last executing test programs: 2m55.03989515s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff}, 0x18}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = semget$private(0x0, 0x0, 0x673) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000040)=""/119) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x0, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x3, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0xaf22b2ef2df600f4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @generic={0x80, 0x0, 0x4, 0xdbd6, 0x2}], &(0x7f0000000280)='GPL\x00', 0x3, 0x70, &(0x7f00000002c0)=""/112, 0x41100, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x6, 0x370, 0xe7b}, 0x10, r5, r3, 0x5, &(0x7f0000000680)=[r6, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x5, 0x3, 0x0, 0x1}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x4, 0x0, 0x5}, {0x3, 0x5, 0x6, 0x6}, {0x4, 0x2, 0x6, 0x4}], 0x10, 0xfffffffc}, 0x94) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000340)={0x3, 0x2}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 2m54.992883743s ago: executing program 1 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x4044) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="7bfa2bd679277ed520e9bd7000fcdbdf25040000001c00018017000100fb5fc6169fbf7701a5aad3736ce176655f080000"], 0x30}, 0x1, 0x0, 0x0, 0x860}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x3}, 0x18) 2m54.425261149s ago: executing program 1 (id=135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x51031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x4f20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="ae", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4000, 0x2) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m53.843793205s ago: executing program 1 (id=145): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x12, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', 0x0}) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x12, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) (async) 2m53.28663738s ago: executing program 1 (id=149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x51031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x4f20, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="ae", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4000, 0x2) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m52.332017726s ago: executing program 1 (id=164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x1000000000005, 0x3a65, 0x1, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(0x0, 0x5, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x48, 0x0, 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@delchain={0x530, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4ec, 0x2, [@TCA_BPF_POLICE={0x42c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x79cd}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x8, 0x6, 0xa94, 0x0, 0x4, 0x101, 0xfffffff1, 0x8, 0xdea, 0x6, 0x6, 0xfffffff8, 0x2, 0x4, 0xe280, 0x8001, 0xe, 0x4000005, 0x1, 0x8, 0x0, 0x5, 0x8, 0x8, 0x79, 0xfa3, 0x5, 0x2, 0x727d, 0x8, 0x3, 0x4, 0x5, 0x1, 0x8, 0x2, 0x9, 0x88f, 0x7fffffff, 0x5, 0x5, 0x1, 0x101, 0xe7b3, 0x8000, 0x1000, 0x4, 0x3, 0x7, 0x6, 0x4, 0x9, 0x200, 0x6, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x0, 0x187, 0x7, 0x39, 0x200, 0x5, 0x3, 0x7fffffff, 0x1, 0x100, 0x6, 0x0, 0x2, 0x2, 0x10, 0x8, 0x5b896bcf, 0x1149, 0x1, 0xba, 0x7999, 0x7f, 0x6, 0x3, 0xffffffff, 0x7, 0x7f, 0xfffffffb, 0x6, 0x2, 0x3, 0xf, 0x101, 0x9, 0x7, 0x1, 0x4c8f, 0x9, 0x7, 0x2, 0x5, 0x1, 0x7fff, 0xdf3, 0x1000, 0x9, 0x8, 0x4e68, 0x7f, 0x3, 0xffff, 0x3, 0x7, 0x5, 0x400, 0xff, 0xf381, 0x2, 0x7, 0x0, 0x5, 0xae, 0x3ff, 0x1ff, 0x4, 0xfffffffc, 0x8000, 0x7, 0x4, 0x8, 0x80000001, 0xfffffffc, 0x101, 0x1ff, 0x1, 0x2, 0x1, 0x2, 0x6, 0xffffffff, 0x9, 0x2, 0x80000000, 0x82, 0xffffffa6, 0x3, 0x5a, 0x8, 0x800, 0x9edb, 0xff, 0xa, 0x10001, 0x3, 0x7ff, 0x3, 0x3, 0xffffffff, 0x6, 0x7, 0x8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x7, 0xbbae, 0x10001, 0x26, 0xaa9a, 0x7, 0x0, 0x1, 0x6, 0x7fffffff, 0x1c, 0x6, 0x3, 0xc14, 0x9a2, 0x3, 0xd952, 0x1, 0x80000000, 0x0, 0x4, 0x705, 0xc0000000, 0x400, 0x7, 0x3, 0x8370, 0x208, 0xc, 0x7, 0xf, 0x0, 0x5, 0x5, 0x40, 0x80000001, 0x5, 0x3fd, 0x1, 0x1, 0x10000, 0xb9d, 0x0, 0xfffffffd, 0x6, 0x900, 0xc, 0x4, 0x6, 0x6, 0x4, 0x9, 0xb, 0xf65, 0x5f1, 0x6, 0xfffffff8, 0xfffffff8, 0xe6, 0x4, 0x5, 0x200, 0xd, 0x8b0a, 0xfffffff7, 0x10000, 0x7, 0x4, 0x7, 0x9f, 0x5, 0x7, 0x3b8, 0x890, 0xffe00000, 0x6, 0x3, 0x4004, 0x869b, 0x1, 0x1000, 0x919f, 0xa, 0x8, 0xffff, 0x9, 0x0, 0x7, 0xd79c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb0, 0x1, [@m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x47, 0x6, "825ea505cd8d9c1721953af7a400f6cf702fc7b2111820b0414f6833016479b53c5bb8870994d31219ff60439972ef56d7ddfde8ee0a804fc331e4d7b1f0313dbbc056"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x34, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) setresgid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140), 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m52.331759066s ago: executing program 32 (id=164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x1000000000005, 0x3a65, 0x1, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(0x0, 0x5, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x48, 0x0, 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@delchain={0x530, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4ec, 0x2, [@TCA_BPF_POLICE={0x42c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x79cd}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x8, 0x6, 0xa94, 0x0, 0x4, 0x101, 0xfffffff1, 0x8, 0xdea, 0x6, 0x6, 0xfffffff8, 0x2, 0x4, 0xe280, 0x8001, 0xe, 0x4000005, 0x1, 0x8, 0x0, 0x5, 0x8, 0x8, 0x79, 0xfa3, 0x5, 0x2, 0x727d, 0x8, 0x3, 0x4, 0x5, 0x1, 0x8, 0x2, 0x9, 0x88f, 0x7fffffff, 0x5, 0x5, 0x1, 0x101, 0xe7b3, 0x8000, 0x1000, 0x4, 0x3, 0x7, 0x6, 0x4, 0x9, 0x200, 0x6, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x0, 0x187, 0x7, 0x39, 0x200, 0x5, 0x3, 0x7fffffff, 0x1, 0x100, 0x6, 0x0, 0x2, 0x2, 0x10, 0x8, 0x5b896bcf, 0x1149, 0x1, 0xba, 0x7999, 0x7f, 0x6, 0x3, 0xffffffff, 0x7, 0x7f, 0xfffffffb, 0x6, 0x2, 0x3, 0xf, 0x101, 0x9, 0x7, 0x1, 0x4c8f, 0x9, 0x7, 0x2, 0x5, 0x1, 0x7fff, 0xdf3, 0x1000, 0x9, 0x8, 0x4e68, 0x7f, 0x3, 0xffff, 0x3, 0x7, 0x5, 0x400, 0xff, 0xf381, 0x2, 0x7, 0x0, 0x5, 0xae, 0x3ff, 0x1ff, 0x4, 0xfffffffc, 0x8000, 0x7, 0x4, 0x8, 0x80000001, 0xfffffffc, 0x101, 0x1ff, 0x1, 0x2, 0x1, 0x2, 0x6, 0xffffffff, 0x9, 0x2, 0x80000000, 0x82, 0xffffffa6, 0x3, 0x5a, 0x8, 0x800, 0x9edb, 0xff, 0xa, 0x10001, 0x3, 0x7ff, 0x3, 0x3, 0xffffffff, 0x6, 0x7, 0x8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x7, 0xbbae, 0x10001, 0x26, 0xaa9a, 0x7, 0x0, 0x1, 0x6, 0x7fffffff, 0x1c, 0x6, 0x3, 0xc14, 0x9a2, 0x3, 0xd952, 0x1, 0x80000000, 0x0, 0x4, 0x705, 0xc0000000, 0x400, 0x7, 0x3, 0x8370, 0x208, 0xc, 0x7, 0xf, 0x0, 0x5, 0x5, 0x40, 0x80000001, 0x5, 0x3fd, 0x1, 0x1, 0x10000, 0xb9d, 0x0, 0xfffffffd, 0x6, 0x900, 0xc, 0x4, 0x6, 0x6, 0x4, 0x9, 0xb, 0xf65, 0x5f1, 0x6, 0xfffffff8, 0xfffffff8, 0xe6, 0x4, 0x5, 0x200, 0xd, 0x8b0a, 0xfffffff7, 0x10000, 0x7, 0x4, 0x7, 0x9f, 0x5, 0x7, 0x3b8, 0x890, 0xffe00000, 0x6, 0x3, 0x4004, 0x869b, 0x1, 0x1000, 0x919f, 0xa, 0x8, 0xffff, 0x9, 0x0, 0x7, 0xd79c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb0, 0x1, [@m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x47, 