef63ea74343c65023335dffdc43c541523a50e45172324ed00ba3792cf9af7ebd34604f1801eb74835eef2e3e80d1bf621039e54af626319c1909e50cf226f52d4e1f94d532aaa5c5206d0290a8d85ae779ca5f38ba6d85d5d40ecc167") sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0xdd28) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000a260882df93fd231d3000000000000000000000000180100002020a62500000000002020207b1af8ff00000000bfa100000000000007e30800f8ffffffb702000008000000b703000000000000", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x38}}, 0x90) 255.883029ms ago: executing program 0 (id=2956): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x3}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000180)=""/73, 0x49, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioperm(0x0, 0x1, 0x1) 204.607553ms ago: executing program 0 (id=2957): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000005c0)="08c6611a45f6f252a372ca2afba269d5a52514c45aa590420c48cb6d9868cda4285aadd398c19d753e39d258280619bd605b270c592855b965e1d2b621cec50b03b48a737cb239a51bcd527ca8d2307b5a8a3c74ca249e5f5cd871a2fff1df7f965e25714cecc2a4180811f25363c2380dfa59606a102540e6a89b64dd7b67a4bc6f41073d3396324c1397cf0ea17dad2f13f55271318f270f127b60c739ab3f78e34fd65c2d146c0eb2a88643666fd3e5452c3c209aa117af809d35164db65ab39ecb8cb5b9341bbfc31896", 0xcc}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="0d375af72a73441b31ecee5e43000467b7748d9c4e2fd12aed6c3227be311127196fd82cc8714452027043e34e6704c48cfe0e44ecba2d48aa75f2ec650c425865124093690cfb9ff423aa", 0x4b}, {&(0x7f0000000700)}, {&(0x7f0000000840)="a2e69761b12950261f443c8b0e62e62a87acfcbf9f446279654a73d7b55579a46c243ecf94905d3286e9e9d94fafcd51ae156e299a1c457444e9d61fb26beba4036cd6d1f43bdf8fcf4b47a37abf2635ee7620b36818ae947a1e29ffb8a87927a5abb8a3ac5596916aa857c9c39ca95ae2358b5da2a1760464551bfb958653dad479e1c4f7899aad72eb21de8cbcdb0d0f5892817948a55ced", 0x99}, {&(0x7f0000000900)="6d2e1d5bfd2cff2a08c0f272bba959658b41275099ab4f194543d1e4c5840a4cb1d76a2299073842c1ed61858d53867ea29e38caaf0602eb89e4ef1c901ee5e99f84af5e2f0c5afbc5fb2c48233fe4cfc279e1c735b399ab283187187cb61139646cb85d29a40efd91a8af386031cbe906844877f2b05915d8b281c29062b7bfda783ac102b3c424a39ddba0ff92d989df9605c0e7c121f1bf287a31d4b203b5e21511e896a508c1cd0ce66f70e752abc5d87faffea9fd19dd3c064c283818ecccd56df9ceb01496f1a1eb", 0xcb}, {&(0x7f0000001f80)="37e65f14cf8681cd0071088d284db2396e62cd77261dd7956e307970f4f2ad3685975520c2c8a4f8184021d0fb3dac64cba074eae24d5afb1b3799815997b0511fe4d967887ec50e514011b05c57503710fd22fb822e8ecc41826558daa1f367", 0x60}, {0x0}, {&(0x7f0000002100)="8f2d297db1fd96a742c700a700d49acc566563192ae424db5d3ff70e62963ecf9fa13675", 0x24}], 0x9, &(0x7f0000002240)=[{0xc8, 0x10d, 0x6, "fdd212f6f064906ea33268eead3e18692538eac3077a896cd620310ddaa1bf6c8060c2b6f42a4031953fc38bc8b2a3ba6f6b58b768d8d60da6204fa634f97b7cb098a5c937289fbe6ca5613ce50bf8565efe65d3f0abe462c4f0f28848239e9f897402a96aef1251b5f41ae22bba37834199a0fdccb15cbd7c9794603a51f5d32383607a3b088c15342d55202e2f1b1183f0c3703294a748824d8703a0e0d41ace94ee81d810a0253b4fd355edbfb0ec5cd810fb29"}], 0xc8}, 0x80b4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x800, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@jmp={0x5, 0x0, 0x2, 0x4, 0x6, 0x1, 0x17}, @call={0x85, 0x0, 0x0, 0xc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xb0, &(0x7f0000000240)=""/176, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002340)={0x1, 0xd, 0x8, 0x7}, 0x10, r0, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x5, 0x3, 0x7}, {0x3, 0x205, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400009b000000000700000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x111, 0x2}}, 0x20) close(r1) 154.653477ms ago: executing program 0 (id=2958): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x22, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(&(0x7f00000005c0)='./cgroup\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffecf) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0xa1da34f30bcea2c5, &(0x7f00000003c0)={0x8, &(0x7f0000000280)=[{0x8, 0x0, 0x8, 0x1}, {0x0, 0x8, 0xed}, {0x6, 0xe, 0x0, 0x3cbe}, {0x401, 0xd, 0x9}, {0x81, 0x91, 0x2}, {0xad, 0x7, 0x8, 0x9}, {0xe, 0x68, 0x20, 0xffff}, {0x4, 0xb, 0x4}]}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[]) 10.300139ms ago: executing program 0 (id=2959): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 6.530149ms ago: executing program 0 (id=2960): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x32, 0x66, 0x38, 0x63, 0x31, 0x66], 0x2d, [0x33, 0x62, 0x62, 0x31], 0x2d, [0x64, 0x33, 0x30, 0x63], 0x2d, [0x32, 0x31, 0x64, 0x56], 0x2d, [0x37, 0x66, 0x37, 0x34, 0x34, 0x38, 0x62, 0x66]}}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_gt}]}, 0x1, 0x574, &(0x7f0000000d80)="$eJzs3V9rW+UfAPDvSdOt+/P7rYMx1Asp7MLKXLq2/pkgOG8E0eFA72doz8pouowmHWsdbLtwN97IEEQciC/Aey+Hb8BXMdDBkFH0wpvKSU+6uDZtlmamM58PnPR5zp8+55vnPE+ekychAQysseyhEPFiRHyVRBxp2VaMfOPY+n6rj67PZEsSa2uf/J5Ekq9r7p/kfw/lmRci4ucvIk4WNpdbW16ZL1cq6WKen6gvXJmoLa+curRQnkvn0stT09Nn3pieevutN3sW66vn//z243sfnPnyxOo3Pz44eieJs3E439Yaxy7cbM2MxVj+nAzH2Sd2nOxBYXtJ0u8ToCtDeTsfjqwPOBJDeasH/vtuRMQaMKAS7R8GVHMc0Ly379F98HPj4XvrN0Ab8Q814y+uvzcSI417o4OrSeud0YHsYbQH5Wdl/PTb3TvZEju8D3GjB+UBNN28FRGni8XN/X+S93/dO91483h7T5YxaK8/0E/3svHPa1uN/wob45/YPP5pzPHstn+Ijtp/4UEPimkrG/+9s+X4d6PrGh3Kc/9rjPmGk4uXKunpiPh/RIzH8P4sv918zpnV+2vttrWO/7IlK785FszP40Fx/z+PmS3Xy7uJudXDWxEvFbeKP9mo/2SL+s+ej/MdlnE8vftyu207x/9srf0Q8cqW9f94RivZfn5yonE9TDSvis3+uH38l3blj7/f3/iz+j+4ffyjSet8be3py/h+5K+03bZur/99yaeN9L583bVyvb44GbEv+Wjz+qnHxzbzzf2z+MdPbN//bXX9ZzeAn3UY/+1jt9vu2u/rP4t/9qnq/+kT9z/8/Lt25XdW/683UuP5mk76v05PcDfPHQAAAAAAAOw1hYg4HEmhtJEuFEql9c93HIuDhUq1Vj95sbp0eTYa35UdjeFCc6b7SMvnISbzz8M281NP5Kcj4mhEfD10oJEvzVQrs/0OHgAAAAAAAAAAAAAAAAAAAPaIQ22+/5/5dajfZwc8c7v4yW+/Fg7PuR0bcS9+6QnYk7yIw+DS/mFwaf8wuLR/GFzaPwwu7R8Gl/YPg0v7BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ46f+5ctqytPro+k+Vnry4vzVevnppNa/OlhaWZ0kx18Upprlqdq6SlmerCTv+vUq1emZyKpWsT9bRWn6gtr1xYqC5drl+4tFCeSy+kw/9KVAAAAAAAAAAAAAAAAAAAAPB8qS2vzJcrlXRRom3i3ejmqJGujupTgOu6Ory4V6KQaJsY6aJy+9wxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECLvwMAAP//vQwySg==") (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/251) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, '\x00', r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r2}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) 0s ago: executing program 2 (id=2961): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000137a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) kernel console output (not intermixed with test programs): 370666][ T9793] RIP: 0033:0x7f3301faeb69 [ 141.370686][ T9793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.370777][ T9793] RSP: 002b:00007f330060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.370851][ T9793] RAX: ffffffffffffffda RBX: 00007f33021d5fa0 RCX: 00007f3301faeb69 [ 141.370866][ T9793] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 000000000000000c [ 141.370880][ T9793] RBP: 00007f330060f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.370892][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.370904][ T9793] R13: 0000000000000000 R14: 00007f33021d5fa0 R15: 00007ffc194e6088 [ 141.370953][ T9793] [ 141.830682][ T9793] team0: Failed to send options change via netlink (err -105) [ 141.839152][ T9793] team0: Port device dummy0 added [ 141.886904][ T9797] random: crng reseeded on system resumption [ 143.441096][ T9887] random: crng reseeded on system resumption [ 143.967086][ T9913] netlink: 17760 bytes leftover after parsing attributes in process `syz.3.2169'. [ 144.442571][ T9928] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2178'. [ 144.452700][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2177'. [ 144.460256][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 144.460276][ T29] audit: type=1400 audit(144.431:13705): avc: denied { ioctl } for pid=9926 comm="syz.0.2178" path="socket:[26271]" dev="sockfs" ino=26271 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.515199][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2177'. [ 144.611400][ T29] audit: type=1326 audit(144.591:13706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 144.615316][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 144.647291][ T29] audit: type=1326 audit(144.601:13707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff694a50a87 code=0x7ffc0000 [ 144.673359][ T29] audit: type=1326 audit(144.601:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff694a509fc code=0x7ffc0000 [ 144.679260][ T9936] IPVS: Error joining to the multicast group [ 144.699249][ T29] audit: type=1326 audit(144.601:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff694a50934 code=0x7ffc0000 [ 144.729841][ T29] audit: type=1326 audit(144.601:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff694a50934 code=0x7ffc0000 [ 144.754103][ T29] audit: type=1326 audit(144.601:13711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff694a4d7ca code=0x7ffc0000 [ 144.778476][ T29] audit: type=1326 audit(144.601:13712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 144.804168][ T29] audit: type=1326 audit(144.601:13713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 144.828275][ T29] audit: type=1326 audit(144.601:13714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 145.000302][ T9953] random: crng reseeded on system resumption [ 145.053704][ T9959] vlan2: entered allmulticast mode [ 145.060571][ T9959] bridge_slave_0: entered allmulticast mode [ 145.185818][ T9962] FAULT_INJECTION: forcing a failure. [ 145.185818][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 145.200428][ T9962] CPU: 1 UID: 0 PID: 9962 Comm: syz.3.2191 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 145.200476][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.200567][ T9962] Call Trace: [ 145.200575][ T9962] [ 145.200585][ T9962] __dump_stack+0x1d/0x30 [ 145.200613][ T9962] dump_stack_lvl+0xe8/0x140 [ 145.200715][ T9962] dump_stack+0x15/0x1b [ 145.200734][ T9962] should_fail_ex+0x265/0x280 [ 145.200779][ T9962] should_failslab+0x8c/0xb0 [ 145.200926][ T9962] kmem_cache_alloc_noprof+0x50/0x310 [ 145.200961][ T9962] ? dup_fd+0x3a/0x540 [ 145.200982][ T9962] dup_fd+0x3a/0x540 [ 145.201002][ T9962] ? _raw_spin_unlock+0x26/0x50 [ 145.201042][ T9962] ksys_unshare+0x346/0x6d0 [ 145.201101][ T9962] ? ksys_write+0x192/0x1a0 [ 145.201132][ T9962] __x64_sys_unshare+0x1f/0x30 [ 145.201202][ T9962] x64_sys_call+0x2911/0x2ff0 [ 145.201226][ T9962] do_syscall_64+0xd2/0x200 [ 145.201258][ T9962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.201286][ T9962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.201339][ T9962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.201365][ T9962] RIP: 0033:0x7f728d41eb69 [ 145.201459][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.201483][ T9962] RSP: 002b:00007f728ba7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.201521][ T9962] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41eb69 [ 145.201537][ T9962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 145.201554][ T9962] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.201570][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.201586][ T9962] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 145.201611][ T9962] [ 145.383333][ T9972] netlink: 17760 bytes leftover after parsing attributes in process `syz.0.2192'. [ 146.022306][ T3411] hid_parser_main: 60 callbacks suppressed [ 146.022332][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.043194][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.068526][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.076368][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.083946][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.091741][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.099361][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.107116][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.115000][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.122632][ T3411] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 146.156786][ T3411] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz1 [ 146.203701][ T9993] random: crng reseeded on system resumption [ 146.247622][ T9994] fido_id[9994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.368876][T10005] FAULT_INJECTION: forcing a failure. [ 146.368876][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.383753][T10005] CPU: 1 UID: 0 PID: 10005 Comm: syz.2.2206 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 146.383837][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.383853][T10005] Call Trace: [ 146.383861][T10005] [ 146.383869][T10005] __dump_stack+0x1d/0x30 [ 146.383891][T10005] dump_stack_lvl+0xe8/0x140 [ 146.383915][T10005] dump_stack+0x15/0x1b [ 146.383937][T10005] should_fail_ex+0x265/0x280 [ 146.384055][T10005] should_fail+0xb/0x20 [ 146.384144][T10005] should_fail_usercopy+0x1a/0x20 [ 146.384163][T10005] _copy_to_user+0x20/0xa0 [ 146.384190][T10005] simple_read_from_buffer+0xb5/0x130 [ 146.384215][T10005] proc_fail_nth_read+0x10e/0x150 [ 146.384253][T10005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.384319][T10005] vfs_read+0x19d/0x6f0 [ 146.384341][T10005] ? __rcu_read_unlock+0x4f/0x70 [ 146.384363][T10005] ? __fget_files+0x184/0x1c0 [ 146.384410][T10005] ksys_read+0xda/0x1a0 [ 146.384515][T10005] __x64_sys_read+0x40/0x50 [ 146.384536][T10005] x64_sys_call+0x27bc/0x2ff0 [ 146.384639][T10005] do_syscall_64+0xd2/0x200 [ 