last executing test programs: 6m1.369625691s ago: executing program 2 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 6m1.367494181s ago: executing program 2 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000480), &(0x7f0000000080)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000002480), 0x80000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m59.895360499s ago: executing program 2 (id=1417): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 5m59.871613829s ago: executing program 2 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f0000000040)={0x2, 0x4, 0x5, 0x191f5194, 0x2, 0x3, 0xffff, 0x8000}, &(0x7f0000000080)={0x2, 0x81, 0xe, 0x8f, 0x3, 0x26e0, 0x7, 0x3ff}, &(0x7f0000000100)={0x0, 0x1, 0x687, 0x740a, 0xc, 0x7, 0x0, 0x80}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c00000010000304000000000000000000080000", @ANYRES32=r2, @ANYBLOB="15020000000000000a000100aaaaaaaaaa1c"], 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0xc0c719fe1b69ce50, 0x0, 0x2, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006280)="c2c9999d3abada936852a5f6582a99bc53c497e06b8f957fa088454c6e2ffc08f495c2944b52d93820bf47bafb524068a85a79097b802bb293250813aa30aec9cfdf3e6e2279d9ad3f9d3a9fbb54190ad310d8cbff81862a30eea51fd3a3f52ae2caf6b2a3ebde1f8d0e6197ef12ecf2f79c356e93c11f191bed428de43dd99b3052fcb35f817ac653fc09974f9d1a83476a13938b07516ac74862aebbcef9b5ccfc5801397ee12c00d63370bf8c999f26c4259c568a5209beb3009e6b440dcc08c671aee504e5eead4712205b4f1a9953be28fa8386d278d7702082921a105d1fc6b6c739363f674a2d74eedb87fa87de78169664825c281db078702c8cb19d90f445fef944366fee83c7a6edb52eb2bc5fc6721013edc3e99e87e5b674a8bf48fad8e3e17ea67918b4d9e24914b5f8ce232ff4789aa3ee0f49d121662b34de6a3468effc2d7741c6048ac4726fd0fd338259083dfca8c9e35bce16b2cce5bc42846956839a67f5ea5ea5172aee1ffc73823cb3a639fde9e792ab7b7065972648c53acd72e16a5e9878b7ebcc44f3eaa2607d7137df48c137103e96293162fc8f9257d112032382a6c90c65a89486ad8e9c43be856dcc4862239f4d75b59d3c77e927050301210ad1dda405f97214762efeb59de086e26c31fd42d977607bc2b7eaa9ed62a0776097345604867a1ff39c04e2749fd75a82a0ff4d5f3068e96e6121fc86b2b3ab757fd21d8f68e724695ad6c3006e26fb3f10212216a5f2aadb59260ca2a7ac716ab4277ff15fcf463672ca514ae5cc71a139c7b877df4556ce8bdeee23ce358793a291aa4175126a7d8b56e98356eba39939160dd5fd4dff93c6cc2094c31790111b895126414b883881da65d5e61819087e2faa134727f714923617880580721ea92e4ca6ceb1ce3f80c2ceb64e9d93fd83a18b611c7b0dc3cae1cf9feb108d885e71affaea433b360c675d5753982e53704be8df089ebf6877844fe6aa648c5a56c3bb8f6062a795d9ac58bac6231b3cf7146a8843d20d45c92bb1151f5b4c35683a94927791e3c22cca7d34f4b40b3fa8f9e312d27f30ecf0f4061bf381035a58d46f0cecc9070f3286bd531005bd6929807188d375b42d30cc84a9045414a98723417e65c08bfd9981208f28792448dbd4aa120b6f2c65fc29918b802534bccfaeb693ffd9cc3447a27452a52a5da5431a01d7cd26b0fa72d155e3c88d5b921c00bcfb8a2bffbbf38d3e30a7b0da79b0a26e089be90bd13259bd47538d9231bc5712f428fc20c537c12a8f23a86f81687a50b3d102903873e9b1cbe4c5de5a020d65fed1ed78404524e90c9b94da70e32d8862c6d0007eba75bee0f1bb8e18b2166213ce289a32eab438f620a74e74ed023f2cf4f788f05a1479ca9b3081b3b5afff37cc36bdb0a5469de9f4671c8346a7d1bec3da8e7254849c90381837b108b55f8ba6582dbe8933b38c89bfc9667ef822e5c289067ef9598bc155310f8e46cd856afae8ebe32ce669652fe6c045a6c9fdb9dee18243e7436f832f9fdabb7d32d9318d2a63c96ade9d3163dba7d5bc1c0de6fce8472e564428270551a0dd7860a969bff28f0ad135d1c409c3cd6cb33f1761ed340659e2ff2fe6dd181b8fa13093ced7e1207e9b84a4a313c52eccf874cef1397fcaaba325e4f8c4aa3b111312bcc5c63c801c8f5d6c08b6875f17700fe2624bd0803f0d66b8ad242ca6f5fa3554c9ae4f088159204aa4f90ac30c485c2aa93ac53c2d69013c3d7793c6f7a33aa90dddc33709b229cac7672f2e055440101cb2daf9889174e588f982ef7bf5f6a1bb02ff109adab2dbef29676ca8fcf194672a65c1a543d81a5df0151a202a3a878248691fdf2b511352e4706e07a2b156c93c072db50fdefb89c17b1c28803b5c744bc1a3ae0d657764373ade83b56044abb1bd1653bd70fa90b3673600a92b28f9af03f779b41498392cc2bbca5ee9e97ddf7420bfd755ded6181e6d548ff5bd7d217931a0db038e57600161f7644c439f3e04471ca72d1024c84881fe7aaf08cdcb06b4124e18778923224f7f2c15ea8aeb7636f2ede4403595121a7c182c0b6d8d4b8c73cc4c975f5effa55698683eefb3ba203bdb16679e318c3c7f645a5152a55a8b73ee939160e5e6142e72f3ed7a106dfcabf364f4af8d46893012b93fe1092a1b3fac7b81811cd3f2d3a97e58688c027dcb109893cdaab87f1ebe5f046390c598ac597bcf3b053f8a072369667c7ad15a7af4a41baf82662423b6a2e823fffab7d3fbacc7f0f0deff62cf51f91f4fd934f833a9f6b07c6eece73814ecea04de7c9f8770fc83507dceb4f8cb11ea83b682f0d340d6ed6b3c500198e353e366cb574da641bb0dbdd863131e8cae9b5ea4bc18e34a86bef73abddf293d7dd0c9a1cdb1fb445f73ff6f1d3d1a889504b612340b5776407cdbc4ffc7e0d67fa97d7b810827bfa84af8637ecdbb2f8ef9a194a56e72fc327478798e47862c3615d1d338bcbf7fb97b64605835f4334c8bd270062f99d28c550a21f828412fb8b4b790898b09606cab36ec5ef940f51c8bb1896928a66528a5adc2c9ec09fd4707b79484d6eb5b3d8cd76dc5c77be8093e29cdf201ae96b846cecb362d41cc774440b1da0da3bf6c83deb16b7864c6be9bfdf9834947e134c172e05af459710dfb1e5f730eaa0e991f17e816e9d8cd7c1750c583bf78a1ceed996b9ef8ef804e5954a296ae42e792bb5ed943f3b3eeac90ea9480662ba1ca7d89d901e44e7a01f95d0153ca7e5baebdf9d6bd72406de92e8ee0f58b21f5d512db366fc76943814508ad8ce91fefb06d3e968e5db0c9545e1d9e3b595d0696c06866b70dc378acb072d335807100539275da71f393c9cb741a18f0dfeacfa481c4e55ed3e4fd00189286835448105caf775aa0243e2bb9a32bee82776f4a9502bd516976264b63a9d63dfd36753dc586a45319625547edfbc1d8cf60ed53fa6f1914ed2922cc3baf98b441e0943ff69e2ce3faa9202f4787b23c5dce71986efaca68e27e32a4a8c8c6193930c4c862519565b40372b1d999fe9c2b84a73edb43d89707d448dd300cdce871dc3b47ddd32c2473c16256fdc82baf1d8a535d96152182fdf9959c12ac8aa2677b12f392bb5b883cd035489950d291fa8674740c2b2ce5bdf5872d58ed0c0a807dfc1d792690a9ea68937b2e05fb8b9e6029f6dd1ba98f98264104acba2975ebe19a19145399cc7ad69a71130b542fec18cbf7bf4bcd33ba9a30119a9516e8c9eb244943a4f1e123795b7902b72ac691dacb898c3873772280fabdd5371eacf6aa3717948e653c1f24a6b444043e7bac6f32a8b13e00339b9f8f8b5dbecff9948fdfa7ce5ecf7149e25c6f570d209fe4dab3209401bf240b3bd8d8e3fe173cc7662edd44a5e6286222734e2f5a523042df95ed6e10145f52be00bab9912e827316e0e4cab3b19d5e82bd521b59daceea1f73f38eab9f6351b58dd99a3d7a05bcc049bfe175c68cfb62c0543710a60debaf5d47b4049cb67c95424344b8b046a0a5950d94241443ce96c20344a9b38fcaf81fca0a13912ea2dae9e1d582a89139e047bcb13bf5ed824b15ee94974fa9db168264979d2d9ab0c9509c6b710da7fa6a7479b5b8218aa5fa08193f28760b73ebe1f95c1fda61a98dbcddbf0a64b7b0b1c97bf6cbce02d5d3494e1bf2d5590654b1cdd8fcf41d49e29c5365b7d873fc1d70863b271871262f695a0077d6c0d87e5f832992442e452edf5d87e993a3f32dea10d00c5c60494967927c0eec9ab337b0c3e002f64f9f886dd7f805984f66b71d5a7313642dc1a706edb67a69fee2606ada54e3c89fc6814ff801b40e1baf7f5e6a92bb8e990c71e4d4614c79d7d42e59b7b9abdea90b2d06691cfe29e03eb078c0994a6a50b9ef471bdd4254dbcb47e371516cbb1b171773f3102092246c0540fc9e373704f00430e6a90032c51c8c3eded1d3bef3e718e8289b1e3ab725ee091520f325696ae611eaed3d02072d6ede80a5e29ddf802d2761064c33f68870095b20ecc9c5c93c08eae2bb960317daa7a696a05b662916d7f6094567c13aa06dc52071c96ef3e453b05eb9e6c48cc7152fd2085ad30c574004f0165fa0acfdc8a3281a7468a7a0a8e114b2b0257dbeb7774844837ee144073cca9abbe345ea4e4551453e1574453db2dc368144bf995fce997446ffcd503263ac8673fe8dc20838382355118123f0a7052153f3f5639ff36b52e09ad5e54ac8d37888413d020c9d5ca0d440cb7f7b35c36e2e6bbfd39de6d0ada9bc0fbaa900ad0bc5c7f2ab2cae2403091a9ed56a8f4ceaee7c44dff9cfa73d9a89ba7ddeca232306ee86654c20539860b955a76c1f38412c25668236be19bca9a2ffad2a55a29e84a3adc27c72a4b9256c7643306b0ab9dcfeefa73b146eb11b6b9fb31dde6d8a4cd0e45f9659e28c8ddeb23f056b8d59ef43d8bd0505634d0b7a374381bf216c60e12f0141cbe8f39200cd1470802c6622d38c8df624c2027b1df5647d67ec796961d64739ad43174658512a93232fa0f4c137f6b72642466388f71099a269b4aa7e6230209af5b1e56d2e36ab33da82464c7ded4631cb7d529a3f6081779099c44720e07370ffc8b229e43d78c6d7bf133c78eec6eca052f073c93956733b5bbe9522dc2e11f934da6b6315a8607b1709a7285c868092eca2d09bedcd6b435b069efba34a8b8a36d7a7fb9e523f179cfada1ddf1d05cb31416be75c11891e61216bd6de43cf08840d629147c80798f77a4feb9033cdde60d43d84e936418c9cde480330a4d94ba6b60c70d099c7de9f4f695c223d672ca17f74f79a67a08ac7101532e2d226f888b77661492e6efd24738e500e82e6ad86d3132df57677cc605dab4395e817118bc84559fe4e6022837d813b7eeed04e9f7d6f6e28209c6897612f62a5bcd8970bb5566d4bc1f85c507937457860f2a25084f2c46e3b9c493a23f24a45906e4c40e5f93be742952941be4205d757bcb48246936eeb7a426193a35826c6331732de6764b907eb32aabda07d2e82abc7854033a7bb967854e6ef15976a3095bfa4e7fe23f38b94d28c974efb019b96b6dd6bd1ac8c456725b8a0de38dc297d79a6a0720dea6292d5f84ccde13e73c5137cb1401c1d3b4876125dbe6cfb173e58d0e87a7212ee79832c7b192328fdff4c17e52f708a4e9bbceae58ed5cea94291008c5bd41c63ba9fe1b7ed769868a0ece2a12bb7238b9fd10d81c82051cc81279fd2f249565e618031a85e4c537fa957c82df768f877dcbcea6f5361e1d1d7d05cdb7d2faf7393aef557db39ec68aa1f25a285ec9aee0ae364bc31a839874348e63550520735ee67026b0daf8041695271c85eda5db84f2f0f93a295893f859ad3fadb98be010ea9e25554da4fdeed755e95665f7453a954e6553b03ae4e1da1796bae62de67c953d72c3c9384b061613cf6823e847403256b51de6fdb750b967e9094b5e9040b3ee5cbdc5627a2161dcc96133b4640d6ce31b6e2efbe6d85bf48561ca431c59bc38d1c05e7c98198d14572b81560df5abdde321914c673898a82ee8c2a0fdc8eb259e5bfabb5ebae0ec341f742312dedd8010322c355db37a970ef04bcfeec9237c887d1b3b1859a6087740f77338d9fed1d10f1627cf759f4fd7f396838923ebb5b3ad8b0841e390371dc5074c916141e75066c0d1bbf8ea2a8dc19e636c85d0707d84a81b6bb6df1ceb9487d477dacbbc86017514568587bde390db8d9ac1971b28c14dd137810d339516a4ac1df9e76414484b77f0bb6858113ecd3aa364b05a55f8c817b0e41c0f1fe5e72d01903138dfb1f86d8141fada121f0be26c70a2d672a94e4463331bf19c52302a163476cd18824031d5bba48fc34facd423172818bd13410726a340bff7cfed83aaa1981b2a3b36f175f403db94396aba1f4b1e7542c2e1baf5d2967f5549b186f77024652371e9cd5326555ae354ee2a5c302e525cee560371aeeb45bb10b21f74662a59487f3cccbf0dd6b4801e72166ac10cc6836331a5f7c4370d92cefc3b7d34e29a1e910a659c7b03990cdb06dd884b6f6d5637c0476bcab7044d3943c72d5996a89cff89c4e37e20dc4c1039fdca9fede6426ac6ad0eebf20a8d6a1062fb66803e105eef5afea486dafb78019bd558d94ce1c7d71202a2bdc28060086c2b519afc2d708c508bf5627f5425165a8bf81067f9baa9fc74267907500fc4d7775f61ac009bf1e23ccce05baf45de204af0d2ac2266374e20ad019de62936f20ec8659d6c7d5e25f900bae77addedc4004fdf0aeee36382079c17c333b821a20a51a1d38339b0a90bbf4a7f78a09841d7bb5e8122f8e453feb5031ebc27095237b91349b07bea4cebdda360b78553de69309f0c2996ebd4e63c123dd00174701c069eeff824afa8ee907c65f6657ffa04586a80f6095c59208d5737b870fe29bc55cb8f9f727d2dfae651c60488f9228040c62f15a83aa21e8986982d338362c7b961bee568829612ae3bca0e13eda996e71c33eb9b67214e8eeba49002c4a30d273039a3b2a9930aeccd3b941ed364f1fbc20880d58bf8176b125e03ec098e2547b496696edf0071fbd46ca83b8d5fa90e7a9a6d5e7d39633a00856243e1ec1a2264e6e46dee27f998f522ccb363ea56bf22cb9624850f0a150fdacd520aff544188beccd740f4d3f26639e24f9a8e12bd28147cd17e23dc27b0d6c1b8daae865e887713732aba0fa344c65e58fb3c695fc1d05d018310e02c8d9b3095090e7ff14bc947609861d8ea17a6774acb93bb2a7be1b2d9dfa58b750fc1afa7fc776a28cd9e02dfd6af8f75d84a8c96ab4a59dab8187df585eedce62c0ce6c6987d98baaa0eae5274e9aff53e06b69f59ee33c48ff512271e8a6a49abde98fa4f5ade89813ad4e600f39c4217e87f96d04cfe6c848661640a055dc1f10a64d7d5f0ce98946f081a9a7f7638475e6e4dd9c42e033df701300bedec740651c6c8ae78b6293c8af94ca96bedfa050bfd73efc734e36f56bebb8fe0caa75b7582d51f8f3be1bb403c128511047c8463ffd3ac86f774a9727966c3b51b4d09c639a72701dd845928b07eb3baf0bc73502cafd915af58faaaed4ab15b5711312aff955b09f4defd3e5dab277c11ab1408791e59195e5f0c2abcbae29ffde0bd5b6e98fcd5f55d0e0f1b6382eb64c5f4887237f9d422c8b9e086e733d5549294847195f8d3037d247894683261cc7056d3823a94f1ae37b6c3a58a375b25b2231e183b0f65f4c2b47829c1cffd1ad6bfa23408f453b3390a7734313f2180f379c0697dc08ca2b9ec1408de9204fbbf97f5836e0a564184b7ba0732bca8f8fcd06491f1a0a18d8fc2236f83c61e8c184e0475b462356fd26d1816507df7fac9aea50eb226ecee652d0309685e8add97e2ff84664a118b0dfa4c25c81a9c7c16ca985ff961d1deac0b12d1487745b0efa9a201b706c010481eb6773db816f4f131e5a40e8bf338044fdf18cb72bae45c340dde637fb1b9179a8362e2ba21911175d15a740dbd5ad71dc901fdafb692641a9f9b09171f831d718ad099975f0315acc6414ce67022ab4fcd53b19143789958e2ed6cc26232d55d717a1779129e5a0b87689b4914f2f9f10e243dfc00453d589a58d3deca9060b4675209775b722a985f4a20705e7c70d71d571ad0cea7594e066704b81a676ad25a198ecd6eeb27cc7ecc2bdb9300fb93560c8c1c5cae26f39703fbdfe4660d84d44a7e1e206837e6d70ec51f40bee10d320e27441a4a02b22e3bdf0f155962fb9e77036dbc5ccea247c75a6708aa2f6d0256b03780d4c37528d629bd8fd50ca31c42ed3653b9b741707ab02fcce94cc3080320a996110a0d3f6983c5c0e6a75b0e9a98bc4d623fd1c6e2fdf2ab937467d6a5e7f3ceae158575b5070b05220449873fc5b2baf39c3a4446b20af493dc4622098454881b8675c9662a6285d91d562d08050cf864b9c458884866c7312003ab2c91938acda2528495c1b4a7740f14adb916dde9e0f288b73345a9c427ae6fdfdad4e4ec1166a30a9743f4a32726515df49ae035513bedbf9c5fe7cb978bd366b24be099df41fb4eb9611d89cac7cf48e033d7420ec1351bc20351d4a71a75aea61a6b28f727da2aeff318c289c95841733d58c51dc3c32b9c0c6bb1df3586f47d0918696be4c435a5c1b0b89d61d964450369208da528072a86db3b1f9730029018fbb27bf7bbb724dcf58faf4664e9688128946fbfaf0bf18070b42603aa6466e92389d5453f563d2d0f7da99db08d9ec0847fd568add57f26d8d9a13d172adfa71b73aaad4e4bfb5d721b3cb292cd5fb1ab49895d7c19c7f21d9a9a28fc7ef88acfe144a8c7a2bbf7fa2fdedbb3668de6c324ac3383bd08a38f0f7e91d826ab58cd605dfb9213b05a553ce1992930696223f7f1be2ce4578dc4275e66f3b50f95ee68deba2edb2c6eb21a90f50d5d7e3b6e8ee3eac963e9f2761073cbc5e386ec341c7f676b9defa0ddf2356b71d7a82d65dd539f77245b6051854350d6bf6c440bf02e5bca3a205426c31cb19f90733a67f381285380518164c1a430c7e5e061500757813c2bf30a6b3148947b7a70be3963ea62deba7c442db470bc886300bc9b629711ddeaeaf0a5ca1721922177d4958048878cf6b09435b99d06a0073dc65159334a91840f2cb6bde644496a08060ac52aec1db8fc2b1a5b680fbaa5fdf947bc43868cd5ad9db2f441f5378717a4c82221166fbaa0ae939da446a2695e81a5713a21a938c403a8b103c82917ec6e13c10c883fe8d5cb4ef90927cb22c4bdfa4f7e6787930eba03ad34b4840bca1c8e4322a302a7139325f34aa49029ff01c62c21466f6f359ea9fa2f98698f0a54c6251f082e9ee399650590a53b5cac8d098743f6aa1e68501378bb94aedb4a4c896d3c1c1b669a181fbe5ef01851ec63d447358c770ce17f1b2f896379b819c7a36ed89c9d0e3f54df125bce432194ebe7308bb49dcebd8506a77dc8fdfba05981b9366a3d79e756a2750fae160f2a803e01651cbd32c8714cd31b767ae51aa6e6df0e6b51bc0ada67d6551646e97303c886cce6934295e1bab9a1dcf92327168da77bf2927e661e41e8f7ec599e704b3ead67507c9ce7b02c4d2b64c43129d2f17ad9e807286faced59ee2af2f8cef7d1be7e4ac43b3647e68bab9bf51ad47007839cfa814f852c54add631238c868a0dd2ebea55ceaf0dc304df0e0b2e00c236726fa4f36812b4ae188bf7bf14d7d7c51410a12bdef938c6469ec9e5a4bed0850b4560eaf19c2c7761efbf59be6128b568176ae747c54c22b0a35c4d969d5af2b8220ef0610f678f9eeb5f56f0945de422c6342a8caf1d57047ddd95eb4f0ac93ac002e8e93f0f1a49f854886a4fbc59a01500946dce0e19cf26af4e99499283bf29c8ad0eb42d32f103e35c6b466abe3e504a9744b6660bb07ad090c797ac77a2f9ab911f86b3a62b663a4009dfc28924b949dd7d7f1be8690a9a0dc17315cb8724e4573d311d69b953db7c02078b3c34c57b6c0655266ac3ae37850b0ed9cd0caa9c03b05640a35e9b6641e3142c2c5b0a19c03eed381096930db83b314eac2ee95b94f66d42ab674b716759afa633609418edc77bcb65b1e0a51fab72fba8c1ac5089f1aa3831df7e69ecaa62b91ff362ccf3f9abafc9bc2663bb13caef7bd80b2a120adaeb4f7d5543863ca8538713fe917e25ffb961bf3754de51556a82f32ae4d30e161412e7a9b92a327848820d316a1141394287c5eea72fd2b6d91995bc20672e75edcc78bf4ef12b0d1dd9c94ba0d58e8dcf4ccc548d9b7622f9c986caed48c6a98578677ebdf225a37eed0367877a5e949d6b13f46425f063517bcf8ef6b3c4c42190e81720993851b1173093d2172fae8df0853fceb086a8ee5a4a90272766d0ccfcbfe9e520f81ec75099e34deea9a2010a553b84896909a1c3984dac98365d3f211882ecac38766ffc038f65f88cb6998fd6dc0fb2913ca1211d48ab315d64592553dce3addea354ba170c608bc03990c3dd7b7384c11a6a3cacedf41c8915f04d9fed49f0319dc8b267c260e8b1189de01e7b606186fedec5e6c8f20980ea9dd1fda6e669b6391a8e93a446c3cc46ec5ab1b18f5de902fd43c77e1c5bbd6db0b467853865810b6c3120f0a3683c7aa8ae7fc50ce58e85ffd60bc83c01e4f61d5e382bbb8e2fc4171c8fbaf569e7e3f099f63504a941307cb9bd064060a95daee763687cce75acbcf180c0235481d2ede0c78755b9d2cad56040f930e0db4ce17ef4688c3a06f1572caa85276beddcec7d67808abcb8a4867a5a35745d655d482c708f7b8e593b92c68ce22b2a074235a82ba290be1f5e41e710e7e693299a1042e3a24801ca1c68d5f688b4a18673cf2cc38b51eebcb8705154b31020e200dcef5f33bd5698fd46b546c6be22f9b13696d0ada585218039f7abb3675755f3b4053b9fe2ba113d324f6a0fb6c9755c405fb2a2c691eca1d1dc2af43e486e0478cbd91bae39b09222f0b6947216075d376cdadb304c307077444c5b12ae4327ca25f3b34b498de20d13d49d3651f19e67cc858cfa1cd39a471a47749e038ffbf6e843af5f372199b279eb172791a9fbe574c61a984f754eb652bdb12751da6f9f56a0068880b6f0a49ebbe1decf6eaa99bdd38203f26cf0baddf797cdfe15735543ec1582a060378189e1d1afd2f202c86c10e4b56be1aab7525573a5fffe28d32dbf4c3bc91fc065727ae30f0641a78aa582b262debab876a3761db02b7243608f06b8ac59fd84090a34a291b9d2e31b221ad3cd26504ab0ef02e35ef47028d24f19cd49ee0b817c3d8711abe40def838ad13b5283e6b26e4f980541042dde71a42c9650a545316bf8e88b8ffe720ec856374c906f541adedfeebaa0fb3c07aad75a24cb71ea0932df06ad33d3b6d107e8915424d2386cb7f3dcd6a6c73c9f6055737bf6b045fe18eabe8e386a5a6c56a899d2fd384a1eed89f7f772d50f6ab04cfa0e70294ae18fe753512963dc830e0f2bacfc1716b6d6a066e7e3b3c57bf8d1d98f0033c6740d4a98fd01b5e2060d4b78e0cec3e0dce13e9032425920a0ea2bd49db32b08aeac381278d827c2dc19aaa515061e93e530b67bbbd3da5333268f1e0eec69c011d51138ad899e086eb0d81f816564fe83fe634fb90007171b0f9bb196621651f3014dc13e1d5646b5c10de1ba8b693c4d689d256da4c58e2e32672d294d1ca05f9854d84cb6c777fcfb353f8e850d5db592c0ac08bc620f5eee1799e4a3395caad01596acdd9abc629e8b750fa9fd021400ee827e0499d76ae64378841e360f7aac120383901c138cef22f83a1dd36227ca33eefcc6a66ed3283fb4380cbdda7d1fa42e6a1d8a3236d78b283a5ab099b225cc3265ff6c8b96a901b276e689f923caab4dad39e5422d388e5ed3abd3ce1d8e44cf36f081b1d8ee40fad827e06d9346cc55b7c3fc451615b0366cdd3879bef169f949dab2875232b9a13da5bd1f3883eca84a7b3274fce0fa012201495a8affdcb8f6a", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x2, {0x100, 0x200, 0x0, {0x1, 0x8, 0xad, 0x2, 0x9, 0x3, 0xfffffffb, 0x3, 0x3, 0x6000, 0x4, r6, r7, 0x11e, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x400, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10000}}], [{@obj_user={'obj_user', 0x3d, 'bridge0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, &(0x7f00000003c0)="f5b8047d4a57b05661cf5bbc2c927203506621c7e1811424b0d8d5e22e79ecad140dab127ccb2556dd74d2092f257246dbd58322b4") 5m59.217510702s ago: executing program 2 (id=1420): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) syz_emit_ethernet(0x86, &(0x7f00000006c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0xe, "4ef661e96b4014469f350a42"}]}]}}}}}}}, 0x0) 5m58.477465776s ago: executing program 2 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 5m58.453494706s ago: executing program 32 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 53.914971538s ago: executing program 3 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x404, &(0x7f0000000700)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@init_itable}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@noinit_itable}]}, 0x3, 0x43d, &(0x7f0000001200)="$eJzs3M9rHFUcAPDv7Cat6Q8TS/3RWDW2isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAgaRepRAt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTZN0k43u5wPTfW/mLe/77czbfTOv2wC61lD6RxJxKCJ+j4j+arW+wVD15fbK4uTfK4uTSZTLb/2VVNrdWlmczJvm7zuYV3oiCp8l8XCTfueuLVyaKJWmr2b10fnL74/OXVt4bubyxMXpi9NXxs+dO3N67IWz48+3Jc80r1uDH80eP/baO8tvTJ5ffvfnb5M8/4Y82mRoo4NPlstt7q6zDteUk54OBsKWFKvDNHor478/irF28vrj1U87Ghywo8rlcvmB1oeXysD/WBKdjgDojPyLPr3/zbddmnrsCTdfqt4ApXnfzrbqkZ4oZG16G+5v22koIs4v/fNVusXOPIcAAKjzfTr/ebbZ/K8Qtc+F7s3WUAYi4r6IOBIRZyPiaETcH1Fp+2BEPLTF/hsXSdbPfwo3tpXYJqXzvxezta36+V8++4uBYlY7XMm/N7kwU5o+lf2dDEfv/rQ+tkEfP7zy2xetjtXO/9It7T+fC2Zx3OjZX/+eqYn5ibvJudbNTyIGe5rln6yuBCQRcSwiBrfZx8zT3xxvdezO+W+gDetM5a8jnqqe/6VoyD+XbLw+OXpPlKZPjeZXxXq//Hr9zVb931X+bZCe/wNNr//V/AeS2vXaua33cf2Pz1ve02z3+t+XvF2378OJ+fmrYxH7kterQdfuH29oN77WPs1/+GTz8X8kjyB7TS/iRyLi0Yh4LIv98Yg4EREnN8j/p5efeG/7+e+sNP+p1ue/XFx3/tcK+6JxT/NC8dKP39V1OrCV/NPzf6ZSGs72bObzbzNxbe9qBgAAgP+eQkQciqQwslouFEZGqv+G/2gcKJRm5+afuTD7wZWp6m8EBqK3kD/p6q95HjqW3dbn9fGG+unsufGXxb5KfWRytjTV6eShyx1sMf5TfxY7HR2w4/xeC7qX8Q/dy/iH7mX8Q/dqMv77qi8nlnc9GGBXNfv+/7gDcQC7r2H8W/aDLuL+H7qX8Q/dy/iHrjTXF3f+kbxC5wv5f0KxV+JZiMKeCENhhwod/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABok38DAAD//2yn5Qo=") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xffffffff, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xffe9}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @dev}, &(0x7f0000000400)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50010804}, 0xc, &(0x7f0000000540)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf250c0000001400018008000100", @ANYRES64=r7, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="140002007465616d5f736c6176655f31000000001400020064756d6d79300000000000000000000008000300030000000800030003000000140002006772653000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x458}, 0x1, 0x0, 0x0, 0x10}, 0x20040080) r9 = io_uring_setup(0x27fe, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f00000002c0)={0x2, 0x4, 0x80000}, 0x20) unlink(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000008000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', r8, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=r3, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0xf) r13 = syz_clone3(&(0x7f0000001880)={0x140040000, 0x0, 0x0, 0x0, {0x10000}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r13, 0x0, 0x21) wait4(r13, 0x0, 0x40000000, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 53.352422649s ago: executing program 3 (id=3049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x9}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r4 = getpid() r5 = openat$kvm(0x0, &(0x7f0000000000), 0x240, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x30}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x7ffffffffffffff}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[]) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) prlimit64(r4, 0x6, &(0x7f0000000180), &(0x7f00000001c0)) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000080)={&(0x7f0000000000)=""/40, 0x28}) 53.229500571s ago: executing program 3 (id=3051): r0 = socket$inet(0x2, 0x3, 0xffffaa95) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES64=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'team0\x00', {0x1}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071104c00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20010, r5, 0xbf212000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0002000004000000140012800900010076657468000000000400028008000a00", @ANYRESDEC], 0xac}}, 0x2008c082) 52.326646958s ago: executing program 3 (id=3053): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000080)={0x8080000, 0x3000}) 51.873676397s ago: executing program 3 (id=3057): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0xfffa, 0x8, 0x5, 0x5c8d, 0x1, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000300)=r1, 0x12) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000340)={0x1, 0x5, 0xfffffffffffffff9, 0x411, 0x0, 0xb1d9}) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000380)) mount$9p_tcp(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}, {@access_any}, {@cache_fscache}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x217b1a98}}, {@directio}, {@afid={'afid', 0x3d, 0x9}}, {@mmap}, {@cache_loose}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@flag='lazytime'}, {@smackfsdef={'smackfsdef', 0x3d, ','}}]}}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000005c0)) (async) r3 = open(&(0x7f0000001600)='./file0\x00', 0x80080, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001640)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000600)="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", 0x1000, r3}, 0x68) recvmsg(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/21, 0x15}, {&(0x7f0000001700)=""/106, 0x6a}], 0x2, &(0x7f00000017c0)=""/243, 0xf3}, 0x2) (async) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001900)={0x4, 0xa, 0xcc4, 0x81, 0x6}) (async) fstat(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f0000002280)=0x0, &(0x7f00000022c0), &(0x7f0000002300)=0x0) (async) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0\x00', 0x200, 0x100, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r0, &(0x7f0000002480)='./file0\x00', 0x7100, 0x2, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000026c0)=[{{&(0x7f0000001940)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000019c0)="f578f2e0fff07aa93db80c4119ba02c61a2639c8edf2c2", 0x17}, {&(0x7f0000001a00)="5cbc7cd51b", 0x5}, {&(0x7f0000001a40)="d8ec13cd9799d5ed15d88a22cb94ce4e03a23c", 0x13}, {&(0x7f0000001a80)="069949f490cd13357ad4edab49f596f79838ccdf7c5652b0409f48a89fcc22a13e6449ab53892064b27b7d9d3edcf283e5d693da5033bf7f68c52ca0edef6b3daa924571244f009f614c58a745710ac3aee665067aaf1343d5ef29fd602da1c7be54f069207d384a380c45b74938dcd55d19c8f018f3b3d8ac71a130d72f", 0x7e}, {&(0x7f0000001b00)="d0f81c77fb0503fbb5e249c27bc45aa9e21230301946cf0c3007823a40cecc4973045e46219c28bd00020c4422e5fd628d4476b50be377845a275ce3c89199cbd7097f2538773bc7b34886da051deb151d837930d9e7110add665d13e89cf432e2d909c97e46da1a863ccf5733cfef915da3482c597c9d02894790aec8988b259b6f1d24fc9ffe10531e9c653ae971a0db8a055cfc404565cd", 0x99}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="1efc0ca0876ad331d787b9112eee0cdb71b77ab894a1a6ff5b37aa4c33dfc4b0b987014b43d7705f5aa9164229969d5773d687d647269cf12aec63f4b74ff1ea256fa9eb8252ad11df8c496b9b6314359e715b7d7e16db8512571dc783d0668732d2f5b7407da2564a68afef9f6ba7945be5dd2848216fd14e67e1d4e7202857a6ca343bb489dc26941efaca2e1b99ede92b3c20a9bb14139c031abe66109106ede70a102124608c0ab249b23d2147f5a848e6c66dcc046b5c", 0xb9}, {&(0x7f0000001cc0)="9bb773874d5fc5760076ee09d650eada54710e2a18bae4a3935385a4db2006274be18a583bf1e7ea964cb8553382ff782a6faa27fe2975d4fab23e7e23763459e0586b0bddbca44484911335be58add3b6f71a7d722a3d265a8931ed58104fa604f15ec8e0ce74f68daf3be5133324bd19ca79999dce5f8b6d0f6c3fad5d4b5214aa15a3f1bdca17a45b5c17c61897adea4d468922f14f2541d402eeb02835e838be045299e81caf079f7b8d008ff45ca476534c5ec5ac45ebfffc0a1c7609", 0xbf}, {&(0x7f0000001d80)="a95126a056027849c0d01e", 0xb}], 0x9, &(0x7f0000001fc0)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r4, r6}}}], 0x40, 0x4085}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002080)="251b233d589d1d192ac52f7c43a4de2d4b4930dfece580679df57ac33caf5adee241bc0875fe07a89b0d71ee05326bfd0e5efd4480286035d51d6ca21e1325b5c0bb52eb4c604c3307a5a1634c7394e0a6d9d3e0f0268416a0500a4c3d6e5ac3d386b2569e350dec84880c0e7c92ccfab18dfd1cb57f7bc22713e4a1c2e49ade141e2b0765852f92d6901506da756a3a63d74499760a13a0b050ae9ed6c5aadc283c69260dd46011f01d5c5f56b432b932337c631d27ad769e28143bebbd819bc67637db0947e7f8530199d9ac3e5f29b7be", 0xd2}, {&(0x7f0000002180)="c89c571374796718a33da93f345dcb18c0156d179fa62b4776ad9c828c89f5bec7a3c8ad7f31431e670213468963b8b8e69e9c43806b6dda1a33a80141b4102784da3dc2e6d9431846bf9c935bda37ccd4ef9088c15606ceeff80c1b0488b2b0bee4ce166811dd4a1bd92b99c6d28592dfeed7354b0c75786efeff0a32c97d040644", 0x82}], 0x2, &(0x7f00000025c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r8}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r12}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r2]}}], 0xd8, 0x10}}], 0x2, 0x14) fsetxattr$system_posix_acl(r3, &(0x7f0000002740)='system.posix_acl_default\x00', &(0x7f0000002780)={{}, {0x1, 0x1}, [{0x2, 0x3, r9}, {0x2, 0x1, r9}, {0x2, 0x2, r11}, {0x2, 0x6, r9}, {0x2, 0x0, r5}, {0x2, 0x2, r9}, {0x2, 0xce589e14ae505329, r9}, {0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x3}, [{0x8, 0x1, r10}], {0x10, 0x6}, {0x20, 0x6}}, 0x6c, 0x2) (async) mount$bpf(0x0, &(0x7f0000002800)='./file2\x00', &(0x7f0000002840), 0x10861, &(0x7f0000002880)={[{@uid={'uid', 0x3d, r11}}, {@gid={'gid', 0x3d, r10}}, {@gid={'gid', 0x3d, r7}}, {@gid={'gid', 0x3d, r12}}, {@gid={'gid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0xe}}, {@uid={'uid', 0x3d, r4}}, {@mode}], [{@smackfstransmute={'smackfstransmute', 0x3d, ','}}]}) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000029c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000002a80)={&(0x7f0000002980), 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x1c, r13, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240c0005}, 0x4000014) (async) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000002ac0)) (async) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000002b00)=0xff, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002b40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000002b80)) (async) r14 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r14, 0x4068aea3, &(0x7f0000002bc0)={0xc5, 0x0, r0}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 51.833634008s ago: executing program 3 (id=3058): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000440)=@chain) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000800a000000000000f5000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 51.796679828s ago: executing program 33 (id=3058): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000440)=@chain) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000800a000000000000f5000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 10.01344261s ago: executing program 1 (id=3216): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4000000000000001}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r4, 0x0, 0x0) 9.646222227s ago: executing program 1 (id=3221): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) lstat(&(0x7f0000000540)='./file2\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {}, [{0x2, 0x4}], {}, [], {}, {0x20, 0x3}}, 0x2c, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.518652977s ago: executing program 6 (id=3222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x2, 0x0) sync_file_range(r5, 0x5, 0x7, 0x2) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x2, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0xc7}, 0x7800, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.36719465s ago: executing program 5 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {}]}, @enum, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/232, 0x50, 0xe8, 0x3}, 0x20) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, 0x400}}, 0x50) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x200000) symlinkat(&(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000080)='./file1\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 7.36666911s ago: executing program 0 (id=3226): r0 = socket$inet(0x2, 0x3, 0xffffaa95) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'team0\x00', {0x1}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20010, r5, 0xbf212000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0002000004000000140012800900010076657468000000000400028008000a00", @ANYRESDEC], 0xac}}, 0x2008c082) 7.240068233s ago: executing program 4 (id=3227): syz_open_dev$evdev(0x0, 0x800200, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwAAtEuysfRXzZv968/+T5oTEAAAAAAAAAAAAACwxfGj7v+HXtX4/n9z+6GbNbj/v1bye1wAdJH6H/2h7Ydu5xof2K61d/8/AAAAAAAAAAAAAHSA4VvX5hYXF5ZX1l68hbc7I4zdLazPdUQYu1go3I1ovM+z5tQ+EBGd8iYsr2TRtKqu8iM42njKbf69BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPgnAAD////TGwU=") 5.7962326s ago: executing program 0 (id=3228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x5, 0x7) sendmmsg$inet6(r1, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee01) r4 = userfaultfd(0x80001) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac141428000000000000000000000000000000003200000000000000000000000000ffff000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x16c}}, 0x0) 5.78182546s ago: executing program 1 (id=3229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 5.185193872s ago: executing program 6 (id=3230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b1e000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 5.121499313s ago: executing program 5 (id=3231): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r4, 0x0, 0x0) 5.029963245s ago: executing program 4 (id=3232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd652170a40008000100000000000000000000ffff0a010100ff02000000000005000000000000000133"], 0x0) 4.975146696s ago: executing program 4 (id=3233): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000740)={[], [{@hash}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '-.