0x6, "825ea505cd8d9c1721953af7a400f6cf702fc7b2111820b0414f6833016479b53c5bb8870994d31219ff60439972ef56d7ddfde8ee0a804fc331e4d7b1f0313dbbc056"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x34, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) setresgid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000140), 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 38.851603347s ago: executing program 2 (id=3637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x20008000) remap_file_pages(&(0x7f0000330000/0x2000)=nil, 0x2000, 0x0, 0x600, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 38.803101491s ago: executing program 2 (id=3640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x21, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x1, 0xb, 0xb, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26a}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='syzkaller\x00', 0x8001, 0xd2, &(0x7f0000000180)=""/210, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x7fffffff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r5, 0x0, 0x1}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x21, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x1, 0xb, 0xb, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26a}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='syzkaller\x00', 0x8001, 0xd2, &(0x7f0000000180)=""/210, 0x1e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x7fffffff, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r5, 0x0, 0x1}, 0x18) (async) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x2000000) (async) 38.708252988s ago: executing program 2 (id=3642): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f0000000240)=""/136, 0x88}], 0x1) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 38.705540389s ago: executing program 2 (id=3648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x20000400) (async) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250300000008000600ac1414bb06000a004e210000080006006401010114000700ff0200000000000000000000000000011400090000000000000000000000ffffac1414bb08000b"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) (async) flock(0xffffffffffffffff, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x82000714) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8040) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xa, 0x4, 0x20a9, 0x3, 0x2, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efb957d5a6e", 0x8}], 0x1}, 0x4840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e5ffffffffffffff00000000e141247047230000000000000000"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e5ffffffffffffff00000000e141247047230000000000000000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 38.662378732s ago: executing program 2 (id=3652): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) 38.304322871s ago: executing program 2 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 38.282503922s ago: executing program 33 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 1.809502035s ago: executing program 6 (id=4402): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32], 0x44}}, 0x8000) socket(0x11, 0x80a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 1.727816592s ago: executing program 6 (id=4403): syz_emit_ethernet(0xdd2, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xdc4, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop]}}, "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"}}}}, 0x0) 1.647207819s ago: executing program 6 (id=4404): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 1.62444782s ago: executing program 6 (id=4406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 1.513868319s ago: executing program 6 (id=4412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x24, r1, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='btrfs_failed_cluster_setup\x00', r3}, 0x18) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x1000, 0xffffffff, 0xaa}, &(0x7f0000000280), &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) 1.108674692s ago: executing program 5 (id=4422): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.053818096s ago: executing program 5 (id=4423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%pS \x00'}, 0x20) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1.026326398s ago: executing program 5 (id=4424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%pS \x00'}, 0x20) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 958.118494ms ago: executing program 5 (id=4430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) (fail_nth: 1) 929.742246ms ago: executing program 4 (id=4432): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 864.069241ms ago: executing program 4 (id=4433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x7a04e413bcb59324, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0, 0x406}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r4, 0x0, 0x0}, 0x10) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)) 863.458371ms ago: executing program 5 (id=4434): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000100)=0x6ab7, 0x4) prctl$PR_SET_MM_AUXV(0x48, 0xc, 0x0, 0x29) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000780)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) acct(&(0x7f00000001c0)='./file0\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r11}, 0x18) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r11, 0x40189429, &(0x7f00000008c0)={0x1, 0x6aba, 0x8}) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='afs_call_done\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) kexec_load(0x4, 0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@resuid}, {@nodioread_nolock}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 860.026682ms ago: executing program 3 (id=4435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%pS \x00'}, 0x20) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 752.84411ms ago: executing program 3 (id=4436): syz_clone3(&(0x7f0000000b00)={0x22c308100, &(0x7f00000008c0)=0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940), {0x13}, &(0x7f0000000980)=""/195, 0xc3, &(0x7f0000000a80)=""/31, &(0x7f0000000ac0)=[0x0], 0x1}, 0x58) pidfd_send_signal(r0, 0x1e, &(0x7f0000000b80)={0x3f, 0x1a, 0x4}, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000840)={'system_u:object_r:dhcpd_unit_file_t:s0', 0x20, 'u:object_r:app_data_file:s0:c512,c768', 0x20, 0xfffffffffffffff6, 0x20, '/sbin/dhclient\x00'}, 0x71) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) 701.146734ms ago: executing program 4 (id=4437): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bind$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x4e22, 0x34, @mcast2, 0x80000001}, 0x1c) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x5) 638.296429ms ago: executing program 4 (id=4438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x80000) 637.984609ms ago: executing program 4 (id=4439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r1) 637.443349ms ago: executing program 6 (id=4440): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) creat(&(0x7f0000000080)='./file0\x00', 0xa) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x5, 0x0) 635.860959ms ago: executing program 4 (id=4441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x24, r1, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='btrfs_failed_cluster_setup\x00', r3}, 0x18) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x1000, 0xffffffff, 