146.384666][T10005] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.384698][T10005] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.384728][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.384811][T10005] RIP: 0033:0x7f3301fad57c [ 146.384827][T10005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.384849][T10005] RSP: 002b:00007f330060f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.384870][T10005] RAX: ffffffffffffffda RBX: 00007f33021d5fa0 RCX: 00007f3301fad57c [ 146.384882][T10005] RDX: 000000000000000f RSI: 00007f330060f0a0 RDI: 0000000000000005 [ 146.384895][T10005] RBP: 00007f330060f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.384951][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.384963][T10005] R13: 0000000000000000 R14: 00007f33021d5fa0 R15: 00007ffc194e6088 [ 146.384984][T10005] [ 146.829987][T10015] hub 9-0:1.0: USB hub found [ 146.843889][T10015] hub 9-0:1.0: 8 ports detected [ 146.846965][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 146.855470][T10015] 9pnet_fd: Insufficient options for proto=fd [ 147.902823][T10053] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 147.909578][T10053] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.918352][T10053] vhci_hcd vhci_hcd.0: Device attached [ 147.927803][T10056] vhci_hcd: connection closed [ 147.928486][ T1412] vhci_hcd: stop threads [ 147.938611][ T1412] vhci_hcd: release socket [ 147.943706][ T1412] vhci_hcd: disconnect device [ 148.076370][T10071] FAULT_INJECTION: forcing a failure. [ 148.076370][T10071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.089716][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.1.2234 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 148.089752][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.089818][T10071] Call Trace: [ 148.089826][T10071] [ 148.089834][T10071] __dump_stack+0x1d/0x30 [ 148.089858][T10071] dump_stack_lvl+0xe8/0x140 [ 148.089883][T10071] dump_stack+0x15/0x1b [ 148.090006][T10071] should_fail_ex+0x265/0x280 [ 148.090050][T10071] should_fail+0xb/0x20 [ 148.090086][T10071] should_fail_usercopy+0x1a/0x20 [ 148.090182][T10071] _copy_from_user+0x1c/0xb0 [ 148.090224][T10071] __sys_bpf+0x178/0x7b0 [ 148.090266][T10071] __x64_sys_bpf+0x41/0x50 [ 148.090344][T10071] x64_sys_call+0x2aea/0x2ff0 [ 148.090370][T10071] do_syscall_64+0xd2/0x200 [ 148.090400][T10071] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.090506][T10071] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.090530][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.090554][T10071] RIP: 0033:0x7ff694a4eb69 [ 148.090570][T10071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.090659][T10071] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.090679][T10071] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 148.090693][T10071] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 148.090706][T10071] RBP: 00007ff6930af090 R08: 0000000000000000 R09: 0000000000000000 [ 148.090719][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.090732][T10071] R13: 0000000000000001 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 148.090750][T10071] [ 148.346455][T10078] 9pnet_fd: p9_fd_create_unix (10078): problem connecting socket: ./file0: -2 [ 148.390787][T10080] random: crng reseeded on system resumption [ 148.409710][T10083] ALSA: seq fatal error: cannot create timer (-19) [ 148.635805][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 148.827944][T10117] random: crng reseeded on system resumption [ 148.865582][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.875151][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.187659][T10159] netlink: 17772 bytes leftover after parsing attributes in process `syz.5.2253'. [ 149.395843][T10166] FAULT_INJECTION: forcing a failure. [ 149.395843][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.409261][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.3.2255 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 149.409367][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.409436][T10166] Call Trace: [ 149.409444][T10166] [ 149.409452][T10166] __dump_stack+0x1d/0x30 [ 149.409480][T10166] dump_stack_lvl+0xe8/0x140 [ 149.409506][T10166] dump_stack+0x15/0x1b [ 149.409528][T10166] should_fail_ex+0x265/0x280 [ 149.409634][T10166] should_fail+0xb/0x20 [ 149.409672][T10166] should_fail_usercopy+0x1a/0x20 [ 149.409691][T10166] _copy_from_user+0x1c/0xb0 [ 149.409786][T10166] __sys_sendto+0x19e/0x330 [ 149.409826][T10166] __x64_sys_sendto+0x76/0x90 [ 149.409856][T10166] x64_sys_call+0x2d05/0x2ff0 [ 149.409884][T10166] do_syscall_64+0xd2/0x200 [ 149.409989][T10166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.410084][T10166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.410160][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.410182][T10166] RIP: 0033:0x7f728d41eb69 [ 149.410203][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.410228][T10166] RSP: 002b:00007f728ba7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 149.410253][T10166] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41eb69 [ 149.410336][T10166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 149.410353][T10166] RBP: 00007f728ba7f090 R08: 0000200000000300 R09: 000000000000001c [ 149.410369][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.410387][T10166] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 149.410412][T10166] [ 149.846335][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 150.211362][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 150.211402][ T29] audit: type=1326 audit(150.195:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.249902][ T29] audit: type=1326 audit(150.235:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.274896][ T29] audit: type=1326 audit(150.235:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.300095][ T29] audit: type=1326 audit(150.235:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.328111][ T29] audit: type=1326 audit(150.235:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.355378][ T29] audit: type=1326 audit(150.235:14105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.382057][ T29] audit: type=1326 audit(150.235:14106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.407821][ T29] audit: type=1326 audit(150.235:14107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.434028][ T29] audit: type=1326 audit(150.235:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 150.436994][T10219] random: crng reseeded on system resumption [ 150.461650][ T29] audit: type=1326 audit(150.235:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.3.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728d41eb69 code=0x7ffc0000 [ 151.252540][T10297] team0: Port device dummy0 removed [ 151.396290][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 151.427655][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 151.428952][T10303] random: crng reseeded on system resumption [ 151.580403][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 151.599766][T10323] ------------[ cut here ]------------ [ 151.605563][T10323] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1) [ 151.625236][T10323] WARNING: CPU: 1 PID: 10323 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 151.631746][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 151.637921][T10323] Modules linked in: [ 151.652272][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.0.2283 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 151.666133][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.677400][T10323] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 151.684147][T10329] 9pnet: Could not find request transport: fd [ 151.685181][T10323] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 151.713016][T10323] RSP: 0018:ffffc9000eddb440 EFLAGS: 00010292 [ 151.719606][T10323] RAX: cb010824a2446000 RBX: ffff88811a4088b8 RCX: 0000000000080000 [ 151.728142][T10323] RDX: ffffc90001ce2000 RSI: 0000000000008997 RDI: 0000000000008998 [ 151.736536][T10323] RBP: 0000000000000010 R08: 0001c9000eddb27f R09: 0000000000000000 [ 151.745232][T10323] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a408878 [ 151.753895][T10323] R13: ffff88810b1a8000 R14: ffff88810b1a8000 R15: ffff88811a4088b0 [ 151.762670][T10323] FS: 00007f9411cdf6c0(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 151.772232][T10323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.780314][T10323] CR2: 00002000000017c0 CR3: 000000011a15e000 CR4: 00000000003506f0 [ 151.781144][T10336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.790723][T10323] Call Trace: [ 151.790738][T10323] [ 151.790786][T10323] reg_set_min_max+0x1eb/0x260 [ 151.812439][T10336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.816431][T10323] check_cond_jmp_op+0x1080/0x16e0 [ 151.833287][T10323] do_check+0x332a/0x7a10 [ 151.838558][T10323] do_check_common+0xc3a/0x1290 [ 151.844772][T10323] bpf_check+0x942b/0xd9e0 [ 151.850463][T10323] ? __rcu_read_unlock+0x4f/0x70 [ 151.856768][T10323] ? trace_reschedule_exit+0xd/0xc0 [ 151.863929][T10323] ? __vmap_pages_range_noflush+0x76/0xbd0 [ 151.870752][T10323] ? __sanitizer_cov_trace_cmp8+0x8/0x90 [ 151.877034][T10323] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 151.883628][T10323] ? try_charge_memcg+0x200/0x9e0 [ 151.889653][T10323] ? pcpu_block_refresh_hint+0x10b/0x170 [ 151.896194][T10323] ? pcpu_block_refresh_hint+0x10b/0x170 [ 151.902323][T10323] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 151.908999][T10323] ? css_rstat_updated+0xb7/0x240 [ 151.914350][T10323] ? __rcu_read_unlock+0x4f/0x70 [ 151.919534][T10323] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 151.925881][T10323] ? should_fail_ex+0x30/0x280 [ 151.931356][T10323] ? selinux_bpf_prog_load+0x36/0xf0 [ 151.938523][T10323] ? should_failslab+0x8c/0xb0 [ 151.943656][T10323] ? __kmalloc_cache_noprof+0x189/0x320 [ 151.950085][T10323] ? selinux_bpf_prog_load+0xbf/0xf0 [ 151.955747][T10323] ? security_bpf_prog_load+0x2c/0xa0 [ 151.961718][T10323] bpf_prog_load+0xedd/0x1070 [ 151.967242][T10323] ? security_bpf+0x2b/0x90 [ 151.972205][T10323] __sys_bpf+0x462/0x7b0 [ 151.976865][T10323] __x64_sys_bpf+0x41/0x50 [ 151.981882][T10323] x64_sys_call+0x2aea/0x2ff0 [ 151.986820][T10323] do_syscall_64+0xd2/0x200 [ 151.991403][T10323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.997786][T10323] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.003810][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.010381][T10323] RIP: 0033:0x7f941367eb69 [ 152.014945][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.032091][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 152.036295][T10323] RSP: 002b:00007f9411cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.036326][T10323] RAX: ffffffffffffffda RBX: 00007f94138a5fa0 RCX: 00007f941367eb69 [ 152.036340][T10323] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 152.072109][T10323] RBP: 00007f9413701df1 R08: 0000000000000000 R09: 0000000000000000 [ 152.080512][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.089382][T10323] R13: 0000000000000000 R14: 00007f94138a5fa0 R15: 00007fff6c7d6ff8 [ 152.098033][T10323] [ 152.101153][T10323] ---[ end trace 0000000000000000 ]--- [ 152.109848][T10327] veth0_macvtap: left promiscuous mode [ 152.116528][T10327] macvtap0: entered allmulticast mode [ 152.129558][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 152.142016][T10337] wireguard0: entered promiscuous mode [ 152.159726][T10338] wireguard0: entered promiscuous mode [ 152.264372][T10357] serio: Serial port ttyS3 [ 152.297626][T10359] random: crng reseeded on system resumption [ 152.372966][T10365] FAULT_INJECTION: forcing a failure. [ 152.372966][T10365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.388378][T10365] CPU: 0 UID: 0 PID: 10365 Comm: syz.1.2293 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 152.388473][T10365] Tainted: [W]=WARN [ 152.388483][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.388499][T10365] Call Trace: [ 152.388509][T10365] [ 152.388518][T10365] __dump_stack+0x1d/0x30 [ 152.388542][T10365] dump_stack_lvl+0xe8/0x140 [ 152.388563][T10365] dump_stack+0x15/0x1b [ 152.388657][T10365] should_fail_ex+0x265/0x280 [ 152.388706][T10365] should_fail+0xb/0x20 [ 152.388738][T10365] should_fail_usercopy+0x1a/0x20 [ 152.388760][T10365] _copy_from_user+0x1c/0xb0 [ 152.388851][T10365] ___sys_sendmsg+0xc1/0x1d0 [ 152.388904][T10365] __x64_sys_sendmsg+0xd4/0x160 [ 152.388968][T10365] x64_sys_call+0x191e/0x2ff0 [ 152.388997][T10365] do_syscall_64+0xd2/0x200 [ 152.389045][T10365] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.389079][T10365] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.389169][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.389194][T10365] RIP: 0033:0x7ff694a4eb69 [ 152.389210][T10365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.389232][T10365] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.389318][T10365] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 152.389332][T10365] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000005 [ 152.389346][T10365] RBP: 00007ff6930af090 R08: 0000000000000000 R09: 0000000000000000 [ 152.389360][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.389373][T10365] R13: 0000000000000000 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 152.389394][T10365] [ 152.718893][T10374] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2297'. [ 152.732771][T10374] hsr_slave_0: left promiscuous mode [ 152.742002][T10374] hsr_slave_1: left