@+'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x62a4}}]}, 0x3, 0x587, &(0x7f0000001380)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file1\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) ioctl$TCFLSH(r4, 0x400455c8, 0x4) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="eefbff", @ANYRESHEX=r7, @ANYRESDEC=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.897516977s ago: executing program 4 (id=3234): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xa0000004}) (fail_nth: 16) 4.869028768s ago: executing program 0 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000003c0)={[{@dioread_nolock}, {@minixdf}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@usrjquota}, {@grpquota}, {@grpjquota, 0x2e}, {@nomblk_io_submit}, {@errors_remount}, {@jqfmt_vfsv0}, {@delalloc}], [], 0x2c}, 0x86, 0x4ac, &(0x7f0000000740)="$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") sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r4, 0x0, 0x6, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf0020010000000000000000000000000001200100000000000000000000003c0001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb00000000000000000000000000000000000000000000000008000000000000000000000000000000fcffffffffffffff000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000100500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000006000000021"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) getpriority(0x1, r0) syz_usb_connect$cdc_ecm(0x5, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x95, 0x48, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x7, 0x1, 0x7e}, [@obex={0x5, 0x24, 0x15, 0x8a}, @mdlm_detail={0x1e, 0x24, 0x13, 0x84, "83a6299fbef92e635ac2bf77b800f2d847c3ed59bb8a8ac4dbee"}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x8001}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf7, 0xa, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x7b, 0xfe, 0x8, 0x5f}, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="058f1a0002949ca45d3278b30fc881a9db0b10010420000204ff01ff"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x430}}]}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) 4.341553798s ago: executing program 5 (id=3236): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) lstat(&(0x7f0000000540)='./file2\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.165448651s ago: executing program 6 (id=3237): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e22}, 0x36) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000022c0)='net/dev\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0600000004006496f2f7ea959720", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x3, 0xc, &(0x7f0000002580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000020000000100c"], 0x0, 0x56}, 0x20) 4.165141891s ago: executing program 1 (id=3238): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {}, [{0x2, 0x4}], {}, [], {}, {0x20, 0x3}}, 0x2c, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.428927875s ago: executing program 4 (id=3239): openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0xa0402, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lseek(r2, 0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_misc(r5, 0x0, 0x0) 2.012090102s ago: executing program 1 (id=3240): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {}, [{0x2, 0x4}], {}, [], {}, {0x20, 0x3}}, 0x2c, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.962645853s ago: executing program 5 (id=3241): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYBLOB="bbc9eac91fce7a3720dfcfca77e5b7b02a843fce55a3e99ec9292a48903903e812ee32a856bcccb7", @ANYRES16=r1, @ANYBLOB='\x00'/28, @ANYRESHEX, @ANYRES64=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x1000, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f00000017c0), &(0x7f00000002c0)=""/102}, 0x20) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r3, 0x2ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8=1,uni_xlate=0,sys_immutable,quiet,utf8=0,utf8=1,\x00\tx\b'], 0x4, 0x34b, &(0x7f0000002980)="$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") (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8=1,uni_xlate=0,sys_immutable,quiet,utf8=0,utf8=1,\x00\tx\b'], 0x4, 0x34b, &(0x7f0000002980)="$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") syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) unshare(0x62040200) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0xae7c, 0x8, 0x3, 0x2000000000000000}) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0xae7c, 0x8, 0x3, 0x2000000000000000}) inotify_init() (async) inotify_init() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) 1.962394683s ago: executing program 6 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4028aa000a0002"], 0x28}}, 0x0) 1.877460385s ago: executing program 6 (id=3243): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 1.877273914s ago: executing program 6 (id=3244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="00000001000064109c90150537acc395e1c364921a8ae1e2b71ea390b594a3e5f870e472e7b034387d63eb3f02945f9aee024d43d3c4c3486e778ee0e4882b7a019e9af7c7383cebcf22c94e92a8277b89ffba7b778c0f9230370d1b00120e1050a5674afb84e2e9870e02bf1b13d4390815f7e779861ff95dcfeb6f8217eb6a9a9a267219e749b2d94412187b025530602eae51d44501e113840b74fc25a2779a11111061d2a8109f76fad12ab298b3b86b8a92aaafc0f2d201aa66dac5286769701a6424dcdef4995f685d2cf04bedd327b5c31edac207c2abc6fb58e96384c6ec9717e72584afb54845"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x95, {0x95, 0x7, "34e15e3c7ecfe3cdf7a5833389eb31b3132171e1503033a4bbf31929b3e883613487ff9e57291cf02380e9d4873e9ff5b7e669d73a12afbde6390e6847c7dd0085866f5f5017ce8e14560e2e9b36440449a58259ac3dca31546b553f56d24a5d806195c6d349b94841449de82033fd3f9a51918f745112df55fa9018a56e556f80717c9cc8cc55ee0b2c19d4024405548227a4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="6010ad000000c28f10c45e87b7a9f8027026ee81b602b7fb6c2b5b8243e44509cac42819c78b76fc0d9a854238a8f4eaf51d6a74a310644b0930ef273fba1db968ff562500379c61fa12f7d7d3ad6b298e85f8163c61e740a645d1cd03b7bcd9c2e776fe651ee8e2ff8fe6c5ea8a53e07ce709469e27721e198c4d5bf50002fa25975c736cedb24103a643426db700000000778d7a883089205bcca1011f2626644f16000000000000"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x3, 0x1ff, 0x0, 0x3, 0x0, 0x4, 0x6, 0x10, 0x8, 0x5}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) 1.522214781s ago: executing program 0 (id=3245): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod(0x0, 0x8001420, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040020000000000000", 0x39}], 0x1) 1.361726724s ago: executing program 5 (id=3246): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r4, 0x0, 0x0) 1.197452477s ago: executing program 0 (id=3247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000280)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, ':\'*.'}}, {@smackfsdef={'smackfsdef', 0x3d, 'asymmetric\x00'}}]}, 0xff, 0x499, &(0x7f0000000a00)="$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") accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d80"], 0x1e8}, 0x1, 0xfffffffffffffff5}, 0x0) 1.137473969s ago: executing program 5 (id=3248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x100000000000000}}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@dax_always}]}, 0xd, 0x5f5, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x610003d1) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f00000000c0)=0x7fffffff, 0x4) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0xfffffffffffffdd6, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/68, 0x48}, {&(0x7f0000000340)=""/110}], 0x1}, 0x5}], 0x1, 0x10040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df1, 0x4000, 0x4, 0x0, 0x54) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.135600248s ago: executing program 4 (id=3249): r0 = socket$inet(0x2, 0x3, 0xffffaa95) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'team0\x00', {0x1}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20010, r5, 0xbf212000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0002000004000000140012800900010076657468000000000400028008000a00", @ANYRESDEC], 0xac}}, 0x2008c082) 1.06696823s ago: executing program 1 (id=3250): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e22}, 0x36) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000022c0)='net/dev\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0600000004006496f2f7ea959720", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x3, 0xc, &(0x7f0000002580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000003000000100c"], 0x0, 0x56}, 0x20) 0s ago: executing program 0 (id=3251): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0xa0402, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)="576df89181fccd31a82f90e42bb98f855981d3d82b0424724d45397cb6f5295758b3a5143eff149e4e27f19871b37935a159d01efa7df2d42f43c3c0941f8c60ec", 0x41) kernel console output (not intermixed with test programs): d=6874 comm="syz.5.2219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 391.623510][ T30] audit: type=1400 audit(2000000107.590:3006): avc: denied { mounton } for pid=6874 comm="syz.5.2219" path="/157/file0" dev="ramfs" ino=42895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 391.660983][ T6945] FAULT_INJECTION: forcing a failure. [ 391.660983][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 391.674990][ T6945] CPU: 0 PID: 6945 Comm: syz.0.2243 Not tainted syzkaller #0 [ 391.682969][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.694689][ T6945] Call Trace: [ 391.698304][ T6945] [ 391.701347][ T6945] __dump_stack+0x21/0x30 [ 391.706483][ T6945] dump_stack_lvl+0xee/0x150 [ 391.711586][ T6945] ? show_regs_print_info+0x20/0x20 [ 391.717656][ T6945] dump_stack+0x15/0x20 [ 391.722258][ T6945] should_fail+0x3c1/0x510 [ 391.726962][ T6945] __should_failslab+0xa4/0xe0 [ 391.731936][ T6945] should_failslab+0x9/0x20 [ 391.737499][ T6945] slab_pre_alloc_hook+0x3b/0xe0 [ 391.742884][ T6945] __kmalloc+0x6d/0x2c0 [ 391.747939][ T6945] ? sk_prot_alloc+0xed/0x320 [ 391.752990][ T6945] ? check_stack_object+0x81/0x140 [ 391.758706][ T6945] sk_prot_alloc+0xed/0x320 [ 391.763404][ T6945] sk_alloc+0x38/0x430 [ 391.768832][ T6945] bpf_prog_test_run_skb+0x24b/0x1150 [ 391.774844][ T6945] ? __kasan_check_write+0x14/0x20 [ 391.780574][ T6945] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 391.787602][ T6945] bpf_prog_test_run+0x3d5/0x620 [ 391.793355][ T6945] ? bpf_prog_query+0x230/0x230 [ 391.798930][ T6945] ? selinux_bpf+0xce/0xf0 [ 391.804079][ T6945] ? security_bpf+0x82/0xa0 [ 391.808936][ T6945] __sys_bpf+0x52c/0x730 [ 391.813379][ T6945] ? bpf_link_show_fdinfo+0x310/0x310 [ 391.818762][ T6945] ? debug_smp_processor_id+0x17/0x20 [ 391.824941][ T6945] __x64_sys_bpf+0x7c/0x90 [ 391.830811][ T6945] x64_sys_call+0x4b9/0x9a0 [ 391.835633][ T6945] do_syscall_64+0x4c/0xa0 [ 391.840807][ T6945] ? clear_bhb_loop+0x50/0xa0 [ 391.846431][ T6945] ? clear_bhb_loop+0x50/0xa0 [ 391.851381][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.857732][ T6945] RIP: 0033:0x7fc0385c1be9 [ 391.862234][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.883890][ T6945] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.893592][ T6945] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 391.903019][ T6945] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 391.911812][ T6945] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 391.920099][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.928821][ T6945] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 391.937671][ T6945] [ 392.315167][ T30] audit: type=1326 audit(2000000108.300:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 392.340590][ T30] audit: type=1326 audit(2000000108.300:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 392.366451][ T30] audit: type=1326 audit(2000000108.330:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 392.391709][ T30] audit: type=1326 audit(2000000108.330:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 392.416542][ T30] audit: type=1326 audit(2000000108.350:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.3.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 393.489509][ T956] usbhid 6-1:0.0: can't add hid device: -71 [ 393.495743][ T956] usbhid: probe of 6-1:0.0 failed with error -71 [ 393.517790][ T956] usb 6-1: USB disconnect, device number 19 [ 395.903923][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 395.903943][ T30] audit: type=1400 audit(2000000111.890:3056): avc: denied { wake_alarm } for pid=6998 comm="syz.1.2258" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 396.134065][ T30] audit: type=1326 audit(2000000112.120:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7fc00000 [ 396.199453][ T5778] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 396.228166][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7008 comm=syz.1.2258 [ 396.569581][ T5778] usb 4-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 396.586066][ T5778] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.596176][ T5778] usb 4-1: New USB device found, idVendor=41cc, idProduct=980d, bcdDevice=b4.8e [ 396.606460][ T30] audit: type=1326 audit(2000000113.600:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f171a324be9 code=0x7fc00000 [ 396.632888][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.650190][ T5778] usb 4-1: config 0 descriptor?? [ 396.747011][ T30] audit: type=1326 audit(2000000113.733:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 396.815864][ T30] audit: type=1326 audit(2000000113.733:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 396.842760][ T30] audit: type=1326 audit(2000000113.733:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 396.871536][ T7031] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2263'. [ 396.900082][ T30] audit: type=1326 audit(2000000113.763:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.1.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 398.001538][ T30] audit: type=1400 audit(2000000114.983:3063): avc: denied { read } for pid=7043 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.154200][ T30] audit: type=1400 audit(2000000115.143:3064): avc: denied { create } for pid=7050 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.187414][ T30] audit: type=1326 audit(2000000115.173:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.5.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 398.495041][ T5779] usb 4-1: USB disconnect, device number 37 [ 398.569473][ T5778] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 398.679501][ T956] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 398.819752][ T5778] usb 5-1: Using ep0 maxpacket: 16 [ 398.939589][ T5778] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.951184][ T5778] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.959493][ T956] usb 2-1: device descriptor read/64, error -71 [ 398.989920][ T7064] device pim6reg1 entered promiscuous mode [ 399.129599][ T5778] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.139333][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.147596][ T5778] usb 5-1: Product: syz [ 399.152212][ T5778] usb 5-1: Manufacturer: syz [ 399.697469][ T5778] usb 5-1: SerialNumber: syz [ 399.859441][ T956] usb 2-1: device descriptor read/64, error -71 [ 400.019697][ T5778] usb 5-1: 0:2 : does not exist [ 400.065448][ T5778] usb 5-1: USB disconnect, device number 36 [ 400.129516][ T956] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 400.280609][ T6871] udevd[6871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 400.399429][ T956] usb 2-1: device descriptor read/64, error -71 [ 401.699513][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2292'. [ 402.099618][ T5779] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 402.180065][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 402.180083][ T30] audit: type=1400 audit(2000000119.163:3093): avc: denied { sys_module } for pid=7117 comm="syz.5.2298" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 402.181936][ T7120] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2297'. [ 402.635603][ T5779] usb 4-1: Using ep0 maxpacket: 16 [ 402.789665][ T5779] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 402.805340][ T5779] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.834682][ T5779] usb 4-1: config 1 interface 0 has no altsetting 0 [ 403.084976][ T7136] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2303'. [ 403.096921][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'. [ 403.817631][ T5779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.828372][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.837210][ T5779] usb 4-1: Product: syz [ 403.841838][ T5779] usb 4-1: Manufacturer: syz [ 403.846627][ T5779] usb 4-1: SerialNumber: syz [ 403.961887][ T5779] usb 4-1: can't set config #1, error -71 [ 403.972065][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'. [ 403.974684][ T5779] usb 4-1: USB disconnect, device number 38 [ 404.048318][ T30] audit: type=1326 audit(2000000121.033:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 404.088700][ T30] audit: type=1326 audit(2000000121.033:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 404.115571][ T30] audit: type=1326 audit(2000000121.093:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 404.160926][ T30] audit: type=1326 audit(2000000121.093:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 404.382892][ T30] audit: type=1326 audit(2000000121.093:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 404.489509][ T7166] syz.3.2313 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 405.097864][ T7177] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 405.110307][ T7180] UDC core: couldn't find an available UDC or it's busy: -16 [ 405.121126][ T7180] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 405.383255][ T956] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 406.079743][ T7199] xt_policy: neither incoming nor outgoing policy selected [ 407.139489][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 407.310318][ T956] usb 6-1: device descriptor read/64, error -71 [ 407.889427][ T956] usb 6-1: device descriptor read/64, error -71 [ 408.169471][ T956] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 408.604575][ T7219] xt_NFQUEUE: number of total queues is 0 [ 409.168240][ T7241] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2334'. [ 409.477941][ T6] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 410.162924][ T7248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2338'. [ 410.539844][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 410.582090][ T7263] FAULT_INJECTION: forcing a failure. [ 410.582090][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 410.599897][ T7263] CPU: 0 PID: 7263 Comm: syz.0.2343 Not tainted syzkaller #0 [ 410.607708][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.618193][ T7263] Call Trace: [ 410.621585][ T7263] [ 410.624708][ T7263] __dump_stack+0x21/0x30 [ 410.629251][ T7263] dump_stack_lvl+0xee/0x150 [ 410.634041][ T7263] ? show_regs_print_info+0x20/0x20 [ 410.639545][ T7263] dump_stack+0x15/0x20 [ 410.644165][ T7263] should_fail+0x3c1/0x510 [ 410.649072][ T7263] __should_failslab+0xa4/0xe0 [ 410.654216][ T7263] should_failslab+0x9/0x20 [ 410.658907][ T7263] slab_pre_alloc_hook+0x3b/0xe0 [ 410.663946][ T7263] ? __build_skb+0x2d/0x310 [ 410.668803][ T7263] kmem_cache_alloc+0x44/0x260 [ 410.674023][ T7263] __build_skb+0x2d/0x310 [ 410.678538][ T7263] ? __kasan_check_write+0x14/0x20 [ 410.683961][ T7263] build_skb+0x24/0x200 [ 410.688217][ T7263] bpf_prog_test_run_skb+0x279/0x1150 [ 410.694127][ T7263] ? __kasan_check_write+0x14/0x20 [ 410.699457][ T7263] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 410.705524][ T7263] bpf_prog_test_run+0x3d5/0x620 [ 410.711103][ T7263] ? bpf_prog_query+0x230/0x230 [ 410.716138][ T7263] ? selinux_bpf+0xce/0xf0 [ 410.721279][ T7263] ? security_bpf+0x82/0xa0 [ 410.726259][ T7263] __sys_bpf+0x52c/0x730 [ 410.730723][ T7263] ? bpf_link_show_fdinfo+0x310/0x310 [ 410.736475][ T7263] ? debug_smp_processor_id+0x17/0x20 [ 410.741870][ T7263] __x64_sys_bpf+0x7c/0x90 [ 410.746491][ T7263] x64_sys_call+0x4b9/0x9a0 [ 410.751008][ T7263] do_syscall_64+0x4c/0xa0 [ 410.755783][ T7263] ? clear_bhb_loop+0x50/0xa0 [ 410.760873][ T7263] ? clear_bhb_loop+0x50/0xa0 [ 410.765781][ T7263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.772556][ T7263] RIP: 0033:0x7fc0385c1be9 [ 410.777369][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.798439][ T7263] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.798470][ T7263] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 410.798484][ T7263] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 410.798497][ T7263] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 410.832712][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.841561][ T7263] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 410.850028][ T7263] [ 410.909600][ T6] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 411.998753][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.037185][ T6] usb 5-1: config 0 descriptor?? [ 412.059570][ T6] usb 5-1: can't set config #0, error -71 [ 412.070685][ T6] usb 5-1: USB disconnect, device number 37 [ 412.136625][ T30] audit: type=1400 audit(2000000129.123:3099): avc: denied { append } for pid=7282 comm="syz.4.2348" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 412.252779][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2350'. [ 412.472865][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 412.494096][ T2362] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 412.510963][ T2362] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 412.656444][ T7305] xt_bpf: check failed: parse error [ 412.739343][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2356'. [ 412.916304][ T7308] tipc: Enabling of bearer rejected, failed to enable media [ 412.924739][ T30] audit: type=1326 audit(2000000129.913:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 412.966938][ T30] audit: type=1326 audit(2000000129.953:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.290682][ T30] audit: type=1326 audit(2000000129.953:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.317221][ T30] audit: type=1326 audit(2000000129.953:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.363419][ T30] audit: type=1326 audit(2000000129.953:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.486686][ T30] audit: type=1326 audit(2000000129.953:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.517658][ T30] audit: type=1326 audit(2000000129.953:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.544694][ T30] audit: type=1326 audit(2000000129.953:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 413.575123][ T30] audit: type=1326 audit(2000000129.953:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.5.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 414.658242][ T7338] block device autoloading is deprecated and will be removed. [ 414.666456][ T7338] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 414.864520][ T7331] netlink: 'syz.0.2362': attribute type 4 has an invalid length. [ 415.735648][ T7358] xt_policy: neither incoming nor outgoing policy selected [ 415.821875][ T7363] tipc: Enabling of bearer rejected, failed to enable media [ 415.947300][ T7373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7373 comm=syz.1.2375 [ 415.980190][ T5613] Bluetooth: hci0: Frame reassembly failed (-84) [ 417.249522][ T5779] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 417.407070][ T7379] syz.5.2378[7379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.407161][ T7379] syz.5.2378[7379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.530839][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 417.530859][ T30] audit: type=1326 audit(2000000134.523:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 417.582223][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2381'. [ 417.627140][ T30] audit: type=1326 audit(2000000134.573:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 417.699743][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.739538][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.761086][ T30] audit: type=1326 audit(2000000134.573:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 417.769444][ T5779] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 418.082628][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.129693][ T5779] usb 5-1: config 0 descriptor?? [ 418.138654][ T5778] Bluetooth: hci0: command 0x1003 tx timeout [ 418.151999][ T30] audit: type=1326 audit(2000000134.573:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.178588][ T2303] Bluetooth: hci0: sending frame failed (-49) [ 418.191857][ T30] audit: type=1326 audit(2000000134.573:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.269217][ T30] audit: type=1326 audit(2000000134.573:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.337732][ T30] audit: type=1326 audit(2000000134.573:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.390263][ T30] audit: type=1326 audit(2000000134.573:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.442678][ T30] audit: type=1326 audit(2000000134.573:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.500817][ T30] audit: type=1326 audit(2000000134.573:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 418.534488][ T7401] hub 9-0:1.0: USB hub found [ 418.546288][ T7401] hub 9-0:1.0: 1 port detected [ 418.859494][ T5779] usb 5-1: string descriptor 0 read error: -71 [ 418.879491][ T5779] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 418.888486][ T5779] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 418.896818][ T5779] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 418.905175][ T5779] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 418.913047][ T5779] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 418.927292][ T5779] usb 5-1: USB disconnect, device number 38 [ 420.192782][ T7425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2391'. [ 421.090460][ T7429] incfs_lookup_dentry err:-14 [ 421.095260][ T7429] incfs: Can't find or create .index dir in ./file0 [ 421.102727][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2392'. [ 421.123483][ T7429] incfs: mount failed -14 [ 421.140025][ T7429] 9pnet: bogus RREAD count (3 > 1) [ 421.155010][ T5778] Bluetooth: hci0: command 0x1001 tx timeout [ 421.161381][ T2303] Bluetooth: hci0: sending frame failed (-49) [ 421.172882][ T7432] fuse: Bad value for 'fd' [ 421.178353][ T7434] netlink: 'syz.3.2396': attribute type 4 has an invalid length. [ 421.251750][ T7436] xt_bpf: check failed: parse error [ 421.787930][ T7454] xt_CT: No such helper "netbios-ns" [ 422.676241][ T7462] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2406'. [ 422.685531][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'. [ 422.790860][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2408'. [ 422.801004][ T7470] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2408'. [ 422.952451][ T7474] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 423.283183][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 423.283202][ T30] audit: type=1400 audit(2000000140.273:3262): avc: denied { getopt } for pid=7480 comm="syz.3.2411" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.408934][ T5778] Bluetooth: hci0: command 0x1009 tx timeout [ 424.210909][ T30] audit: type=1400 audit(2000000141.193:3263): avc: denied { bind } for pid=7500 comm="syz.4.