0xaa}, &(0x7f0000000280), &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) 587.484833ms ago: executing program 3 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) ioperm(0x5, 0xa, 0x100000000000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x51) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) close(r5) 551.167756ms ago: executing program 3 (id=4443): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 478.591532ms ago: executing program 3 (id=4444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r1) 478.019292ms ago: executing program 3 (id=4445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80003, 0x6}, 0x0, &(0x7f0000005380)={0x3ff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c101000000000000000000001811", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 311.114495ms ago: executing program 0 (id=4446): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r2, &(0x7f0000001980)={'#! ', '', [{}], 0xa, "30b47fa0b33093965dba5ad6f1fb453297fa9b9de44733a149ba4366bcbb7ffad7b8cc9fdf097a1482a32296ee2a81681f4a4a1d2b88a4dd081fb8501268bb60cb53cb5b1bab800d732f5adc8ffd163a9d1943acb256abdfcd62904736d1d0b58e5e9f2b82051d82af8e35c53e0fc52a0019ef9b0e73ae496ec81d981d4d"}, 0x83) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 236.045681ms ago: executing program 0 (id=4447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 207.957944ms ago: executing program 0 (id=4448): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) 140.829729ms ago: executing program 0 (id=4449): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) 90.874323ms ago: executing program 0 (id=4450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x80000) 72.450234ms ago: executing program 5 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x24, r1, 0x101, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='btrfs_failed_cluster_setup\x00', r3}, 0x18) syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x1000, 0xffffffff, 0xaa}, &(0x7f0000000280), &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) 0s ago: executing program 0 (id=4452): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @time={0x83, 0xa77f}, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4c8}}], 0x38) kernel console output (not intermixed with test programs): 7295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.370682][ T29] audit: type=1326 audit(939.245:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.395563][ T29] audit: type=1326 audit(939.245:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.419614][ T29] audit: type=1326 audit(939.245:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.442533][ T29] audit: type=1326 audit(939.245:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.465934][ T29] audit: type=1326 audit(939.245:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.489431][ T29] audit: type=1326 audit(939.245:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.4.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 169.579951][T12041] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 169.579951][T12041] program syz.5.3588 not setting count and/or reply_len properly [ 169.639586][T12043] lo speed is unknown, defaulting to 1000 [ 169.741451][ T1078] usb 7-1: enqueue for inactive port 0 [ 169.747174][ T1078] usb 7-1: enqueue for inactive port 0 [ 169.795063][T12092] macvtap0: refused to change device tx_queue_len [ 169.817458][ T1078] vhci_hcd: vhci_device speed not set [ 169.904008][T12099] FAULT_INJECTION: forcing a failure. [ 169.904008][T12099] name failslab, interval 1, probability 0, space 0, times 0 [ 169.916871][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.0.3601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.916901][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.916913][T12099] Call Trace: [ 169.916921][T12099] [ 169.916929][T12099] __dump_stack+0x1d/0x30 [ 169.916984][T12099] dump_stack_lvl+0xe8/0x140 [ 169.916999][T12099] dump_stack+0x15/0x1b [ 169.917013][T12099] should_fail_ex+0x265/0x280 [ 169.917031][T12099] should_failslab+0x8c/0xb0 [ 169.917078][T12099] kmem_cache_alloc_noprof+0x50/0x310 [ 169.917100][T12099] ? security_file_alloc+0x32/0x100 [ 169.917132][T12099] security_file_alloc+0x32/0x100 [ 169.917201][T12099] init_file+0x5c/0x1d0 [ 169.917227][T12099] alloc_empty_file+0x8b/0x200 [ 169.917256][T12099] path_openat+0x68/0x2170 [ 169.917310][T12099] ? _parse_integer_limit+0x170/0x190 [ 169.917339][T12099] ? kstrtoull+0x111/0x140 [ 169.917355][T12099] ? kstrtouint+0x76/0xc0 [ 169.917374][T12099] do_filp_open+0x109/0x230 [ 169.917401][T12099] do_sys_openat2+0xa6/0x110 [ 169.917479][T12099] __x64_sys_openat+0xf2/0x120 [ 169.917576][T12099] x64_sys_call+0x2e9c/0x2ff0 [ 169.917594][T12099] do_syscall_64+0xd2/0x200 [ 169.917615][T12099] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.917794][T12099] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 169.917819][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.917841][T12099] RIP: 0033:0x7f330a7debe9 [ 169.917856][T12099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.917916][T12099] RSP: 002b:00007f3309247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.917936][T12099] RAX: ffffffffffffffda RBX: 00007f330aa05fa0 RCX: 00007f330a7debe9 [ 169.917947][T12099] RDX: 0000000000000041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 169.917958][T12099] RBP: 00007f3309247090 R08: 0000000000000000 R09: 0000000000000000 [ 169.917971][T12099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.917984][T12099] R13: 00007f330aa06038 R14: 00007f330aa05fa0 R15: 00007ffe3c0e07d8 [ 169.918043][T12099] [ 170.683812][T12158] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 170.691749][T12158] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3612'. [ 170.701482][T12158] FAULT_INJECTION: forcing a failure. [ 170.701482][T12158] name failslab, interval 1, probability 0, space 0, times 0 [ 170.714458][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.4.3612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.714493][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.714505][T12158] Call Trace: [ 170.714512][T12158] [ 170.714520][T12158] __dump_stack+0x1d/0x30 [ 170.714571][T12158] dump_stack_lvl+0xe8/0x140 [ 170.714587][T12158] dump_stack+0x15/0x1b [ 170.714632][T12158] should_fail_ex+0x265/0x280 [ 170.714650][T12158] should_failslab+0x8c/0xb0 [ 170.714669][T12158] __kmalloc_noprof+0xa5/0x3e0 [ 170.714692][T12158] ? wpan_phy_new+0x2a/0x190 [ 170.714711][T12158] wpan_phy_new+0x2a/0x190 [ 170.714775][T12158] ieee802154_alloc_hw+0xbb/0x540 [ 170.714799][T12158] hwsim_add_one+0x4a/0xa80 [ 170.714844][T12158] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 170.714914][T12158] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 170.714945][T12158] hwsim_new_radio_nl+0x2e/0x40 [ 170.714962][T12158] genl_family_rcv_msg_doit+0x143/0x1b0 [ 170.714988][T12158] genl_rcv_msg+0x422/0x460 [ 170.715016][T12158] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 170.715046][T12158] netlink_rcv_skb+0x123/0x220 [ 170.715066][T12158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.715130][T12158] genl_rcv+0x28/0x40 [ 170.715149][T12158] netlink_unicast+0x5bd/0x690 [ 170.715177][T12158] netlink_sendmsg+0x58b/0x6b0 [ 170.715196][T12158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.715216][T12158] __sock_sendmsg+0x145/0x180 [ 170.715239][T12158] ____sys_sendmsg+0x31e/0x4e0 [ 170.715279][T12158] ___sys_sendmsg+0x17b/0x1d0 [ 170.715308][T12158] __x64_sys_sendmsg+0xd4/0x160 [ 170.715329][T12158] x64_sys_call+0x191e/0x2ff0 [ 170.715361][T12158] do_syscall_64+0xd2/0x200 [ 170.715384][T12158] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.715406][T12158] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.715443][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.715462][T12158] RIP: 0033:0x7fb25facebe9 [ 170.715477][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.715492][T12158] RSP: 002b:00007fb25e537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.715510][T12158] RAX: ffffffffffffffda RBX: 00007fb25fcf5fa0 RCX: 00007fb25facebe9 [ 170.715583][T12158] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 170.715596][T12158] RBP: 00007fb25e537090 R08: 0000000000000000 R09: 0000000000000000 [ 170.715610][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.715663][T12158] R13: 00007fb25fcf6038 R14: 00007fb25fcf5fa0 R15: 00007ffff3f343f8 [ 170.715736][T12158] [ 170.715743][T12158] failure to allocate master IEEE802.15.4 device [ 170.983969][T12168] macvtap0: refused to change device tx_queue_len [ 171.005779][T12170] FAULT_INJECTION: forcing a failure. [ 171.005779][T12170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.014466][T12172] can0: slcan on ttyS3. [ 171.019587][T12170] CPU: 1 UID: 0 PID: 12170 Comm: syz.5.3617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.019613][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.019625][T12170] Call Trace: [ 171.019633][T12170] [ 171.019641][T12170] __dump_stack+0x1d/0x30 [ 171.019698][T12170] dump_stack_lvl+0xe8/0x140 [ 171.019717][T12170] dump_stack+0x15/0x1b [ 171.019767][T12170] should_fail_ex+0x265/0x280 [ 171.019788][T12170] should_fail+0xb/0x20 [ 171.019804][T12170] should_fail_usercopy+0x1a/0x20 [ 171.019826][T12170] _copy_from_iter+0xd2/0xe80 [ 171.019850][T12170] ? __build_skb_around+0x1a0/0x200 [ 171.019961][T12170] ? __alloc_skb+0x223/0x320 [ 171.020046][T12170] netlink_sendmsg+0x471/0x6b0 [ 171.020070][T12170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.020167][T12170] __sock_sendmsg+0x145/0x180 [ 171.020193][T12170] ____sys_sendmsg+0x31e/0x4e0 [ 171.020227][T12170] ___sys_sendmsg+0x17b/0x1d0 [ 171.020260][T12170] __x64_sys_sendmsg+0xd4/0x160 [ 171.020284][T12170] x64_sys_call+0x191e/0x2ff0 [ 171.020304][T12170] do_syscall_64+0xd2/0x200 [ 171.020392][T12170] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.020414][T12170] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.020438][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.020457][T12170] RIP: 0033:0x7f5f366cebe9 [ 171.020473][T12170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.020542][T12170] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.020561][T12170] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 171.020574][T12170] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000009 [ 171.020604][T12170] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 171.020617][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.020629][T12170] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 171.020712][T12170] [ 171.248393][T12181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 171.254947][T12181] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.262588][T12181] vhci_hcd vhci_hcd.0: Device attached [ 171.286222][T12185] vhci_hcd: connection closed [ 171.294481][ T51] vhci_hcd: stop threads [ 171.303506][ T51] vhci_hcd: release socket [ 171.308038][ T51] vhci_hcd: disconnect device [ 171.310031][T12178] can0 (unregistered): slcan off ttyS3. [ 171.316668][T12190] netlink: 'syz.5.3622': attribute type 298 has an invalid length. [ 171.323366][T12195] FAULT_INJECTION: forcing a failure. [ 171.323366][T12195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.339305][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.2.3624 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.339388][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.339398][T12195] Call Trace: [ 171.339404][T12195] [ 171.339411][T12195] __dump_stack+0x1d/0x30 [ 171.339432][T12195] dump_stack_lvl+0xe8/0x140 [ 171.339452][T12195] dump_stack+0x15/0x1b [ 171.339467][T12195] should_fail_ex+0x265/0x280 [ 171.339533][T12195] should_fail+0xb/0x20 [ 171.339551][T12195] should_fail_usercopy+0x1a/0x20 [ 171.339575][T12195] _copy_from_user+0x1c/0xb0 [ 171.339601][T12195] ___sys_sendmsg+0xc1/0x1d0 [ 171.339696][T12195] __x64_sys_sendmsg+0xd4/0x160 [ 171.339753][T12195] x64_sys_call+0x191e/0x2ff0 [ 171.339771][T12195] do_syscall_64+0xd2/0x200 [ 171.339797][T12195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.339875][T12195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.339895][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.339914][T12195] RIP: 0033:0x7f69c295ebe9 [ 171.339930][T12195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.339947][T12195] RSP: 002b:00007f69c13c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.339996][T12195] RAX: ffffffffffffffda RBX: 00007f69c2b85fa0 RCX: 00007f69c295ebe9 [ 171.340010][T12195] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 171.340023][T12195] RBP: 00007f69c13c7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.340036][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.340049][T12195] R13: 00007f69c2b86038 R14: 00007f69c2b85fa0 R15: 00007ffe1b859558 [ 171.340065][T12195] [ 171.564296][T12202] hub 9-0:1.0: USB hub found [ 171.570386][T12202] hub 9-0:1.0: 8 ports detected [ 171.639387][T12220] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 171.639387][T12220] program syz.2.3635 not setting count and/or reply_len properly [ 171.686853][T12230] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 171.686853][T12230] program syz.4.3638 not setting count and/or reply_len properly [ 171.691688][T12224] lo speed is unknown, defaulting to 1000 [ 171.730534][T12240] IPv6: Can't replace route, no match found [ 171.815536][T12272] smc: net device bond0 applied user defined pnetid SYZ0 [ 171.825156][T12272] smc: net device bond0 erased user defined pnetid SYZ0 [ 171.912532][T12286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 171.919257][T12286] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.926996][T12286] vhci_hcd vhci_hcd.0: Device attached [ 172.011080][T12306] FAULT_INJECTION: forcing a failure. [ 172.011080][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.024380][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.5.3656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.024432][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.024444][T12306] Call Trace: [ 172.024451][T12306] [ 172.024459][T12306] __dump_stack+0x1d/0x30 [ 172.024481][T12306] dump_stack_lvl+0xe8/0x140 [ 172.024501][T12306] dump_stack+0x15/0x1b [ 172.024519][T12306] should_fail_ex+0x265/0x280 [ 172.024571][T12306] should_fail+0xb/0x20 [ 172.024625][T12306] should_fail_usercopy+0x1a/0x20 [ 172.024648][T12306] _copy_from_user+0x1c/0xb0 [ 172.024689][T12306] __sys_bpf+0x178/0x7b0 [ 172.024769][T12306] __x64_sys_bpf+0x41/0x50 [ 172.024792][T12306] x64_sys_call+0x2aea/0x2ff0 [ 172.024811][T12306] do_syscall_64+0xd2/0x200 [ 172.024834][T12306] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.024858][T12306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.025054][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.025077][T12306] RIP: 0033:0x7f5f366cebe9 [ 