promiscuous mode [ 152.969389][T10393] random: crng reseeded on system resumption [ 153.243519][T10406] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2311'. [ 153.305563][T10412] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 153.314101][T10412] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 153.314118][T10412] netlink: 155600 bytes leftover after parsing attributes in process `syz.2.2314'. [ 153.344542][ T23] hid_parser_main: 17 callbacks suppressed [ 153.344566][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.361983][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.371491][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.379500][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.388638][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.397621][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.397656][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.414529][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.423451][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.423480][ T23] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 153.427132][ T23] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz1 [ 153.475983][ T23] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 153.486281][T10416] fido_id[10416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.547446][T10420] serio: Serial port ttyS3 [ 153.562962][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2318'. [ 153.583770][T10422] fido_id[10422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.611290][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2318'. [ 153.874616][T10441] FAULT_INJECTION: forcing a failure. [ 153.874616][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.889601][T10441] CPU: 1 UID: 0 PID: 10441 Comm: syz.5.2327 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 153.889681][T10441] Tainted: [W]=WARN [ 153.889689][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.889702][T10441] Call Trace: [ 153.889710][T10441] [ 153.889781][T10441] __dump_stack+0x1d/0x30 [ 153.889810][T10441] dump_stack_lvl+0xe8/0x140 [ 153.889885][T10441] dump_stack+0x15/0x1b [ 153.889916][T10441] should_fail_ex+0x265/0x280 [ 153.889963][T10441] should_fail+0xb/0x20 [ 153.890029][T10441] should_fail_usercopy+0x1a/0x20 [ 153.890053][T10441] _copy_from_user+0x1c/0xb0 [ 153.890079][T10441] arp_ioctl+0xac/0x2c0 [ 153.890124][T10441] inet_ioctl+0x2ad/0x3a0 [ 153.890224][T10441] sock_do_ioctl+0x73/0x220 [ 153.890254][T10441] sock_ioctl+0x41b/0x610 [ 153.890279][T10441] ? __pfx_sock_ioctl+0x10/0x10 [ 153.890308][T10441] __se_sys_ioctl+0xce/0x140 [ 153.890406][T10441] __x64_sys_ioctl+0x43/0x50 [ 153.890475][T10441] x64_sys_call+0x1816/0x2ff0 [ 153.890506][T10441] do_syscall_64+0xd2/0x200 [ 153.890532][T10441] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.890564][T10441] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.890594][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.890673][T10441] RIP: 0033:0x7f525066eb69 [ 153.890692][T10441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.890737][T10441] RSP: 002b:00007f524eccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.890763][T10441] RAX: ffffffffffffffda RBX: 00007f5250895fa0 RCX: 00007f525066eb69 [ 153.890781][T10441] RDX: 0000200000000380 RSI: 0000000000008955 RDI: 0000000000000008 [ 153.890798][T10441] RBP: 00007f524eccf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.890815][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.890829][T10441] R13: 0000000000000000 R14: 00007f5250895fa0 R15: 00007ffdc0ed05d8 [ 153.890868][T10441] [ 154.185419][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 154.226800][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'. [ 154.277680][T10464] FAULT_INJECTION: forcing a failure. [ 154.277680][T10464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.294278][T10464] CPU: 1 UID: 0 PID: 10464 Comm: syz.0.2333 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 154.294357][T10464] Tainted: [W]=WARN [ 154.294364][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.294378][T10464] Call Trace: [ 154.294386][T10464] [ 154.294396][T10464] __dump_stack+0x1d/0x30 [ 154.294474][T10464] dump_stack_lvl+0xe8/0x140 [ 154.294498][T10464] dump_stack+0x15/0x1b [ 154.294555][T10464] should_fail_ex+0x265/0x280 [ 154.294590][T10464] should_fail_alloc_page+0xf2/0x100 [ 154.294619][T10464] __alloc_frozen_pages_noprof+0xff/0x360 [ 154.294728][T10464] alloc_pages_mpol+0xb3/0x250 [ 154.294772][T10464] vma_alloc_folio_noprof+0x1aa/0x300 [ 154.294877][T10464] handle_mm_fault+0xec2/0x2c20 [ 154.294915][T10464] ? __rcu_read_unlock+0x4f/0x70 [ 154.294955][T10464] do_user_addr_fault+0x3fe/0x1090 [ 154.295004][T10464] exc_page_fault+0x62/0xa0 [ 154.295102][T10464] asm_exc_page_fault+0x26/0x30 [ 154.295129][T10464] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 154.295212][T10464] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 154.295243][T10464] RSP: 0018:ffffc9000f74fd50 EFLAGS: 00050206 [ 154.295263][T10464] RAX: ffff88810316cca0 RBX: 0000000000001000 RCX: 0000000000000240 [ 154.295332][T10464] RDX: 0000000000000000 RSI: ffff88811ad49dc0 RDI: 0000200000002000 [ 154.295350][T10464] RBP: ffff88811ad49000 R08: 0000000000000880 R09: 0000000000000000 [ 154.295366][T10464] R10: 000188811ad49000 R11: 000188811ad49fff R12: 0000200000002240 [ 154.295380][T10464] R13: 00007ffffffff000 R14: 0000200000001240 R15: ffff88811ad49000 [ 154.295399][T10464] _copy_to_user+0x7c/0xa0 [ 154.295432][T10464] pagemap_read+0x379/0x5e0 [ 154.295524][T10464] ? __pfx_pagemap_read+0x10/0x10 [ 154.295565][T10464] vfs_read+0x19d/0x6f0 [ 154.295586][T10464] ? __rcu_read_unlock+0x4f/0x70 [ 154.295606][T10464] ? __fget_files+0x184/0x1c0 [ 154.295655][T10464] __x64_sys_pread64+0xfd/0x150 [ 154.295688][T10464] x64_sys_call+0x29e2/0x2ff0 [ 154.295760][T10464] do_syscall_64+0xd2/0x200 [ 154.295790][T10464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.295822][T10464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.295861][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.295893][T10464] RIP: 0033:0x7f941367eb69 [ 154.295969][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.296000][T10464] RSP: 002b:00007f9411cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 154.296023][T10464] RAX: ffffffffffffffda RBX: 00007f94138a5fa0 RCX: 00007f941367eb69 [ 154.296083][T10464] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 154.296099][T10464] RBP: 00007f9411cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 154.296114][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.296130][T10464] R13: 0000000000000000 R14: 00007f94138a5fa0 R15: 00007fff6c7d6ff8 [ 154.296155][T10464] [ 154.699127][T10454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10454 comm=syz.5.2330 [ 154.745041][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.784409][T10479] FAULT_INJECTION: forcing a failure. [ 154.784409][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 154.798981][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.2.2339 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 154.799053][T10479] Tainted: [W]=WARN [ 154.799062][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.799079][T10479] Call Trace: [ 154.799088][T10479] [ 154.799097][T10479] __dump_stack+0x1d/0x30 [ 154.799141][T10479] dump_stack_lvl+0xe8/0x140 [ 154.799160][T10479] dump_stack+0x15/0x1b [ 154.799231][T10479] should_fail_ex+0x265/0x280 [ 154.799265][T10479] should_failslab+0x8c/0xb0 [ 154.799296][T10479] kmem_cache_alloc_noprof+0x50/0x310 [ 154.799410][T10479] ? security_file_alloc+0x32/0x100 [ 154.799487][T10479] security_file_alloc+0x32/0x100 [ 154.799556][T10479] init_file+0x5c/0x1d0 [ 154.799615][T10479] alloc_empty_file+0x8b/0x200 [ 154.799650][T10479] path_openat+0x68/0x2170 [ 154.799668][T10479] ? _parse_integer_limit+0x170/0x190 [ 154.799753][T10479] ? kstrtoull+0x111/0x140 [ 154.799794][T10479] ? kstrtouint+0x76/0xc0 [ 154.799830][T10479] do_filp_open+0x109/0x230 [ 154.799887][T10479] do_sys_openat2+0xa6/0x110 [ 154.799996][T10479] __x64_sys_openat+0xf2/0x120 [ 154.800041][T10479] x64_sys_call+0x2e9c/0x2ff0 [ 154.800092][T10479] do_syscall_64+0xd2/0x200 [ 154.800124][T10479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.800155][T10479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.800183][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.800339][T10479] RIP: 0033:0x7f3301fad4d0 [ 154.800359][T10479] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 154.800384][T10479] RSP: 002b:00007f330060ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 154.800408][T10479] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3301fad4d0 [ 154.800424][T10479] RDX: 0000000000000002 RSI: 00007f330060efa0 RDI: 00000000ffffff9c [ 154.800439][T10479] RBP: 00007f330060efa0 R08: 0000000000000000 R09: 0000000000000000 [ 154.800468][T10479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 154.800494][T10479] R13: 0000000000000000 R14: 00007f33021d5fa0 R15: 00007ffc194e6088 [ 154.800517][T10479] [ 154.813165][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.104111][T10481] 8021q: VLANs not supported on syzkaller1 [ 155.150338][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 155.216098][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 155.216118][ T29] audit: type=1326 audit(155.207:14747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3301fad4d0 code=0x7ffc0000 [ 155.273357][T10499] serio: Serial port ttyS3 [ 155.303811][ T29] audit: type=1326 audit(155.207:14748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3301fb0397 code=0x7ffc0000 [ 155.330978][ T29] audit: type=1326 audit(155.207:14749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 155.357421][ T29] audit: type=1326 audit(155.207:14750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3301fb0397 code=0x7ffc0000 [ 155.383842][ T29] audit: type=1326 audit(155.207:14751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3301fad7ca code=0x7ffc0000 [ 155.410131][ T29] audit: type=1326 audit(155.207:14752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 155.436155][ T29] audit: type=1326 audit(155.207:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 155.463026][ T29] audit: type=1326 audit(155.237:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3301fb09fc code=0x7ffc0000 [ 155.489637][ T29] audit: type=1326 audit(155.237:14755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3301fb0934 code=0x7ffc0000 [ 155.515170][ T29] audit: type=1326 audit(155.237:14756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.2.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3301fb0934 code=0x7ffc0000 [ 155.657322][ T3411] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.688827][T10506] fido_id[10506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.710396][ T3390] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.762749][T10509] fido_id[10509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.088815][T10535] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(20) [ 156.097697][T10535] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.106303][T10535] vhci_hcd vhci_hcd.0: Device attached [ 156.283014][ T3411] vhci_hcd: vhci_device speed not set [ 156.324695][T10531] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 156.332825][T10531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.341480][T10531] vhci_hcd vhci_hcd.0: Device attached [ 156.409878][ T3411] usb 3-3: new full-speed USB device number 2 using vhci_hcd [ 156.418541][T10526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 156.427144][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.437547][T10526] vhci_hcd vhci_hcd.0: Device attached [ 156.470320][T10546] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.492997][T10531] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 156.500194][T10531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.508864][T10531] vhci_hcd vhci_hcd.0: Device attached [ 156.534176][T10526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 156.541858][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.550675][T10526] vhci_hcd vhci_hcd.0: Device attached [ 156.573251][T10526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.610926][T10526] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 156.618116][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.625840][T10526] vhci_hcd vhci_hcd.0: Device attached [ 156.662772][T10531] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.707421][T10526] vhci_hcd vhci_hcd.0: port 0 already used [ 156.723849][T10564] netlink: 'syz.3.2365': attribute type 13 has an invalid length. [ 156.747271][T10558] vhci_hcd: connection closed [ 156.747650][T10552] vhci_hcd: connection closed [ 156.754684][ T37] vhci_hcd: stop threads [ 156.755204][T10548] vhci_hcd: connection closed [ 156.760635][ T37] vhci_hcd: release socket [ 156.760660][ T37] vhci_hcd: disconnect device [ 156.764231][ T37] vhci_hcd: stop threads [ 156.773503][T10532] vhci_hcd: connection closed [ 156.778647][ T37] vhci_hcd: release socket [ 156.778686][ T37] vhci_hcd: disconnect device [ 156.783770][T10536] vhci_hcd: connection reset by peer [ 156.810360][T10533] vhci_hcd: connection closed [ 156.822509][ T37] vhci_hcd: stop threads [ 156.832643][ T37] vhci_hcd: release socket [ 156.838517][ T37] vhci_hcd: disconnect device [ 156.940057][ T37] vhci_hcd: stop threads [ 156.944598][ T37] vhci_hcd: release socket [ 156.949557][ T37] vhci_hcd: disconnect device [ 156.976606][ T1412] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.993258][ T37] vhci_hcd: stop threads [ 156.997793][ T37] vhci_hcd: release socket [ 156.998472][ T1412] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.002489][ T37] vhci_hcd: disconnect device [ 157.015069][ T1412] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.027044][ T1412] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.027387][ T37] vhci_hcd: stop threads [ 157.027398][ T37] vhci_hcd: release socket [ 157.027415][ T37] vhci_hcd: disconnect device [ 157.067551][T10585] hub 9-0:1.0: USB hub found [ 157.072377][T10585] hub 9-0:1.0: 8 ports detected [ 157.081956][T10582] random: crng reseeded on system resumption [ 157.161634][T10594] __nla_validate_parse: 2 callbacks suppressed [ 157.161653][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 157.200486][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 157.230986][T10602] netlink: 'syz.2.2381': attribute type 3 has an invalid length. [ 157.240689][ T9] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 157.290510][T10607] fido_id[10607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.316470][T10611] FAULT_INJECTION: forcing a failure. [ 157.316470][T10611] name failslab, interval 1, probability 0, space 0, times 0 [ 157.329659][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.3.2385 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 157.329834][T10611] Tainted: [W]=WARN [ 157.329842][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.329859][T10611] Call Trace: [ 157.329866][T10611] [ 157.329877][T10611] __dump_stack+0x1d/0x30 [ 157.329904][T10611] dump_stack_lvl+0xe8/0x140 [ 157.329941][T10611] dump_stack+0x15/0x1b [ 157.329962][T10611] should_fail_ex+0x265/0x280 [ 157.329999][T10611] should_failslab+0x8c/0xb0 [ 157.330079][T10611] kmem_cache_alloc_node_noprof+0x57/0x320 [ 157.330116][T10611] ? __alloc_skb+0x101/0x320 [ 157.330149][T10611] __alloc_skb+0x101/0x320 [ 157.330224][T10611] netlink_alloc_large_skb+0xba/0xf0 [ 157.330308][T10611] netlink_sendmsg+0x3cf/0x6b0 [ 157.330354][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.330389][T10611] __sock_sendmsg+0x145/0x180 [ 157.330469][T10611] ____sys_sendmsg+0x31e/0x4e0 [ 157.330516][T10611] ___sys_sendmsg+0x17b/0x1d0 [ 157.330568][T10611] __x64_sys_sendmsg+0xd4/0x160 [ 157.330670][T10611] x64_sys_call+0x191e/0x2ff0 [ 157.330755][T10611] do_syscall_64+0xd2/0x200 [ 157.330836][T10611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.330869][T10611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.330897][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.330922][T10611] RIP: 0033:0x7f728d41eb69 [ 157.330937][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.330967][T10611] RSP: 002b:00007f728ba7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.330987][T10611] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41eb69 [ 157.331002][T10611] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 157.331014][T10611] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.331027][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.331039][T10611] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 157.331062][T10611] [ 157.595637][T10619] bpf: Bad value for 'gid' [ 157.855189][T10631] random: crng reseeded on system resumption [ 157.939787][T10640] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.004553][T10640] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.094590][T10640] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.114026][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 158.177241][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 158.196376][T10643] netlink: 'syz.5.2392': attribute type 1 has an invalid length. [ 158.214055][T10640] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.231769][T10643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.301615][ T23] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 158.348624][T10654] fido_id[10654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.387471][ T153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.405178][ T153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.426825][ T153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.449723][ T153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.559334][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 158.564817][T10679] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 158.583274][T10678] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2406'. [ 158.596035][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 158.599948][T10678] IPVS: stopping backup sync thread 10679 ... [ 158.640596][T10687] FAULT_INJECTION: forcing a failure. [ 158.640596][T10687] name failslab, interval 1, probability 0, space 0, times 0 [ 158.655076][T10687] CPU: 0 UID: 0 PID: 10687 Comm: syz.1.2408 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 158.655165][T10687] Tainted: [W]=WARN [ 158.655258][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.655272][T10687] Call Trace: [ 158.655280][T10687] [ 158.655291][T10687] __dump_stack+0x1d/0x30 [ 158.655327][T10687] dump_stack_lvl+0xe8/0x140 [ 158.655355][T10687] dump_stack+0x15/0x1b [ 158.655378][T10687] should_fail_ex+0x265/0x280 [ 158.655424][T10687] should_failslab+0x8c/0xb0 [ 158.655468][T10687] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 158.655503][T10687] ? __d_alloc+0x3d/0x340 [ 158.655586][T10687] __d_alloc+0x3d/0x340 [ 158.655697][T10687] d_alloc_parallel+0x53/0xc60 [ 158.655738][T10687] ? selinux_inode_permission+0x62d/0x740 [ 158.655855][T10687] ? make_vfsuid+0x49/0xa0 [ 158.655884][T10687] ? lockref_get_not_dead+0x120/0x1c0 [ 158.655913][T10687] ? __rcu_read_unlock+0x4f/0x70 [ 158.655936][T10687] __lookup_slow+0x8c/0x250 [ 158.656106][T10687] lookup_slow+0x3c/0x60 [ 158.656149][T10687] walk_component+0x1ec/0x220 [ 158.656255][T10687] path_lookupat+0xfe/0x2a0 [ 158.656289][T10687] filename_lookup+0x147/0x340 [ 158.656343][T10687] user_path_at+0x3e/0x130 [ 158.656394][T10687] do_utimes+0xd9/0x210 [ 158.656428][T10687] __x64_sys_utime+0xbc/0x140 [ 158.656464][T10687] ? syscall_trace_enter+0x102/0x1e0 [ 158.656493][T10687] x64_sys_call+0x2b0b/0x2ff0 [ 158.656517][T10687] do_syscall_64+0xd2/0x200 [ 158.656617][T10687] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.656650][T10687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.656679][T10687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.656709][T10687] RIP: 0033:0x7ff694a4eb69 [ 158.656730][T10687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.656817][T10687] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 158.656839][T10687] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 158.656857][T10687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000f00 [ 158.656872][T10687] RBP: 00007ff6930af090 R08: 0000000000000000 R09: 0000000000000000 [ 158.656885][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.656897][T10687] R13: 0000000000000000 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 158.656922][T10687] [ 158.977066][T10692] FAULT_INJECTION: forcing a failure. [ 158.977066][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 158.990503][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz.1.2410 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 158.990538][T10692] Tainted: [W]=WARN [ 158.990547][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.990563][T10692] Call Trace: [ 158.990569][T10692] [ 158.990576][T10692] __dump_stack+0x1d/0x30 [ 158.990667][T10692] dump_stack_lvl+0xe8/0x140 [ 158.990693][T10692] dump_stack+0x15/0x1b [ 158.990714][T10692] should_fail_ex+0x265/0x280 [ 158.990756][T10692] should_failslab+0x8c/0xb0 [ 158.990825][T10692] kmem_cache_alloc_noprof+0x50/0x310 [ 158.990862][T10692] ? security_file_alloc+0x32/0x100 [ 158.990904][T10692] security_file_alloc+0x32/0x100 [ 158.991002][T10692] init_file+0x5c/0x1d0 [ 158.991041][T10692] alloc_empty_file+0x8b/0x200 [ 158.991080][T10692] path_openat+0x68/0x2170 [ 158.991098][T10692] ? _parse_integer_limit+0x170/0x190 [ 158.991135][T10692] ? _parse_integer+0x27/0x40 [ 158.991174][T10692] ? kstrtoull+0x111/0x140 [ 158.991207][T10692] ? kstrtouint+0x76/0xc0 [ 158.991280][T10692] do_filp_open+0x109/0x230 [ 158.991314][T10692] do_sys_openat2+0xa6/0x110 [ 158.991398][T10692] __x64_sys_open+0xe6/0x110 [ 158.991434][T10692] x64_sys_call+0x1457/0x2ff0 [ 158.991455][T10692] do_syscall_64+0xd2/0x200 [ 158.991552][T10692] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.991638][T10692] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.991663][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.991690][T10692] RIP: 0033:0x7ff694a4eb69 [ 158.991743][T10692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.991837][T10692] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 158.991874][T10692] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 158.991914][T10692] RDX: 00000000000001a2 RSI: 0000000000000080 RDI: 00002000000000c0 [ 158.991929][T10692] RBP: 00007ff6930af090 R08: 0000000000000000 R09: 0000000000000000 [ 158.991945][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.991961][T10692] R13: 0000000000000000 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 158.992009][T10692] [ 159.349134][T10712] FAULT_INJECTION: forcing a failure. [ 159.349134][T10712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.363208][T10712] CPU: 1 UID: 0 PID: 10712 Comm: syz.3.2418 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 159.363293][T10712] Tainted: [W]=WARN [ 159.363302][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.363316][T10712] Call Trace: [ 159.363324][T10712] [ 159.363332][T10712] __dump_stack+0x1d/0x30 [ 159.363354][T10712] dump_stack_lvl+0xe8/0x140 [ 159.363380][T10712] dump_stack+0x15/0x1b [ 159.363402][T10712] should_fail_ex+0x265/0x280 [ 159.363534][T10712] should_fail_alloc_page+0xf2/0x100 [ 159.363571][T10712] __alloc_frozen_pages_noprof+0xff/0x360 [ 159.363646][T10712] alloc_pages_bulk_noprof+0x4b8/0x540 [ 159.363688][T10712] ? __kmalloc_noprof+0x1dd/0x3e0 [ 159.363756][T10712] ? copy_splice_read+0xc2/0x5f0 [ 159.363816][T10712] copy_splice_read+0xf3/0x5f0 [ 159.363867][T10712] ? __pfx_copy_splice_read+0x10/0x10 [ 159.363911][T10712] splice_direct_to_actor+0x26c/0x680 [ 159.363987][T10712] ? __pfx_direct_splice_actor+0x10/0x10 [ 159.364027][T10712] do_splice_direct+0xda/0x150 [ 159.364051][T10712] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 159.364078][T10712] do_sendfile+0x380/0x650 [ 159.364203][T10712] __x64_sys_sendfile64+0x105/0x150 [ 159.364234][T10712] x64_sys_call+0x2bb0/0x2ff0 [ 159.364266][T10712] do_syscall_64+0xd2/0x200 [ 159.364353][T10712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.364386][T10712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.364456][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.364481][T10712] RIP: 0033:0x7f728d41eb69 [ 159.364497][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.364517][T10712] RSP: 002b:00007f728ba7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.364541][T10712] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41eb69 [ 159.364558][T10712] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 159.364614][T10712] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.364631][T10712] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 159.364647][T10712] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 159.364670][T10712] [ 159.911657][T10735] FAULT_INJECTION: forcing a failure. [ 159.911657][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 159.924853][T10735] CPU: 1 UID: 0 PID: 10735 Comm: syz.3.2421 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 159.924898][T10735] Tainted: [W]=WARN [ 159.924905][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.924917][T10735] Call Trace: [ 159.924971][T10735] [ 159.924981][T10735] __dump_stack+0x1d/0x30 [ 159.925009][T10735] dump_stack_lvl+0xe8/0x140 [ 159.925035][T10735] dump_stack+0x15/0x1b [ 159.925058][T10735] should_fail_ex+0x265/0x280 [ 159.925204][T10735] should_failslab+0x8c/0xb0 [ 159.925230][T10735] kmem_cache_alloc_node_noprof+0x57/0x320 [ 159.925260][T10735] ? dup_task_struct+0x70/0x6a0 [ 159.925330][T10735] dup_task_struct+0x70/0x6a0 [ 159.925363][T10735] ? _parse_integer+0x27/0x40 [ 159.925516][T10735] copy_process+0x399/0x2000 [ 159.925549][T10735] ? kstrtouint+0x76/0xc0 [ 159.925591][T10735] ? kstrtouint_from_user+0x9f/0xf0 [ 159.925610][T10735] ? __rcu_read_unlock+0x4f/0x70 [ 159.925692][T10735] kernel_clone+0x16c/0x5c0 [ 159.925793][T10735] ? vfs_write+0x75e/0x8e0 [ 159.925818][T10735] __x64_sys_clone+0xe6/0x120 [ 159.925853][T10735] x64_sys_call+0x119c/0x2ff0 [ 159.925940][T10735] do_syscall_64+0xd2/0x200 [ 159.925966][T10735] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.926044][T10735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.926072][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.926096][T10735] RIP: 0033:0x7f728d41eb69 [ 159.926159][T10735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.926182][T10735] RSP: 002b:00007f728ba3cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 159.926201][T10735] RAX: ffffffffffffffda RBX: 00007f728d646160 RCX: 00007f728d41eb69 [ 159.926214][T10735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 159.926226][T10735] RBP: 00007f728ba3d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.926239][T10735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 159.926253][T10735] R13: 0000000000000000 R14: 00007f728d646160 R15: 