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 424.211347][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 424.244063][ T7496] xt_policy: neither incoming nor outgoing policy selected [ 424.265524][ T7501] netlink: 'syz.4.2419': attribute type 3 has an invalid length. [ 424.300227][ T7504] bridge: RTM_NEWNEIGH with invalid ether address [ 424.336923][ T7510] netlink: 'syz.0.2422': attribute type 6 has an invalid length. [ 424.363860][ T7512] tipc: Enabling of bearer rejected, failed to enable media [ 424.434942][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 424.475401][ T30] audit: type=1326 audit(2000000141.463:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.503038][ T30] audit: type=1326 audit(2000000141.463:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.534897][ T30] audit: type=1326 audit(2000000141.463:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.566922][ T30] audit: type=1326 audit(2000000141.463:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.601746][ T30] audit: type=1326 audit(2000000141.463:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.628349][ T30] audit: type=1326 audit(2000000141.463:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.653441][ T30] audit: type=1326 audit(2000000141.463:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.677853][ T30] audit: type=1326 audit(2000000141.463:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 424.902564][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2435'. [ 426.793266][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2440'. [ 427.736759][ T7567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7567 comm=syz.5.2444 [ 427.761377][ T7568] overlayfs: failed to set xattr on upper [ 427.767550][ T7568] overlayfs: failed to resolve './file0': -2 [ 427.813914][ T7574] netem: change failed [ 427.874740][ T7578] FAULT_INJECTION: forcing a failure. [ 427.874740][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 428.156796][ T5779] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 428.164962][ T7578] CPU: 0 PID: 7578 Comm: syz.1.2448 Not tainted syzkaller #0 [ 428.172556][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.182892][ T7578] Call Trace: [ 428.186660][ T7578] [ 428.189757][ T7578] __dump_stack+0x21/0x30 [ 428.194565][ T7578] dump_stack_lvl+0xee/0x150 [ 428.199588][ T7578] ? show_regs_print_info+0x20/0x20 [ 428.205187][ T7578] dump_stack+0x15/0x20 [ 428.209706][ T7578] should_fail+0x3c1/0x510 [ 428.214400][ T7578] __should_failslab+0xa4/0xe0 [ 428.219357][ T7578] should_failslab+0x9/0x20 [ 428.224235][ T7578] slab_pre_alloc_hook+0x3b/0xe0 [ 428.229500][ T7578] ? __build_skb+0x2d/0x310 [ 428.234015][ T7578] kmem_cache_alloc+0x44/0x260 [ 428.238831][ T7578] __build_skb+0x2d/0x310 [ 428.243850][ T7578] ? __kasan_check_write+0x14/0x20 [ 428.249237][ T7578] build_skb+0x24/0x200 [ 428.253656][ T7578] bpf_prog_test_run_skb+0x279/0x1150 [ 428.259051][ T7578] ? __kasan_check_write+0x14/0x20 [ 428.264348][ T7578] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 428.270539][ T7578] bpf_prog_test_run+0x3d5/0x620 [ 428.275822][ T7578] ? bpf_prog_query+0x230/0x230 [ 428.280767][ T7578] ? selinux_bpf+0xce/0xf0 [ 428.285310][ T7578] ? security_bpf+0x82/0xa0 [ 428.290030][ T7578] __sys_bpf+0x52c/0x730 [ 428.294392][ T7578] ? bpf_link_show_fdinfo+0x310/0x310 [ 428.300027][ T7578] ? debug_smp_processor_id+0x17/0x20 [ 428.305426][ T7578] __x64_sys_bpf+0x7c/0x90 [ 428.310154][ T7578] x64_sys_call+0x4b9/0x9a0 [ 428.315102][ T7578] do_syscall_64+0x4c/0xa0 [ 428.319968][ T7578] ? clear_bhb_loop+0x50/0xa0 [ 428.324905][ T7578] ? clear_bhb_loop+0x50/0xa0 [ 428.329790][ T7578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 428.335771][ T7578] RIP: 0033:0x7f171a324be9 [ 428.340485][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.360479][ T7578] RSP: 002b:00007f1718d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.369080][ T7578] RAX: ffffffffffffffda RBX: 00007f171a55bfa0 RCX: 00007f171a324be9 [ 428.377503][ T7578] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 428.385755][ T7578] RBP: 00007f1718d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 428.394323][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.402660][ T7578] R13: 00007f171a55c038 R14: 00007f171a55bfa0 R15: 00007ffeb83f5dd8 [ 428.411107][ T7578] [ 428.515905][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 428.515923][ T30] audit: type=1326 audit(2000000145.503:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 428.552827][ T30] audit: type=1326 audit(2000000145.503:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 429.507366][ T30] audit: type=1326 audit(2000000145.503:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 429.533013][ T5779] usb 5-1: Using ep0 maxpacket: 16 [ 429.545022][ T7592] 9pnet_virtio: no channels available for device syz [ 429.549859][ T30] audit: type=1326 audit(2000000145.503:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 429.593972][ T30] audit: type=1326 audit(2000000145.503:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 429.631632][ T30] audit: type=1326 audit(2000000145.503:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 429.667376][ T30] audit: type=1400 audit(2000000146.653:3348): avc: denied { write } for pid=7609 comm="syz.1.2458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 429.689477][ T5779] usb 5-1: device descriptor read/all, error -71 [ 430.074858][ T7616] futex_wake_op: syz.0.2456 tries to shift op by 144; fix this program [ 430.084327][ T7616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2456'. [ 430.102073][ T7618] incfs: Options parsing error. -22 [ 430.108129][ T7618] incfs: mount failed -22 [ 430.500880][ T7634] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2464'. [ 431.720660][ T7636] xt_bpf: check failed: parse error [ 431.754962][ T7638] incfs_lookup_dentry err:-14 [ 431.801185][ T7638] incfs: Can't find or create .index dir in ./file0 [ 431.819875][ T5779] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 431.829869][ T7638] incfs: mount failed -14 [ 431.836527][ T7638] 9pnet: bogus RREAD count (3 > 1) [ 433.034009][ T30] audit: type=1400 audit(2000000149.713:3349): avc: denied { map } for pid=7648 comm="syz.5.2471" path="socket:[47162]" dev="sockfs" ino=47162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 433.119598][ T5779] usb 5-1: device descriptor read/all, error -71 [ 433.128339][ T5779] usb usb5-port1: attempt power cycle [ 433.189505][ T30] audit: type=1400 audit(2000000150.153:3350): avc: denied { mount } for pid=7641 comm="syz.0.2468" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 433.215568][ T5778] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 433.301010][ T7656] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 433.309872][ T7656] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 433.393728][ T30] audit: type=1400 audit(2000000150.383:3351): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 435.005348][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 435.314914][ T7685] bridge: RTM_NEWNEIGH with invalid ether address [ 435.389494][ T5778] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 435.407871][ T5778] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 435.801385][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.829515][ T7693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.880235][ T5778] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 435.889449][ T30] audit: type=1400 audit(2000000152.873:3352): avc: denied { bind } for pid=7692 comm="syz.4.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.912483][ T30] audit: type=1400 audit(2000000152.873:3353): avc: denied { setopt } for pid=7692 comm="syz.4.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 436.242451][ T7698] syz.4.2482 uses obsolete (PF_INET,SOCK_PACKET) [ 436.252115][ T7698] netlink: 'syz.4.2482': attribute type 16 has an invalid length. [ 436.488072][ T7698] device ip6erspan0 left promiscuous mode [ 437.254927][ T30] audit: type=1326 audit(2000000153.083:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.327180][ T30] audit: type=1326 audit(2000000153.083:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.348523][ T5778] usb 4-1: USB disconnect, device number 39 [ 437.380285][ T7700] incfs_lookup_dentry err:-14 [ 437.394525][ T30] audit: type=1326 audit(2000000153.093:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.420496][ T7700] incfs: Can't find or create .index dir in ./file0 [ 437.432835][ T30] audit: type=1326 audit(2000000153.093:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.460933][ T7700] incfs: mount failed -14 [ 437.471002][ T7706] 9pnet: bogus RREAD count (3 > 1) [ 437.499047][ T30] audit: type=1326 audit(2000000153.093:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.529266][ T30] audit: type=1326 audit(2000000153.103:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.842240][ T30] audit: type=1326 audit(2000000153.103:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.866896][ T30] audit: type=1326 audit(2000000153.103:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7695 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 437.925551][ T7714] tipc: Started in network mode [ 437.935014][ T7714] tipc: Node identity 00000000000000000000000100000001, cluster identity 4711 [ 437.944586][ T7714] tipc: Enabling of bearer rejected, failed to enable media [ 438.607736][ T5779] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 439.104946][ T7732] xt_CT: No such helper "netbios-ns" [ 439.139505][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.338418][ T7735] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2488'. [ 439.352688][ T7734] incfs_lookup_dentry err:-14 [ 439.358597][ T7734] incfs: Can't find or create .index dir in ./file0 [ 439.370543][ T7734] incfs: mount failed -14 [ 439.388712][ T7734] 9pnet: bogus RREAD count (3 > 1) [ 439.599466][ T5779] usb 2-1: Using ep0 maxpacket: 8 [ 439.919616][ T7740] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2495'. [ 439.959794][ T5779] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 439.971064][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.981478][ T5779] usb 2-1: config 0 descriptor?? [ 440.036880][ T7744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2496'. [ 440.464212][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2497'. [ 441.059494][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 441.541991][ T7761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2501'. [ 441.545083][ T7762] netlink: 'syz.0.2499': attribute type 16 has an invalid length. [ 441.561235][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.570354][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.583195][ T7762] device sit0 left promiscuous mode [ 441.753959][ T7764] overlayfs: unrecognized mount option "/" or missing value [ 441.773374][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 441.781731][ T30] audit: type=1326 audit(2000000157.913:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 442.972300][ T30] audit: type=1326 audit(2000000157.913:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 442.998323][ T30] audit: type=1326 audit(2000000157.913:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.005467][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.024191][ T5779] usbhid 2-1:0.0: can't add hid device: -71 [ 443.037380][ T5779] usbhid: probe of 2-1:0.0 failed with error -71 [ 443.048111][ T5779] usb 2-1: USB disconnect, device number 37 [ 443.054496][ T30] audit: type=1326 audit(2000000157.913:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.083820][ T30] audit: type=1326 audit(2000000157.913:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.088550][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.111978][ T30] audit: type=1326 audit(2000000157.913:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.179173][ T30] audit: type=1326 audit(2000000157.913:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.220977][ T956] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 443.290450][ T30] audit: type=1326 audit(2000000157.913:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.643072][ T60] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 443.653866][ T30] audit: type=1326 audit(2000000157.913:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.678775][ T30] audit: type=1326 audit(2000000157.913:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.0.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 443.879972][ T956] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.099679][ T956] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.129510][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 444.979764][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.614306][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.641799][ T7811] binder: 7810:7811 ioctl c0306201 200000000640 returned -22 [ 445.819578][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.829091][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.838261][ T60] usb 5-1: Product: syz [ 445.842712][ T60] usb 5-1: Manufacturer: syz [ 445.847592][ T60] usb 5-1: SerialNumber: syz [ 446.029538][ T60] usb 5-1: 0:2 : does not exist [ 446.078527][ T60] usb 5-1: USB disconnect, device number 42 [ 446.194160][ T7824] x_tables: unsorted underflow at hook 4 [ 446.619409][ T7837] xt_policy: neither incoming nor outgoing policy selected [ 446.833931][ T7852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 447.059574][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.111536][ T5778] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 447.636414][ T5778] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.339352][ T5778] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.348762][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 448.378292][ T5778] usb 4-1: SerialNumber: syz [ 448.419911][ T5778] cdc_acm 4-1:1.0: skipping garbage [ 448.426300][ T5778] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 448.549765][ T7882] incfs: Can't find or create .index dir in ./file0 [ 448.567388][ T7882] incfs: mount failed -14 [ 449.539862][ T5778] usb 4-1: USB disconnect, device number 40 [ 449.630220][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 449.630238][ T30] audit: type=1400 audit(2000000166.623:3483): avc: denied { listen } for pid=7896 comm="syz.5.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.658487][ T30] audit: type=1400 audit(2000000166.623:3484): avc: denied { connect } for pid=7896 comm="syz.5.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.664770][ T7891] incfs: Can't find or create .index dir in ./file0 [ 449.682288][ T7893] incfs: Can't find or create .index dir in ./file0 [ 449.686427][ T7891] incfs: mount failed -14 [ 449.693430][ T7893] incfs: mount failed -14 [ 449.899705][ T60] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 449.899782][ T333] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 450.738040][ T7915] FAULT_INJECTION: forcing a failure. [ 450.738040][ T7915] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 450.769679][ T7915] CPU: 1 PID: 7915 Comm: syz.3.2550 Not tainted syzkaller #0 [ 450.777425][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.787866][ T7915] Call Trace: [ 450.791353][ T7915] [ 450.794296][ T7915] __dump_stack+0x21/0x30 [ 450.798645][ T7915] dump_stack_lvl+0xee/0x150 [ 450.803422][ T7915] ? show_regs_print_info+0x20/0x20 [ 450.808854][ T7915] ? stack_trace_save+0x98/0xe0 [ 450.814252][ T7915] dump_stack+0x15/0x20 [ 450.818638][ T7915] should_fail+0x3c1/0x510 [ 450.823417][ T7915] should_fail_alloc_page+0x55/0x80 [ 450.828825][ T7915] prepare_alloc_pages+0x156/0x600 [ 450.833952][ T7915] ? __alloc_pages_bulk+0xab0/0xab0 [ 450.839838][ T7915] __alloc_pages+0x10a/0x440 [ 450.844648][ T7915] ? prep_new_page+0x110/0x110 [ 450.849554][ T7915] kmalloc_order+0x4c/0x160 [ 450.854514][ T7915] ? alloc_skb_with_frags+0xa8/0x620 [ 450.860294][ T7915] kmalloc_order_trace+0x18/0xb0 [ 450.866105][ T7915] __kmalloc_track_caller+0x198/0x2c0 [ 450.871506][ T7915] ? kmem_cache_alloc+0xf7/0x260 [ 450.876730][ T7915] ? alloc_skb_with_frags+0xa8/0x620 [ 450.882241][ T7915] __alloc_skb+0x21a/0x740 [ 450.886768][ T7915] alloc_skb_with_frags+0xa8/0x620 [ 450.891982][ T7915] sock_alloc_send_pskb+0x853/0x980 [ 450.897426][ T7915] ? is_bpf_text_address+0x177/0x190 [ 450.902954][ T7915] ? __kernel_text_address+0xa0/0x100 [ 450.909086][ T7915] ? sock_kzfree_s+0x60/0x60 [ 450.913874][ T7915] ? avc_denied+0x1b0/0x1b0 [ 450.919005][ T7915] tun_get_user+0x4e6/0x33c0 [ 450.924103][ T7915] ? tun_do_read+0x1c40/0x1c40 [ 450.928949][ T7915] ? file_has_perm+0x4a1/0x640 [ 450.934087][ T7915] ? putname+0x111/0x160 [ 450.938450][ T7915] ? selinux_file_permission+0x3f4/0x510 [ 450.944187][ T7915] tun_chr_write_iter+0x1eb/0x2e0 [ 450.949317][ T7915] vfs_write+0x802/0xf70 [ 450.953946][ T7915] ? file_end_write+0x1b0/0x1b0 [ 450.959036][ T7915] ? __fget_files+0x2c4/0x320 [ 450.964019][ T7915] ? __fdget_pos+0x1f7/0x380 [ 450.968822][ T7915] ? ksys_write+0x71/0x240 [ 450.974081][ T7915] ksys_write+0x140/0x240 [ 450.978520][ T7915] ? __ia32_sys_read+0x90/0x90 [ 450.983506][ T7915] ? debug_smp_processor_id+0x17/0x20 [ 450.989157][ T7915] __x64_sys_write+0x7b/0x90 [ 450.993785][ T7915] x64_sys_call+0x8ef/0x9a0 [ 450.998580][ T7915] do_syscall_64+0x4c/0xa0 [ 451.003012][ T7915] ? clear_bhb_loop+0x50/0xa0 [ 451.007878][ T7915] ? clear_bhb_loop+0x50/0xa0 [ 451.012881][ T7915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 451.018810][ T7915] RIP: 0033:0x7f4c2c44a69f [ 451.023505][ T7915] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 451.043684][ T7915] RSP: 002b:00007f4c2aeb4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.052336][ T7915] RAX: ffffffffffffffda RBX: 00007f4c2c682fa0 RCX: 00007f4c2c44a69f [ 451.060602][ T7915] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 451.068611][ T7915] RBP: 00007f4c2aeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 451.077291][ T7915] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000001 [ 451.086024][ T7915] R13: 00007f4c2c683038 R14: 00007f4c2c682fa0 R15: 00007ffe6e726a68 [ 451.094425][ T7915] [ 451.158289][ T7916] netlink: 'syz.1.2551': attribute type 4 has an invalid length. [ 451.169705][ T333] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 451.181356][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 451.193480][ T333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.234228][ T7923] incfs: Can't find or create .index dir in ./file0 [ 451.251865][ T333] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 451.252732][ T7923] incfs: mount failed -14 [ 451.268968][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 451.282141][ T333] usb 5-1: config 1 has no interface number 1 [ 451.299791][ T60] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 451.309261][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.603579][ T60] usb 6-1: config 0 descriptor?? [ 451.639643][ T7897] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.771524][ T333] usb 5-1: string descriptor 0 read error: -22 [ 451.978443][ T7934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2556'. [ 452.109584][ T333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.329267][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.946755][ T30] audit: type=1400 audit(2000000169.933:3485): avc: denied { bind } for pid=7896 comm="syz.5.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 452.969090][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2545'. [ 453.020142][ T333] usb 5-1: MIDIStreaming interface descriptor not found [ 454.575920][ T333] usb 5-1: USB disconnect, device number 43 [ 455.149486][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.481402][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 455.489334][ T60] usbhid: probe of 6-1:0.0 failed with error -71 [ 455.823717][ T60] usb 6-1: USB disconnect, device number 22 [ 456.009561][ T7968] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2563'. [ 457.497420][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 457.802503][ T5778] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 458.075779][ T7995] incfs: Can't find or create .index dir in ./file0 [ 458.088735][ T7995] incfs: mount failed -14 [ 458.099429][ T5778] usb 6-1: Using ep0 maxpacket: 8 [ 458.139511][ T5778] usb 6-1: no configurations [ 458.144309][ T5778] usb 6-1: can't read configurations, error -22 [ 458.319409][ T5778] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 458.449407][ T60] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 458.579408][ T5778] usb 6-1: Using ep0 maxpacket: 8 [ 458.620000][ T5778] usb 6-1: no configurations [ 458.639401][ T5778] usb 6-1: can't read configurations, error -22 [ 458.652330][ T5778] usb usb6-port1: attempt power cycle [ 458.719399][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 458.899530][ T60] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 458.908054][ T60] usb 4-1: config 0 has no interface number 0 [ 458.951713][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 458.999983][ T5779] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.079448][ T5778] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 459.089478][ T60] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 459.099058][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.107746][ T60] usb 4-1: Product: syz [ 459.112039][ T60] usb 4-1: Manufacturer: syz [ 459.116730][ T60] usb 4-1: SerialNumber: syz [ 459.127967][ T60] usb 4-1: config 0 descriptor?? [ 459.169971][ T60] smsc95xx v2.0.0 [ 459.179473][ T5778] usb 6-1: Using ep0 maxpacket: 8 [ 459.219568][ T5778] usb 6-1: no configurations [ 459.224494][ T5778] usb 6-1: can't read configurations, error -22 [ 459.329678][ T5779] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.494364][ T5778] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 460.558571][ T8009] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 460.589606][ T8016] FAULT_INJECTION: forcing a failure. [ 460.589606][ T8016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.604354][ T8016] CPU: 0 PID: 8016 Comm: syz.5.2581 Not tainted syzkaller #0 [ 460.612591][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.623185][ T8016] Call Trace: [ 460.626562][ T8016] [ 460.629502][ T8016] __dump_stack+0x21/0x30 [ 460.633927][ T8016] dump_stack_lvl+0xee/0x150 [ 460.638772][ T8016] ? show_regs_print_info+0x20/0x20 [ 460.644239][ T8016] dump_stack+0x15/0x20 [ 460.648569][ T8016] should_fail+0x3c1/0x510 [ 460.653539][ T8016] should_fail_usercopy+0x1a/0x20 [ 460.658659][ T8016] _copy_from_iter+0x21a/0x1050 [ 460.663888][ T8016] ? __kasan_check_write+0x14/0x20 [ 460.669364][ T8016] ? skb_set_owner_w+0x24d/0x370 [ 460.674492][ T8016] ? copy_mc_pipe_to_iter+0x770/0x770 [ 460.680247][ T8016] ? __kernel_text_address+0xa0/0x100 [ 460.685645][ T8016] ? check_stack_object+0x81/0x140 [ 460.691364][ T8016] ? __kasan_check_read+0x11/0x20 [ 460.696387][ T8016] ? __check_object_size+0x2f4/0x3c0 [ 460.702141][ T8016] skb_copy_datagram_from_iter+0xfa/0x6b0 [ 460.708440][ T8016] ? avc_denied+0x1b0/0x1b0 [ 460.713385][ T8016] ? skb_put+0x10e/0x1f0 [ 460.717748][ T8016] tun_get_user+0xc3c/0x33c0 [ 460.722627][ T8016] ? tun_do_read+0x1c40/0x1c40 [ 460.727856][ T8016] ? file_has_perm+0x4a1/0x640 [ 460.732879][ T8016] ? putname+0x111/0x160 [ 460.737302][ T8016] ? selinux_file_permission+0x3f4/0x510 [ 460.743264][ T8016] tun_chr_write_iter+0x1eb/0x2e0 [ 460.748700][ T8016] vfs_write+0x802/0xf70 [ 460.753120][ T8016] ? file_end_write+0x1b0/0x1b0 [ 460.758350][ T8016] ? __fget_files+0x2c4/0x320 [ 460.763211][ T8016] ? __fdget_pos+0x1f7/0x380 [ 460.768340][ T8016] ? ksys_write+0x71/0x240 [ 460.772878][ T8016] ksys_write+0x140/0x240 [ 460.777393][ T8016] ? __ia32_sys_read+0x90/0x90 [ 460.782675][ T8016] ? debug_smp_processor_id+0x17/0x20 [ 460.788591][ T8016] __x64_sys_write+0x7b/0x90 [ 460.793474][ T8016] x64_sys_call+0x8ef/0x9a0 [ 460.798251][ T8016] do_syscall_64+0x4c/0xa0 [ 460.803709][ T8016] ? clear_bhb_loop+0x50/0xa0 [ 460.808735][ T8016] ? clear_bhb_loop+0x50/0xa0 [ 460.813859][ T8016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.819853][ T8016] RIP: 0033:0x7ffbc966569f [ 460.824627][ T8016] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 460.845779][ T8016] RSP: 002b:00007ffbc80cf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 460.854506][ T8016] RAX: ffffffffffffffda RBX: 00007ffbc989dfa0 RCX: 00007ffbc966569f [ 460.862653][ T8016] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 460.870806][ T8016] RBP: 00007ffbc80cf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.879049][ T8016] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000001 [ 460.887220][ T8016] R13: 00007ffbc989e038 R14: 00007ffbc989dfa0 R15: 00007ffcfa7a1348 [ 460.895639][ T8016] [ 461.001909][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2584'. [ 461.025775][ T8023] bridge1: port 1(veth3) entered blocking state [ 461.032931][ T8023] bridge1: port 1(veth3) entered disabled state [ 461.040051][ T8023] device veth3 entered promiscuous mode [ 461.047717][ T8023] device veth0_to_bond left promiscuous mode [ 461.054334][ T8023] bridge1: port 2(veth0_to_bond) entered blocking state [ 461.062401][ T8023] bridge1: port 2(veth0_to_bond) entered disabled state [ 461.698062][ T8023] device veth0_to_bond entered promiscuous mode [ 461.709216][ T5778] usb 6-1: device not accepting address 26, error -71 [ 461.716882][ T5778] usb usb6-port1: unable to enumerate USB device [ 461.781764][ T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 461.793416][ T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 461.875603][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2589'. [ 461.923173][ T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 461.937042][ T60] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 461.957180][ T60] usb 4-1: USB disconnect, device number 41 [ 461.981748][ T30] audit: type=1400 audit(2000000178.973:3486): avc: denied { shutdown } for pid=8044 comm="syz.5.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.793982][ T8063] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2594'. [ 463.552023][ T8062] futex_wake_op: syz.4.2596 tries to shift op by 144; fix this program [ 463.562087][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2596'. [ 463.607401][ T8070] FAULT_INJECTION: forcing a failure. [ 463.607401][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 463.628085][ T8070] CPU: 0 PID: 8070 Comm: syz.0.2598 Not tainted syzkaller #0 [ 463.635951][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.646659][ T8070] Call Trace: [ 463.650984][ T8070] [ 463.654012][ T8070] __dump_stack+0x21/0x30 [ 463.658360][ T8070] dump_stack_lvl+0xee/0x150 [ 463.663248][ T8070] ? show_regs_print_info+0x20/0x20 [ 463.668589][ T8070] dump_stack+0x15/0x20 [ 463.673558][ T8070] should_fail+0x3c1/0x510 [ 463.678541][ T8070] ? skb_ensure_writable+0x2e7/0x460 [ 463.684262][ T8070] __should_failslab+0xa4/0xe0 [ 463.689237][ T8070] should_failslab+0x9/0x20 [ 463.694017][ T8070] slab_pre_alloc_hook+0x3b/0xe0 [ 463.699174][ T8070] ? skb_ensure_writable+0x2e7/0x460 [ 463.705255][ T8070] ? skb_ensure_writable+0x2e7/0x460 [ 463.710834][ T8070] __kmalloc_track_caller+0x6c/0x2c0 [ 463.716622][ T8070] ? skb_ensure_writable+0x2e7/0x460 [ 463.722131][ T8070] ? skb_ensure_writable+0x2e7/0x460 [ 463.728078][ T8070] pskb_expand_head+0x11b/0x11d0 [ 463.733125][ T8070] ? __copy_skb_header+0x437/0x600 [ 463.738640][ T8070] ? __kasan_check_write+0x14/0x20 [ 463.744079][ T8070] ? __skb_clone+0x47a/0x790 [ 463.748871][ T8070] skb_ensure_writable+0x2e7/0x460 [ 463.754199][ T8070] bpf_clone_redirect+0x10b/0x380 [ 463.759568][ T8070] ? stack_trace_save+0x98/0xe0 [ 463.764536][ T8070] bpf_prog_6893982b85ceadf7+0x56/0xac0 [ 463.771188][ T8070] ? __kasan_slab_alloc+0xcf/0xf0 [ 463.776674][ T8070] ? __kasan_slab_alloc+0xbd/0xf0 [ 463.781917][ T8070] ? slab_post_alloc_hook+0x4f/0x2b0 [ 463.787496][ T8070] ? kmem_cache_alloc+0xf7/0x260 [ 463.792823][ T8070] ? __build_skb+0x2d/0x310 [ 463.797625][ T8070] ? build_skb+0x24/0x200 [ 463.802951][ T8070] ? bpf_prog_test_run_skb+0x279/0x1150 [ 463.809482][ T8070] ? bpf_prog_test_run+0x3d5/0x620 [ 463.815042][ T8070] ? __sys_bpf+0x52c/0x730 [ 463.819952][ T8070] ? __x64_sys_bpf+0x7c/0x90 [ 463.824915][ T8070] ? x64_sys_call+0x4b9/0x9a0 [ 463.829717][ T8070] ? do_syscall_64+0x4c/0xa0 [ 463.834324][ T8070] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.841023][ T8070] ? ktime_get+0x12f/0x160 [ 463.845714][ T8070] bpf_test_run+0x33d/0x8d0 [ 463.850237][ T8070] ? convert___skb_to_skb+0x4f0/0x4f0 [ 463.855973][ T8070] ? eth_get_headlen+0x1f0/0x1f0 [ 463.861199][ T8070] ? convert___skb_to_skb+0x41/0x4f0 [ 463.866856][ T8070] bpf_prog_test_run_skb+0x9ec/0x1150 [ 463.872617][ T8070] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 463.878821][ T8070] bpf_prog_test_run+0x3d5/0x620 [ 463.883795][ T8070] ? bpf_prog_query+0x230/0x230 [ 463.889107][ T8070] ? selinux_bpf+0xce/0xf0 [ 463.894175][ T8070] ? security_bpf+0x82/0xa0 [ 463.898788][ T8070] __sys_bpf+0x52c/0x730 [ 463.903325][ T8070] ? bpf_link_show_fdinfo+0x310/0x310 [ 463.909261][ T8070] ? debug_smp_processor_id+0x17/0x20 [ 463.915277][ T8070] __x64_sys_bpf+0x7c/0x90 [ 463.920437][ T8070] x64_sys_call+0x4b9/0x9a0 [ 463.925049][ T8070] do_syscall_64+0x4c/0xa0 [ 463.929749][ T8070] ? clear_bhb_loop+0x50/0xa0 [ 463.934628][ T8070] ? clear_bhb_loop+0x50/0xa0 [ 463.939596][ T8070] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.946368][ T8070] RIP: 0033:0x7fc0385c1be9 [ 463.951237][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.971587][ T8070] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.980725][ T8070] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 463.989075][ T8070] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 463.997468][ T8070] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 464.006572][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.015389][ T8070] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 464.024187][ T8070] [ 464.209480][ T30] audit: type=1326 audit(2000000181.133:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.255688][ T30] audit: type=1326 audit(2000000181.133:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.285503][ T30] audit: type=1326 audit(2000000181.133:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.311427][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.604805][ T30] audit: type=1326 audit(2000000181.143:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.629750][ T30] audit: type=1326 audit(2000000181.143:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.693132][ T30] audit: type=1326 audit(2000000181.143:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.695900][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.762980][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.782772][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.790707][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.821422][ T30] audit: type=1326 audit(2000000181.143:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 464.846622][ T30] audit: type=1326 audit(2000000181.143:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 465.190283][ T8101] syz.5.2609[8101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.190377][ T8101] syz.5.2609[8101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.205012][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.246362][ T30] audit: type=1326 audit(2000000181.143:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.4.