172.025091][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.025105][T12306] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.025123][T12306] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 172.025135][T12306] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 172.025166][T12306] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 172.025179][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.025192][T12306] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 172.025212][T12306] [ 172.247443][T12311] lo speed is unknown, defaulting to 1000 [ 172.263595][ T3384] vhci_hcd: vhci_device speed not set [ 172.315158][ T352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.330218][ T3384] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 172.366024][ T352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.403240][T12346] FAULT_INJECTION: forcing a failure. [ 172.403240][T12346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.416400][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.3.3662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.416478][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.416488][T12346] Call Trace: [ 172.416494][T12346] [ 172.416501][T12346] __dump_stack+0x1d/0x30 [ 172.416520][T12346] dump_stack_lvl+0xe8/0x140 [ 172.416540][T12346] dump_stack+0x15/0x1b [ 172.416557][T12346] should_fail_ex+0x265/0x280 [ 172.416634][T12346] should_fail+0xb/0x20 [ 172.416650][T12346] should_fail_usercopy+0x1a/0x20 [ 172.416673][T12346] strncpy_from_user+0x25/0x230 [ 172.416700][T12346] ? kmem_cache_alloc_noprof+0x186/0x310 [ 172.416807][T12346] ? getname_flags+0x80/0x3b0 [ 172.416835][T12346] getname_flags+0xae/0x3b0 [ 172.416887][T12346] user_path_at+0x28/0x130 [ 172.416912][T12346] do_fchownat+0xb0/0x210 [ 172.416935][T12346] __x64_sys_lchown+0x4a/0x60 [ 172.416984][T12346] x64_sys_call+0x2861/0x2ff0 [ 172.417000][T12346] do_syscall_64+0xd2/0x200 [ 172.417022][T12346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.417042][T12346] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.417132][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.417150][T12346] RIP: 0033:0x7f2d3cfbebe9 [ 172.417164][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.417205][T12346] RSP: 002b:00007f2d3ba1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 172.417237][T12346] RAX: ffffffffffffffda RBX: 00007f2d3d1e5fa0 RCX: 00007f2d3cfbebe9 [ 172.417345][T12346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 172.417356][T12346] RBP: 00007f2d3ba1f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.417369][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.417400][T12346] R13: 00007f2d3d1e6038 R14: 00007f2d3d1e5fa0 R15: 00007ffdbc5b3378 [ 172.417420][T12346] [ 172.436723][T12336] lo speed is unknown, defaulting to 1000 [ 172.482973][ T6712] usb 11-1: enqueue for inactive port 0 [ 172.632410][ T6712] usb 11-1: enqueue for inactive port 0 [ 172.646905][T12296] vhci_hcd: connection reset by peer [ 172.652404][ T51] vhci_hcd: stop threads [ 172.656802][ T51] vhci_hcd: release socket [ 172.661250][ T51] vhci_hcd: disconnect device [ 172.683494][ T352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.701894][ T6712] vhci_hcd: vhci_device speed not set [ 172.805541][ T352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.850453][T12336] chnl_net:caif_netlink_parms(): no params data found [ 172.875126][T12472] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 172.875126][T12472] program syz.0.3669 not setting count and/or reply_len properly [ 172.966847][T12502] netlink: 'syz.0.3671': attribute type 1 has an invalid length. [ 172.974677][T12502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3671'. [ 173.012602][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.020644][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.028230][T12336] bridge_slave_0: entered allmulticast mode [ 173.034751][T12336] bridge_slave_0: entered promiscuous mode [ 173.055847][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.063169][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.070514][T12336] bridge_slave_1: entered allmulticast mode [ 173.078057][T12336] bridge_slave_1: entered promiscuous mode [ 173.118273][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.130726][ T352] bridge_slave_1: left allmulticast mode [ 173.136401][ T352] bridge_slave_1: left promiscuous mode [ 173.142430][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.161277][ T352] bridge_slave_0: left allmulticast mode [ 173.167048][ T352] bridge_slave_0: left promiscuous mode [ 173.172876][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.372795][ T352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.390009][ T352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.400846][ T352] bond0 (unregistering): Released all slaves [ 173.414002][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.462737][ T352] hsr_slave_0: left promiscuous mode [ 173.469279][ T352] hsr_slave_1: left promiscuous mode [ 173.484672][T12614] FAULT_INJECTION: forcing a failure. [ 173.484672][T12614] name failslab, interval 1, probability 0, space 0, times 0 [ 173.487475][ T352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.498013][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.0.3676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.498041][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.498052][T12614] Call Trace: [ 173.498058][T12614] [ 173.498064][T12614] __dump_stack+0x1d/0x30 [ 173.498089][T12614] dump_stack_lvl+0xe8/0x140 [ 173.498106][T12614] dump_stack+0x15/0x1b [ 173.498198][T12614] should_fail_ex+0x265/0x280 [ 173.498220][T12614] ? io_manage_buffers_legacy+0x188/0x6c0 [ 173.498247][T12614] should_failslab+0x8c/0xb0 [ 173.498271][T12614] __kmalloc_cache_noprof+0x4c/0x320 [ 173.498326][T12614] io_manage_buffers_legacy+0x188/0x6c0 [ 173.498356][T12614] __io_issue_sqe+0xfe/0x2e0 [ 173.498374][T12614] ? io_assign_file+0x56/0x200 [ 173.498393][T12614] io_issue_sqe+0x53/0x970 [ 173.498411][T12614] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 173.498483][T12614] io_submit_sqes+0x675/0x1060 [ 173.498574][T12614] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 173.498595][T12614] ? 0xffffffff81000000 [ 173.498608][T12614] ? __rcu_read_unlock+0x4f/0x70 [ 173.498671][T12614] ? get_pid_task+0x96/0xd0 [ 173.498691][T12614] ? proc_fail_nth_write+0x13b/0x160 [ 173.498715][T12614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.498740][T12614] ? vfs_write+0x7e8/0x960 [ 173.498760][T12614] ? __rcu_read_unlock+0x4f/0x70 [ 173.498843][T12614] ? __fget_files+0x184/0x1c0 [ 173.498867][T12614] ? fput+0x8f/0xc0 [ 173.498894][T12614] __x64_sys_io_uring_enter+0x78/0x90 [ 173.498985][T12614] x64_sys_call+0x2de1/0x2ff0 [ 173.499017][T12614] do_syscall_64+0xd2/0x200 [ 173.499043][T12614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.499065][T12614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.499090][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.499112][T12614] RIP: 0033:0x7f330a7debe9 [ 173.499128][T12614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.499145][T12614] RSP: 002b:00007f3309247038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 173.499172][T12614] RAX: ffffffffffffffda RBX: 00007f330aa05fa0 RCX: 00007f330a7debe9 [ 173.499185][T12614] RDX: 00000000fffffffe RSI: 000000000000471b RDI: 0000000000000005 [ 173.499198][T12614] RBP: 00007f3309247090 R08: 0000000000000000 