00007ffdfd91cfa8 [ 159.926282][T10735] [ 160.251287][T10737] lo speed is unknown, defaulting to 1000 [ 160.260323][T10737] lo speed is unknown, defaulting to 1000 [ 160.266791][T10737] lo speed is unknown, defaulting to 1000 [ 160.277918][T10737] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.287015][T10737] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 160.315667][T10737] lo speed is unknown, defaulting to 1000 [ 160.327802][T10737] lo speed is unknown, defaulting to 1000 [ 160.341658][T10737] lo speed is unknown, defaulting to 1000 [ 160.349431][T10737] lo speed is unknown, defaulting to 1000 [ 160.356303][T10737] lo speed is unknown, defaulting to 1000 [ 160.362692][T10737] lo speed is unknown, defaulting to 1000 [ 160.369228][T10737] lo speed is unknown, defaulting to 1000 [ 160.376304][T10737] lo speed is unknown, defaulting to 1000 [ 160.384247][T10737] lo speed is unknown, defaulting to 1000 [ 160.391261][T10737] lo speed is unknown, defaulting to 1000 [ 160.391412][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 160.391428][ T29] audit: type=1326 audit(160.373:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.398202][T10737] lo speed is unknown, defaulting to 1000 [ 160.404616][ T29] audit: type=1326 audit(160.393:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.430948][T10737] lo speed is unknown, defaulting to 1000 [ 160.440350][ T29] audit: type=1326 audit(160.423:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.491978][ T29] audit: type=1326 audit(160.423:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492019][ T29] audit: type=1326 audit(160.423:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492054][ T29] audit: type=1326 audit(160.423:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492111][ T29] audit: type=1326 audit(160.423:15231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492146][ T29] audit: type=1326 audit(160.423:15232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492184][ T29] audit: type=1326 audit(160.423:15233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.492223][ T29] audit: type=1326 audit(160.423:15234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10746 comm="syz.0.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941367eb69 code=0x7ffc0000 [ 160.772298][T10750] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.779451][T10750] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.884801][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.896886][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.907397][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2432'. [ 161.017984][ T10] hid_parser_main: 152 callbacks suppressed [ 161.018007][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.031870][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.044443][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.051932][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.059627][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.067470][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.075873][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.083531][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.091228][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.099120][ T10] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 161.113781][ T10] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 161.221483][T10756] Set syz1 is full, maxelem 65536 reached [ 161.353575][T10785] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2442'. [ 161.416717][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.427540][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.473218][ T3411] usb 3-3: enqueue for inactive port 2 [ 161.490884][ T3411] usb 3-3: enqueue for inactive port 2 [ 161.507245][ T3390] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz1 [ 161.535368][T10798] fido_id[10798]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.563082][ T3411] vhci_hcd: vhci_device speed not set [ 161.722552][T10800] lo speed is unknown, defaulting to 1000 [ 161.867364][T10817] can0: slcan on ttyS3. [ 161.943125][T10817] can0 (unregistered): slcan off ttyS3. [ 161.950445][T10817] Falling back ldisc for ttyS3. [ 162.090067][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2463'. [ 162.166423][ T3390] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz0] on syz1 [ 162.192101][T10848] fido_id[10848]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.632816][T10856] __nla_validate_parse: 1 callbacks suppressed [ 162.639341][T10856] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2471'. [ 162.871407][T10863] random: crng reseeded on system resumption [ 163.007259][ T10] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.044246][T10876] fido_id[10876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.079820][T10880] random: crng reseeded on system resumption [ 163.269049][T10895] FAULT_INJECTION: forcing a failure. [ 163.269049][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 163.284870][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.1.2487 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 163.284973][T10895] Tainted: [W]=WARN [ 163.284980][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.284996][T10895] Call Trace: [ 163.285005][T10895] [ 163.285014][T10895] __dump_stack+0x1d/0x30 [ 163.285045][T10895] dump_stack_lvl+0xe8/0x140 [ 163.285097][T10895] dump_stack+0x15/0x1b [ 163.285120][T10895] should_fail_ex+0x265/0x280 [ 163.285166][T10895] should_failslab+0x8c/0xb0 [ 163.285199][T10895] __kmalloc_noprof+0xa5/0x3e0 [ 163.285238][T10895] ? sock_kmalloc+0x85/0xc0 [ 163.285338][T10895] sock_kmalloc+0x85/0xc0 [ 163.285365][T10895] ipv6_renew_options+0x1fb/0x5f0 [ 163.285402][T10895] ipv6_set_opt_hdr+0x13b/0x600 [ 163.285499][T10895] do_ipv6_setsockopt+0x10b9/0x2160 [ 163.285545][T10895] ? kstrtoull+0x111/0x140 [ 163.285637][T10895] ? avc_has_perm_noaudit+0x1b1/0x200 [ 163.285674][T10895] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 163.285727][T10895] ipv6_setsockopt+0x59/0x130 [ 163.285803][T10895] udpv6_setsockopt+0x99/0xb0 [ 163.285927][T10895] sock_common_setsockopt+0x66/0x80 [ 163.285964][T10895] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.285997][T10895] __sys_setsockopt+0x184/0x200 [ 163.286044][T10895] __x64_sys_setsockopt+0x64/0x80 [ 163.286166][T10895] x64_sys_call+0x20ec/0x2ff0 [ 163.286236][T10895] do_syscall_64+0xd2/0x200 [ 163.286282][T10895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.286315][T10895] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.286416][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.286446][T10895] RIP: 0033:0x7ff694a4eb69 [ 163.286466][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.286493][T10895] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.286519][T10895] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 163.286537][T10895] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006 [ 163.286606][T10895] RBP: 00007ff6930af090 R08: 0000000000000028 R09: 0000000000000000 [ 163.286622][T10895] R10: 00002000000011c0 R11: 0000000000000246 R12: 0000000000000001 [ 163.286640][T10895] R13: 0000000000000000 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 163.286666][T10895] [ 163.591652][T10899] random: crng reseeded on system resumption [ 163.600618][T10904] FAULT_INJECTION: forcing a failure. [ 163.600618][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 163.615331][T10904] CPU: 1 UID: 0 PID: 10904 Comm: syz.0.2490 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 163.615443][T10904] Tainted: [W]=WARN [ 163.615452][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.615475][T10904] Call Trace: [ 163.615482][T10904] [ 163.615491][T10904] __dump_stack+0x1d/0x30 [ 163.615514][T10904] dump_stack_lvl+0xe8/0x140 [ 163.615614][T10904] dump_stack+0x15/0x1b [ 163.615631][T10904] should_fail_ex+0x265/0x280 [ 163.615667][T10904] should_failslab+0x8c/0xb0 [ 163.615694][T10904] kmem_cache_alloc_noprof+0x50/0x310 [ 163.615747][T10904] ? security_inode_alloc+0x37/0x100 [ 163.615775][T10904] security_inode_alloc+0x37/0x100 [ 163.615884][T10904] inode_init_always_gfp+0x4b7/0x500 [ 163.615911][T10904] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 163.615936][T10904] alloc_inode+0x58/0x170 [ 163.615959][T10904] new_inode+0x1d/0xe0 [ 163.616057][T10904] shmem_get_inode+0x244/0x750 [ 163.616128][T10904] __shmem_file_setup+0x113/0x210 [ 163.616232][T10904] shmem_file_setup+0x3b/0x50 [ 163.616267][T10904] __se_sys_memfd_create+0x2c3/0x590 [ 163.616291][T10904] __x64_sys_memfd_create+0x31/0x40 [ 163.616371][T10904] x64_sys_call+0x2abe/0x2ff0 [ 163.616394][T10904] do_syscall_64+0xd2/0x200 [ 163.616419][T10904] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.616446][T10904] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.616532][T10904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.616555][T10904] RIP: 0033:0x7f941367eb69 [ 163.616570][T10904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.616590][T10904] RSP: 002b:00007f9411cdee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 163.616610][T10904] RAX: ffffffffffffffda RBX: 00000000000004a3 RCX: 00007f941367eb69 [ 163.616623][T10904] RDX: 00007f9411cdeef0 RSI: 0000000000000000 RDI: 00007f9413702784 [ 163.616637][T10904] RBP: 0000200000000580 R08: 00007f9411cdebb7 R09: 00007f9411cdee40 [ 163.616720][T10904] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 163.616733][T10904] R13: 00007f9411cdeef0 R14: 00007f9411cdeeb0 R15: 0000200000000540 [ 163.616803][T10904] [ 163.629559][ T3411] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz1 [ 163.988076][T10917] geneve2: entered promiscuous mode [ 163.993477][T10917] geneve2: entered allmulticast mode [ 164.125760][ T23] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz0] on syz1 [ 164.171926][T10940] fido_id[10940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.197265][ T36] usb usb4-port1: attempt power cycle [ 164.208375][T10944] random: crng reseeded on system resumption [ 164.434355][T10963] random: crng reseeded on system resumption [ 164.695054][T10982] lo speed is unknown, defaulting to 1000 [ 164.739212][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 164.798372][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 164.825286][ T1412] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 164.929055][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'. [ 165.052049][T11036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.062111][T11036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.209747][T11046] rtc_cmos 00:00: Alarms can be up to one day in the future [ 165.272659][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 165.277286][T11048] lo speed is unknown, defaulting to 1000 [ 165.504757][T11063] vhci_hcd: invalid port number 224 [ 165.549895][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.561188][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.863321][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 166.029771][T11083] netlink: 17768 bytes leftover after parsing attributes in process `syz.5.2560'. [ 166.094523][ T36] usb usb4-port1: unable to enumerate USB device [ 166.227317][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 166.227406][ T29] audit: type=1326 audit(166.209:15942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.286085][ T29] audit: type=1326 audit(166.239:15943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.312937][ T29] audit: type=1326 audit(166.239:15944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.337010][ T29] audit: type=1326 audit(166.239:15945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.360212][ T29] audit: type=1326 audit(166.239:15946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.383932][ T29] audit: type=1326 audit(166.249:15947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.407208][ T29] audit: type=1326 audit(166.249:15948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.430453][ T29] audit: type=1326 audit(166.249:15949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.453729][ T29] audit: type=1326 audit(166.249:15950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.476660][ T29] audit: type=1326 audit(166.249:15951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11087 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3301faeb69 code=0x7ffc0000 [ 166.589994][T11095] lo speed is unknown, defaulting to 1000 [ 166.634840][T11101] random: crng reseeded on system resumption [ 166.843357][T11114] random: crng reseeded on system resumption [ 167.364520][T11141] netlink: 17768 bytes leftover after parsing attributes in process `syz.2.2579'. [ 167.551267][T11146] random: crng reseeded on system resumption [ 167.764873][T11151] lo speed is unknown, defaulting to 1000 [ 168.189296][ T3390] hid_parser_main: 152 callbacks suppressed [ 168.189319][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.203302][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.226526][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.235433][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.244425][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.252565][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.261398][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.271265][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.280761][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.291484][ T3390] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 168.346177][T11189] random: crng reseeded on