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 465.279873][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.328470][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.336142][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.376844][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.394114][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 465.415417][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 465.438087][ T334] bridge1: port 2(veth0_to_bond) entered blocking state [ 465.446146][ T334] bridge1: port 2(veth0_to_bond) entered forwarding state [ 465.469497][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 465.486296][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.503119][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.552580][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 465.570086][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.579199][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.590539][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.603737][ T8124] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 465.612421][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.626168][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.656706][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.680356][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.690905][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.701966][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.712488][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.728927][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.759920][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.778856][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.789870][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.079611][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.096172][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.105126][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.112999][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 466.121375][ T334] bridge1: port 1(veth3) entered blocking state [ 466.128569][ T334] bridge1: port 1(veth3) entered forwarding state [ 466.138313][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 466.211617][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 466.286126][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2622'. [ 466.770890][ T8147] bridge: RTM_NEWNEIGH with invalid ether address [ 467.091577][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 467.091598][ T30] audit: type=1400 audit(2000000184.073:3573): avc: denied { accept } for pid=8155 comm="syz.5.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 467.210762][ T8169] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2631'. [ 467.454241][ T30] audit: type=1400 audit(2000000184.133:3574): avc: denied { write } for pid=8155 comm="syz.5.2629" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 467.819865][ T8173] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2633'. [ 468.922768][ T8178] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8178 comm=syz.3.2635 [ 469.134935][ T30] audit: type=1400 audit(2000000186.123:3575): avc: denied { ioctl } for pid=8176 comm="syz.3.2635" path="socket:[48645]" dev="sockfs" ino=48645 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.179578][ T8186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 469.220458][ T30] audit: type=1400 audit(2000000186.123:3576): avc: denied { accept } for pid=8176 comm="syz.3.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.779861][ T8208] FAULT_INJECTION: forcing a failure. [ 469.779861][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 469.796556][ T8208] CPU: 0 PID: 8208 Comm: syz.1.2643 Not tainted syzkaller #0 [ 469.804687][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.815409][ T8208] Call Trace: [ 469.818993][ T8208] [ 469.822129][ T8208] __dump_stack+0x21/0x30 [ 469.826687][ T8208] dump_stack_lvl+0xee/0x150 [ 469.831557][ T8208] ? show_regs_print_info+0x20/0x20 [ 469.836937][ T8208] dump_stack+0x15/0x20 [ 469.841205][ T8208] should_fail+0x3c1/0x510 [ 469.845897][ T8208] ? skb_ensure_writable+0x2e7/0x460 [ 469.851643][ T8208] __should_failslab+0xa4/0xe0 [ 469.856931][ T8208] should_failslab+0x9/0x20 [ 469.862408][ T8208] slab_pre_alloc_hook+0x3b/0xe0 [ 469.867916][ T8208] ? skb_ensure_writable+0x2e7/0x460 [ 469.873465][ T8208] ? skb_ensure_writable+0x2e7/0x460 [ 469.878923][ T8208] __kmalloc_track_caller+0x6c/0x2c0 [ 469.884500][ T8208] ? skb_ensure_writable+0x2e7/0x460 [ 469.890156][ T8208] ? skb_ensure_writable+0x2e7/0x460 [ 469.895715][ T8208] pskb_expand_head+0x11b/0x11d0 [ 469.900936][ T8208] ? __copy_skb_header+0x437/0x600 [ 469.906430][ T8208] ? __kasan_check_write+0x14/0x20 [ 469.911949][ T8208] ? __skb_clone+0x47a/0x790 [ 469.917029][ T8208] skb_ensure_writable+0x2e7/0x460 [ 469.922423][ T8208] bpf_clone_redirect+0x10b/0x380 [ 469.927896][ T8208] bpf_prog_6893982b85ceadf7+0x56/0x188 [ 469.934246][ T8208] ? __kasan_slab_alloc+0xcf/0xf0 [ 469.939558][ T8208] ? __kasan_slab_alloc+0xbd/0xf0 [ 469.944672][ T8208] ? slab_post_alloc_hook+0x4f/0x2b0 [ 469.950415][ T8208] ? kmem_cache_alloc+0xf7/0x260 [ 469.955896][ T8208] ? __build_skb+0x2d/0x310 [ 469.960681][ T8208] ? build_skb+0x24/0x200 [ 469.965142][ T8208] ? bpf_prog_test_run_skb+0x279/0x1150 [ 469.971243][ T8208] ? bpf_prog_test_run+0x3d5/0x620 [ 469.976372][ T8208] ? __sys_bpf+0x52c/0x730 [ 469.980789][ T8208] ? __x64_sys_bpf+0x7c/0x90 [ 469.985376][ T8208] ? x64_sys_call+0x4b9/0x9a0 [ 469.990047][ T8208] ? do_syscall_64+0x4c/0xa0 [ 469.994827][ T8208] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.001634][ T8208] ? __kasan_check_read+0x11/0x20 [ 470.007196][ T8208] ? bpf_test_timer_continue+0x146/0x4a0 [ 470.012941][ T8208] bpf_test_run+0x33d/0x8d0 [ 470.017541][ T8208] ? convert___skb_to_skb+0x4f0/0x4f0 [ 470.022966][ T8208] ? eth_get_headlen+0x1f0/0x1f0 [ 470.027943][ T8208] ? convert___skb_to_skb+0x41/0x4f0 [ 470.033522][ T8208] bpf_prog_test_run_skb+0x9ec/0x1150 [ 470.039446][ T8208] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 470.045433][ T8208] bpf_prog_test_run+0x3d5/0x620 [ 470.050540][ T8208] ? bpf_prog_query+0x230/0x230 [ 470.055401][ T8208] ? selinux_bpf+0xce/0xf0 [ 470.059842][ T8208] ? security_bpf+0x82/0xa0 [ 470.065153][ T8208] __sys_bpf+0x52c/0x730 [ 470.069405][ T8208] ? bpf_link_show_fdinfo+0x310/0x310 [ 470.075217][ T8208] ? debug_smp_processor_id+0x17/0x20 [ 470.080771][ T8208] __x64_sys_bpf+0x7c/0x90 [ 470.085862][ T8208] x64_sys_call+0x4b9/0x9a0 [ 470.090370][ T8208] do_syscall_64+0x4c/0xa0 [ 470.095034][ T8208] ? clear_bhb_loop+0x50/0xa0 [ 470.099885][ T8208] ? clear_bhb_loop+0x50/0xa0 [ 470.105006][ T8208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.111029][ T8208] RIP: 0033:0x7f171a324be9 [ 470.115716][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.136275][ T8208] RSP: 002b:00007f1718d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.145150][ T8208] RAX: ffffffffffffffda RBX: 00007f171a55bfa0 RCX: 00007f171a324be9 [ 470.154280][ T8208] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 470.162712][ T8208] RBP: 00007f1718d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 470.171995][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.180770][ T8208] R13: 00007f171a55c038 R14: 00007f171a55bfa0 R15: 00007ffeb83f5dd8 [ 470.189376][ T8208] [ 470.548452][ T30] audit: type=1400 audit(2000000188.532:3577): avc: denied { getopt } for pid=8211 comm="syz.5.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 471.139519][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 471.400126][ T8229] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2648'. [ 472.336478][ T8239] xt_NFQUEUE: number of total queues is 0 [ 472.343210][ T8236] xt_bpf: check failed: parse error [ 472.572696][ T30] audit: type=1400 audit(2000000190.562:3578): avc: denied { read } for pid=8247 comm="syz.3.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.216018][ T30] audit: type=1400 audit(2000000191.202:3579): avc: denied { getopt } for pid=8247 comm="syz.3.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.513103][ T8253] futex_wake_op: syz.5.2655 tries to shift op by 144; fix this program [ 473.522205][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2655'. [ 473.556471][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2659'. [ 473.595182][ T30] audit: type=1400 audit(2000000191.582:3580): avc: denied { bind } for pid=8260 comm="syz.3.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.521466][ T30] audit: type=1400 audit(2000000191.612:3581): avc: denied { write } for pid=8260 comm="syz.3.2660" path="socket:[49714]" dev="sockfs" ino=49714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.546922][ T30] audit: type=1400 audit(2000000191.622:3582): avc: denied { accept } for pid=8260 comm="syz.3.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.568590][ T30] audit: type=1400 audit(2000000191.622:3583): avc: denied { read } for pid=8260 comm="syz.3.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.625912][ T8274] FAULT_INJECTION: forcing a failure. [ 474.625912][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 474.638974][ T8274] CPU: 0 PID: 8274 Comm: syz.0.2665 Not tainted syzkaller #0 [ 474.646456][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.657447][ T8274] Call Trace: [ 474.661180][ T8274] [ 474.664141][ T8274] __dump_stack+0x21/0x30 [ 474.668514][ T8274] dump_stack_lvl+0xee/0x150 [ 474.673582][ T8274] ? show_regs_print_info+0x20/0x20 [ 474.678973][ T8274] dump_stack+0x15/0x20 [ 474.683257][ T8274] should_fail+0x3c1/0x510 [ 474.688035][ T8274] __should_failslab+0xa4/0xe0 [ 474.693043][ T8274] should_failslab+0x9/0x20 [ 474.697931][ T8274] slab_pre_alloc_hook+0x3b/0xe0 [ 474.703009][ T8274] ? dst_alloc+0x15c/0x1d0 [ 474.707646][ T8274] kmem_cache_alloc+0x44/0x260 [ 474.712800][ T8274] dst_alloc+0x15c/0x1d0 [ 474.717069][ T8274] ip_route_output_key_hash_rcu+0x11db/0x2060 [ 474.723252][ T8274] ip_route_output_key_hash+0x123/0x1c0 [ 474.728913][ T8274] ? ip_route_input_rcu+0x24b0/0x24b0 [ 474.734656][ T8274] vti6_tnl_xmit+0xd83/0x1870 [ 474.739628][ T8274] ? bpf_trace_run2+0xb5/0x1b0 [ 474.744422][ T8274] ? vti6_dev_uninit+0x340/0x340 [ 474.749565][ T8274] ? __bpf_trace_net_dev_start_xmit+0x25/0x30 [ 474.756024][ T8274] ? perf_trace_net_dev_rx_exit_template+0x2e0/0x2e0 [ 474.763249][ T8274] dev_hard_start_xmit+0x244/0x670 [ 474.769417][ T8274] __dev_queue_xmit+0x17bd/0x2d80 [ 474.774917][ T8274] ? dev_queue_xmit+0x20/0x20 [ 474.780158][ T8274] ? __kasan_check_write+0x14/0x20 [ 474.785566][ T8274] ? skb_release_data+0x1c6/0xa10 [ 474.791289][ T8274] ? __kasan_check_write+0x14/0x20 [ 474.797311][ T8274] ? pskb_expand_head+0xbe6/0x11d0 [ 474.802902][ T8274] dev_queue_xmit+0x17/0x20 [ 474.808434][ T8274] __bpf_redirect+0x68a/0xe60 [ 474.813319][ T8274] bpf_clone_redirect+0x242/0x380 [ 474.818463][ T8274] bpf_prog_6893982b85ceadf7+0x56/0xfb0 [ 474.824238][ T8274] ? __kasan_slab_alloc+0xcf/0xf0 [ 474.829852][ T8274] ? __kasan_slab_alloc+0xbd/0xf0 [ 474.835177][ T8274] ? slab_post_alloc_hook+0x4f/0x2b0 [ 474.840924][ T8274] ? kmem_cache_alloc+0xf7/0x260 [ 474.846347][ T8274] ? __build_skb+0x2d/0x310 [ 474.850967][ T8274] ? build_skb+0x24/0x200 [ 474.855517][ T8274] ? bpf_prog_test_run_skb+0x279/0x1150 [ 474.861199][ T8274] ? bpf_prog_test_run+0x3d5/0x620 [ 474.866413][ T8274] ? __sys_bpf+0x52c/0x730 [ 474.871032][ T8274] ? __x64_sys_bpf+0x7c/0x90 [ 474.875779][ T8274] ? x64_sys_call+0x4b9/0x9a0 [ 474.881003][ T8274] ? do_syscall_64+0x4c/0xa0 [ 474.886042][ T8274] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.892772][ T8274] ? ktime_get+0x12f/0x160 [ 474.897484][ T8274] bpf_test_run+0x33d/0x8d0 [ 474.902267][ T8274] ? convert___skb_to_skb+0x4f0/0x4f0 [ 474.907918][ T8274] ? eth_get_headlen+0x1f0/0x1f0 [ 474.913560][ T8274] ? convert___skb_to_skb+0x41/0x4f0 [ 474.919032][ T8274] bpf_prog_test_run_skb+0x9ec/0x1150 [ 474.924416][ T8274] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 474.930868][ T8274] bpf_prog_test_run+0x3d5/0x620 [ 474.936095][ T8274] ? bpf_prog_query+0x230/0x230 [ 474.941235][ T8274] ? selinux_bpf+0xce/0xf0 [ 474.945835][ T8274] ? security_bpf+0x82/0xa0 [ 474.950520][ T8274] __sys_bpf+0x52c/0x730 [ 474.954941][ T8274] ? bpf_link_show_fdinfo+0x310/0x310 [ 474.960868][ T8274] ? debug_smp_processor_id+0x17/0x20 [ 474.966337][ T8274] __x64_sys_bpf+0x7c/0x90 [ 474.970951][ T8274] x64_sys_call+0x4b9/0x9a0 [ 474.975646][ T8274] do_syscall_64+0x4c/0xa0 [ 474.980152][ T8274] ? clear_bhb_loop+0x50/0xa0 [ 474.984830][ T8274] ? clear_bhb_loop+0x50/0xa0 [ 474.989857][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.996565][ T8274] RIP: 0033:0x7fc0385c1be9 [ 475.001522][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.022358][ T8274] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.030907][ T8274] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 475.038879][ T8274] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 475.047057][ T8274] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.055296][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.063461][ T8274] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 475.071640][ T8274] [ 475.168299][ T8281] FAULT_INJECTION: forcing a failure. [ 475.168299][ T8281] name failslab, interval 1, probability 0, space 0, times 0 [ 475.185510][ T8281] CPU: 1 PID: 8281 Comm: syz.0.2666 Not tainted syzkaller #0 [ 475.193201][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.204087][ T8281] Call Trace: [ 475.207482][ T8281] [ 475.210607][ T8281] __dump_stack+0x21/0x30 [ 475.215562][ T8281] dump_stack_lvl+0xee/0x150 [ 475.220863][ T8281] ? show_regs_print_info+0x20/0x20 [ 475.227217][ T8281] dump_stack+0x15/0x20 [ 475.231804][ T8281] should_fail+0x3c1/0x510 [ 475.236431][ T8281] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.242855][ T8281] __should_failslab+0xa4/0xe0 [ 475.247831][ T8281] should_failslab+0x9/0x20 [ 475.252702][ T8281] slab_pre_alloc_hook+0x3b/0xe0 [ 475.257764][ T8281] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.263485][ T8281] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.269126][ T8281] __kmalloc_track_caller+0x6c/0x2c0 [ 475.274500][ T8281] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.280047][ T8281] ? rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.285602][ T8281] __alloc_skb+0x21a/0x740 [ 475.290018][ T8281] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 475.295410][ T8281] rtnetlink_event+0xd2/0x1a0 [ 475.300617][ T8281] raw_notifier_call_chain+0x90/0x100 [ 475.306270][ T8281] dev_set_mac_address+0x318/0x420 [ 475.311408][ T8281] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 475.317301][ T8281] dev_set_mac_address_user+0x31/0x50 [ 475.322936][ T8281] dev_ifsioc+0x757/0xe70 [ 475.327452][ T8281] ? dev_ioctl+0xd10/0xd10 [ 475.332065][ T8281] ? __kasan_check_write+0x14/0x20 [ 475.337286][ T8281] ? mutex_lock+0x95/0x1a0 [ 475.341983][ T8281] ? wait_for_completion_killable_timeout+0x10/0x10 [ 475.348812][ T8281] ? dev_get_by_name_rcu+0xc8/0xf0 [ 475.353955][ T8281] dev_ioctl+0x560/0xd10 [ 475.358380][ T8281] sock_do_ioctl+0x22e/0x300 [ 475.362985][ T8281] ? sock_show_fdinfo+0xa0/0xa0 [ 475.367926][ T8281] ? selinux_file_ioctl+0x377/0x480 [ 475.373182][ T8281] sock_ioctl+0x4bc/0x6b0 [ 475.377623][ T8281] ? sock_poll+0x3d0/0x3d0 [ 475.382139][ T8281] ? __fget_files+0x2c4/0x320 [ 475.386997][ T8281] ? security_file_ioctl+0x84/0xa0 [ 475.392130][ T8281] ? sock_poll+0x3d0/0x3d0 [ 475.396631][ T8281] __se_sys_ioctl+0x121/0x1a0 [ 475.401323][ T8281] __x64_sys_ioctl+0x7b/0x90 [ 475.406268][ T8281] x64_sys_call+0x2f/0x9a0 [ 475.410771][ T8281] do_syscall_64+0x4c/0xa0 [ 475.415192][ T8281] ? clear_bhb_loop+0x50/0xa0 [ 475.419873][ T8281] ? clear_bhb_loop+0x50/0xa0 [ 475.424898][ T8281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 475.431070][ T8281] RIP: 0033:0x7fc0385c1be9 [ 475.435574][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.456219][ T8281] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.464729][ T8281] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 475.472978][ T8281] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 475.481048][ T8281] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.489516][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.497591][ T8281] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 475.505681][ T8281] [ 476.282900][ T8279] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2663'. [ 476.310040][ T30] audit: type=1326 audit(2000000194.272:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 476.398786][ T30] audit: type=1326 audit(2000000194.272:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 477.306881][ T30] audit: type=1326 audit(2000000194.332:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 477.864842][ T30] audit: type=1326 audit(2000000194.332:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.036214][ T30] audit: type=1326 audit(2000000194.332:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.094657][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 478.119833][ T30] audit: type=1326 audit(2000000194.342:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.159656][ T8317] FAULT_INJECTION: forcing a failure. [ 478.159656][ T8317] name failslab, interval 1, probability 0, space 0, times 0 [ 478.171407][ T30] audit: type=1326 audit(2000000194.342:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.186539][ T8317] CPU: 1 PID: 8317 Comm: syz.3.2677 Not tainted syzkaller #0 [ 478.205104][ T30] audit: type=1326 audit(2000000194.342:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.205567][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.205582][ T8317] Call Trace: [ 478.205588][ T8317] [ 478.232020][ T30] audit: type=1326 audit(2000000194.342:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.241664][ T8317] __dump_stack+0x21/0x30 [ 478.241692][ T8317] dump_stack_lvl+0xee/0x150 [ 478.241711][ T8317] ? show_regs_print_info+0x20/0x20 [ 478.245432][ T30] audit: type=1326 audit(2000000194.342:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.248376][ T8317] ? dev_queue_xmit+0x20/0x20 [ 478.248398][ T8317] dump_stack+0x15/0x20 [ 478.276871][ T30] audit: type=1326 audit(2000000194.342:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.277915][ T8317] should_fail+0x3c1/0x510 [ 478.283110][ T30] audit: type=1326 audit(2000000194.342:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.289059][ T8317] __should_failslab+0xa4/0xe0 [ 478.289086][ T8317] should_failslab+0x9/0x20 [ 478.313733][ T30] audit: type=1326 audit(2000000194.342:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8282 comm="syz.3.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 478.318069][ T8317] slab_pre_alloc_hook+0x3b/0xe0 [ 478.318095][ T8317] ? skb_clone+0x1cf/0x360 [ 478.420578][ T8317] kmem_cache_alloc+0x44/0x260 [ 478.425501][ T8317] skb_clone+0x1cf/0x360 [ 478.429792][ T8317] bpf_clone_redirect+0xa7/0x380 [ 478.434968][ T8317] bpf_prog_6893982b85ceadf7+0x56/0x300 [ 478.440633][ T8317] ? __kasan_slab_alloc+0xcf/0xf0 [ 478.446047][ T8317] ? __kasan_slab_alloc+0xbd/0xf0 [ 478.451369][ T8317] ? slab_post_alloc_hook+0x4f/0x2b0 [ 478.456962][ T8317] ? kmem_cache_alloc+0xf7/0x260 [ 478.462297][ T8317] ? __build_skb+0x2d/0x310 [ 478.466992][ T8317] ? build_skb+0x24/0x200 [ 478.471617][ T8317] ? bpf_prog_test_run_skb+0x279/0x1150 [ 478.477311][ T8317] ? bpf_prog_test_run+0x3d5/0x620 [ 478.483339][ T8317] ? __sys_bpf+0x52c/0x730 [ 478.488261][ T8317] ? __x64_sys_bpf+0x7c/0x90 [ 478.493448][ T8317] ? x64_sys_call+0x4b9/0x9a0 [ 478.498568][ T8317] ? do_syscall_64+0x4c/0xa0 [ 478.503558][ T8317] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.509931][ T8317] ? __kasan_check_read+0x11/0x20 [ 478.515173][ T8317] ? bpf_test_timer_continue+0x146/0x4a0 [ 478.521100][ T8317] bpf_test_run+0x33d/0x8d0 [ 478.525998][ T8317] ? convert___skb_to_skb+0x4f0/0x4f0 [ 478.531407][ T8317] ? eth_get_headlen+0x1f0/0x1f0 [ 478.536552][ T8317] ? convert___skb_to_skb+0x41/0x4f0 [ 478.542000][ T8317] bpf_prog_test_run_skb+0x9ec/0x1150 [ 478.547496][ T8317] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 478.553828][ T8317] bpf_prog_test_run+0x3d5/0x620 [ 478.558965][ T8317] ? bpf_prog_query+0x230/0x230 [ 478.563848][ T8317] ? selinux_bpf+0xce/0xf0 [ 478.568629][ T8317] ? security_bpf+0x82/0xa0 [ 478.573329][ T8317] __sys_bpf+0x52c/0x730 [ 478.577863][ T8317] ? bpf_link_show_fdinfo+0x310/0x310 [ 478.583474][ T8317] ? debug_smp_processor_id+0x17/0x20 [ 478.589170][ T8317] __x64_sys_bpf+0x7c/0x90 [ 478.594162][ T8317] x64_sys_call+0x4b9/0x9a0 [ 478.598796][ T8317] do_syscall_64+0x4c/0xa0 [ 478.604302][ T8317] ? clear_bhb_loop+0x50/0xa0 [ 478.610175][ T8317] ? clear_bhb_loop+0x50/0xa0 [ 478.615074][ T8317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.621171][ T8317] RIP: 0033:0x7f4c2c44bbe9 [ 478.625702][ T8317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.646380][ T8317] RSP: 002b:00007f4c2aeb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.655343][ T8317] RAX: ffffffffffffffda RBX: 00007f4c2c682fa0 RCX: 00007f4c2c44bbe9 [ 478.663350][ T8317] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 478.671520][ T8317] RBP: 00007f4c2aeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 478.679775][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.688717][ T8317] R13: 00007f4c2c683038 R14: 00007f4c2c682fa0 R15: 00007ffe6e726a68 [ 478.697754][ T8317] [ 478.717458][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2680'. [ 479.272982][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2682'. [ 481.287712][ T8356] UDC core: couldn't find an available UDC or it's busy: -16 [ 481.327467][ T8356] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 481.338469][ T8337] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2681'. [ 481.359488][ T8363] tipc: Enabling of bearer rejected, failed to enable media [ 481.569446][ T5778] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 482.004575][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 483.319448][ T5778] usb 5-1: Using ep0 maxpacket: 16 [ 483.420031][ T504] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 483.432348][ T8395] syz.3.2702[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.432408][ T8395] syz.3.2702[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.509464][ T5778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 483.862603][ T8398] futex_wake_op: syz.3.2703 tries to shift op by 144; fix this program [ 483.872528][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2703'. [ 483.882805][ T5778] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 483.892173][ T5778] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.902836][ T5778] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 484.049503][ T504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.061214][ T504] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.071826][ T5778] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.081107][ T504] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 484.090681][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.099278][ T504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.107918][ T5778] usb 5-1: Product: syz [ 484.112362][ T5778] usb 5-1: Manufacturer: syz [ 484.117456][ T5778] usb 5-1: SerialNumber: syz [ 484.122690][ T504] usb 6-1: config 0 descriptor?? [ 484.179472][ T6] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 484.294289][ T8403] FAULT_INJECTION: forcing a failure. [ 484.294289][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 484.307624][ T8403] CPU: 0 PID: 8403 Comm: syz.4.2705 Not tainted syzkaller #0 [ 484.315013][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.325525][ T8403] Call Trace: [ 484.328931][ T8403] [ 484.332121][ T8403] __dump_stack+0x21/0x30 [ 484.336659][ T8403] dump_stack_lvl+0xee/0x150 [ 484.341271][ T8403] ? show_regs_print_info+0x20/0x20 [ 484.346849][ T8403] ? longest_prefix_match+0x43c/0x640 [ 484.352467][ T8403] dump_stack+0x15/0x20 [ 484.356702][ T8403] should_fail+0x3c1/0x510 [ 484.361333][ T8403] __should_failslab+0xa4/0xe0 [ 484.366397][ T8403] should_failslab+0x9/0x20 [ 484.371310][ T8403] slab_pre_alloc_hook+0x3b/0xe0 [ 484.376700][ T8403] ? __alloc_skb+0xe0/0x740 [ 484.381217][ T8403] kmem_cache_alloc+0x44/0x260 [ 484.386259][ T8403] __alloc_skb+0xe0/0x740 [ 484.390623][ T8403] fdb_notify+0x78/0x130 [ 484.395075][ T8403] fdb_delete+0x896/0xb00 [ 484.400336][ T8403] fdb_delete_local+0x3c8/0x480 [ 484.405469][ T8403] br_fdb_changeaddr+0x1b3/0x1c0 [ 484.410774][ T8403] br_device_event+0x335/0x790 [ 484.415933][ T8403] ? br_boolopt_multi_get+0xf0/0xf0 [ 484.421227][ T8403] ? packet_notifier+0x8bc/0x8d0 [ 484.426368][ T8403] ? addrconf_notify+0x37b/0xde0 [ 484.431544][ T8403] raw_notifier_call_chain+0x90/0x100 [ 484.437212][ T8403] dev_set_mac_address+0x318/0x420 [ 484.442316][ T8403] ? dev_pre_changeaddr_notify+0x1c0/0x1c0 [ 484.448290][ T8403] dev_set_mac_address_user+0x31/0x50 [ 484.454453][ T8403] dev_ifsioc+0x757/0xe70 [ 484.458961][ T8403] ? dev_ioctl+0xd10/0xd10 [ 484.463656][ T8403] ? __kasan_check_write+0x14/0x20 [ 484.469684][ T8403] ? mutex_lock+0x95/0x1a0 [ 484.474310][ T8403] ? wait_for_completion_killable_timeout+0x10/0x10 [ 484.481587][ T8403] ? dev_get_by_name_rcu+0xc8/0xf0 [ 484.487022][ T8403] dev_ioctl+0x560/0xd10 [ 484.491599][ T8403] sock_do_ioctl+0x22e/0x300 [ 484.496376][ T8403] ? sock_show_fdinfo+0xa0/0xa0 [ 484.501227][ T8403] ? selinux_file_ioctl+0x377/0x480 [ 484.506625][ T8403] sock_ioctl+0x4bc/0x6b0 [ 484.511418][ T8403] ? sock_poll+0x3d0/0x3d0 [ 484.515936][ T8403] ? __fget_files+0x2c4/0x320 [ 484.521030][ T8403] ? security_file_ioctl+0x84/0xa0 [ 484.526253][ T8403] ? sock_poll+0x3d0/0x3d0 [ 484.531050][ T8403] __se_sys_ioctl+0x121/0x1a0 [ 484.535761][ T8403] __x64_sys_ioctl+0x7b/0x90 [ 484.540353][ T8403] x64_sys_call+0x2f/0x9a0 [ 484.544868][ T8403] do_syscall_64+0x4c/0xa0 [ 484.549555][ T8403] ? clear_bhb_loop+0x50/0xa0 [ 484.554400][ T8403] ? clear_bhb_loop+0x50/0xa0 [ 484.559261][ T8403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.565238][ T8403] RIP: 0033:0x7f08278b2be9 [ 484.569921][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.590225][ T8403] RSP: 002b:00007f082631b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.599176][ T8403] RAX: ffffffffffffffda RBX: 00007f0827ae9fa0 RCX: 00007f08278b2be9 [ 484.607842][ T8403] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 484.616208][ T8403] RBP: 00007f082631b090 R08: 0000000000000000 R09: 0000000000000000 [ 484.624716][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.633026][ T8403] R13: 00007f0827aea038 R14: 00007f0827ae9fa0 R15: 00007fff6f90ea68 [ 484.641411][ T8403] [ 484.685415][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 484.685434][ T30] audit: type=1326 audit(2000000202.672:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.718392][ T30] audit: type=1326 audit(2000000202.672:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.745692][ T30] audit: type=1326 audit(2000000202.682:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.772071][ T30] audit: type=1326 audit(2000000202.682:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.797732][ T30] audit: type=1326 audit(2000000202.682:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.799807][ T5778] usb 5-1: 0:2 : does not exist [ 484.828869][ T6] usb 2-1: Invalid ep0 maxpacket: 16 [ 484.834735][ T30] audit: type=1326 audit(2000000202.682:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.859928][ T30] audit: type=1326 audit(2000000202.682:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.889648][ T5778] usb 5-1: USB disconnect, device number 44 [ 484.900039][ T30] audit: type=1326 audit(2000000202.682:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.925471][ T30] audit: type=1326 audit(2000000202.682:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.951954][ T30] audit: type=1326 audit(2000000202.682:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c44bbe9 code=0x7ffc0000 [ 484.989579][ T6] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 485.340211][ T7947] udevd[7947]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 485.409442][ T6] usb 2-1: Invalid ep0 maxpacket: 16 [ 485.415169][ T6] usb usb2-port1: attempt power cycle [ 485.686581][ T8417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2709'. [ 486.801945][ T8421] fuse: Unknown parameter '0x0000000000000004' [ 486.809418][ T504] uclogic 0003:256C:006D.001A: failed retrieving Huion firmware version: -71 [ 486.818584][ T504] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 486.826604][ T504] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 486.836469][ T504] usb 6-1: USB disconnect, device number 27 [ 486.851103][ T6] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 486.860185][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 487.089466][ T6] usb 2-1: device descriptor read/8, error -71 [ 487.299613][ T6] usb 2-1: device descriptor read/8, error -71 [ 489.121399][ T8475] netlink: 'syz.3.2730': attribute type 32 has an invalid length. [ 489.130595][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2730'. [ 489.249424][ T6] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 490.291378][ T8496] xt_bpf: check failed: parse error [ 490.467757][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 490.467775][ T30] audit: type=1400 audit(2000000208.452:3642): avc: denied { write } for pid=8505 comm="syz.1.