R09: ffffffffffffff68 [ 173.499211][T12614] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 173.499223][T12614] R13: 00007f330aa06038 R14: 00007f330aa05fa0 R15: 00007ffe3c0e07d8 [ 173.499242][T12614] [ 173.759039][ T352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.766995][ T352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.774518][ T352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.802021][ T352] veth1_macvtap: left promiscuous mode [ 173.809095][ T352] veth0_macvtap: left promiscuous mode [ 173.815452][ T352] veth1_vlan: left promiscuous mode [ 173.823473][ T352] veth0_vlan: left promiscuous mode [ 173.843907][T12622] SELinux: security_context_str_to_sid () failed with errno=-22 [ 173.915527][ T352] team0 (unregistering): Port device team_slave_1 removed [ 173.925958][ T352] team0 (unregistering): Port device team_slave_0 removed [ 173.941407][T12629] sg_write: process 309 (syz.0.3678) changed security contexts after opening file descriptor, this is not allowed. [ 173.970363][T12636] new mount options do not match the existing superblock, will be ignored [ 174.028349][T12336] team0: Port device team_slave_0 added [ 174.035947][T12336] team0: Port device team_slave_1 added [ 174.073078][T12628] bridge: RTM_NEWNEIGH with invalid ether address [ 174.103307][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.110270][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.137392][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.186590][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'. [ 174.237987][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.245012][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.268469][T12683] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 174.268469][T12683] program syz.4.3686 not setting count and/or reply_len properly [ 174.271613][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.311717][T12336] hsr_slave_0: entered promiscuous mode [ 174.318544][T12336] hsr_slave_1: entered promiscuous mode [ 174.326419][T12336] debugfs: 'hsr0' already exists in 'hsr' [ 174.332487][T12336] Cannot create hsr debugfs directory [ 174.340485][T12714] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 174.340485][T12714] program syz.4.3687 not setting count and/or reply_len properly [ 174.476825][T12336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.490063][T12336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.523096][T12336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.557200][T12780] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.589997][T12336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.679330][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.701958][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.732174][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.739290][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.766942][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.774178][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.803352][T12808] FAULT_INJECTION: forcing a failure. [ 174.803352][T12808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.816784][T12808] CPU: 1 UID: 0 PID: 12808 Comm: syz.3.3692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.816809][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.816820][T12808] Call Trace: [ 174.816827][T12808] [ 174.816906][T12808] __dump_stack+0x1d/0x30 [ 174.816930][T12808] dump_stack_lvl+0xe8/0x140 [ 174.817069][T12808] dump_stack+0x15/0x1b [ 174.817086][T12808] should_fail_ex+0x265/0x280 [ 174.817107][T12808] should_fail+0xb/0x20 [ 174.817122][T12808] should_fail_usercopy+0x1a/0x20 [ 174.817141][T12808] _copy_from_user+0x1c/0xb0 [ 174.817167][T12808] ___sys_sendmsg+0xc1/0x1d0 [ 174.817266][T12808] __x64_sys_sendmsg+0xd4/0x160 [ 174.817287][T12808] x64_sys_call+0x191e/0x2ff0 [ 174.817305][T12808] do_syscall_64+0xd2/0x200 [ 174.817406][T12808] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.817431][T12808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.817469][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.817491][T12808] RIP: 0033:0x7f2d3cfbebe9 [ 174.817507][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.817525][T12808] RSP: 002b:00007f2d3ba1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.817552][T12808] RAX: ffffffffffffffda RBX: 00007f2d3d1e5fa0 RCX: 00007f2d3cfbebe9 [ 174.817564][T12808] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000007 [ 174.817575][T12808] RBP: 00007f2d3ba1f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.817586][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.817598][T12808] R13: 00007f2d3d1e6038 R14: 00007f2d3d1e5fa0 R15: 00007ffdbc5b3378 [ 174.817618][T12808] [ 174.819335][T12336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.081564][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.092553][T12811] infiniband syz!: set active [ 175.097541][T12811] infiniband syz!: added team_slave_0 [ 175.103843][T12823] FAULT_INJECTION: forcing a failure. [ 175.103843][T12823] name failslab, interval 1, probability 0, space 0, times 0 [ 175.116545][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.5.3696 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.116618][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.116629][T12823] Call Trace: [ 175.116636][T12823] [ 175.116643][T12823] __dump_stack+0x1d/0x30 [ 175.116663][T12823] dump_stack_lvl+0xe8/0x140 [ 175.116679][T12823] dump_stack+0x15/0x1b [ 175.116767][T12823] should_fail_ex+0x265/0x280 [ 175.116788][T12823] should_failslab+0x8c/0xb0 [ 175.116813][T12823] kmem_cache_alloc_noprof+0x50/0x310 [ 175.116841][T12823] ? skb_clone+0x151/0x1f0 [ 175.117010][T12823] skb_clone+0x151/0x1f0 [ 175.117033][T12823] nfnetlink_rcv+0x305/0x1690 [ 175.117104][T12823] ? nlmon_xmit+0x4f/0x60 [ 175.117128][T12823] ? consume_skb+0x49/0x150 [ 175.117227][T12823] ? nlmon_xmit+0x4f/0x60 [ 175.117250][T12823] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 175.117272][T12823] ? __dev_queue_xmit+0x1200/0x2000 [ 175.117360][T12823] ? __dev_queue_xmit+0x182/0x2000 [ 175.117379][T12823] ? ref_tracker_free+0x37d/0x3e0 [ 175.117404][T12823] netlink_unicast+0x5bd/0x690 [ 175.117478][T12823] netlink_sendmsg+0x58b/0x6b0 [ 175.117501][T12823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.117522][T12823] __sock_sendmsg+0x145/0x180 [ 175.117548][T12823] ____sys_sendmsg+0x31e/0x4e0 [ 175.117571][T12823] ___sys_sendmsg+0x17b/0x1d0 [ 175.117636][T12823] __x64_sys_sendmsg+0xd4/0x160 [ 175.117660][T12823] x64_sys_call+0x191e/0x2ff0 [ 175.117679][T12823] do_syscall_64+0xd2/0x200 [ 175.117774][T12823] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.117794][T12823] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.117816][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.117889][T12823] RIP: 0033:0x7f5f366cebe9 [ 175.117905][T12823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.117941][T12823] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.117958][T12823] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 175.117969][T12823] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 175.117982][T12823] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 175.117994][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.118005][T12823] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 175.118097][T12823] [ 175.137573][T12830] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 