system resumption [ 168.360166][ T3390] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz0] on syz1 [ 168.378648][T11192] ALSA: seq fatal error: cannot create timer (-19) [ 168.408320][T11194] fido_id[11194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.796851][T11225] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.857293][T11225] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.904937][T11225] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.954695][T11225] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.017387][ T1412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.044765][ T1412] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.071073][ T1412] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.087308][ T1412] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.409237][T11282] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.420507][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 169.450893][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 169.464684][T11282] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.484505][T11281] random: crng reseeded on system resumption [ 169.527055][T11282] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.565830][T11282] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.580705][T11293] lo speed is unknown, defaulting to 1000 [ 169.591455][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 169.635964][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 169.777844][T11299] random: crng reseeded on system resumption [ 169.939980][T11301] random: crng reseeded on system resumption [ 170.014058][T11310] serio: Serial port ttyS3 [ 170.067041][T11316] random: crng reseeded on system resumption [ 170.281322][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 170.312185][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 170.405278][T11351] random: crng reseeded on system resumption [ 170.565753][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 170.595726][T11359] random: crng reseeded on system resumption [ 170.605164][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 170.636737][ T36] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz1 [ 170.687605][T11370] fido_id[11370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.793139][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 170.806110][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 170.932611][T11406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=11406 comm=syz.5.2694 [ 170.991920][T11412] pim6reg: entered allmulticast mode [ 170.999518][T11412] pim6reg: left allmulticast mode [ 171.014281][T11411] random: crng reseeded on system resumption [ 171.215970][T11424] serio: Serial port ttyS3 [ 171.477159][T11422] FAULT_INJECTION: forcing a failure. [ 171.477159][T11422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.491712][T11422] CPU: 0 UID: 0 PID: 11422 Comm: syz.5.2700 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 171.491758][T11422] Tainted: [W]=WARN [ 171.491766][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.491778][T11422] Call Trace: [ 171.491790][T11422] [ 171.491798][T11422] __dump_stack+0x1d/0x30 [ 171.491859][T11422] dump_stack_lvl+0xe8/0x140 [ 171.491964][T11422] dump_stack+0x15/0x1b [ 171.491986][T11422] should_fail_ex+0x265/0x280 [ 171.492022][T11422] should_fail+0xb/0x20 [ 171.492085][T11422] should_fail_usercopy+0x1a/0x20 [ 171.492105][T11422] _copy_to_user+0x20/0xa0 [ 171.492131][T11422] simple_read_from_buffer+0xb5/0x130 [ 171.492164][T11422] proc_fail_nth_read+0x10e/0x150 [ 171.492242][T11422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.492332][T11422] vfs_read+0x19d/0x6f0 [ 171.492360][T11422] ? __rcu_read_unlock+0x4f/0x70 [ 171.492389][T11422] ? __fget_files+0x184/0x1c0 [ 171.492424][T11422] ksys_read+0xda/0x1a0 [ 171.492448][T11422] __x64_sys_read+0x40/0x50 [ 171.492525][T11422] x64_sys_call+0x27bc/0x2ff0 [ 171.492547][T11422] do_syscall_64+0xd2/0x200 [ 171.492578][T11422] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.492625][T11422] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.492649][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.492678][T11422] RIP: 0033:0x7f525066d57c [ 171.492697][T11422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.492723][T11422] RSP: 002b:00007f524eccf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.492798][T11422] RAX: ffffffffffffffda RBX: 00007f5250895fa0 RCX: 00007f525066d57c [ 171.492815][T11422] RDX: 000000000000000f RSI: 00007f524eccf0a0 RDI: 0000000000000004 [ 171.492832][T11422] RBP: 00007f524eccf090 R08: 0000000000000000 R09: 0000000000000000 [ 171.492854][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.492868][T11422] R13: 0000000000000000 R14: 00007f5250895fa0 R15: 00007ffdc0ed05d8 [ 171.492893][T11422] [ 171.921491][ T29] kauditd_printk_skb: 1369 callbacks suppressed [ 171.921511][ T29] audit: type=1400 audit(171.903:17321): avc: denied { audit_write } for pid=11442 comm="syz.1.2707" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.005623][ T29] audit: type=1107 audit(171.943:17322): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 172.088801][ T29] audit: type=1326 audit(172.073:17323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.112912][ T29] audit: type=1326 audit(172.073:17324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.136702][ T29] audit: type=1326 audit(172.073:17325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.164521][ T29] audit: type=1326 audit(172.073:17326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.191234][ T29] audit: type=1326 audit(172.073:17327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.216233][ T29] audit: type=1326 audit(172.073:17328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.242904][ T29] audit: type=1326 audit(172.073:17329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.267184][ T29] audit: type=1326 audit(172.073:17330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 172.298703][T11454] random: crng reseeded on system resumption [ 172.348544][T11460] hsr_slave_0: left promiscuous mode [ 172.369645][T11460] hsr_slave_1: left promiscuous mode [ 172.437747][ T10] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.469552][T11466] fido_id[11466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.562427][T11478] ip6gre1: entered allmulticast mode [ 172.580953][ T10] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.632464][T11485] fido_id[11485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.714604][T11492] random: crng reseeded on system resumption [ 172.746622][T11497] serio: Serial port ttyS3 [ 172.828528][ T36] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.908563][T11507] fido_id[11507]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.051955][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.065753][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.080852][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.093466][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.123107][T11531] random: crng reseeded on system resumption [ 173.279423][T11535] random: crng reseeded on system resumption [ 173.394081][T11553] FAULT_INJECTION: forcing a failure. [ 173.394081][T11553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.411390][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz.2.2752 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 173.411505][T11553] Tainted: [W]=WARN [ 173.411514][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.411531][T11553] Call Trace: [ 173.411539][T11553] [ 173.411550][T11553] __dump_stack+0x1d/0x30 [ 173.411577][T11553] dump_stack_lvl+0xe8/0x140 [ 173.411647][T11553] dump_stack+0x15/0x1b [ 173.411670][T11553] should_fail_ex+0x265/0x280 [ 173.411715][T11553] should_fail+0xb/0x20 [ 173.411820][T11553] should_fail_usercopy+0x1a/0x20 [ 173.411846][T11553] _copy_from_iter+0xcf/0xe40 [ 173.411875][T11553] ? __build_skb_around+0x1a0/0x200 [ 173.411946][T11553] ? __alloc_skb+0x223/0x320 [ 173.411982][T11553] netlink_sendmsg+0x471/0x6b0 [ 173.412086][T11553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.412124][T11553] __sock_sendmsg+0x145/0x180 [ 173.412172][T11553] ____sys_sendmsg+0x31e/0x4e0 [ 173.412222][T11553] ___sys_sendmsg+0x17b/0x1d0 [ 173.412362][T11553] __x64_sys_sendmsg+0xd4/0x160 [ 173.412462][T11553] x64_sys_call+0x191e/0x2ff0 [ 173.412491][T11553] do_syscall_64+0xd2/0x200 [ 173.412522][T11553] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.412576][T11553] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.412606][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.412635][T11553] RIP: 0033:0x7f3301faeb69 [ 173.412655][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.412679][T11553] RSP: 002b:00007f330060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.412748][T11553] RAX: ffffffffffffffda RBX: 00007f33021d5fa0 RCX: 00007f3301faeb69 [ 173.412765][T11553] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 173.412780][T11553] RBP: 00007f330060f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.412850][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.412865][T11553] R13: 0000000000000000 R14: 00007f33021d5fa0 R15: 00007ffc194e6088 [ 173.412940][T11553] [ 173.668540][T11551] random: crng reseeded on system resumption [ 173.771887][T11555] IPVS: Error joining to the multicast group [ 173.780347][T11559] IPVS: Error joining to the multicast group [ 173.876401][ T153] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.888323][T11564] FAULT_INJECTION: forcing a failure. [ 173.888323][T11564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.890722][ T153] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.906729][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.3.2758 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 173.906841][T11564] Tainted: [W]=WARN [ 173.906891][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.906911][T11564] Call Trace: [ 173.906920][T11564] [ 173.906932][T11564] __dump_stack+0x1d/0x30 [ 173.906961][T11564] dump_stack_lvl+0xe8/0x140 [ 173.907005][T11564] dump_stack+0x15/0x1b [ 173.907029][T11564] should_fail_ex+0x265/0x280 [ 173.907148][T11564] should_fail+0xb/0x20 [ 173.907200][T11564] should_fail_usercopy+0x1a/0x20 [ 173.907228][T11564] _copy_from_user+0x1c/0xb0 [ 173.907334][T11564] ___sys_sendmsg+0xc1/0x1d0 [ 173.907405][T11564] __x64_sys_sendmsg+0xd4/0x160 [ 173.907459][T11564] x64_sys_call+0x191e/0x2ff0 [ 173.907491][T11564] do_syscall_64+0xd2/0x200 [ 173.907525][T11564] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.907643][T11564] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.907673][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.907706][T11564] RIP: 0033:0x7f728d41eb69 [ 173.907727][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.907753][T11564] RSP: 002b:00007f728ba7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.907875][T11564] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41eb69 [ 173.907894][T11564] RDX: 000000000000c094 RSI: 0000200000000200 RDI: 0000000000000009 [ 173.907971][T11564] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.907989][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.908066][T11564] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 173.908094][T11564] [ 174.037137][ T9] hid_parser_main: 125 callbacks suppressed [ 174.037165][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.039728][ T153] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.045765][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.051153][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.112541][ T153] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.114065][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.203027][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.213730][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.222261][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.230506][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.239860][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.249032][ T9] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 174.268740][ T9] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 174.284052][T11582] serio: Serial port ttyS3 [ 174.307392][T11587] FAULT_INJECTION: forcing a failure. [ 174.307392][T11587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.322633][T11587] CPU: 0 UID: 0 PID: 11587 Comm: syz.0.2769 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 174.322682][T11587] Tainted: [W]=WARN [ 174.322766][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.322784][T11587] Call Trace: [ 174.322792][T11587] [ 174.322801][T11587] __dump_stack+0x1d/0x30 [ 174.322830][T11587] dump_stack_lvl+0xe8/0x140 [ 174.322858][T11587] dump_stack+0x15/0x1b [ 174.322883][T11587] should_fail_ex+0x265/0x280 [ 174.322926][T11587] should_fail+0xb/0x20 [ 174.322964][T11587] should_fail_usercopy+0x1a/0x20 [ 174.323026][T11587] _copy_from_user+0x1c/0xb0 [ 174.323061][T11587] memdup_user+0x5e/0xd0 [ 174.323150][T11587] __se_sys_kexec_load+0x109/0x160 [ 174.323178][T11587] __x64_sys_kexec_load+0x55/0x70 [ 174.323204][T11587] x64_sys_call+0x2898/0x2ff0 [ 174.323233][T11587] do_syscall_64+0xd2/0x200 [ 174.323283][T11587] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.323313][T11587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.323357][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.323385][T11587] RIP: 0033:0x7f941367eb69 [ 174.323452][T11587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.323479][T11587] RSP: 