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 490.549498][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.563388][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.574081][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.590375][ T6] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 490.601693][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.611299][ T6] usb 5-1: config 0 descriptor?? [ 490.795542][ T8511] tipc: Started in network mode [ 490.801059][ T8511] tipc: Node identity 00000000000000000000048000000001, cluster identity 4711 [ 490.811312][ T8511] tipc: Enabling of bearer rejected, failed to enable media [ 490.852442][ T30] audit: type=1400 audit(2000000208.842:3643): avc: denied { write } for pid=8462 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 491.038836][ T8528] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2743'. [ 491.080400][ T6] acrux 0003:1A34:0802.001B: item fetching failed at offset 1/5 [ 491.093660][ T6] acrux 0003:1A34:0802.001B: parse failed [ 491.106625][ T6] acrux: probe of 0003:1A34:0802.001B failed with error -22 [ 491.298073][ T60] usb 5-1: USB disconnect, device number 45 [ 491.917366][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2749'. [ 492.959403][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2751'. [ 493.032195][ T30] audit: type=1400 audit(2000000211.022:3644): avc: denied { getopt } for pid=8549 comm="syz.3.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.160562][ T8553] syz.5.2754[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.160656][ T8553] syz.5.2754[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.485629][ T8567] incfs: Options parsing error. -22 [ 494.504196][ T8567] incfs: mount failed -22 [ 494.552547][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2760'. [ 494.800688][ T8570] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2759'. [ 494.909436][ T8590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=8590 comm=syz.1.2765 [ 494.961008][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 495.540828][ T30] audit: type=1400 audit(2000000213.532:3646): avc: denied { mounton } for pid=8608 comm="syz.4.2770" path="/542/file0" dev="tmpfs" ino=2882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 495.608811][ T30] audit: type=1400 audit(2000000213.532:3645): avc: denied { mounton } for pid=8608 comm="syz.4.2770" path="/542/file0" dev="tmpfs" ino=2882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 496.442629][ T8625] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2774'. [ 497.295748][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2781'. [ 498.790222][ T8654] FAULT_INJECTION: forcing a failure. [ 498.790222][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 498.803297][ T8654] CPU: 1 PID: 8654 Comm: syz.5.2785 Not tainted syzkaller #0 [ 498.811717][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.822448][ T8654] Call Trace: [ 498.825837][ T8654] [ 498.828956][ T8654] __dump_stack+0x21/0x30 [ 498.833431][ T8654] dump_stack_lvl+0xee/0x150 [ 498.838248][ T8654] ? show_regs_print_info+0x20/0x20 [ 498.843767][ T8654] ? kfree_skb+0xc1/0x2f0 [ 498.848494][ T8654] ? dev_hard_start_xmit+0x244/0x670 [ 498.853885][ T8654] ? __dev_queue_xmit+0x17bd/0x2d80 [ 498.859730][ T8654] ? dev_queue_xmit+0x17/0x20 [ 498.864698][ T8654] ? bpf_clone_redirect+0x242/0x380 [ 498.870199][ T8654] dump_stack+0x15/0x20 [ 498.874565][ T8654] should_fail+0x3c1/0x510 [ 498.879403][ T8654] __should_failslab+0xa4/0xe0 [ 498.884199][ T8654] should_failslab+0x9/0x20 [ 498.889068][ T8654] slab_pre_alloc_hook+0x3b/0xe0 [ 498.894176][ T8654] ? dst_alloc+0x15c/0x1d0 [ 498.898617][ T8654] kmem_cache_alloc+0x44/0x260 [ 498.903409][ T8654] dst_alloc+0x15c/0x1d0 [ 498.907885][ T8654] ip_route_output_key_hash_rcu+0x11db/0x2060 [ 498.913975][ T8654] ip_route_output_key_hash+0x123/0x1c0 [ 498.919542][ T8654] ? ip_route_input_rcu+0x24b0/0x24b0 [ 498.925125][ T8654] vti6_tnl_xmit+0xd83/0x1870 [ 498.930008][ T8654] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 498.935974][ T8654] ? trie_delete_elem+0x40b/0x710 [ 498.941248][ T8654] ? vti6_dev_uninit+0x340/0x340 [ 498.946569][ T8654] ? stack_trace_save+0x98/0xe0 [ 498.951624][ T8654] ? netif_skb_features+0x831/0xb90 [ 498.957452][ T8654] dev_hard_start_xmit+0x244/0x670 [ 498.962681][ T8654] __dev_queue_xmit+0x17bd/0x2d80 [ 498.968374][ T8654] ? dev_queue_xmit+0x20/0x20 [ 498.973350][ T8654] ? __kasan_check_write+0x14/0x20 [ 498.979120][ T8654] ? skb_release_data+0x1c6/0xa10 [ 498.984711][ T8654] ? __kasan_check_write+0x14/0x20 [ 498.990077][ T8654] ? pskb_expand_head+0xbe6/0x11d0 [ 498.995773][ T8654] dev_queue_xmit+0x17/0x20 [ 499.000766][ T8654] __bpf_redirect+0x68a/0xe60 [ 499.005747][ T8654] bpf_clone_redirect+0x242/0x380 [ 499.011175][ T8654] bpf_prog_6893982b85ceadf7+0x56/0x8e8 [ 499.018070][ T8654] ? __kasan_slab_alloc+0xcf/0xf0 [ 499.023453][ T8654] ? __kasan_slab_alloc+0xbd/0xf0 [ 499.028772][ T8654] ? slab_post_alloc_hook+0x4f/0x2b0 [ 499.034125][ T8654] ? kmem_cache_alloc+0xf7/0x260 [ 499.039532][ T8654] ? __build_skb+0x2d/0x310 [ 499.044064][ T8654] ? build_skb+0x24/0x200 [ 499.048720][ T8654] ? bpf_prog_test_run_skb+0x279/0x1150 [ 499.054462][ T8654] ? bpf_prog_test_run+0x3d5/0x620 [ 499.059602][ T8654] ? __sys_bpf+0x52c/0x730 [ 499.064230][ T8654] ? __x64_sys_bpf+0x7c/0x90 [ 499.068928][ T8654] ? x64_sys_call+0x4b9/0x9a0 [ 499.073824][ T8654] ? do_syscall_64+0x4c/0xa0 [ 499.078772][ T8654] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.085453][ T8654] ? __kasan_check_read+0x11/0x20 [ 499.090784][ T8654] ? bpf_test_timer_continue+0x146/0x4a0 [ 499.096801][ T8654] bpf_test_run+0x33d/0x8d0 [ 499.101523][ T8654] ? convert___skb_to_skb+0x4f0/0x4f0 [ 499.107111][ T8654] ? eth_get_headlen+0x1f0/0x1f0 [ 499.112166][ T8654] ? convert___skb_to_skb+0x41/0x4f0 [ 499.118195][ T8654] bpf_prog_test_run_skb+0x9ec/0x1150 [ 499.123696][ T8654] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 499.129909][ T8654] bpf_prog_test_run+0x3d5/0x620 [ 499.135055][ T8654] ? bpf_prog_query+0x230/0x230 [ 499.140842][ T8654] ? selinux_bpf+0xce/0xf0 [ 499.145471][ T8654] ? security_bpf+0x82/0xa0 [ 499.150104][ T8654] __sys_bpf+0x52c/0x730 [ 499.154528][ T8654] ? bpf_link_show_fdinfo+0x310/0x310 [ 499.160337][ T8654] ? debug_smp_processor_id+0x17/0x20 [ 499.165825][ T8654] __x64_sys_bpf+0x7c/0x90 [ 499.170552][ T8654] x64_sys_call+0x4b9/0x9a0 [ 499.175533][ T8654] do_syscall_64+0x4c/0xa0 [ 499.180161][ T8654] ? clear_bhb_loop+0x50/0xa0 [ 499.184856][ T8654] ? clear_bhb_loop+0x50/0xa0 [ 499.189712][ T8654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.195955][ T8654] RIP: 0033:0x7ffbc9666be9 [ 499.201127][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.222961][ T8654] RSP: 002b:00007ffbc80cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.231742][ T8654] RAX: ffffffffffffffda RBX: 00007ffbc989dfa0 RCX: 00007ffbc9666be9 [ 499.240241][ T8654] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 499.248862][ T8654] RBP: 00007ffbc80cf090 R08: 0000000000000000 R09: 0000000000000000 [ 499.258165][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.267122][ T8654] R13: 00007ffbc989e038 R14: 00007ffbc989dfa0 R15: 00007ffcfa7a1348 [ 499.276524][ T8654] [ 499.568084][ T30] audit: type=1400 audit(2000000217.552:3647): avc: denied { bind } for pid=8672 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 499.589305][ T30] audit: type=1400 audit(2000000217.572:3648): avc: denied { node_bind } for pid=8672 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 499.615861][ T30] audit: type=1400 audit(2000000217.602:3649): avc: denied { write } for pid=8672 comm="syz.1.2791" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 499.636628][ T8673] 9pnet: Insufficient options for proto=fd [ 499.643576][ T30] audit: type=1400 audit(2000000217.602:3650): avc: denied { read } for pid=8672 comm="syz.1.2791" dev="sockfs" ino=51415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.609450][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2798'. [ 500.698474][ T8703] syz.3.2800[8703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.698574][ T8703] syz.3.2800[8703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.776936][ T8709] FAULT_INJECTION: forcing a failure. [ 500.776936][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 500.802483][ T8709] CPU: 0 PID: 8709 Comm: syz.3.2802 Not tainted syzkaller #0 [ 500.810718][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.821755][ T8709] Call Trace: [ 500.825683][ T8709] [ 500.828996][ T8709] __dump_stack+0x21/0x30 [ 500.834399][ T8709] dump_stack_lvl+0xee/0x150 [ 500.839101][ T8709] ? show_regs_print_info+0x20/0x20 [ 500.844309][ T8709] dump_stack+0x15/0x20 [ 500.848678][ T8709] should_fail+0x3c1/0x510 [ 500.853298][ T8709] __should_failslab+0xa4/0xe0 [ 500.858151][ T8709] should_failslab+0x9/0x20 [ 500.862663][ T8709] slab_pre_alloc_hook+0x3b/0xe0 [ 500.867694][ T8709] ? dst_alloc+0x15c/0x1d0 [ 500.872115][ T8709] kmem_cache_alloc+0x44/0x260 [ 500.877159][ T8709] dst_alloc+0x15c/0x1d0 [ 500.881420][ T8709] ip_route_output_key_hash_rcu+0x11db/0x2060 [ 500.887602][ T8709] ip_route_output_key_hash+0x123/0x1c0 [ 500.893380][ T8709] ? ip_route_input_rcu+0x24b0/0x24b0 [ 500.899052][ T8709] vti6_tnl_xmit+0xd83/0x1870 [ 500.904282][ T8709] ? __kernel_text_address+0xa0/0x100 [ 500.909982][ T8709] ? bpf_trace_run2+0xb5/0x1b0 [ 500.915060][ T8709] ? vti6_dev_uninit+0x340/0x340 [ 500.920018][ T8709] ? stack_trace_save+0x98/0xe0 [ 500.925069][ T8709] ? __bpf_trace_net_dev_start_xmit+0x25/0x30 [ 500.931347][ T8709] ? perf_trace_net_dev_rx_exit_template+0x2e0/0x2e0 [ 500.938458][ T8709] dev_hard_start_xmit+0x244/0x670 [ 500.943752][ T8709] __dev_queue_xmit+0x17bd/0x2d80 [ 500.948880][ T8709] ? dev_queue_xmit+0x20/0x20 [ 500.953724][ T8709] ? __kasan_check_write+0x14/0x20 [ 500.958919][ T8709] ? skb_release_data+0x1c6/0xa10 [ 500.964048][ T8709] ? __kasan_check_write+0x14/0x20 [ 500.969247][ T8709] ? pskb_expand_head+0xbe6/0x11d0 [ 500.974474][ T8709] dev_queue_xmit+0x17/0x20 [ 500.979163][ T8709] __bpf_redirect+0x68a/0xe60 [ 500.984214][ T8709] bpf_clone_redirect+0x242/0x380 [ 500.989742][ T8709] bpf_prog_6893982b85ceadf7+0x56/0xaec [ 500.995825][ T8709] ? __kasan_slab_alloc+0xcf/0xf0 [ 501.001040][ T8709] ? __kasan_slab_alloc+0xbd/0xf0 [ 501.006490][ T8709] ? slab_post_alloc_hook+0x4f/0x2b0 [ 501.012501][ T8709] ? kmem_cache_alloc+0xf7/0x260 [ 501.017996][ T8709] ? __build_skb+0x2d/0x310 [ 501.022872][ T8709] ? build_skb+0x24/0x200 [ 501.027398][ T8709] ? bpf_prog_test_run_skb+0x279/0x1150 [ 501.033780][ T8709] ? bpf_prog_test_run+0x3d5/0x620 [ 501.038896][ T8709] ? __sys_bpf+0x52c/0x730 [ 501.043395][ T8709] ? __x64_sys_bpf+0x7c/0x90 [ 501.048349][ T8709] ? x64_sys_call+0x4b9/0x9a0 [ 501.053119][ T8709] ? do_syscall_64+0x4c/0xa0 [ 501.057708][ T8709] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.063956][ T8709] ? __kasan_check_read+0x11/0x20 [ 501.069430][ T8709] ? bpf_test_timer_continue+0x146/0x4a0 [ 501.075178][ T8709] bpf_test_run+0x33d/0x8d0 [ 501.080150][ T8709] ? convert___skb_to_skb+0x4f0/0x4f0 [ 501.086083][ T8709] ? eth_get_headlen+0x1f0/0x1f0 [ 501.091107][ T8709] ? convert___skb_to_skb+0x41/0x4f0 [ 501.097106][ T8709] bpf_prog_test_run_skb+0x9ec/0x1150 [ 501.102665][ T8709] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 501.108965][ T8709] bpf_prog_test_run+0x3d5/0x620 [ 501.114193][ T8709] ? bpf_prog_query+0x230/0x230 [ 501.119390][ T8709] ? selinux_bpf+0xce/0xf0 [ 501.124616][ T8709] ? security_bpf+0x82/0xa0 [ 501.130004][ T8709] __sys_bpf+0x52c/0x730 [ 501.134269][ T8709] ? bpf_link_show_fdinfo+0x310/0x310 [ 501.140266][ T8709] ? debug_smp_processor_id+0x17/0x20 [ 501.145791][ T8709] __x64_sys_bpf+0x7c/0x90 [ 501.150640][ T8709] x64_sys_call+0x4b9/0x9a0 [ 501.155315][ T8709] do_syscall_64+0x4c/0xa0 [ 501.159819][ T8709] ? clear_bhb_loop+0x50/0xa0 [ 501.164784][ T8709] ? clear_bhb_loop+0x50/0xa0 [ 501.169902][ T8709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.176729][ T8709] RIP: 0033:0x7f4c2c44bbe9 [ 501.181423][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.202111][ T8709] RSP: 002b:00007f4c2aeb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 501.210961][ T8709] RAX: ffffffffffffffda RBX: 00007f4c2c682fa0 RCX: 00007f4c2c44bbe9 [ 501.219985][ T8709] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 501.228736][ T8709] RBP: 00007f4c2aeb4090 R08: 0000000000000000 R09: 0000000000000000 [ 501.237707][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.246134][ T8709] R13: 00007f4c2c683038 R14: 00007f4c2c682fa0 R15: 00007ffe6e726a68 [ 501.255463][ T8709] [ 501.266001][ T8714] bridge: RTM_NEWNEIGH with invalid ether address [ 501.279258][ T8710] FAULT_INJECTION: forcing a failure. [ 501.279258][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 501.292930][ T8710] CPU: 0 PID: 8710 Comm: syz.5.2803 Not tainted syzkaller #0 [ 501.300596][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.311460][ T8710] Call Trace: [ 501.315182][ T8710] [ 501.318458][ T8710] __dump_stack+0x21/0x30 [ 501.323260][ T8710] dump_stack_lvl+0xee/0x150 [ 501.328046][ T8710] ? show_regs_print_info+0x20/0x20 [ 501.333432][ T8710] dump_stack+0x15/0x20 [ 501.337759][ T8710] should_fail+0x3c1/0x510 [ 501.342340][ T8710] __should_failslab+0xa4/0xe0 [ 501.347295][ T8710] should_failslab+0x9/0x20 [ 501.352150][ T8710] slab_pre_alloc_hook+0x3b/0xe0 [ 501.357279][ T8710] ? dst_alloc+0x15c/0x1d0 [ 501.361789][ T8710] kmem_cache_alloc+0x44/0x260 [ 501.366639][ T8710] ? ipv6_sysctl_rtcache_flush+0x100/0x100 [ 501.372739][ T8710] dst_alloc+0x15c/0x1d0 [ 501.377095][ T8710] ip6_pol_route+0x960/0x1110 [ 501.381783][ T8710] ? fib6_table_lookup+0x9f0/0x9f0 [ 501.387588][ T8710] ? fib6_select_path+0x107/0x620 [ 501.392900][ T8710] ip6_pol_route_output+0x51/0x80 [ 501.398291][ T8710] fib6_rule_lookup+0x1c6/0x560 [ 501.403628][ T8710] ? ip6_route_output_flags_noref+0x340/0x340 [ 501.409980][ T8710] ? fib6_lookup+0x2a0/0x2a0 [ 501.414906][ T8710] ip6_route_output_flags_noref+0x283/0x340 [ 501.421080][ T8710] ip6_route_output_flags+0x3c/0x200 [ 501.426892][ T8710] ip6_sk_update_pmtu+0x27e/0x6e0 [ 501.432836][ T8710] ? __ip6_rt_update_pmtu+0x7e0/0x7e0 [ 501.438435][ T8710] ? icmpv6_err_convert+0xfd/0x1d0 [ 501.444095][ T8710] raw6_icmp_error+0x711/0xab0 [ 501.449402][ T8710] ? raw6_local_deliver+0xf10/0xf10 [ 501.454773][ T8710] ? icmpv6_err+0x1f6/0x270 [ 501.459609][ T8710] icmpv6_notify+0x32e/0x5a0 [ 501.464407][ T8710] ? icmpv6_rcv+0x1950/0x1950 [ 501.469097][ T8710] ? pskb_may_pull+0xe0/0xe0 [ 501.473964][ T8710] ? __kasan_check_read+0x11/0x20 [ 501.479167][ T8710] ? pskb_may_pull+0x6d/0xe0 [ 501.483952][ T8710] icmpv6_rcv+0x10be/0x1950 [ 501.489136][ T8710] ? rawv6_mh_filter_unregister+0x20/0x20 [ 501.495138][ T8710] ip6_protocol_deliver_rcu+0xaae/0x1410 [ 501.501267][ T8710] ip6_input+0xd3/0x1e0 [ 501.505600][ T8710] ? ip6_protocol_deliver_rcu+0x1410/0x1410 [ 501.511785][ T8710] ? ip6_input+0x1e0/0x1e0 [ 501.516992][ T8710] ip6_mc_input+0x20d/0x2a0 [ 501.521606][ T8710] ip6_rcv_finish+0x18d/0x360 [ 501.526646][ T8710] ipv6_rcv+0xe9/0x210 [ 501.531005][ T8710] ? irqentry_exit+0x37/0x40 [ 501.535606][ T8710] ? ip6_rcv_finish+0x360/0x360 [ 501.540629][ T8710] ? refcount_add+0x80/0x80 [ 501.545402][ T8710] ? _copy_from_iter+0x181/0x1050 [ 501.551211][ T8710] ? ip6_rcv_finish+0x360/0x360 [ 501.556336][ T8710] __netif_receive_skb+0xc8/0x280 [ 501.561457][ T8710] ? _copy_from_iter+0x4ae/0x1050 [ 501.566875][ T8710] ? __kasan_check_write+0x14/0x20 [ 501.572256][ T8710] netif_receive_skb+0x98/0x3d0 [ 501.577477][ T8710] ? netif_receive_skb_core+0x100/0x100 [ 501.583115][ T8710] ? __kernel_text_address+0xa0/0x100 [ 501.588839][ T8710] ? virtio_net_hdr_to_skb+0x9df/0x11c0 [ 501.594699][ T8710] tun_rx_batched+0x5e8/0x710 [ 501.599652][ T8710] ? local_bh_enable+0x30/0x30 [ 501.604419][ T8710] tun_get_user+0x279c/0x33c0 [ 501.609271][ T8710] ? tun_do_read+0x1c40/0x1c40 [ 501.614121][ T8710] ? file_has_perm+0x4a1/0x640 [ 501.619154][ T8710] ? putname+0x111/0x160 [ 501.623918][ T8710] ? selinux_file_permission+0x3f4/0x510 [ 501.629560][ T8710] tun_chr_write_iter+0x1eb/0x2e0 [ 501.634775][ T8710] vfs_write+0x802/0xf70 [ 501.639234][ T8710] ? file_end_write+0x1b0/0x1b0 [ 501.644548][ T8710] ? __fget_files+0x2c4/0x320 [ 501.649226][ T8710] ? __fdget_pos+0x1f7/0x380 [ 501.653899][ T8710] ? ksys_write+0x71/0x240 [ 501.658380][ T8710] ksys_write+0x140/0x240 [ 501.662989][ T8710] ? __ia32_sys_read+0x90/0x90 [ 501.667925][ T8710] ? debug_smp_processor_id+0x17/0x20 [ 501.673688][ T8710] __x64_sys_write+0x7b/0x90 [ 501.678362][ T8710] x64_sys_call+0x8ef/0x9a0 [ 501.682865][ T8710] do_syscall_64+0x4c/0xa0 [ 501.687607][ T8710] ? clear_bhb_loop+0x50/0xa0 [ 501.692504][ T8710] ? clear_bhb_loop+0x50/0xa0 [ 501.697450][ T8710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.703797][ T8710] RIP: 0033:0x7ffbc966569f [ 501.708687][ T8710] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 501.729077][ T8710] RSP: 002b:00007ffbc80cf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 501.737662][ T8710] RAX: ffffffffffffffda RBX: 00007ffbc989dfa0 RCX: 00007ffbc966569f [ 501.745790][ T8710] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 501.754026][ T8710] RBP: 00007ffbc80cf090 R08: 0000000000000000 R09: 0000000000000000 [ 501.762379][ T8710] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000001 [ 501.770617][ T8710] R13: 00007ffbc989e038 R14: 00007ffbc989dfa0 R15: 00007ffcfa7a1348 [ 501.779465][ T8710] [ 501.884209][ T8725] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2809'. [ 501.968164][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2807'. [ 502.043662][ T8737] incfs: Options parsing error. -22 [ 502.049414][ T8737] incfs: mount failed -22 [ 503.000746][ T8744] syz.1.2814[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.000837][ T8744] syz.1.2814[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.419445][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 504.514487][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.522644][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.535099][ T8761] device bridge_slave_1 left promiscuous mode [ 504.542643][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.559801][ T8761] device bridge_slave_0 left promiscuous mode [ 504.566606][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.826927][ T8765] xt_CT: No such helper "netbios-ns" [ 506.136153][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2822'. [ 506.419453][ T8773] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2819'. [ 506.455151][ T8776] netlink: 'syz.3.2823': attribute type 32 has an invalid length. [ 506.471225][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2823'. [ 507.542693][ T8805] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 508.153648][ T8816] syz.0.2835[8816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.153752][ T8816] syz.0.2835[8816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.279252][ T333] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 508.998230][ T30] audit: type=1326 audit(2000000226.982:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 509.024403][ T30] audit: type=1326 audit(2000000226.982:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0385c1be9 code=0x7ffc0000 [ 509.060330][ T30] audit: type=1400 audit(2000000227.052:3653): avc: denied { mount } for pid=8815 comm="syz.0.2835" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 509.094997][ T30] audit: type=1400 audit(2000000227.082:3654): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 509.151442][ T8832] xt_bpf: check failed: parse error [ 509.173590][ T8834] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2844'. [ 509.289416][ T333] usb 4-1: Using ep0 maxpacket: 8 [ 509.331831][ T8840] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 509.409501][ T333] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 509.429406][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.452727][ T333] usb 4-1: config 0 descriptor?? [ 509.458722][ T30] audit: type=1326 audit(2000000227.442:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 509.535511][ T30] audit: type=1326 audit(2000000227.442:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 509.593354][ T30] audit: type=1326 audit(2000000227.472:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 509.618448][ T30] audit: type=1326 audit(2000000227.472:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 509.643702][ T30] audit: type=1326 audit(2000000227.472:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 509.668905][ T30] audit: type=1326 audit(2000000227.482:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8850 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f171a324be9 code=0x7ffc0000 [ 510.887698][ T8858] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 510.932513][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.940285][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.949434][ T333] usbhid 4-1:0.0: can't add hid device: -71 [ 510.955718][ T333] usbhid: probe of 4-1:0.0 failed with error -71 [ 510.965153][ T333] usb 4-1: USB disconnect, device number 42 [ 511.385065][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2852'. [ 512.795203][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2855'. [ 513.724091][ T333] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 514.290265][ T8899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2860'. [ 514.301955][ T8903] capability: warning: `syz.4.2862' uses 32-bit capabilities (legacy support in use) [ 514.348108][ T8906] netlink: 'syz.5.2863': attribute type 32 has an invalid length. [ 514.360581][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2863'. [ 514.513605][ T8912] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 514.527637][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 514.527655][ T30] audit: type=1400 audit(2000000232.522:3752): avc: denied { relabelto } for pid=8911 comm="syz.0.2866" name="" dev="pipefs" ino=50972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 514.813723][ T333] usb 4-1: device not accepting address 43, error -71 [ 515.591232][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'. [ 515.939452][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 517.007798][ T8935] FAULT_INJECTION: forcing a failure. [ 517.007798][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 517.039453][ T8935] CPU: 0 PID: 8935 Comm: syz.0.2873 Not tainted syzkaller #0 [ 517.046983][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.057685][ T8935] Call Trace: [ 517.061244][ T8935] [ 517.064534][ T8935] __dump_stack+0x21/0x30 [ 517.069083][ T8935] dump_stack_lvl+0xee/0x150 [ 517.074029][ T8935] ? show_regs_print_info+0x20/0x20 [ 517.079622][ T8935] dump_stack+0x15/0x20 [ 517.084033][ T8935] should_fail+0x3c1/0x510 [ 517.088841][ T8935] __should_failslab+0xa4/0xe0 [ 517.093642][ T8935] should_failslab+0x9/0x20 [ 517.098979][ T8935] slab_pre_alloc_hook+0x3b/0xe0 [ 517.104127][ T8935] ? ep_insert+0x4a0/0x1570 [ 517.108827][ T8935] kmem_cache_alloc+0x44/0x260 [ 517.113702][ T8935] ep_insert+0x4a0/0x1570 [ 517.118261][ T8935] ? do_epoll_ctl+0xd40/0xd40 [ 517.123418][ T8935] ? __kasan_check_write+0x14/0x20 [ 517.128828][ T8935] ? wait_for_completion_killable_timeout+0x10/0x10 [ 517.135809][ T8935] ? security_capable+0x87/0xb0 [ 517.140696][ T8935] do_epoll_ctl+0x7e7/0xd40 [ 517.145232][ T8935] __x64_sys_epoll_ctl+0x160/0x1a0 [ 517.150655][ T8935] ? ep_modify+0x840/0x840 [ 517.155085][ T8935] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 517.161270][ T8935] x64_sys_call+0x3af/0x9a0 [ 517.165913][ T8935] do_syscall_64+0x4c/0xa0 [ 517.170530][ T8935] ? clear_bhb_loop+0x50/0xa0 [ 517.175387][ T8935] ? clear_bhb_loop+0x50/0xa0 [ 517.180599][ T8935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 517.186760][ T8935] RIP: 0033:0x7fc0385c1be9 [ 517.191185][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.212288][ T8935] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 517.221548][ T8935] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 517.229716][ T8935] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 517.238020][ T8935] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 517.246470][ T8935] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 517.255482][ T8935] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 517.263692][ T8935] [ 517.275425][ T8933] netlink: 'syz.1.2872': attribute type 4 has an invalid length. [ 517.287742][ T30] audit: type=1326 audit(2000000235.282:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.339427][ T30] audit: type=1326 audit(2000000235.282:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.387827][ T30] audit: type=1326 audit(2000000235.372:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.419956][ T30] audit: type=1326 audit(2000000235.372:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.459774][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2878'. [ 517.482879][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 517.493555][ T30] audit: type=1326 audit(2000000235.372:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.784333][ T30] audit: type=1326 audit(2000000235.372:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.811755][ T30] audit: type=1326 audit(2000000235.372:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.836253][ T30] audit: type=1326 audit(2000000235.372:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 517.862007][ T8955] device pim6reg1 entered promiscuous mode [ 517.878838][ T30] audit: type=1326 audit(2000000235.372:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08278b2be9 code=0x7ffc0000 [ 520.026950][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 520.060041][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2888'. [ 520.106220][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.229574][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.471612][ T9008] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 520.884274][ T6] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 520.893556][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2894'. [ 520.944674][ T9019] netlink: 'syz.0.2899': attribute type 32 has an invalid length. [ 520.961919][ T9019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2899'. [ 521.369426][ T5778] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 521.499513][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 521.512230][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 521.524741][ T6] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 521.534347][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.548533][ T6] usb 2-1: config 0 descriptor?? [ 521.570252][ T9002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 521.870447][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 521.910470][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 521.910487][ T30] audit: type=1400 audit(2000000239.902:3782): avc: denied { create } for pid=9001 comm="syz.1.