175.137573][T12830] program syz.3.3698 not setting count and/or reply_len properly [ 175.180627][T12811] RDS/IB: syz!: added [ 175.396345][T12811] smc: adding ib device syz! with port count 1 [ 175.402709][T12811] smc: ib device syz! port 1 has pnetid [ 175.459473][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 175.459486][ T29] audit: type=1400 audit(945.747:8561): avc: granted { setsecparam } for pid=12845 comm="syz.5.3701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 175.497719][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3700'. [ 175.522237][T12850] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 175.522237][T12850] program syz.5.3702 not setting count and/or reply_len properly [ 175.626753][T12336] veth0_vlan: entered promiscuous mode [ 175.648742][T12336] veth1_vlan: entered promiscuous mode [ 175.675037][T12336] veth0_macvtap: entered promiscuous mode [ 175.682695][ T29] audit: type=1326 audit(945.978:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.706262][ T29] audit: type=1326 audit(945.978:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.729452][ T29] audit: type=1326 audit(945.989:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.740483][T12336] veth1_macvtap: entered promiscuous mode [ 175.752918][ T29] audit: type=1326 audit(945.989:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.762242][T12733] syz.4.3690 (12733) used greatest stack depth: 6376 bytes left [ 175.781802][ T29] audit: type=1326 audit(945.989:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.812780][ T29] audit: type=1326 audit(945.989:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.813842][T12336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.839723][ T29] audit: type=1326 audit(946.146:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.850755][T12336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.866437][ T29] audit: type=1326 audit(946.146:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.866488][ T29] audit: type=1326 audit(946.146:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.3.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 175.928223][ T157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.937794][ T157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.946945][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.967364][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.105319][T12888] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 176.105319][T12888] program syz.0.3711 not setting count and/or reply_len properly [ 176.144186][T12893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3713'. [ 176.180193][T12897] lo speed is unknown, defaulting to 1000 [ 176.180509][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 176.202832][T12874] FAULT_INJECTION: forcing a failure. [ 176.202832][T12874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.216035][T12874] CPU: 1 UID: 0 PID: 12874 Comm: syz.4.3707 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.216062][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.216073][T12874] Call Trace: [ 176.216116][T12874] [ 176.216125][T12874] __dump_stack+0x1d/0x30 [ 176.216146][T12874] dump_stack_lvl+0xe8/0x140 [ 176.216164][T12874] dump_stack+0x15/0x1b [ 176.216180][T12874] should_fail_ex+0x265/0x280 [ 176.216201][T12874] should_fail+0xb/0x20 [ 176.216266][T12874] should_fail_usercopy+0x1a/0x20 [ 176.216284][T12874] _copy_to_user+0x20/0xa0 [ 176.216391][T12874] simple_read_from_buffer+0xb5/0x130 [ 176.216415][T12874] proc_fail_nth_read+0x10e/0x150 [ 176.216441][T12874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.216536][T12874] vfs_read+0x1a8/0x770 [ 176.216629][T12874] ? __rcu_read_unlock+0x4f/0x70 [ 176.216649][T12874] ? __fget_files+0x184/0x1c0 [ 176.216681][T12874] ksys_read+0xda/0x1a0 [ 176.216726][T12874] __x64_sys_read+0x40/0x50 [ 176.216748][T12874] x64_sys_call+0x27bc/0x2ff0 [ 176.216767][T12874] do_syscall_64+0xd2/0x200 [ 176.216789][T12874] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.216863][T12874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.216885][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.216909][T12874] RIP: 0033:0x7fb25facd5fc [ 176.216924][T12874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.216940][T12874] RSP: 002b:00007fb25e537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.216958][T12874] RAX: ffffffffffffffda RBX: 00007fb25fcf5fa0 RCX: 00007fb25facd5fc [ 176.216970][T12874] RDX: 000000000000000f RSI: 00007fb25e5370a0 RDI: 0000000000000005 [ 176.216983][T12874] RBP: 00007fb25e537090 R08: 0000000000000000 R09: 0000000000000000 [ 176.216994][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.217024][T12874] R13: 00007fb25fcf6038 R14: 00007fb25fcf5fa0 R15: 00007ffff3f343f8 [ 176.217108][T12874] [ 176.436140][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 176.471627][ T3377] hid_parser_main: 25 callbacks suppressed [ 176.477716][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.485329][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.492785][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.507833][T12929] can0: slcan on ptm1. [ 176.515392][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.523105][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.530561][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.538142][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.545906][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.553496][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.561301][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 176.573225][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz1 [ 176.613044][T12939] lo speed is unknown, defaulting to 1000 [ 176.672209][T12929] can0 (unregistered): slcan off ptm1. [ 176.710442][T12978] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 176.710442][T12978] program syz.0.3724 not setting count and/or reply_len properly [ 176.798854][T12987] tipc: Started in network mode [ 176.803845][T12987] tipc: Node identity ac141413, cluster identity 4711 [ 176.816010][T12987] tipc: New replicast peer: 10.1.1.2 [ 176.821544][T12987] tipc: Enabled bearer , priority 10 [ 176.880556][T12993] FAULT_INJECTION: forcing a failure. [ 176.880556][T12993] name failslab, interval 1, probability 0, space 0, times 0 [ 176.880654][T12993] CPU: 0 UID: 0 PID: 12993 Comm: syz.5.3730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.880678][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.880695][T12993] Call Trace: [ 176.880700][T12993] [ 176.880707][T12993] __dump_stack+0x1d/0x30 [ 176.880729][T12993] dump_stack_lvl+0xe8/0x140 [ 176.880746][T12993] dump_stack+0x15/0x1b [ 176.880763][T12993] should_fail_ex+0x265/0x280 [ 176.880780][T12993] should_failslab+0x8c/0xb0 [ 176.880803][T12993] kmem_cache_alloc_node_noprof+0x57/0x320 [ 176.880832][T12993] ? __alloc_skb+0x101/0x320 [ 176.880851][T12993] __alloc_skb+0x101/0x320 [ 176.880902][T12993] netlink_alloc_large_skb+0xba/0xf0 [ 176.880929][T12993] netlink_sendmsg+0x3cf/0x6b0 [ 176.880948][T12993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.880966][T12993] __sock_sendmsg+0x145/0x180 [ 176.881055][T12993] ____sys_sendmsg+0x31e/0x4e0 [ 176.881079][T12993] ___sys_sendmsg+0x17b/0x1d0 [ 176.881262][T12993] __x64_sys_sendmsg+0xd4/0x160 [ 176.881287][T12993] x64_sys_call+0x191e/0x2ff0 [ 176.881307][T12993] do_syscall_64+0xd2/0x200 [ 