002b:00007f9411cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 174.323507][T11587] RAX: ffffffffffffffda RBX: 00007f94138a5fa0 RCX: 00007f941367eb69 [ 174.323525][T11587] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.323543][T11587] RBP: 00007f9411cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 174.323560][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.323639][T11587] R13: 0000000000000000 R14: 00007f94138a5fa0 R15: 00007fff6c7d6ff8 [ 174.323666][T11587] [ 174.533319][T11585] fido_id[11585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.641719][T11598] __nla_validate_parse: 12 callbacks suppressed [ 174.641741][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2773'. [ 174.691810][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 174.931427][T11617] random: crng reseeded on system resumption [ 175.076905][T11613] lo speed is unknown, defaulting to 1000 [ 175.176008][T11613] chnl_net:caif_netlink_parms(): no params data found [ 175.227081][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.235142][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.243270][T11613] bridge_slave_0: entered allmulticast mode [ 175.252596][T11613] bridge_slave_0: entered promiscuous mode [ 175.260540][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.267988][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.276353][T11613] bridge_slave_1: entered allmulticast mode [ 175.283873][T11613] bridge_slave_1: entered promiscuous mode [ 175.308206][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.320557][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.344546][T11613] team0: Port device team_slave_0 added [ 175.354021][T11613] team0: Port device team_slave_1 added [ 175.373708][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.383122][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.411833][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.412977][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.432221][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.432255][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.511481][T11613] hsr_slave_0: entered promiscuous mode [ 175.523016][T11613] hsr_slave_1: entered promiscuous mode [ 175.533183][T11613] debugfs: 'hsr0' already exists in 'hsr' [ 175.540144][T11613] Cannot create hsr debugfs directory [ 175.542200][T11637] random: crng reseeded on system resumption [ 175.588189][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'. [ 175.603763][T11643] IPVS: Error joining to the multicast group [ 175.640100][T11613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.686347][T11613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.700516][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 175.735781][T11613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.824974][T11613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.850319][T11653] random: crng reseeded on system resumption [ 175.915362][T11613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.937070][T11613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.955814][T11613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.967303][T11613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.041850][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.049114][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 176.068186][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.095423][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.103376][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.117955][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 176.133902][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.141206][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.180145][T11613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.225310][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 176.236371][T11686] IPVS: Error joining to the multicast group [ 176.306662][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.440224][T11613] veth0_vlan: entered promiscuous mode [ 176.455313][T11613] veth1_vlan: entered promiscuous mode [ 176.482112][T11613] veth0_macvtap: entered promiscuous mode [ 176.488025][T11696] random: crng reseeded on system resumption [ 176.495296][T11613] veth1_macvtap: entered promiscuous mode [ 176.525908][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.537797][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.564824][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.577654][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.608744][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.630224][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.650780][T11689] lo speed is unknown, defaulting to 1000 [ 176.749043][T11716] random: crng reseeded on system resumption [ 176.821035][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 176.842768][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 177.234199][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 177.450120][ T29] kauditd_printk_skb: 822 callbacks suppressed [ 177.450202][ T29] audit: type=1400 audit(177.433:18153): avc: denied { read } for pid=11746 comm="syz.2.2816" path="socket:[34328]" dev="sockfs" ino=34328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.553103][ T29] audit: type=1326 audit(177.513:18154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.578354][ T29] audit: type=1326 audit(177.513:18155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.602743][ T29] audit: type=1326 audit(177.513:18156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.626215][ T29] audit: type=1326 audit(177.513:18157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.651079][ T29] audit: type=1326 audit(177.513:18158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.677698][ T29] audit: type=1326 audit(177.513:18159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.704514][ T29] audit: type=1326 audit(177.513:18160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.728670][ T29] audit: type=1326 audit(177.513:18161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 177.752524][ T29] audit: type=1326 audit(177.513:18162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f525066eb69 code=0x7ffc0000 [ 178.179009][T11783] FAULT_INJECTION: forcing a failure. [ 178.179009][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 178.193288][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.1.2831 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 178.193410][T11783] Tainted: [W]=WARN [ 178.193417][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.193432][T11783] Call Trace: [ 178.193440][T11783] [ 178.193450][T11783] __dump_stack+0x1d/0x30 [ 178.193478][T11783] dump_stack_lvl+0xe8/0x140 [ 178.193498][T11783] dump_stack+0x15/0x1b [ 178.193558][T11783] should_fail_ex+0x265/0x280 [ 178.193598][T11783] should_failslab+0x8c/0xb0 [ 178.193627][T11783] __kmalloc_noprof+0xa5/0x3e0 [ 178.193664][T11783] ? security_sk_alloc+0x52/0x120 [ 178.193771][T11783] security_sk_alloc+0x52/0x120 [ 178.193804][T11783] sk_prot_alloc+0xc2/0x190 [ 178.193848][T11783] sk_alloc+0x34/0x360 [ 178.193887][T11783] tipc_sk_create+0xec/0x11c0 [ 178.193920][T11783] ? kmem_cache_alloc_noprof+0x186/0x310 [ 178.193958][T11783] ? security_inode_alloc+0x37/0x100 [ 178.193982][T11783] ? selinux_inode_alloc_security+0x105/0x130 [ 178.194087][T11783] ? security_inode_alloc+0x69/0x100 [ 178.194114][T11783] ? inode_init_always_gfp+0x4cd/0x500 [ 178.194141][T11783] __sock_create+0x2ec/0x5b0 [ 178.194226][T11783] __sys_socketpair+0x170/0x430 [ 178.194258][T11783] ? ksys_write+0x192/0x1a0 [ 178.194288][T11783] __x64_sys_socketpair+0x52/0x60 [ 178.194316][T11783] x64_sys_call+0x2bf2/0x2ff0 [ 178.194346][T11783] do_syscall_64+0xd2/0x200 [ 178.194375][T11783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.194405][T11783] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.194475][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.194496][T11783] RIP: 0033:0x7ff694a4eb69 [ 178.194519][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.194543][T11783] RSP: 002b:00007ff6930af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 178.194573][T11783] RAX: ffffffffffffffda RBX: 00007ff694c75fa0 RCX: 00007ff694a4eb69 [ 178.194590][T11783] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 178.194603][T11783] RBP: 00007ff6930af090 R08: 0000000000000000 R09: 0000000000000000 [ 178.194615][T11783] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 178.194711][T11783] R13: 0000000000000000 R14: 00007ff694c75fa0 R15: 00007ffe6beab5a8 [ 178.194754][T11783] [ 178.772744][ T10] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 178.831987][T11794] fido_id[11794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.870389][T11799] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.956838][T11799] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.013171][T11787] lo speed is unknown, defaulting to 1000 [ 179.070378][T11799] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.166389][T11799] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.232479][ T153] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.247444][T11809] random: crng reseeded on system resumption [ 179.248969][ T153] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.547992][T11810] lo speed is unknown, defaulting to 1000 [ 179.565999][ T153] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.622564][ T153] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.747348][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 179.768838][T11824] IPVS: Error joining to the multicast group [ 179.789905][T11824] 9pnet_fd: Insufficient options for proto=fd [ 179.802363][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 180.045267][T11840] random: crng reseeded on system resumption [ 180.075286][T11842] random: crng reseeded on system resumption [ 180.151974][T11846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2854'. [ 180.210433][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2855'. [ 180.227214][T11846] lo speed is unknown, defaulting to 1000 [ 180.288988][ T9] hid_parser_main: 44 callbacks suppressed [ 180.289009][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.305930][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.316158][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.326665][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.336708][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.345519][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.356085][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.364163][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.372682][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.382419][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 180.392008][ T9] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 180.416112][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 180.453959][T11858] fido_id[11858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.477836][T11856] IPVS: Error joining to the multicast group [ 180.485151][T11862] 9pnet_fd: Insufficient options for proto=fd [ 180.527049][T11857] lo speed is unknown, defaulting to 1000 [ 180.558334][T11866] serio: Serial port ttyS3 [ 180.701546][T11876] random: crng reseeded on system resumption [ 180.736675][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 180.860420][T11885] FAULT_INJECTION: forcing a failure. [ 180.860420][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 180.875529][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.3.2866 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 180.875599][T11885] Tainted: [W]=WARN [ 180.875608][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.875622][T11885] Call Trace: [ 180.875630][T11885] [ 180.875638][T11885] __dump_stack+0x1d/0x30 [ 180.875662][T11885] dump_stack_lvl+0xe8/0x140 [ 180.875744][T11885] dump_stack+0x15/0x1b [ 180.875785][T11885] should_fail_ex+0x265/0x280 [ 180.875828][T11885] should_failslab+0x8c/0xb0 [ 180.875860][T11885] kmem_cache_alloc_node_noprof+0x57/0x320 [ 180.875969][T11885] ? __alloc_skb+0x101/0x320 [ 180.876009][T11885] __alloc_skb+0x101/0x320 [ 180.876060][T11885] ? audit_log_start+0x365/0x6c0 [ 180.876168][T11885] audit_log_start+0x380/0x6c0 [ 180.876219][T11885] ? tlb_table_flush+0x109/0x2b0 [ 180.876262][T11885] audit_seccomp+0x48/0x100 [ 180.876307][T11885] ? __seccomp_filter+0x68c/0x10d0 [ 180.876365][T11885] __seccomp_filter+0x69d/0x10d0 [ 180.876458][T11885] __secure_computing+0x82/0x150 [ 180.876485][T11885] syscall_trace_enter+0xcf/0x1e0 [ 180.876517][T11885] do_syscall_64+0xac/0x200 [ 180.876561][T11885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.876592][T11885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.876620][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.876645][T11885] RIP: 0033:0x7f728d41d57c [ 180.876669][T11885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.876693][T11885] RSP: 002b:00007f728ba7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.876717][T11885] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41d57c [ 180.876730][T11885] RDX: 000000000000000f RSI: 00007f728ba7f0a0 RDI: 0000000000000003 [ 180.876746][T11885] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.876761][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.876777][T11885] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 180.876800][T11885] [ 181.224511][T11898] FAULT_INJECTION: forcing a failure. [ 