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 521.950066][ T9032] UDC core: couldn't find an available UDC or it's busy: -16 [ 521.958479][ T9032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 522.293359][ T5778] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 522.304631][ T5778] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.318588][ T5778] usb 6-1: config 1 interface 0 has no altsetting 0 [ 522.333325][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 522.339915][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 522.355527][ T6] usb 2-1: USB disconnect, device number 42 [ 522.384882][ T9041] tipc: Enabling of bearer rejected, failed to enable media [ 522.461919][ T30] audit: type=1400 audit(2000000240.452:3783): avc: denied { remove_name } for pid=3866 comm="syz.3.1207" name=".index" dev="loop3" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.499685][ T5778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.701012][ T9047] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 522.935826][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.944096][ T5778] usb 6-1: Product: syz [ 522.948620][ T5778] usb 6-1: Manufacturer: syz [ 522.953440][ T5778] usb 6-1: SerialNumber: syz [ 522.968631][ T30] audit: type=1400 audit(2000000240.452:3784): avc: denied { rmdir } for pid=3866 comm="syz.3.1207" name=".index" dev="loop3" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.992749][ T9013] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 522.992831][ T30] audit: type=1400 audit(2000000240.482:3785): avc: denied { mounton } for pid=9046 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 523.000252][ T9013] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 523.026415][ T30] audit: type=1400 audit(2000000240.562:3786): avc: denied { mount } for pid=9042 comm="syz.4.2906" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 523.055350][ T30] audit: type=1400 audit(2000000240.592:3787): avc: denied { mounton } for pid=9042 comm="syz.4.2906" path="/567/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 523.104658][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.112450][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.120556][ T9046] device bridge_slave_0 entered promiscuous mode [ 523.128435][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.135771][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.144103][ T9046] device bridge_slave_1 entered promiscuous mode [ 523.351104][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.358809][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.366492][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.374018][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.385407][ T30] audit: type=1400 audit(2000000241.372:3788): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 523.485195][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.495946][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.514133][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.531769][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.558155][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.576969][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.584445][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.611787][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.630288][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.637745][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.670899][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.690128][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.709872][ T5776] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 523.732841][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.755261][ T9046] device veth0_vlan entered promiscuous mode [ 523.770845][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.783449][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.799828][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.825009][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.845485][ T9046] device veth1_macvtap entered promiscuous mode [ 523.880622][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.910138][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.946313][ T30] audit: type=1400 audit(2000000241.932:3789): avc: denied { mounton } for pid=9046 comm="syz-executor" path="/root/syzkaller.FSBbFu/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 523.972040][ T5776] usb 5-1: Using ep0 maxpacket: 32 [ 524.030711][ T30] audit: type=1400 audit(2000000241.972:3790): avc: denied { mounton } for pid=9046 comm="syz-executor" path="/root/syzkaller.FSBbFu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 524.061403][ T5613] tipc: Left network mode [ 524.089564][ T30] audit: type=1400 audit(2000000241.972:3791): avc: denied { mounton } for pid=9046 comm="syz-executor" path="/root/syzkaller.FSBbFu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 524.120066][ T5776] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 524.136846][ T5776] usb 5-1: config 0 has no interface number 0 [ 524.149161][ T5776] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 524.161033][ T5776] usb 5-1: config 0 interface 196 has no altsetting 0 [ 524.699760][ T5778] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 524.760669][ T5776] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 525.323256][ T5778] usb 6-1: USB disconnect, device number 28 [ 525.329594][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.363073][ T5776] usb 5-1: Product: syz [ 525.367293][ T5776] usb 5-1: Manufacturer: syz [ 525.383032][ T5776] usb 5-1: SerialNumber: syz [ 525.402931][ T5776] usb 5-1: config 0 descriptor?? [ 525.439624][ T9067] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 525.609796][ T9095] FAULT_INJECTION: forcing a failure. [ 525.609796][ T9095] name failslab, interval 1, probability 0, space 0, times 0 [ 525.623406][ T9095] CPU: 0 PID: 9095 Comm: syz.0.2920 Not tainted syzkaller #0 [ 525.631535][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.641986][ T9095] Call Trace: [ 525.645526][ T9095] [ 525.648852][ T9095] __dump_stack+0x21/0x30 [ 525.653211][ T9095] dump_stack_lvl+0xee/0x150 [ 525.657807][ T9095] ? show_regs_print_info+0x20/0x20 [ 525.663171][ T9095] ? kfree_skb+0xc1/0x2f0 [ 525.667671][ T9095] ? dev_hard_start_xmit+0x244/0x670 [ 525.673486][ T9095] ? __dev_queue_xmit+0x17bd/0x2d80 [ 525.678886][ T9095] ? dev_queue_xmit+0x17/0x20 [ 525.683754][ T9095] ? bpf_clone_redirect+0x242/0x380 [ 525.689152][ T9095] dump_stack+0x15/0x20 [ 525.693519][ T9095] should_fail+0x3c1/0x510 [ 525.698205][ T9095] __should_failslab+0xa4/0xe0 [ 525.703568][ T9095] should_failslab+0x9/0x20 [ 525.708381][ T9095] slab_pre_alloc_hook+0x3b/0xe0 [ 525.714018][ T9095] ? dst_alloc+0x15c/0x1d0 [ 525.718456][ T9095] kmem_cache_alloc+0x44/0x260 [ 525.723983][ T9095] dst_alloc+0x15c/0x1d0 [ 525.728378][ T9095] ip_route_output_key_hash_rcu+0x11db/0x2060 [ 525.734844][ T9095] ip_route_output_key_hash+0x123/0x1c0 [ 525.740598][ T9095] ? ip_route_input_rcu+0x24b0/0x24b0 [ 525.746184][ T9095] vti6_tnl_xmit+0xd83/0x1870 [ 525.750882][ T9095] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 525.757238][ T9095] ? trie_delete_elem+0x40b/0x710 [ 525.762699][ T9095] ? vti6_dev_uninit+0x340/0x340 [ 525.768047][ T9095] ? stack_trace_save+0x98/0xe0 [ 525.773123][ T9095] ? netif_skb_features+0x831/0xb90 [ 525.778652][ T9095] dev_hard_start_xmit+0x244/0x670 [ 525.784159][ T9095] __dev_queue_xmit+0x17bd/0x2d80 [ 525.789479][ T9095] ? dev_queue_xmit+0x20/0x20 [ 525.794279][ T9095] ? __kasan_check_write+0x14/0x20 [ 525.799915][ T9095] ? skb_release_data+0x1c6/0xa10 [ 525.805144][ T9095] ? __kasan_check_write+0x14/0x20 [ 525.810940][ T9095] ? pskb_expand_head+0xbe6/0x11d0 [ 525.816067][ T9095] dev_queue_xmit+0x17/0x20 [ 525.820877][ T9095] __bpf_redirect+0x68a/0xe60 [ 525.825783][ T9095] bpf_clone_redirect+0x242/0x380 [ 525.831353][ T9095] bpf_prog_6893982b85ceadf7+0x56/0x8f8 [ 525.837268][ T9095] ? __kasan_slab_alloc+0xcf/0xf0 [ 525.842368][ T9095] ? __kasan_slab_alloc+0xbd/0xf0 [ 525.847687][ T9095] ? slab_post_alloc_hook+0x4f/0x2b0 [ 525.853507][ T9095] ? kmem_cache_alloc+0xf7/0x260 [ 525.858651][ T9095] ? __build_skb+0x2d/0x310 [ 525.863335][ T9095] ? build_skb+0x24/0x200 [ 525.867807][ T9095] ? bpf_prog_test_run_skb+0x279/0x1150 [ 525.873709][ T9095] ? bpf_prog_test_run+0x3d5/0x620 [ 525.878930][ T9095] ? __sys_bpf+0x52c/0x730 [ 525.883438][ T9095] ? __x64_sys_bpf+0x7c/0x90 [ 525.888484][ T9095] ? x64_sys_call+0x4b9/0x9a0 [ 525.893401][ T9095] ? do_syscall_64+0x4c/0xa0 [ 525.897999][ T9095] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.905168][ T9095] ? __kasan_check_read+0x11/0x20 [ 525.910299][ T9095] ? bpf_test_timer_continue+0x146/0x4a0 [ 525.916331][ T9095] bpf_test_run+0x33d/0x8d0 [ 525.921112][ T9095] ? convert___skb_to_skb+0x4f0/0x4f0 [ 525.926667][ T9095] ? eth_get_headlen+0x1f0/0x1f0 [ 525.931893][ T9095] ? convert___skb_to_skb+0x41/0x4f0 [ 525.937939][ T9095] bpf_prog_test_run_skb+0x9ec/0x1150 [ 525.943526][ T9095] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 525.949613][ T9095] bpf_prog_test_run+0x3d5/0x620 [ 525.955082][ T9095] ? bpf_prog_query+0x230/0x230 [ 525.960032][ T9095] ? selinux_bpf+0xce/0xf0 [ 525.964549][ T9095] ? security_bpf+0x82/0xa0 [ 525.969392][ T9095] __sys_bpf+0x52c/0x730 [ 525.973716][ T9095] ? bpf_link_show_fdinfo+0x310/0x310 [ 525.979346][ T9095] ? debug_smp_processor_id+0x17/0x20 [ 525.984804][ T9095] __x64_sys_bpf+0x7c/0x90 [ 525.989328][ T9095] x64_sys_call+0x4b9/0x9a0 [ 525.994233][ T9095] do_syscall_64+0x4c/0xa0 [ 525.999008][ T9095] ? clear_bhb_loop+0x50/0xa0 [ 526.003909][ T9095] ? clear_bhb_loop+0x50/0xa0 [ 526.008811][ T9095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.015502][ T9095] RIP: 0033:0x7fc0385c1be9 [ 526.020283][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.041540][ T9095] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.050181][ T9095] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 526.058598][ T9095] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 526.067305][ T9095] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 526.075565][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.083948][ T9095] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 526.092388][ T9095] [ 526.117619][ T9097] 9pnet: Insufficient options for proto=fd [ 526.159086][ T9102] FAULT_INJECTION: forcing a failure. [ 526.159086][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 526.172470][ T9102] CPU: 1 PID: 9102 Comm: syz.0.2922 Not tainted syzkaller #0 [ 526.180339][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.190707][ T9102] Call Trace: [ 526.194307][ T9102] [ 526.197424][ T9102] __dump_stack+0x21/0x30 [ 526.202305][ T9102] dump_stack_lvl+0xee/0x150 [ 526.206901][ T9102] ? show_regs_print_info+0x20/0x20 [ 526.212314][ T9102] ? number+0xd1d/0xf70 [ 526.216559][ T9102] dump_stack+0x15/0x20 [ 526.221053][ T9102] should_fail+0x3c1/0x510 [ 526.226022][ T9102] __should_failslab+0xa4/0xe0 [ 526.231300][ T9102] should_failslab+0x9/0x20 [ 526.236087][ T9102] slab_pre_alloc_hook+0x3b/0xe0 [ 526.239429][ T5778] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 526.241391][ T9102] ? kvasprintf_const+0xf2/0x240 [ 526.241415][ T9102] __kmalloc_track_caller+0x6c/0x2c0 [ 526.262135][ T9102] ? kvasprintf_const+0xf2/0x240 [ 526.268056][ T9102] kvasprintf+0xd4/0x180 [ 526.272692][ T9102] ? __x64_sys_epoll_ctl+0x160/0x1a0 [ 526.278995][ T9102] ? x64_sys_call+0x3af/0x9a0 [ 526.283780][ T9102] ? do_syscall_64+0x4c/0xa0 [ 526.288654][ T9102] ? bust_spinlocks+0xe0/0xe0 [ 526.293956][ T9102] kvasprintf_const+0xf2/0x240 [ 526.299051][ T9102] kobject_set_name_vargs+0x61/0x110 [ 526.304683][ T9102] dev_set_name+0xd1/0x120 [ 526.309133][ T9102] ? memset+0x35/0x40 [ 526.313212][ T9102] ? get_device+0x30/0x30 [ 526.317635][ T9102] ? pm_runtime_init+0x258/0x330 [ 526.322749][ T9102] ? device_initialize+0x1e1/0x420 [ 526.327945][ T9102] wakeup_source_sysfs_add+0x18a/0x290 [ 526.329494][ T5776] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 526.333707][ T9102] wakeup_source_register+0x1a5/0x3d0 [ 526.333736][ T9102] ep_insert+0xbf3/0x1570 [ 526.343645][ T5776] ipheth: probe of 5-1:0.196 failed with error -22 [ 526.349094][ T9102] ? do_epoll_ctl+0xd40/0xd40 [ 526.365815][ T9102] ? __kasan_check_write+0x14/0x20 [ 526.371343][ T9102] ? wait_for_completion_killable_timeout+0x10/0x10 [ 526.378284][ T9102] ? security_capable+0x87/0xb0 [ 526.383319][ T9102] do_epoll_ctl+0x7e7/0xd40 [ 526.387915][ T9102] __x64_sys_epoll_ctl+0x160/0x1a0 [ 526.393470][ T9102] ? ep_modify+0x840/0x840 [ 526.397896][ T9102] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 526.404327][ T9102] x64_sys_call+0x3af/0x9a0 [ 526.408994][ T9102] do_syscall_64+0x4c/0xa0 [ 526.414078][ T9102] ? clear_bhb_loop+0x50/0xa0 [ 526.419071][ T9102] ? clear_bhb_loop+0x50/0xa0 [ 526.423843][ T9102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.429836][ T9102] RIP: 0033:0x7fc0385c1be9 [ 526.434978][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.456424][ T9102] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 526.465353][ T9102] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 526.474040][ T9102] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 526.483140][ T9102] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 526.492216][ T9102] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 526.501979][ T9102] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 526.510453][ T9102] [ 526.521725][ T9103] loop3: detected capacity change from 0 to 1024 [ 526.529484][ T5778] usb 6-1: device descriptor read/64, error -71 [ 526.599987][ T9111] binder: 9109:9111 unknown command 0 [ 526.605514][ T9111] binder: 9109:9111 ioctl c0306201 2000000001c0 returned -22 [ 526.635969][ T333] usb 5-1: USB disconnect, device number 46 [ 526.969720][ T9103] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.981825][ T9103] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.997689][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 526.997708][ T30] audit: type=1400 audit(2000000244.982:3794): avc: denied { setattr } for pid=9099 comm="syz.3.2923" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 527.029807][ T5613] device bridge_slave_1 left promiscuous mode [ 527.036484][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.044801][ T5613] device bridge_slave_0 left promiscuous mode [ 527.051421][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.060356][ T5613] device veth1_macvtap left promiscuous mode [ 527.219501][ T5778] usb 6-1: device descriptor read/64, error -71 [ 527.239879][ T30] audit: type=1326 audit(2000000245.232:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.269404][ T30] audit: type=1326 audit(2000000245.232:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.293767][ T30] audit: type=1326 audit(2000000245.232:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.318403][ T30] audit: type=1326 audit(2000000245.232:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.342618][ T30] audit: type=1326 audit(2000000245.232:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.434204][ T30] audit: type=1326 audit(2000000245.232:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.500370][ T30] audit: type=1326 audit(2000000245.282:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.541012][ T9121] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 527.567035][ T9121] loop3: detected capacity change from 0 to 256 [ 527.569422][ T5778] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 527.582147][ T30] audit: type=1326 audit(2000000245.292:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.608389][ T30] audit: type=1326 audit(2000000245.452:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 527.635553][ T9121] exfat: Deprecated parameter 'namecase' [ 528.140270][ T5778] usb 6-1: device descriptor read/64, error -71 [ 528.174251][ T9121] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 529.168190][ T9145] syz.3.2936[9145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.168278][ T9145] syz.3.2936[9145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.235344][ T9154] loop3: detected capacity change from 0 to 8192 [ 529.303565][ T9154] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.257961][ T9166] syz.5.2942[9166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.258063][ T9166] syz.5.2942[9166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.402835][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2948'. [ 531.720534][ T504] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 531.985949][ T504] usb 2-1: Using ep0 maxpacket: 32 [ 532.109454][ T504] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.233613][ T9197] bridge: RTM_NEWNEIGH with invalid ether address [ 532.279511][ T504] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39 [ 532.292922][ T504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.310528][ T504] usb 2-1: Product: syz [ 532.323752][ T504] usb 2-1: Manufacturer: syz [ 532.328637][ T504] usb 2-1: SerialNumber: syz [ 532.338245][ T504] usb 2-1: config 0 descriptor?? [ 532.666286][ T9202] xt_policy: neither incoming nor outgoing policy selected [ 532.681986][ T9206] loop3: detected capacity change from 0 to 1024 [ 532.690516][ T504] smsc95xx v2.0.0 [ 532.694545][ T504] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 532.710324][ T504] smsc95xx: probe of 2-1:0.0 failed with error -22 [ 532.821812][ T9206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.832882][ T9206] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.262432][ T9216] UDC core: couldn't find an available UDC or it's busy: -16 [ 533.279477][ T9216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 533.337284][ T9220] loop3: detected capacity change from 0 to 1024 [ 533.606213][ T60] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 534.229466][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 534.329232][ T504] usb 2-1: USB disconnect, device number 43 [ 534.349456][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.394329][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.407650][ T60] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 534.419461][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.429191][ T60] usb 6-1: config 0 descriptor?? [ 534.590673][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 534.590693][ T30] audit: type=1326 audit(2000000252.582:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.186145][ T30] audit: type=1326 audit(2000000252.582:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.215700][ T30] audit: type=1326 audit(2000000252.582:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.248366][ T30] audit: type=1326 audit(2000000252.582:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.279626][ T30] audit: type=1326 audit(2000000252.582:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.351706][ T30] audit: type=1326 audit(2000000252.582:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.378154][ T30] audit: type=1326 audit(2000000252.622:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.419235][ T30] audit: type=1326 audit(2000000253.172:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.444490][ T30] audit: type=1326 audit(2000000253.172:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.469504][ T30] audit: type=1326 audit(2000000253.202:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9260 comm="syz.3.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62be523be9 code=0x7ffc0000 [ 535.496203][ T60] logitech 0003:046D:C20E.001C: rdesc size test failed for formula gp [ 535.503002][ T9261] block device autoloading is deprecated and will be removed. [ 535.513774][ T60] logitech 0003:046D:C20E.001C: unbalanced collection at end of report description [ 535.539663][ T60] logitech 0003:046D:C20E.001C: parse failed [ 535.544463][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2972'. [ 535.546181][ T60] logitech: probe of 0003:046D:C20E.001C failed with error -22 [ 535.855775][ T9277] xt_NFQUEUE: number of total queues is 0 [ 535.892794][ T60] usb 6-1: USB disconnect, device number 31 [ 535.900778][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2972'. [ 536.042277][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.050270][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.058095][ T9280] device bridge_slave_0 entered promiscuous mode [ 536.066177][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.075178][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.083485][ T9280] device bridge_slave_1 entered promiscuous mode [ 536.160602][ T9292] 9pnet: Insufficient options for proto=fd [ 536.180167][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.187609][ T9280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.195331][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.203815][ T9280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.312155][ T565] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.333263][ T565] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.341015][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 536.350084][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.359213][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 536.368208][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.376935][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.394185][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.405276][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.413843][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.425472][ T333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 536.462184][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.502971][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.512569][ T565] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.520185][ T565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.610858][ T9309] device syzkaller0 entered promiscuous mode [ 536.623137][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.631821][ T565] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.639159][ T565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.647538][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.656267][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.678843][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.696861][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.706076][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.715174][ T504] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 536.723748][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.732897][ T9280] device veth0_vlan entered promiscuous mode [ 536.752054][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.763597][ T9280] device veth1_macvtap entered promiscuous mode [ 536.800991][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.835953][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.906216][ T9312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28014 sclass=netlink_tcpdiag_socket pid=9312 comm=syz.1.2977 [ 536.969461][ T504] usb 5-1: Using ep0 maxpacket: 16 [ 536.981058][ T5613] tipc: Left network mode [ 537.383243][ T9331] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2987'. [ 537.422084][ T504] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.463839][ T504] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 537.477369][ T504] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 537.831281][ T9335] xt_bpf: check failed: parse error [ 537.871833][ T9337] 9pnet: Insufficient options for proto=fd [ 537.889610][ T504] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.909425][ T504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.930784][ T504] usb 5-1: Product: syz [ 537.935510][ T504] usb 5-1: Manufacturer: syz [ 537.942363][ T504] usb 5-1: SerialNumber: syz [ 538.313882][ T9368] device syzkaller0 entered promiscuous mode [ 538.352988][ T504] usb 5-1: USB disconnect, device number 47 [ 538.623336][ T6871] udevd[6871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 539.370564][ T9375] FAULT_INJECTION: forcing a failure. [ 539.370564][ T9375] name failslab, interval 1, probability 0, space 0, times 0 [ 539.446905][ T9375] CPU: 0 PID: 9375 Comm: syz.1.3004 Not tainted syzkaller #0 [ 539.454922][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.465371][ T9375] Call Trace: [ 539.468837][ T9375] [ 539.471768][ T9375] __dump_stack+0x21/0x30 [ 539.476299][ T9375] dump_stack_lvl+0xee/0x150 [ 539.480972][ T9375] ? show_regs_print_info+0x20/0x20 [ 539.486267][ T9375] dump_stack+0x15/0x20 [ 539.490825][ T9375] should_fail+0x3c1/0x510 [ 539.495294][ T9375] ? skb_ensure_writable+0x2e7/0x460 [ 539.500672][ T9375] __should_failslab+0xa4/0xe0 [ 539.505623][ T9375] should_failslab+0x9/0x20 [ 539.510216][ T9375] slab_pre_alloc_hook+0x3b/0xe0 [ 539.515595][ T9375] ? skb_ensure_writable+0x2e7/0x460 [ 539.521413][ T9375] ? skb_ensure_writable+0x2e7/0x460 [ 539.526786][ T9375] __kmalloc_track_caller+0x6c/0x2c0 [ 539.532180][ T9375] ? skb_ensure_writable+0x2e7/0x460 [ 539.537646][ T9375] ? skb_ensure_writable+0x2e7/0x460 [ 539.542931][ T9375] pskb_expand_head+0x11b/0x11d0 [ 539.548045][ T9375] ? __copy_skb_header+0x437/0x600 [ 539.553275][ T9375] ? __kasan_check_write+0x14/0x20 [ 539.558773][ T9375] ? __skb_clone+0x47a/0x790 [ 539.563375][ T9375] skb_ensure_writable+0x2e7/0x460 [ 539.568745][ T9375] bpf_clone_redirect+0x10b/0x380 [ 539.574261][ T9375] bpf_prog_6893982b85ceadf7+0x56/0x7f0 [ 539.580158][ T9375] ? __kasan_slab_alloc+0xcf/0xf0 [ 539.585447][ T9375] ? __kasan_slab_alloc+0xbd/0xf0 [ 539.590636][ T9375] ? slab_post_alloc_hook+0x4f/0x2b0 [ 539.596015][ T9375] ? kmem_cache_alloc+0xf7/0x260 [ 539.601247][ T9375] ? __build_skb+0x2d/0x310 [ 539.606010][ T9375] ? build_skb+0x24/0x200 [ 539.610432][ T9375] ? bpf_prog_test_run_skb+0x279/0x1150 [ 539.615976][ T9375] ? bpf_prog_test_run+0x3d5/0x620 [ 539.621172][ T9375] ? __sys_bpf+0x52c/0x730 [ 539.625768][ T9375] ? __x64_sys_bpf+0x7c/0x90 [ 539.630756][ T9375] ? x64_sys_call+0x4b9/0x9a0 [ 539.635806][ T9375] ? do_syscall_64+0x4c/0xa0 [ 539.640679][ T9375] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.647077][ T9375] ? __kasan_check_read+0x11/0x20 [ 539.652574][ T9375] ? bpf_test_timer_continue+0x146/0x4a0 [ 539.658614][ T9375] bpf_test_run+0x33d/0x8d0 [ 539.663245][ T9375] ? convert___skb_to_skb+0x4f0/0x4f0 [ 539.668911][ T9375] ? eth_get_headlen+0x1f0/0x1f0 [ 539.674036][ T9375] ? convert___skb_to_skb+0x41/0x4f0 [ 539.679406][ T9375] bpf_prog_test_run_skb+0x9ec/0x1150 [ 539.685141][ T9375] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 539.691218][ T9375] bpf_prog_test_run+0x3d5/0x620 [ 539.696882][ T9375] ? bpf_prog_query+0x230/0x230 [ 539.702194][ T9375] ? selinux_bpf+0xce/0xf0 [ 539.706868][ T9375] ? security_bpf+0x82/0xa0 [ 539.711721][ T9375] __sys_bpf+0x52c/0x730 [ 539.716225][ T9375] ? bpf_link_show_fdinfo+0x310/0x310 [ 539.722122][ T9375] ? debug_smp_processor_id+0x17/0x20 [ 539.727687][ T9375] __x64_sys_bpf+0x7c/0x90 [ 539.732290][ T9375] x64_sys_call+0x4b9/0x9a0 [ 539.736940][ T9375] do_syscall_64+0x4c/0xa0 [ 539.741353][ T9375] ? clear_bhb_loop+0x50/0xa0 [ 539.746115][ T9375] ? clear_bhb_loop+0x50/0xa0 [ 539.750794][ T9375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.757042][ T9375] RIP: 0033:0x7f5aceac1be9 [ 539.761715][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.782265][ T9375] RSP: 002b:00007f5acd52a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.790974][ T9375] RAX: ffffffffffffffda RBX: 00007f5acecf8fa0 RCX: 00007f5aceac1be9 [ 539.799489][ T9375] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 539.807733][ T9375] RBP: 00007f5acd52a090 R08: 0000000000000000 R09: 0000000000000000 [ 539.816927][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.825182][ T9375] R13: 00007f5acecf9038 R14: 00007f5acecf8fa0 R15: 00007ffeba6e94d8 [ 539.834008][ T9375] [ 539.853213][ T9381] FAULT_INJECTION: forcing a failure. [ 539.853213][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 539.869884][ T9381] CPU: 0 PID: 9381 Comm: syz.4.3006 Not tainted syzkaller #0 [ 539.877756][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.888358][ T9381] Call Trace: [ 539.892104][ T9381] [ 539.895147][ T9381] __dump_stack+0x21/0x30 [ 539.899503][ T9381] dump_stack_lvl+0xee/0x150 [ 539.904203][ T9381] ? show_regs_print_info+0x20/0x20 [ 539.909419][ T9381] dump_stack+0x15/0x20 [ 539.913860][ T9381] should_fail+0x3c1/0x510 [ 539.918846][ T9381] ? skb_ensure_writable+0x2e7/0x460 [ 539.924155][ T9381] __should_failslab+0xa4/0xe0 [ 539.929286][ T9381] should_failslab+0x9/0x20 [ 539.934034][ T9381] slab_pre_alloc_hook+0x3b/0xe0 [ 539.939179][ T9381] ? skb_ensure_writable+0x2e7/0x460 [ 539.944673][ T9381] ? skb_ensure_writable+0x2e7/0x460 [ 539.950163][ T9381] __kmalloc_track_caller+0x6c/0x2c0 [ 539.955551][ T9381] ? skb_ensure_writable+0x2e7/0x460 [ 539.961301][ T9381] ? skb_ensure_writable+0x2e7/0x460 [ 539.967077][ T9381] pskb_expand_head+0x11b/0x11d0 [ 539.972377][ T9381] ? __copy_skb_header+0x437/0x600 [ 539.977963][ T9381] ? __kasan_check_write+0x14/0x20 [ 539.983364][ T9381] ? __skb_clone+0x47a/0x790 [ 539.988403][ T9381] skb_ensure_writable+0x2e7/0x460 [ 539.993818][ T9381] bpf_clone_redirect+0x10b/0x380 [ 539.999214][ T9381] bpf_prog_6893982b85ceadf7+0x56/0x498 [ 540.005255][ T9381] ? __kasan_slab_alloc+0xcf/0xf0 [ 540.010312][ T9381] ? __kasan_slab_alloc+0xbd/0xf0 [ 540.015902][ T9381] ? slab_post_alloc_hook+0x4f/0x2b0 [ 540.021556][ T9381] ? kmem_cache_alloc+0xf7/0x260 [ 540.026678][ T9381] ? __build_skb+0x2d/0x310 [ 540.029546][ T60] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 540.031667][ T9381] ? build_skb+0x24/0x200 [ 540.031691][ T9381] ? bpf_prog_test_run_skb+0x279/0x1150 [ 540.049661][ T9381] ? bpf_prog_test_run+0x3d5/0x620 [ 540.054890][ T9381] ? __sys_bpf+0x52c/0x730 [ 540.059594][ T9381] ? __x64_sys_bpf+0x7c/0x90 [ 540.064322][ T9381] ? x64_sys_call+0x4b9/0x9a0 [ 540.069253][ T9381] ? do_syscall_64+0x4c/0xa0 [ 540.074143][ T9381] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.080794][ T9381] ? __kasan_check_read+0x11/0x20 [ 540.086144][ T9381] ? bpf_test_timer_continue+0x146/0x4a0 [ 540.092376][ T9381] bpf_test_run+0x33d/0x8d0 [ 540.097090][ T9381] ? convert___skb_to_skb+0x4f0/0x4f0 [ 540.103119][ T9381] ? eth_get_headlen+0x1f0/0x1f0 [ 540.108180][ T9381] ? convert___skb_to_skb+0x41/0x4f0 [ 540.114403][ T9381] bpf_prog_test_run_skb+0x9ec/0x1150 [ 540.120221][ T9381] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 540.126607][ T9381] bpf_prog_test_run+0x3d5/0x620 [ 540.131757][ T9381] ? bpf_prog_query+0x230/0x230 [ 540.137417][ T9381] ? selinux_bpf+0xce/0xf0 [ 540.142433][ T9381] ? security_bpf+0x82/0xa0 [ 540.147411][ T9381] __sys_bpf+0x52c/0x730 [ 540.151770][ T9381] ? bpf_link_show_fdinfo+0x310/0x310 [ 540.157493][ T9381] ? debug_smp_processor_id+0x17/0x20 [ 540.163284][ T9381] __x64_sys_bpf+0x7c/0x90 [ 540.168421][ T9381] x64_sys_call+0x4b9/0x9a0 [ 540.173855][ T9381] do_syscall_64+0x4c/0xa0 [ 540.178638][ T9381] ? clear_bhb_loop+0x50/0xa0 [ 540.183451][ T9381] ? clear_bhb_loop+0x50/0xa0 [ 540.188404][ T9381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.194803][ T9381] RIP: 0033:0x7f08278b2be9 [ 540.200177][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.221367][ T9381] RSP: 002b:00007f082631b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.230050][ T9381] RAX: ffffffffffffffda RBX: 00007f0827ae9fa0 RCX: 00007f08278b2be9 [ 540.238472][ T9381] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 540.246442][ T9381] RBP: 00007f082631b090 R08: 0000000000000000 R09: 0000000000000000 [ 540.254674][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.262832][ T9381] R13: 00007f0827aea038 R14: 00007f0827ae9fa0 R15: 00007fff6f90ea68 [ 540.270896][ T9381] [ 540.278061][ T9386] 9pnet: Insufficient options for proto=fd [ 540.369001][ T9395] FAULT_INJECTION: forcing a failure. [ 540.369001][ T9395] name failslab, interval 1, probability 0, space 0, times 0 [ 540.374348][ T9393] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 540.382992][ T9395] CPU: 1 PID: 9395 Comm: syz.0.3011 Not tainted syzkaller #0 [ 540.401168][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.401182][ T9395] Call Trace: [ 540.401189][ T9395] [ 540.401197][ T9395] __dump_stack+0x21/0x30 [ 540.422464][ T9395] dump_stack_lvl+0xee/0x150 [ 540.427054][ T9395] ? show_regs_print_info+0x20/0x20 [ 540.432272][ T9395] dump_stack+0x15/0x20 [ 540.436858][ T9395] should_fail+0x3c1/0x510 [ 540.441417][ T9395] __should_failslab+0xa4/0xe0 [ 540.446659][ T9395] should_failslab+0x9/0x20 [ 540.451263][ T9395] slab_pre_alloc_hook+0x3b/0xe0 [ 540.456690][ T9395] kmem_cache_alloc_trace+0x48/0x270 [ 540.462119][ T9395] ? get_device_parent+0x2f3/0x410 [ 540.467261][ T9395] get_device_parent+0x2f3/0x410 [ 540.467294][ T9395] device_add+0x322/0xed0 [ 540.467314][ T9395] ? pm_runtime_init+0x258/0x330 [ 540.473642][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'. [ 540.476659][ T9395] wakeup_source_sysfs_add+0x1b7/0x290 [ 540.496985][ T9395] wakeup_source_register+0x1a5/0x3d0 [ 540.497020][ T9395] ep_insert+0xbf3/0x1570 [ 540.497042][ T9395] ? do_epoll_ctl+0xd40/0xd40 [ 540.497061][ T9395] ? __kasan_check_write+0x14/0x20 [ 540.497080][ T9395] ? wait_for_completion_killable_timeout+0x10/0x10 [ 540.497100][ T9395] ? security_capable+0x87/0xb0 [ 540.497120][ T9395] do_epoll_ctl+0x7e7/0xd40 [ 540.497140][ T9395] __x64_sys_epoll_ctl+0x160/0x1a0 [ 540.497159][ T9395] ? ep_modify+0x840/0x840 [ 540.497177][ T9395] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 540.497200][ T9395] x64_sys_call+0x3af/0x9a0 [ 540.497220][ T9395] do_syscall_64+0x4c/0xa0 [ 540.497239][ T9395] ? clear_bhb_loop+0x50/0xa0 [ 540.497259][ T9395] ? clear_bhb_loop+0x50/0xa0 [ 540.497280][ T9395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.497301][ T9395] RIP: 0033:0x7fc0385c1be9 [ 540.497321][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.497337][ T9395] RSP: 002b:00007fc03702a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 540.497362][ T9395] RAX: ffffffffffffffda RBX: 00007fc0387f8fa0 RCX: 00007fc0385c1be9 [ 540.497377][ T9395] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 540.497390][ T9395] RBP: 00007fc03702a090 R08: 0000000000000000 R09: 0000000000000000 [ 540.497405][ T9395] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 540.497419][ T9395] R13: 00007fc0387f9038 R14: 00007fc0387f8fa0 R15: 00007ffc17955a48 [ 540.497438][ T9395] [ 540.553079][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 540.819571][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 540.829739][ T60] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 540.838270][ T60] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 540.847276][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.858273][ T60] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 540.867739][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 540.881224][ T60] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.890438][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.900611][ T60] usb 6-1: config 0 descriptor?? [ 541.049422][ T956] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 541.309394][ T956] usb 2-1: Using ep0 maxpacket: 8 [ 541.324974][ T60] usb 6-1: USB disconnect, device number 32 [ 541.447831][ T9421] loop3: detected capacity change from 0 to 256 [ 541.554436][ T9423] xt_NFQUEUE: number of total queues is 0 [ 541.609629][ T956] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 541.640860][ T9421] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿ' [ 541.661720][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.752216][ T956] usb 2-1: config 0 descriptor?? [ 541.817217][ T9421] loop3: detected capacity change from 0 to 512 [ 541.897373][ T9427] incfs_lookup_dentry err:-14 [ 541.902903][ T9427] incfs: Can't find or create .index dir in ./file0 [ 541.910318][ T9427] incfs: mount failed -14 [ 541.915800][ T9427] 9pnet: bogus RREAD count (3 > 1) [ 541.954541][ T9421] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.3019: iget: bad i_size value: 38620345925642 [ 541.979638][ T9421] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3019: couldn't read orphan inode 15 (err -117) [ 542.010295][ T9421] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 542.027583][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3022'. [ 542.267314][ T9437] xt_CT: No such helper "netbios-ns" [ 542.751296][ T5776] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 542.807543][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3027'. [ 543.159379][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 543.518654][ T9460] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3030'. [ 543.789457][ T5776] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.805838][ T5776] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.832809][ T5776] usb 4-1: config 0 interface 0 has no altsetting 0 [ 543.840745][ T5776] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 543.851162][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.860391][ T5776] usb 4-1: config 0 descriptor?? [ 544.029427][ T956] usbhid 2-1:0.0: can't add hid device: -71 [ 544.036113][ T956] usbhid: probe of 2-1:0.0 failed with error -71 [ 544.044233][ T956] usb 2-1: USB disconnect, device number 44 [ 544.341370][ T9421] UDC core: couldn't find an available UDC or it's busy: -16 [ 544.349161][ T9421] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 544.909419][ T5776] usbhid 4-1:0.0: can't add hid device: -71 [ 544.916186][ T5776] usbhid: probe of 4-1:0.0 failed with error -71 [ 544.941724][ T5776] usb 4-1: USB disconnect, device number 45 [ 545.104233][ T9500] xt_policy: neither incoming nor outgoing policy selected [ 545.376421][ T9429] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 545.461923][ T9506] loop3: detected capacity change from 0 to 512 [ 545.493186][ T9506] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 545.549458][ T956] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 545.924194][ T9506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9506 comm=syz.3.3046 [ 545.924897][ T9510] incfs_lookup_dentry err:-14 [ 545.953474][ T9510] incfs: Can't find or create .index dir in ./file0 [ 545.965602][ T9510] incfs: mount failed -14 [ 545.996221][ T9510] 9pnet: bogus RREAD count (3 > 1) [ 546.143199][ T9522] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3048'. [ 546.209588][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.387629][ T9524] loop3: detected capacity change from 0 to 1024 [ 546.409795][ T956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.420874][ T956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 546.431592][ T956] usb 5-1: SerialNumber: syz [ 546.535152][ T956] cdc_acm 5-1:1.0: skipping garbage [ 546.577170][ T956] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 546.588647][ T9524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.620385][ T9524] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.679428][ T333] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 546.862819][ T956] usb 5-1: USB disconnect, device number 48 [ 546.969367][ T333] usb 2-1: Using ep0 maxpacket: 8 [ 547.081732][ T9534] incfs: Options parsing error. -22 [ 547.087545][ T9534] incfs: mount failed -22 [ 547.092941][ T333] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.110996][ T9536] loop3: detected capacity change from 0 to 256 [ 547.379532][ T333] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.393029][ T333] usb 2-1: config 0 interface 0 has no altsetting 0 [ 547.399899][ T333] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 547.400272][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3054'. [ 547.409476][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.428561][ T333] usb 2-1: config 0 descriptor?? [ 547.439809][ T9046] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 547.448118][ T9046] FAT-fs (loop3): Filesystem has been set read-only [ 547.460936][ T9046] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 547.847586][ T9548] FAULT_INJECTION: forcing a failure. [ 547.847586][ T9548] name failslab, interval 1, probability 0, space 0, times 0 [ 547.867481][ T9548] CPU: 1 PID: 9548 Comm: syz.4.3060 Not tainted syzkaller #0 [ 547.875537][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.886167][ T9548] Call Trace: [ 547.889626][ T9548] [ 547.892783][ T9548] __dump_stack+0x21/0x30 [ 547.897770][ T9548] dump_stack_lvl+0xee/0x150 [ 547.903164][ T9548] ? show_regs_print_info+0x20/0x20 [ 547.908801][ T9548] dump_stack+0x15/0x20 [ 547.913288][ T9548] should_fail+0x3c1/0x510 [ 547.918351][ T9548] ? skb_ensure_writable+0x2e7/0x460 [ 547.923915][ T9548] __should_failslab+0xa4/0xe0 [ 547.929774][ T9548] should_failslab+0x9/0x20 [ 547.934685][ T9548] slab_pre_alloc_hook+0x3b/0xe0 [ 547.940058][ T9548] ? skb_ensure_writable+0x2e7/0x460 [ 547.945611][ T9548] ? skb_ensure_writable+0x2e7/0x460 [ 547.951063][ T9548] __kmalloc_track_caller+0x6c/0x2c0 [ 547.956957][ T9548] ? skb_ensure_writable+0x2e7/0x460 [ 547.962229][ T9548] ? skb_ensure_writable+0x2e7/0x460 [ 547.967862][ T9548] pskb_expand_head+0x11b/0x11d0 [ 547.973285][ T9548] ? __copy_skb_header+0x437/0x600 [ 547.978605][ T9548] ? __kasan_check_write+0x14/0x20 [ 547.983917][ T9548] ? __skb_clone+0x47a/0x790 [ 547.988505][ T9548] skb_ensure_writable+0x2e7/0x460 [ 547.993787][ T9548] bpf_clone_redirect+0x10b/0x380 [ 547.998853][ T9548] bpf_prog_6893982b85ceadf7+0x56/0xb48 [ 548.004923][ T9548] ? __switch_to_asm+0x3a/0x60 [ 548.009779][ T9548] ? __schedule+0xb76/0x14c0 [ 548.014381][ T9548] ? release_firmware_map_entry+0x190/0x190 [ 548.020629][ T9548] ? __kasan_check_read+0x11/0x20 [ 548.025927][ T9548] ? preempt_schedule_irq+0xbb/0x110 [ 548.031521][ T9548] ? __cond_resched+0xb0/0xb0 [ 548.036546][ T9548] ? __kasan_check_read+0x11/0x20 [ 548.041822][ T9548] ? bpf_test_timer_continue+0x146/0x4a0 [ 548.047992][ T9548] bpf_test_run+0x33d/0x8d0 [ 548.052667][ T9548] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 548.058310][ T9548] ? convert___skb_to_skb+0x4f0/0x4f0 [ 548.064029][ T9548] ? eth_get_headlen+0x1f0/0x1f0 [ 548.069062][ T9548] ? convert___skb_to_skb+0x41/0x4f0 [ 548.074407][ T9548] bpf_prog_test_run_skb+0x9ec/0x1150 [ 548.079866][ T9548] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 548.086016][ T9548] bpf_prog_test_run+0x3d5/0x620 [ 548.091200][ T9548] ? bpf_prog_query+0x230/0x230 [ 548.096657][ T9548] ? __sys_bpf+0x2b1/0x730 [ 548.101262][ T9548] ? __sanitizer_cov_trace_switch+0x69/0xe0 [ 548.107619][ T9548] __sys_bpf+0x52c/0x730 [ 548.111968][ T9548] ? bpf_link_show_fdinfo+0x310/0x310 [ 548.117634][ T9548] ? __kasan_check_write+0x14/0x20 [ 548.123116][ T9548] ? switch_fpu_return+0x15d/0x2c0 [ 548.128581][ T9548] __x64_sys_bpf+0x7c/0x90 [ 548.133622][ T9548] x64_sys_call+0x4b9/0x9a0 [ 548.138299][ T9548] do_syscall_64+0x4c/0xa0 [ 548.142972][ T9548] ? clear_bhb_loop+0x50/0xa0 [ 548.147759][ T9548] ? clear_bhb_loop+0x50/0xa0 [ 548.152881][ T9548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.159541][ T9548] RIP: 0033:0x7f08278b2be9 [ 548.164462][ T9548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.184826][ T9548] RSP: 002b:00007f082631b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.193883][ T9548] RAX: ffffffffffffffda RBX: 00007f0827ae9fa0 RCX: 00007f08278b2be9 [ 548.202415][ T9548] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 548.210912][ T9548] RBP: 00007f082631b090 R08: 0000000000000000 R09: 0000000000000000 [ 548.219525][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.227973][ T9548] R13: 00007f0827aea038 R14: 00007f0827ae9fa0 R15: 00007fff6f90ea68 [ 548.236124][ T9548] [ 548.267813][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.276182][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.287104][ T333] samsung 0003:0419:0001.001D: unknown main item tag 0x0 [ 548.296543][ T9544] device bridge_slave_0 entered promiscuous mode [ 548.305374][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.312858][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.324598][ T333] samsung 0003:0419:0001.001D: unknown main item tag 0x0 [ 548.337952][ T9544] device bridge_slave_1 entered promiscuous mode [ 548.339577][ T9553] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3061'. [ 548.413341][ T333] samsung 0003:0419:0001.001D: unknown main item tag 0x2 [ 548.431309][ T333] samsung 0003:0419:0001.001D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 548.459886][ T9559] syz.0.3064[9559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.459973][ T9559] syz.0.3064[9559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.500135][ T9569] incfs_lookup_dentry err:-14 [ 549.526882][ T9570] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3067'. [ 549.536463][ T9569] incfs: Can't find or create .index dir in ./file0 [ 549.536551][ T9569] incfs: mount failed -14 [ 549.563997][ T9569] 9pnet: bogus RREAD count (3 > 1) [ 549.586874][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.596113][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.609310][ T10] device bridge_slave_1 left promiscuous mode [ 549.616226][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.631843][ T10] device bridge_slave_0 left promiscuous mode [ 549.638476][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.647440][ T10] device veth1_macvtap left promiscuous mode [ 549.654565][ T10] device veth0_vlan left promiscuous mode [ 549.742426][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.751345][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.760393][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.767758][ T5613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.776193][ T9584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=9584 comm=syz.5.3069 [ 549.790217][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 549.804660][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.814268][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.819548][ T5776] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 549.824247][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.838641][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.867683][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 549.876728][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.885657][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.894791][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.911151][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.920068][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.933660][ T9544] device veth0_vlan entered promiscuous mode [ 549.941316][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.950277][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.996487][ T9544] device veth1_macvtap entered promiscuous mode [ 550.141418][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.153387][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.162622][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.207017][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.218476][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.225123][ T5776] usb 5-1: Using ep0 maxpacket: 8 [ 550.233908][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.242754][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.277569][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3059'. [ 550.399454][ T5776] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 550.408642][ T5776] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.417026][ T5776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.427523][ T5776] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 550.800882][ T5776] usb 5-1: config 0 has no interface number 0 [ 550.809575][ T5776] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.831708][ T5776] usb 5-1: config 0 interface 150 has no altsetting 0 [ 550.849891][ T5776] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 550.868884][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.886715][ T5776] usb 5-1: config 0 descriptor?? [ 550.901667][ T6] usb 2-1: USB disconnect, device number 45 [ 551.042101][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3074'. [ 551.253915][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 551.253945][ T30] audit: type=1400 audit(2000000269.242:3993): avc: denied { append } for pid=9568 comm="syz.4.3067" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.475566][ T9614] bridge: RTM_NEWNEIGH with invalid ether address [ 552.191509][ T5776] usb 5-1: USB disconnect, device number 49 [ 552.323314][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 552.338831][ T10] tipc: Left network mode [ 552.349162][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.358369][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.367202][ T9634] device bridge_slave_0 entered promiscuous mode [ 552.381201][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.388427][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.401433][ T9634] device bridge_slave_1 entered promiscuous mode [ 552.453016][ T9642] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3085'. [ 552.462574][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3085'. [ 552.689789][ T6871] udevd[6871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 552.781481][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.789207][ T9634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.797207][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.804839][ T9634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.833690][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.843616][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.852191][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.872397][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.881563][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.888958][ T5613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.897036][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.906055][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.913591][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.921590][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.936111][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.955115][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 552.972974][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.982142][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.991694][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.999837][ T9634] device veth0_vlan entered promiscuous mode [ 553.014006][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.078159][ T9657] FAULT_INJECTION: forcing a failure. [ 553.078159][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 553.240360][ T9657] CPU: 0 PID: 9657 Comm: syz.5.3089 Not tainted syzkaller #0 [ 553.248460][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.260674][ T9657] Call Trace: [ 553.264164][ T9657] [ 553.268056][ T9657] __dump_stack+0x21/0x30 [ 553.273129][ T9657] dump_stack_lvl+0xee/0x150 [ 553.278790][ T9657] ? show_regs_print_info+0x20/0x20 [ 553.297853][ T9657] ? dev_queue_xmit+0x20/0x20 [ 553.305316][ T9657] dump_stack+0x15/0x20 [ 553.310662][ T9657] should_fail+0x3c1/0x510 [ 553.315559][ T9657] __should_failslab+0xa4/0xe0 [ 553.320638][ T9657] should_failslab+0x9/0x20 [ 553.325712][ T9657] slab_pre_alloc_hook+0x3b/0xe0 [ 553.331242][ T9657] ? skb_clone+0x1cf/0x360 [ 553.336665][ T9657] kmem_cache_alloc+0x44/0x260 [ 553.341812][ T9657] skb_clone+0x1cf/0x360 [ 553.346571][ T9657] bpf_clone_redirect+0xa7/0x380 [ 553.351885][ T9657] bpf_prog_6893982b85ceadf7+0x56/0x368 [ 553.357901][ T9657] ? __kasan_slab_alloc+0xcf/0xf0 [ 553.363329][ T9657] ? __kasan_slab_alloc+0xbd/0xf0 [ 553.368981][ T9657] ? slab_post_alloc_hook+0x4f/0x2b0 [ 553.375800][ T9657] ? kmem_cache_alloc+0xf7/0x260 [ 553.382130][ T9657] ? __build_skb+0x2d/0x310 [ 553.388150][ T9657] ? build_skb+0x24/0x200 [ 553.393254][ T9657] ? bpf_prog_test_run_skb+0x279/0x1150 [ 553.399417][ T9657] ? bpf_prog_test_run+0x3d5/0x620 [ 553.405691][ T9657] ? __sys_bpf+0x52c/0x730 [ 553.410508][ T9657] ? __x64_sys_bpf+0x7c/0x90 [ 553.415758][ T9657] ? x64_sys_call+0x4b9/0x9a0 [ 553.420792][ T9657] ? do_syscall_64+0x4c/0xa0 [ 553.425556][ T9657] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.431860][ T9657] ? __kasan_check_read+0x11/0x20 [ 553.437160][ T9657] ? bpf_test_timer_continue+0x146/0x4a0 [ 553.443313][ T9657] bpf_test_run+0x33d/0x8d0 [ 553.448336][ T9657] ? convert___skb_to_skb+0x4f0/0x4f0 [ 553.453894][ T9657] ? eth_get_headlen+0x1f0/0x1f0 [ 553.459590][ T9657] ? convert___skb_to_skb+0x41/0x4f0 [ 553.465377][ T9657] bpf_prog_test_run_skb+0x9ec/0x1150 [ 553.471852][ T9657] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 553.478188][ T9657] bpf_prog_test_run+0x3d5/0x620 [ 553.483487][ T9657] ? bpf_prog_query+0x230/0x230 [ 553.488532][ T9657] ? selinux_bpf+0xce/0xf0 [ 553.493300][ T9657] ? security_bpf+0x82/0xa0 [ 553.498289][ T9657] __sys_bpf+0x52c/0x730 [ 553.502914][ T9657] ? bpf_link_show_fdinfo+0x310/0x310 [ 553.508758][ T9657] ? debug_smp_processor_id+0x17/0x20 [ 553.514548][ T9657] __x64_sys_bpf+0x7c/0x90 [ 553.519614][ T9657] x64_sys_call+0x4b9/0x9a0 [ 553.524215][ T9657] do_syscall_64+0x4c/0xa0 [ 553.528814][ T9657] ? clear_bhb_loop+0x50/0xa0 [ 553.533713][ T9657] ? clear_bhb_loop+0x50/0xa0 [ 553.538674][ T9657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.544943][ T9657] RIP: 0033:0x7ffbc9666be9 [ 553.549634][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.571144][ T9657] RSP: 002b:00007ffbc80cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.580148][ T9657] RAX: ffffffffffffffda RBX: 00007ffbc989dfa0 RCX: 00007ffbc9666be9 [ 553.588893][ T9657] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 553.597798][ T9657] RBP: 00007ffbc80cf090 R08: 0000000000000000 R09: 0000000000000000 [ 553.606554][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.614863][ T9657] R13: 00007ffbc989e038 R14: 00007ffbc989dfa0 R15: 00007ffcfa7a1348 [ 553.623673][ T9657] [ 553.645505][ T9634] device veth1_macvtap entered promiscuous mode [ 553.849191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 553.860051][ T9664] netlink: 'syz.5.3091': attribute type 32 has an invalid length. [ 553.871571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.881314][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3091'. [ 553.893233][ T10] device bridge_slave_1 left promiscuous mode [ 553.900575][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.920452][ T10] device bridge_slave_0 left promiscuous mode [ 553.931661][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.944642][ T10] device veth1_macvtap left promiscuous mode [ 553.944650][ T9670] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 553.951844][ T10] device veth0_vlan left promiscuous mode [ 553.967713][ T30] audit: type=1326 audit(2000000271.952:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.015520][ T30] audit: type=1326 audit(2000000271.982:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.049383][ T30] audit: type=1326 audit(2000000271.982:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.077913][ T30] audit: type=1326 audit(2000000271.982:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.129571][ T30] audit: type=1326 audit(2000000271.982:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.136608][ T9672] incfs: Options parsing error. -22 [ 554.160721][ T9672] incfs: mount failed -22 [ 554.199418][ T30] audit: type=1326 audit(2000000271.982:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9666 comm="syz.5.