181.224511][T11898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.239308][T11898] CPU: 0 UID: 0 PID: 11898 Comm: syz.3.2872 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 181.239423][T11898] Tainted: [W]=WARN [ 181.239432][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.239445][T11898] Call Trace: [ 181.239452][T11898] [ 181.239462][T11898] __dump_stack+0x1d/0x30 [ 181.239496][T11898] dump_stack_lvl+0xe8/0x140 [ 181.239599][T11898] dump_stack+0x15/0x1b [ 181.239620][T11898] should_fail_ex+0x265/0x280 [ 181.239663][T11898] should_fail+0xb/0x20 [ 181.239734][T11898] should_fail_usercopy+0x1a/0x20 [ 181.239754][T11898] _copy_to_user+0x20/0xa0 [ 181.239781][T11898] simple_read_from_buffer+0xb5/0x130 [ 181.239851][T11898] proc_fail_nth_read+0x10e/0x150 [ 181.239884][T11898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.239915][T11898] vfs_read+0x19d/0x6f0 [ 181.239941][T11898] ? __rcu_read_unlock+0x4f/0x70 [ 181.240000][T11898] ? __fget_files+0x184/0x1c0 [ 181.240028][T11898] ksys_read+0xda/0x1a0 [ 181.240090][T11898] __x64_sys_read+0x40/0x50 [ 181.240119][T11898] x64_sys_call+0x27bc/0x2ff0 [ 181.240147][T11898] do_syscall_64+0xd2/0x200 [ 181.240175][T11898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.240210][T11898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.240234][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.240262][T11898] RIP: 0033:0x7f728d41d57c [ 181.240281][T11898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.240339][T11898] RSP: 002b:00007f728ba7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.240363][T11898] RAX: ffffffffffffffda RBX: 00007f728d645fa0 RCX: 00007f728d41d57c [ 181.240379][T11898] RDX: 000000000000000f RSI: 00007f728ba7f0a0 RDI: 0000000000000004 [ 181.240396][T11898] RBP: 00007f728ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.240412][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.240451][T11898] R13: 0000000000000000 R14: 00007f728d645fa0 R15: 00007ffdfd91cfa8 [ 181.240485][T11898] [ 181.507846][T11880] can0: slcan on ttyS3. [ 181.508604][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 181.531479][T11897] IPVS: Error joining to the multicast group [ 181.553971][T11883] can0 (unregistered): slcan off ttyS3. [ 181.561052][T11883] Falling back ldisc for ttyS3. [ 181.767827][T11917] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.808568][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'. [ 181.828315][T11917] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.862054][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'. [ 181.877327][T11929] FAULT_INJECTION: forcing a failure. [ 181.877327][T11929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.892581][T11929] CPU: 1 UID: 0 PID: 11929 Comm: syz.5.2883 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 181.892640][T11929] Tainted: [W]=WARN [ 181.892649][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.892665][T11929] Call Trace: [ 181.892673][T11929] [ 181.892681][T11929] __dump_stack+0x1d/0x30 [ 181.892769][T11929] dump_stack_lvl+0xe8/0x140 [ 181.892797][T11929] dump_stack+0x15/0x1b [ 181.892815][T11929] should_fail_ex+0x265/0x280 [ 181.892943][T11929] should_fail+0xb/0x20 [ 181.892973][T11929] should_fail_usercopy+0x1a/0x20 [ 181.892995][T11929] _copy_from_user+0x1c/0xb0 [ 181.893028][T11929] ___sys_sendmsg+0xc1/0x1d0 [ 181.893118][T11929] __sys_sendmmsg+0x178/0x300 [ 181.893174][T11929] __x64_sys_sendmmsg+0x57/0x70 [ 181.893220][T11929] x64_sys_call+0x1c4a/0x2ff0 [ 181.893250][T11929] do_syscall_64+0xd2/0x200 [ 181.893319][T11929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.893351][T11929] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.893375][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.893396][T11929] RIP: 0033:0x7f525066eb69 [ 181.893411][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.893444][T11929] RSP: 002b:00007f524eccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.893469][T11929] RAX: ffffffffffffffda RBX: 00007f5250895fa0 RCX: 00007f525066eb69 [ 181.893488][T11929] RDX: 0000000000000001 RSI: 0000200000002100 RDI: 0000000000000003 [ 181.893504][T11929] RBP: 00007f524eccf090 R08: 0000000000000000 R09: 0000000000000000 [ 181.893521][T11929] R10: 00000000000080c4 R11: 0000000000000246 R12: 0000000000000001 [ 181.893538][T11929] R13: 0000000000000000 R14: 00007f5250895fa0 R15: 00007ffdc0ed05d8 [ 181.893592][T11929] [ 182.140123][T11917] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.200165][T11933] serio: Serial port ttyS3 [ 182.225158][T11917] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.290706][ T1412] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.309822][ T1412] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.327387][ T1412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.343202][ T1412] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.636676][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 182.636697][ T29] audit: type=1326 audit(182.626:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.690955][ T29] audit: type=1326 audit(182.626:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.717963][ T29] audit: type=1326 audit(182.666:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.746155][ T29] audit: type=1326 audit(182.666:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.773147][ T29] audit: type=1326 audit(182.666:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.804828][ T29] audit: type=1326 audit(182.756:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.832473][ T29] audit: type=1326 audit(182.756:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.859464][ T29] audit: type=1326 audit(182.756:18655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.885182][ T29] audit: type=1326 audit(182.796:18656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.912556][ T29] audit: type=1326 audit(182.796:18657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff694a4eb69 code=0x7ffc0000 [ 182.998948][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 183.020734][T11954] IPVS: Error joining to the multicast group [ 183.130022][T11966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.227369][T11958] random: crng reseeded on system resumption [ 183.248782][T11966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.337665][T11966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.375684][T11987] serio: Serial port ttyS3 [ 183.427926][T11966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.490509][ T54] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.525767][ T54] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.543010][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.557598][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.758102][T12001] random: crng reseeded on system resumption [ 183.826823][T12003] IPVS: Error joining to the multicast group [ 184.001744][T12012] lo speed is unknown, defaulting to 1000 [ 184.131868][T12015] random: crng reseeded on system resumption [ 184.194590][T12022] FAULT_INJECTION: forcing a failure. [ 184.194590][T12022] name failslab, interval 1, probability 0, space 0, times 0 [ 184.208128][T12022] CPU: 1 UID: 0 PID: 12022 Comm: syz.5.2918 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 184.208172][T12022] Tainted: [W]=WARN [ 184.208180][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.208244][T12022] Call Trace: [ 184.208250][T12022] [ 184.208257][T12022] __dump_stack+0x1d/0x30 [ 184.208279][T12022] dump_stack_lvl+0xe8/0x140 [ 184.208301][T12022] dump_stack+0x15/0x1b [ 184.208322][T12022] should_fail_ex+0x265/0x280 [ 184.208388][T12022] should_failslab+0x8c/0xb0 [ 184.208419][T12022] kmem_cache_alloc_noprof+0x50/0x310 [ 184.208471][T12022] ? prepare_creds+0x37/0x4c0 [ 184.208575][T12022] prepare_creds+0x37/0x4c0 [ 184.208604][T12022] copy_creds+0x8f/0x3f0 [ 184.208634][T12022] copy_process+0x658/0x2000 [ 184.208663][T12022] ? kstrtouint+0x76/0xc0 [ 184.208702][T12022] ? __rcu_read_unlock+0x4f/0x70 [ 184.208728][T12022] kernel_clone+0x16c/0x5c0 [ 184.208757][T12022] ? vfs_write+0x75e/0x8e0 [ 184.208782][T12022] __x64_sys_clone+0xe6/0x120 [ 184.208878][T12022] x64_sys_call+0x119c/0x2ff0 [ 184.208902][T12022] do_syscall_64+0xd2/0x200 [ 184.208927][T12022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.209033][T12022] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 184.209056][T12022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.209080][T12022] RIP: 0033:0x7f525066eb69 [ 184.209095][T12022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.209184][T12022] RSP: 002b:00007f524eccefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 184.209205][T12022] RAX: ffffffffffffffda RBX: 00007f5250895fa0 RCX: 00007f525066eb69 [ 184.209218][T12022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 184.209236][T12022] RBP: 00007f524eccf090 R08: 0000000000000000 R09: 0000000000000000 [ 184.209252][T12022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 184.209265][T12022] R13: 0000000000000000 R14: 00007f5250895fa0 R15: 00007ffdc0ed05d8 [ 184.209361][T12022] [ 184.526310][ T1037] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 184.597246][T12034] fido_id[12034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.600930][T12026] lo speed is unknown, defaulting to 1000 [ 184.720216][T12050] serio: Serial port ttyS3 [ 184.912962][T12053] lo speed is unknown, defaulting to 1000 [ 185.722077][T12074] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.779617][T12074] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.798042][T12071] lo speed is unknown, defaulting to 1000 [ 185.824642][T12074] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.866535][T12074] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.914472][T12078] lo speed is unknown, defaulting to 1000 [ 185.941206][ T1412] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.964808][ T1412] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.983075][ T1412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.004976][ T1412] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.107179][T12084] __nla_validate_parse: 4 callbacks suppressed [ 186.107199][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2939'. [ 186.161067][T12088] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.175609][T12090] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.225338][T12088] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.285412][T12088] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.344207][T12088] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.499601][ T9] hid_parser_main: 44 callbacks suppressed [ 186.499637][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.515397][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.530598][T12100] random: crng reseeded on system resumption [ 186.543061][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.550651][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.558324][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.566771][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.574762][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.582321][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.590011][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.597591][ T9] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 186.616573][ T9] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 186.990379][T12127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.035142][ T3410] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 187.066487][T12131] fido_id[12131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.095496][T12136] ================================================================== [ 187.104254][T12136] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 187.112023][T12136] [ 187.114933][T12136] write to 0xffff8881043fd908 of 8 bytes by task 12133 on cpu 0: [ 187.124332][T12136] call_rcu+0x51/0x3f0 [ 187.128533][T12136] mas_replace_node+0x2e7/0x410 [ 187.133690][T12136] mas_wr_store_entry+0x2406/0x2b50 [ 187.139738][T12136] mas_store_prealloc+0x74d/0x9e0 [ 187.145174][T12136] vma_iter_store_new+0x1c5/0x200 [ 187.152149][T12136] mmap_region+0x1100/0x1630 [ 187.157379][T12136] do_mmap+0x9b3/0xbe0 [ 187.161966][T12136] vm_mmap_pgoff+0x17a/0x2e0 [ 187.167080][T12136] ksys_mmap_pgoff+0xc2/0x310 [ 187.172907][T12136] x64_sys_call+0x14a3/0x2ff0 [ 187.178212][T12136] do_syscall_64+0xd2/0x200 [ 187.184215][T12136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.191060][T12136] [ 187.193995][T12136] read to 0xffff8881043fd908 of 8 bytes by task 12136 on cpu 1: [ 187.203048][T12136] mas_state_walk+0x28f/0x650 [ 187.208375][T12136] mas_walk+0x60/0x150 [ 187.213129][T12136] lock_vma_under_rcu+0xa2/0x2f0 [ 187.219241][T12136] do_user_addr_fault+0x233/0x1090 [ 187.224913][T12136] exc_page_fault+0x62/0xa0 [ 187.230922][T12136] asm_exc_page_fault+0x26/0x30 [ 187.236851][T12136] [ 187.239201][T12136] Reported by Kernel Concurrency Sanitizer on: [ 187.246301][T12136] CPU: 1 UID: 0 PID: 12136 Comm: syz.0.2960 Tainted: G W 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 187.263188][T12136] Tainted: [W]=WARN [ 187.267448][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.280573][T12136] ================================================================== [ 187.380790][ T1412] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.415635][ T1412] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.451978][ T1412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.473217][ T1412] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0