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc9666be9 code=0x7ffc0000 [ 554.507309][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.520614][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.762134][ T10] tipc: Disabling bearer [ 554.767980][ T10] tipc: Left network mode [ 554.801673][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.809383][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.821892][ T9686] device bridge_slave_0 entered promiscuous mode [ 554.833247][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.842593][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.853419][ T9686] device bridge_slave_1 entered promiscuous mode [ 555.167656][ T9693] FAULT_INJECTION: forcing a failure. [ 555.167656][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 555.181779][ T9693] CPU: 1 PID: 9693 Comm: syz.6.3099 Not tainted syzkaller #0 [ 555.190506][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.201302][ T9693] Call Trace: [ 555.204743][ T9693] [ 555.207811][ T9693] __dump_stack+0x21/0x30 [ 555.212850][ T9693] dump_stack_lvl+0xee/0x150 [ 555.218237][ T9693] ? show_regs_print_info+0x20/0x20 [ 555.224584][ T9693] dump_stack+0x15/0x20 [ 555.229427][ T9693] should_fail+0x3c1/0x510 [ 555.233998][ T9693] ? skb_ensure_writable+0x2e7/0x460 [ 555.239769][ T9693] __should_failslab+0xa4/0xe0 [ 555.245484][ T9693] should_failslab+0x9/0x20 [ 555.250178][ T9693] slab_pre_alloc_hook+0x3b/0xe0 [ 555.255819][ T9693] ? skb_ensure_writable+0x2e7/0x460 [ 555.261120][ T9693] ? skb_ensure_writable+0x2e7/0x460 [ 555.266676][ T9693] __kmalloc_track_caller+0x6c/0x2c0 [ 555.272780][ T9693] ? skb_ensure_writable+0x2e7/0x460 [ 555.278690][ T9693] ? skb_ensure_writable+0x2e7/0x460 [ 555.284077][ T9693] pskb_expand_head+0x11b/0x11d0 [ 555.289373][ T9693] ? __copy_skb_header+0x437/0x600 [ 555.294812][ T9693] ? __kasan_check_write+0x14/0x20 [ 555.300176][ T9693] ? __skb_clone+0x47a/0x790 [ 555.305006][ T9693] skb_ensure_writable+0x2e7/0x460 [ 555.310212][ T9693] bpf_clone_redirect+0x10b/0x380 [ 555.315530][ T9693] bpf_prog_6893982b85ceadf7+0x56/0x6d0 [ 555.321358][ T9693] ? __kasan_slab_alloc+0xcf/0xf0 [ 555.326392][ T9693] ? __kasan_slab_alloc+0xbd/0xf0 [ 555.331716][ T9693] ? slab_post_alloc_hook+0x4f/0x2b0 [ 555.337298][ T9693] ? kmem_cache_alloc+0xf7/0x260 [ 555.342234][ T9693] ? __build_skb+0x2d/0x310 [ 555.346736][ T9693] ? build_skb+0x24/0x200 [ 555.351246][ T9693] ? bpf_prog_test_run_skb+0x279/0x1150 [ 555.357430][ T9693] ? bpf_prog_test_run+0x3d5/0x620 [ 555.363079][ T9693] ? __sys_bpf+0x52c/0x730 [ 555.367861][ T9693] ? __x64_sys_bpf+0x7c/0x90 [ 555.372843][ T9693] ? x64_sys_call+0x4b9/0x9a0 [ 555.377785][ T9693] ? do_syscall_64+0x4c/0xa0 [ 555.382734][ T9693] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.389501][ T9693] ? __kasan_check_read+0x11/0x20 [ 555.395206][ T9693] ? bpf_test_timer_continue+0x146/0x4a0 [ 555.401135][ T9693] bpf_test_run+0x33d/0x8d0 [ 555.406149][ T9693] ? convert___skb_to_skb+0x4f0/0x4f0 [ 555.412490][ T9693] ? eth_get_headlen+0x1f0/0x1f0 [ 555.417873][ T9693] ? convert___skb_to_skb+0x41/0x4f0 [ 555.423794][ T9693] bpf_prog_test_run_skb+0x9ec/0x1150 [ 555.429461][ T9693] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 555.435906][ T9693] bpf_prog_test_run+0x3d5/0x620 [ 555.442155][ T9693] ? bpf_prog_query+0x230/0x230 [ 555.447115][ T9693] ? selinux_bpf+0xce/0xf0 [ 555.451622][ T9693] ? security_bpf+0x82/0xa0 [ 555.456218][ T9693] __sys_bpf+0x52c/0x730 [ 555.460682][ T9693] ? bpf_link_show_fdinfo+0x310/0x310 [ 555.466504][ T9693] ? debug_smp_processor_id+0x17/0x20 [ 555.473198][ T9693] __x64_sys_bpf+0x7c/0x90 [ 555.478177][ T9693] x64_sys_call+0x4b9/0x9a0 [ 555.482948][ T9693] do_syscall_64+0x4c/0xa0 [ 555.488078][ T9693] ? clear_bhb_loop+0x50/0xa0 [ 555.493280][ T9693] ? clear_bhb_loop+0x50/0xa0 [ 555.498393][ T9693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.505002][ T9693] RIP: 0033:0x7f8c72c2bbe9 [ 555.509645][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.530698][ T9693] RSP: 002b:00007f8c71694038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.539614][ T9693] RAX: ffffffffffffffda RBX: 00007f8c72e62fa0 RCX: 00007f8c72c2bbe9 [ 555.548491][ T9693] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 555.557600][ T9693] RBP: 00007f8c71694090 R08: 0000000000000000 R09: 0000000000000000 [ 555.565955][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.574203][ T9693] R13: 00007f8c72e63038 R14: 00007f8c72e62fa0 R15: 00007fffcb2b9ef8 [ 555.582471][ T9693] [ 555.594289][ T956] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 555.595296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.654849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 555.662741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 555.814549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.829909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 555.838512][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.845756][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.854230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 555.863959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 555.871826][ T956] usb 2-1: device descriptor read/64, error -71 [ 555.879935][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.887366][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.889429][ T333] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 555.896596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.915241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.923913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.266496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.275268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.289295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.298650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.311777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.321025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.330131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.337993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 556.348998][ T9686] device veth0_vlan entered promiscuous mode [ 556.361419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.371471][ T9686] device veth1_macvtap entered promiscuous mode [ 556.382638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.390401][ T956] usb 2-1: device descriptor read/64, error -71 [ 556.392770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.413557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.422442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.449535][ T333] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 556.460257][ T333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.549756][ T333] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 556.560824][ T333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.576367][ T10] device veth1_macvtap left promiscuous mode [ 556.586881][ T10] device veth0_vlan left promiscuous mode [ 556.949351][ T956] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 556.960032][ T333] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 556.972504][ T333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.055044][ T30] audit: type=1400 audit(2000000275.042:4000): avc: denied { create } for pid=9716 comm="syz.5.3103" name="#24" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 557.078287][ T333] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 557.090766][ T333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.093746][ T30] audit: type=1400 audit(2000000275.042:4001): avc: denied { link } for pid=9716 comm="syz.5.3103" name="#24" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 557.129474][ T30] audit: type=1400 audit(2000000275.042:4002): avc: denied { rename } for pid=9716 comm="syz.5.3103" name="#25" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 557.189485][ T333] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 557.201140][ T333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.239508][ T956] usb 2-1: device descriptor read/64, error -71 [ 557.539513][ T333] usb 7-1: string descriptor 0 read error: -22 [ 557.547038][ T333] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.560674][ T333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.574548][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3106'. [ 557.583861][ T30] audit: type=1400 audit(2000000275.562:4003): avc: denied { validate_trans } for pid=9723 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 557.610597][ T333] usb 7-1: invalid UAC_HEADER (v1) [ 557.617418][ T333] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 557.729456][ T956] usb 2-1: device descriptor read/64, error -71 [ 557.768332][ T9737] binder: BINDER_SET_CONTEXT_MGR already set [ 557.778373][ T9737] binder: 9736:9737 ioctl 4018620d 200000000040 returned -16 [ 557.848165][ T9744] xt_bpf: check failed: parse error [ 557.976696][ T956] usb usb2-port1: attempt power cycle [ 558.668005][ T9752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3113'. [ 558.700725][ T30] audit: type=1400 audit(2000000276.692:4004): avc: denied { mount } for pid=9753 comm="syz.0.3114" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.749443][ T30] audit: type=1400 audit(2000000276.692:4005): avc: denied { unmount } for pid=9753 comm="syz.0.3114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.797760][ T30] audit: type=1400 audit(2000000276.762:4006): avc: denied { connect } for pid=9755 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 558.844505][ T30] audit: type=1400 audit(2000000276.762:4007): avc: denied { write } for pid=9755 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 558.865429][ T30] audit: type=1400 audit(2000000276.762:4008): avc: denied { read } for pid=9755 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.001612][ T5778] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 559.770139][ T9761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3118'. [ 560.527234][ T26] usb 7-1: USB disconnect, device number 2 [ 560.615519][ T30] audit: type=1400 audit(2000000278.602:4009): avc: denied { write } for pid=9773 comm="syz.6.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.655923][ T9779] FAULT_INJECTION: forcing a failure. [ 560.655923][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 560.712364][ T9779] CPU: 0 PID: 9779 Comm: syz.4.3122 Not tainted syzkaller #0 [ 560.720242][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.731676][ T9779] Call Trace: [ 560.735261][ T9779] [ 560.738387][ T9779] __dump_stack+0x21/0x30 [ 560.743014][ T9779] dump_stack_lvl+0xee/0x150 [ 560.747809][ T9779] ? show_regs_print_info+0x20/0x20 [ 560.753447][ T9779] dump_stack+0x15/0x20 [ 560.758061][ T9779] should_fail+0x3c1/0x510 [ 560.762584][ T9779] ? skb_ensure_writable+0x2e7/0x460 [ 560.768160][ T9779] __should_failslab+0xa4/0xe0 [ 560.773363][ T9779] should_failslab+0x9/0x20 [ 560.778459][ T9779] slab_pre_alloc_hook+0x3b/0xe0 [ 560.783732][ T9779] ? skb_ensure_writable+0x2e7/0x460 [ 560.790087][ T9779] ? skb_ensure_writable+0x2e7/0x460 [ 560.796841][ T9779] __kmalloc_track_caller+0x6c/0x2c0 [ 560.802657][ T9779] ? skb_ensure_writable+0x2e7/0x460 [ 560.809023][ T9779] ? skb_ensure_writable+0x2e7/0x460 [ 560.815129][ T9779] pskb_expand_head+0x11b/0x11d0 [ 560.821574][ T9779] ? __copy_skb_header+0x437/0x600 [ 560.827516][ T9779] ? __kasan_check_write+0x14/0x20 [ 560.834445][ T9779] ? __skb_clone+0x47a/0x790 [ 560.839706][ T9779] skb_ensure_writable+0x2e7/0x460 [ 560.845063][ T9779] bpf_clone_redirect+0x10b/0x380 [ 560.850270][ T9779] bpf_prog_6893982b85ceadf7+0x56/0x33c [ 560.855935][ T9779] ? __kasan_slab_alloc+0xcf/0xf0 [ 560.861145][ T9779] ? __kasan_slab_alloc+0xbd/0xf0 [ 560.866406][ T9779] ? slab_post_alloc_hook+0x4f/0x2b0 [ 560.871931][ T9779] ? kmem_cache_alloc+0xf7/0x260 [ 560.877354][ T9779] ? __build_skb+0x2d/0x310 [ 560.881974][ T9779] ? build_skb+0x24/0x200 [ 560.886508][ T9779] ? bpf_prog_test_run_skb+0x279/0x1150 [ 560.892084][ T9779] ? bpf_prog_test_run+0x3d5/0x620 [ 560.897317][ T9779] ? __sys_bpf+0x52c/0x730 [ 560.902009][ T9779] ? __x64_sys_bpf+0x7c/0x90 [ 560.906953][ T9779] ? x64_sys_call+0x4b9/0x9a0 [ 560.912191][ T9779] ? do_syscall_64+0x4c/0xa0 [ 560.917455][ T9779] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 560.923985][ T9779] ? __kasan_check_read+0x11/0x20 [ 560.929561][ T9779] ? bpf_test_timer_continue+0x146/0x4a0 [ 560.935391][ T9779] bpf_test_run+0x33d/0x8d0 [ 560.939953][ T9779] ? convert___skb_to_skb+0x4f0/0x4f0 [ 560.945654][ T9779] ? eth_get_headlen+0x1f0/0x1f0 [ 560.950959][ T9779] ? convert___skb_to_skb+0x41/0x4f0 [ 560.957017][ T9779] bpf_prog_test_run_skb+0x9ec/0x1150 [ 560.963028][ T9779] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 560.969770][ T9779] bpf_prog_test_run+0x3d5/0x620 [ 560.975348][ T9779] ? bpf_prog_query+0x230/0x230 [ 560.980633][ T9779] ? selinux_bpf+0xce/0xf0 [ 560.985610][ T9779] ? security_bpf+0x82/0xa0 [ 560.990824][ T9779] __sys_bpf+0x52c/0x730 [ 560.995264][ T9779] ? bpf_link_show_fdinfo+0x310/0x310 [ 561.000938][ T9779] ? debug_smp_processor_id+0x17/0x20 [ 561.006690][ T9779] __x64_sys_bpf+0x7c/0x90 [ 561.011405][ T9779] x64_sys_call+0x4b9/0x9a0 [ 561.016047][ T9779] do_syscall_64+0x4c/0xa0 [ 561.020751][ T9779] ? clear_bhb_loop+0x50/0xa0 [ 561.025622][ T9779] ? clear_bhb_loop+0x50/0xa0 [ 561.030589][ T9779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.036767][ T9779] RIP: 0033:0x7f8f19acebe9 [ 561.041477][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.062296][ T9779] RSP: 002b:00007f8f18537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.071337][ T9779] RAX: ffffffffffffffda RBX: 00007f8f19d05fa0 RCX: 00007f8f19acebe9 [ 561.079706][ T9779] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 561.088389][ T9779] RBP: 00007f8f18537090 R08: 0000000000000000 R09: 0000000000000000 [ 561.096452][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.105029][ T9779] R13: 00007f8f19d06038 R14: 00007f8f19d05fa0 R15: 00007ffdbe0d14e8 [ 561.113483][ T9779] [ 562.034725][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 562.048696][ T9792] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3124'. [ 562.059461][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 562.338506][ T9804] x_tables: duplicate underflow at hook 4 [ 562.359419][ T5778] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 562.374941][ T5778] usb 6-1: can't read configurations, error -71 [ 562.429350][ T9815] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 562.438003][ T9815] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 563.861166][ T9822] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3132'. [ 565.370803][ T5776] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 566.063318][ T9834] xt_CT: No such helper "netbios-ns" [ 566.523155][ T9855] xt_bpf: check failed: parse error [ 566.551963][ T9857] device pim6reg1 entered promiscuous mode [ 566.940768][ T9870] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3146'. [ 567.130932][ T5778] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 568.495021][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 568.510815][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 568.510831][ T30] audit: type=1326 audit(2000000286.502:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.546751][ T9881] FAULT_INJECTION: forcing a failure. [ 568.546751][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 568.549630][ T30] audit: type=1326 audit(2000000286.502:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.586692][ T30] audit: type=1326 audit(2000000286.542:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.613270][ T30] audit: type=1326 audit(2000000286.542:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.638633][ T30] audit: type=1326 audit(2000000286.542:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.663512][ T9881] CPU: 0 PID: 9881 Comm: syz.6.3152 Not tainted syzkaller #0 [ 568.663931][ T9888] futex_wake_op: syz.0.3151 tries to shift op by -1; fix this program [ 568.671364][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.671383][ T9881] Call Trace: [ 568.671390][ T9881] [ 568.671399][ T9881] __dump_stack+0x21/0x30 [ 568.688505][ T30] audit: type=1326 audit(2000000286.542:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.691478][ T9881] dump_stack_lvl+0xee/0x150 [ 568.691513][ T9881] ? show_regs_print_info+0x20/0x20 [ 568.691535][ T9881] dump_stack+0x15/0x20 [ 568.691553][ T9881] should_fail+0x3c1/0x510 [ 568.698513][ T30] audit: type=1326 audit(2000000286.542:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.702935][ T9881] ? skb_ensure_writable+0x2e7/0x460 [ 568.702964][ T9881] __should_failslab+0xa4/0xe0 [ 568.730317][ T30] audit: type=1326 audit(2000000286.542:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.733848][ T9881] should_failslab+0x9/0x20 [ 568.745930][ T30] audit: type=1326 audit(2000000286.542:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.748362][ T9881] slab_pre_alloc_hook+0x3b/0xe0 [ 568.785921][ T30] audit: type=1326 audit(2000000286.542:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f19acebe9 code=0x7ffc0000 [ 568.810342][ T9881] ? skb_ensure_writable+0x2e7/0x460 [ 568.810379][ T9881] ? skb_ensure_writable+0x2e7/0x460 [ 568.810397][ T9881] __kmalloc_track_caller+0x6c/0x2c0 [ 568.810419][ T9881] ? skb_ensure_writable+0x2e7/0x460 [ 568.810436][ T9881] ? skb_ensure_writable+0x2e7/0x460 [ 568.810453][ T9881] pskb_expand_head+0x11b/0x11d0 [ 568.810473][ T9881] ? __copy_skb_header+0x437/0x600 [ 568.810501][ T9881] ? __kasan_check_write+0x14/0x20 [ 568.810519][ T9881] ? __skb_clone+0x47a/0x790 [ 568.810539][ T9881] skb_ensure_writable+0x2e7/0x460 [ 568.810557][ T9881] bpf_clone_redirect+0x10b/0x380 [ 568.810579][ T9881] bpf_prog_6893982b85ceadf7+0x56/0xb28 [ 568.810597][ T9881] ? __kasan_slab_alloc+0xcf/0xf0 [ 568.943153][ T9881] ? __kasan_slab_alloc+0xbd/0xf0 [ 568.948271][ T9881] ? slab_post_alloc_hook+0x4f/0x2b0 [ 568.954002][ T9881] ? kmem_cache_alloc+0xf7/0x260 [ 568.959120][ T9881] ? __build_skb+0x2d/0x310 [ 568.964149][ T9881] ? build_skb+0x24/0x200 [ 568.969319][ T9881] ? bpf_prog_test_run_skb+0x279/0x1150 [ 568.975423][ T9881] ? bpf_prog_test_run+0x3d5/0x620 [ 568.980997][ T9881] ? __sys_bpf+0x52c/0x730 [ 568.985950][ T9881] ? __x64_sys_bpf+0x7c/0x90 [ 568.990709][ T9881] ? x64_sys_call+0x4b9/0x9a0 [ 568.995558][ T9881] ? do_syscall_64+0x4c/0xa0 [ 569.000439][ T9881] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.006863][ T9881] ? __kasan_check_read+0x11/0x20 [ 569.012342][ T9881] ? bpf_test_timer_continue+0x146/0x4a0 [ 569.018791][ T9881] bpf_test_run+0x33d/0x8d0 [ 569.023492][ T9881] ? convert___skb_to_skb+0x4f0/0x4f0 [ 569.029348][ T9881] ? eth_get_headlen+0x1f0/0x1f0 [ 569.035271][ T9881] ? convert___skb_to_skb+0x41/0x4f0 [ 569.040926][ T9881] bpf_prog_test_run_skb+0x9ec/0x1150 [ 569.047130][ T9881] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 569.053897][ T9881] bpf_prog_test_run+0x3d5/0x620 [ 569.059414][ T9881] ? bpf_prog_query+0x230/0x230 [ 569.065862][ T9881] ? selinux_bpf+0xce/0xf0 [ 569.070485][ T9881] ? security_bpf+0x82/0xa0 [ 569.075393][ T9881] __sys_bpf+0x52c/0x730 [ 569.080162][ T9881] ? bpf_link_show_fdinfo+0x310/0x310 [ 569.087634][ T9881] ? debug_smp_processor_id+0x17/0x20 [ 569.094529][ T9881] __x64_sys_bpf+0x7c/0x90 [ 569.099992][ T9881] x64_sys_call+0x4b9/0x9a0 [ 569.105826][ T9881] do_syscall_64+0x4c/0xa0 [ 569.110567][ T9881] ? clear_bhb_loop+0x50/0xa0 [ 569.115821][ T9881] ? clear_bhb_loop+0x50/0xa0 [ 569.121503][ T9881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.127944][ T9881] RIP: 0033:0x7f8c72c2bbe9 [ 569.132946][ T9881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.154510][ T9881] RSP: 002b:00007f8c71694038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.163732][ T9881] RAX: ffffffffffffffda RBX: 00007f8c72e62fa0 RCX: 00007f8c72c2bbe9 [ 569.172518][ T9881] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 569.180704][ T9881] RBP: 00007f8c71694090 R08: 0000000000000000 R09: 0000000000000000 [ 569.189772][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.199037][ T9881] R13: 00007f8c72e63038 R14: 00007f8c72e62fa0 R15: 00007fffcb2b9ef8 [ 569.208013][ T9881] [ 569.249523][ T5778] usb 6-1: unable to get BOS descriptor or descriptor too short [ 569.359468][ T5778] usb 6-1: config 2 has an invalid interface number: 22 but max is 0 [ 569.369139][ T5778] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 569.395221][ T5778] usb 6-1: config 2 has no interface number 0 [ 569.460135][ T5778] usb 6-1: config 2 interface 22 has no altsetting 0 [ 569.474822][ T9898] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 569.485981][ T9898] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 569.572786][ T9901] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3156'. [ 569.582866][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3156'. [ 569.619454][ T5778] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 569.629015][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.638028][ T5778] usb 6-1: Product: syz [ 569.642927][ T5778] usb 6-1: Manufacturer: syz [ 569.647708][ T5778] usb 6-1: SerialNumber: syz [ 569.799979][ T5778] usb-storage 6-1:2.22: USB Mass Storage device detected [ 569.873907][ T5778] usb-storage 6-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 570.288726][ T5778] usb 6-1: USB disconnect, device number 34 [ 572.861611][ T9948] xt_CT: No such helper "netbios-ns" [ 573.434627][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3172'. [ 574.518730][ T6] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 576.392082][ T9988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9988 comm=syz.1.3185 [ 576.449563][ T6] usb 5-1: device descriptor read/all, error -71 [ 576.502983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 576.520071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.867266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 576.898892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.927876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.962018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.973300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.985280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.717679][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 577.717697][ T30] audit: type=1400 audit(2000000295.702:4080): avc: denied { read } for pid=10015 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 578.910519][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3195'. [ 580.471556][T10038] SELinux: Context Ü is not valid (left unmapped). [ 581.398801][T10053] xt_bpf: check failed: parse error Stopping sshd: [ 581.537557][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3203'. stopped /usr/sbin/sshd (pid 192) OK Stopping crond: stopped /usr/sbin/crond (pid 185) OK Stopping dhcpcd... [ 582.542811][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3206'. stopped /sbin/dhcpcd (pid 139) [ 585.922475][ T30] audit: type=1400 audit(2000000303.912:4081): avc: denied { setopt } for pid=10081 comm="syz.0.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 586.329388][ T30] audit: type=1326 audit(2000000303.912:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 Stopping network: [ 586.477209][ T30] audit: type=1326 audit(2000000303.912:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 586.724511][ T30] audit: type=1326 audit(2000000304.262:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 586.753257][ T30] audit: type=1326 audit(2000000304.262:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 586.958040][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3211'. [ 587.151140][ T30] audit: type=1326 audit(2000000304.262:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 587.471434][T10110] 9pnet: Insufficient options for proto=fd [ 588.682316][T10117] tipc: Started in network mode [ 588.708050][T10117] tipc: Node identity 00000000000000000080040000000001, cluster identity 4711 [ 589.173491][T10117] tipc: Enabling of bearer rejected, failed to enable media [ 589.186546][ T30] audit: type=1326 audit(2000000304.262:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 589.222424][ T30] audit: type=1326 audit(2000000304.262:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 589.379408][ T30] audit: type=1326 audit(2000000304.262:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 [ 589.461695][ T30] audit: type=1326 audit(2000000304.262:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.0.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996c99be9 code=0x7ffc0000 OK [ 590.269693][T10141] xt_policy: neither incoming nor outgoing policy selected Stopping iptables: [ 591.805876][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 591.805893][ T30] audit: type=1400 audit(2000000309.792:4107): avc: denied { read write } for pid=10144 comm="iptables" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 591.853769][ T30] audit: type=1400 audit(2000000309.832:4108): avc: denied { search } for pid=10144 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.894804][ T30] audit: type=1400 audit(2000000309.832:4109): avc: denied { write } for pid=10144 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 592.039390][ T30] audit: type=1400 audit(2000000309.832:4110): avc: denied { add_name } for pid=10144 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.073562][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3222'. [ 592.107964][ T30] audit: type=1400 audit(2000000309.832:4111): avc: denied { create } for pid=10144 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 593.595106][ T30] audit: type=1400 audit(2000000309.832:4112): avc: denied { read open } for pid=10144 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=6994 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 593.621497][ T30] audit: type=1400 audit(2000000309.832:4113): avc: denied { lock } for pid=10144 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=6994 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 593.870328][T10181] futex_wake_op: syz.0.3228 tries to shift op by 144; fix this program [ 593.884328][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'. [ 594.236771][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 594.270914][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.327604][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 594.351758][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.383431][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.403675][T10200] FAULT_INJECTION: forcing a failure. [ 594.403675][T10200] name failslab, interval 1, probability 0, space 0, times 0 killall: can't kill pid 10088: No such process [ 594.453144][T10200] CPU: 0 PID: 10200 Comm: syz.4.3234 Not tainted syzkaller #0 [ 594.461987][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.472744][T10200] Call Trace: [ 594.476530][T10200] [ 594.480444][T10200] __dump_stack+0x21/0x30 [ 594.485670][T10200] dump_stack_lvl+0xee/0x150 [ 594.490463][T10200] ? show_regs_print_info+0x20/0x20 [ 594.497214][T10200] dump_stack+0x15/0x20 [ 594.502543][T10200] should_fail+0x3c1/0x510 [ 594.507858][T10200] __should_failslab+0xa4/0xe0 [ 594.513237][T10200] should_failslab+0x9/0x20 [ 594.518883][T10200] slab_pre_alloc_hook+0x3b/0xe0 [ 594.524118][T10200] ? __kernfs_new_node+0xdb/0x680 [ 594.529978][T10200] kmem_cache_alloc+0x44/0x260 [ 594.535433][T10200] __kernfs_new_node+0xdb/0x680 [ 594.540747][T10200] ? kernfs_new_node+0x260/0x260 [ 594.545878][T10200] ? selinux_kernfs_init_security+0x12b/0x400 [ 594.552531][T10200] ? selinux_path_notify+0x650/0x650 [ 594.559009][T10200] kernfs_new_node+0x150/0x260 [ 594.565104][T10200] __kernfs_create_file+0x4e/0x270 [ 594.570312][T10200] sysfs_add_file_mode_ns+0x29a/0x350 [ 594.577045][T10200] internal_create_group+0x489/0xcf0 [ 594.583223][T10200] ? sysfs_create_group+0x30/0x30 [ 594.590747][T10200] ? kernfs_add_one+0x528/0x650 [ 594.597049][T10200] ? __kasan_check_write+0x14/0x20 [ 594.603155][T10200] ? kernfs_put+0x449/0x480 [ 594.608376][T10200] sysfs_create_groups+0x58/0x120 [ 594.613490][T10200] device_add_attrs+0x155/0x700 [ 594.618733][T10200] device_add+0x5e3/0xed0 [ 594.624632][T10200] wakeup_source_sysfs_add+0x1b7/0x290 [ 594.630377][T10200] wakeup_source_register+0x1a5/0x3d0 [ 594.637134][T10200] ep_insert+0xbf3/0x1570 [ 594.642098][T10200] ? do_epoll_ctl+0xd40/0xd40 [ 594.647552][T10200] ? __kasan_check_write+0x14/0x20 [ 594.654404][T10200] ? wait_for_completion_killable_timeout+0x10/0x10 [ 594.661458][T10200] ? security_capable+0x87/0xb0 [ 594.666504][T10200] do_epoll_ctl+0x7e7/0xd40 [ 594.671731][T10200] __x64_sys_epoll_ctl+0x160/0x1a0 [ 594.677757][T10200] ? ep_modify+0x840/0x840 [ 594.685744][T10200] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 594.693105][T10200] x64_sys_call+0x3af/0x9a0 [ 594.698778][T10200] do_syscall_64+0x4c/0xa0 [ 594.704267][T10200] ? clear_bhb_loop+0x50/0xa0 [ 594.709505][T10200] ? clear_bhb_loop+0x50/0xa0 [ 594.714858][T10200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 594.721122][T10200] RIP: 0033:0x7f8f19acebe9 [ 594.726182][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.750086][T10200] RSP: 002b:00007f8f18537038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 594.759512][T10200] RAX: ffffffffffffffda RBX: 00007f8f19d05fa0 RCX: 00007f8f19acebe9 [ 594.768832][T10200] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 594.778633][T10200] RBP: 00007f8f18537090 R08: 0000000000000000 R09: 0000000000000000 [ 594.790754][T10200] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 594.802054][T10200] R13: 00007f8f19d06038 R14: 00007f8f19d05fa0 R15: 00007ffdbe0d14e8 [ 594.814946][T10200] [ 594.831412][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.865148][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready Stopping klogd: [ 594.912374][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.986583][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 594.998879][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3235'. [ 595.042908][ T5613] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready OK [ 595.099845][ T26] ip6_tunnel: syztnl1 xmit: Local address not yet configured! Stopping acpid: [ 595.219595][ T30] audit: type=1400 audit(2000000313.192:4114): avc: denied { write } for pid=86 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.312370][ T30] audit: type=1400 audit(2000000313.192:4115): avc: denied { remove_name } for pid=86 comm="acpid" name="acpid.pid" dev="tmpfs" ino=8 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.914121][ T30] audit: type=1400 audit(2000000313.192:4116): avc: denied { unlink } for pid=86 comm="acpid" name="acpid.pid" dev="tmpfs" ino=8 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping syslogd: [ 597.358456][T10231] bridge: RTM_NEWNEIGH with invalid ether address stopped /sbin/syslogd (pid 83) OK [ 597.939849][ T5776] usb 7-1: new high-speed USB device number 3 using dummy_hcd umount: can't remount debugfs read-only[ 597.962006][T10251] netlink: 'syz.0.3245': attribute type 4 has an invalid length. [ 598.469856][T10268] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3247'. [ 598.484517][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 599.219409][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 599.548994][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.68 closed by remote host. [ 599.618786][ T30] audit: type=1400 audit(2000000317.572:4117): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14923]" dev="pipefs" ino=14923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 599.709618][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.749369][ T5776] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 599.771429][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.802324][ T5776] usb 7-1: config 0 descriptor?? [ 599.834401][ T5776] usb 7-1: can't set config #0, error -71 [ 599.861173][ T5776] usb 7-1: USB disconnect, device number 3 [ 599.891091][ T5613] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 600.860666][ T5613] device bridge_slave_1 left promiscuous mode [ 600.867220][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.876858][ T5613] device bridge_slave_0 left promiscuous mode [ 600.883581][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.891958][ T5613] device bridge_slave_1 left promiscuous mode [ 600.898753][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.907094][ T5613] device bridge_slave_0 left promiscuous mode [ 600.914376][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.923584][ T5613] device veth1_macvtap left promiscuous mode [ 600.931437][ T5613] device veth0_vlan left promiscuous mode [ 600.938816][ T5613] device veth1_macvtap left promiscuous mode [ 600.945988][ T5613] device veth0_vlan left promiscuous mode [ 601.769731][T10275] kvm: exiting hardware virtualization [ 601.778215][T10275] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 601.786181][T10275] ACPI: PM: Preparing to enter system sleep state S5 [ 601.796368][T10275] reboot: Power down serialport: VM disconnected.