176.881333][T12993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.881396][T12993] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.881421][T12993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.881479][T12993] RIP: 0033:0x7f5f366cebe9 [ 176.881493][T12993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.881507][T12993] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.881524][T12993] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 176.881536][T12993] RDX: 0000000004000050 RSI: 0000200000000d80 RDI: 0000000000000003 [ 176.881547][T12993] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 176.881582][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.881595][T12993] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 176.881614][T12993] [ 176.955095][T12997] netlink: '+}[@': attribute type 7 has an invalid length. [ 176.955111][T12997] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 177.059877][T13018] program syz.5.3733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.060124][T13018] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 177.095546][T13016] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 177.095546][T13016] program syz.6.3736 not setting count and/or reply_len properly [ 177.139696][T13023] SELinux: failed to load policy [ 177.139988][ T3384] usb 9-1: enqueue for inactive port 0 [ 177.140011][ T3384] usb 9-1: enqueue for inactive port 0 [ 177.157528][T13025] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3738'. [ 177.157612][T13025] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3738'. [ 177.157649][T13025] netlink: 'syz.5.3738': attribute type 6 has an invalid length. [ 177.157661][T13025] netlink: 'syz.5.3738': attribute type 5 has an invalid length. [ 177.157672][T13025] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3738'. [ 177.202816][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3739'. [ 177.219617][ T3384] vhci_hcd: vhci_device speed not set [ 177.251197][T13027] bridge0: port 3(macsec1) entered blocking state [ 177.408430][T13027] bridge0: port 3(macsec1) entered disabled state [ 177.430767][T13027] macsec1: entered allmulticast mode [ 177.461689][T13027] macsec1: left allmulticast mode [ 177.560113][T13041] lo speed is unknown, defaulting to 1000 [ 177.722348][T13057] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.746692][T13050] netlink: 'syz.5.3744': attribute type 6 has an invalid length. [ 177.839108][T13088] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 177.839108][T13088] program syz.5.3747 not setting count and/or reply_len properly [ 177.873657][T13092] FAULT_INJECTION: forcing a failure. [ 177.873657][T13092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.880877][ T10] tipc: Node number set to 2886997011 [ 177.887018][T13092] CPU: 1 UID: 0 PID: 13092 Comm: syz.3.3750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.887043][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.887077][T13092] Call Trace: [ 177.887083][T13092] [ 177.887090][T13092] __dump_stack+0x1d/0x30 [ 177.887112][T13092] dump_stack_lvl+0xe8/0x140 [ 177.887148][T13092] dump_stack+0x15/0x1b [ 177.887161][T13092] should_fail_ex+0x265/0x280 [ 177.887179][T13092] should_fail+0xb/0x20 [ 177.887244][T13092] should_fail_usercopy+0x1a/0x20 [ 177.887271][T13092] _copy_from_user+0x1c/0xb0 [ 177.887296][T13092] ___sys_sendmsg+0xc1/0x1d0 [ 177.887329][T13092] __x64_sys_sendmsg+0xd4/0x160 [ 177.887416][T13092] x64_sys_call+0x191e/0x2ff0 [ 177.887436][T13092] do_syscall_64+0xd2/0x200 [ 177.887521][T13092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.887554][T13092] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 177.887578][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.887598][T13092] RIP: 0033:0x7f2d3cfbebe9 [ 177.887614][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.887630][T13092] RSP: 002b:00007f2d3ba1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.887674][T13092] RAX: ffffffffffffffda RBX: 00007f2d3d1e5fa0 RCX: 00007f2d3cfbebe9 [ 177.887687][T13092] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000006 [ 177.887737][T13092] RBP: 00007f2d3ba1f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.887749][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.887761][T13092] R13: 00007f2d3d1e6038 R14: 00007f2d3d1e5fa0 R15: 00007ffdbc5b3378 [ 177.887779][T13092] [ 178.081958][T13100] SELinux: security_context_str_to_sid () failed with errno=-22 [ 178.147352][T13103] lo speed is unknown, defaulting to 1000 [ 178.167239][T13115] lo: entered allmulticast mode [ 178.175406][T13115] tunl0: entered allmulticast mode [ 178.193512][T13115] gre0: entered allmulticast mode [ 178.213694][T13115] gretap0: entered allmulticast mode [ 178.229035][T13115] erspan0: entered allmulticast mode [ 178.236804][T13115] ip_vti0: entered allmulticast mode [ 178.244321][T13115] ip6_vti0: entered allmulticast mode [ 178.252614][T13126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13126 comm=syz.4.3758 [ 178.253150][T13115] sit0: entered allmulticast mode [ 178.272087][T13115] ip6tnl0: entered allmulticast mode [ 178.279026][T13115] ip6gre0: entered allmulticast mode [ 178.286425][T13115] syz_tun: entered allmulticast mode [ 178.292993][T13115] ip6gretap0: entered allmulticast mode [ 178.299777][T13115] bridge0: entered allmulticast mode [ 178.306008][T13115] vcan0: entered allmulticast mode [ 178.312052][T13115] bond0: entered allmulticast mode [ 178.317423][T13115] bond_slave_0: entered allmulticast mode [ 178.323478][T13115] bond_slave_1: entered allmulticast mode [ 178.331814][T13115] team0: entered allmulticast mode [ 178.337395][T13115] team_slave_0: entered allmulticast mode [ 178.343243][T13115] team_slave_1: entered allmulticast mode [ 178.350290][T13115] dummy0: entered allmulticast mode [ 178.357205][T13115] nlmon0: entered allmulticast mode [ 178.364098][T13115] caif0: entered allmulticast mode [ 178.369817][T13115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.693161][T13196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13196 comm=syz.5.3770 [ 178.813005][T13205] veth0: entered promiscuous mode [ 178.904010][T13221] lo speed is unknown, defaulting to 1000 [ 179.578047][T13057] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.625911][T13057] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.682688][T13057] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.750014][ T3683] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.781245][ T3683] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.807556][ T3683] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.816037][ T3683] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.889594][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=13283 comm=syz.6.3784 [ 179.927918][T13285] tipc: Started in network mode [ 179.932865][T13285] tipc: Node identity ac1414aa, cluster identity 4711 [ 179.940387][T13285] tipc: New replicast peer: 100.1.1.1 [ 179.945816][T13285] tipc: Enabled bearer , priority 10 [ 179.970438][T13298] FAULT_INJECTION: forcing a failure. [ 179.970438][T13298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.984236][T13298] CPU: 1 UID: 0 PID: 13298 Comm: syz.5.3786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.984266][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.984351][T13298] Call Trace: [ 179.984357][T13298] [ 179.984365][T13298] __dump_stack+0x1d/0x30 [ 179.984418][T13298] dump_stack_lvl+0xe8/0x140 [ 179.984504][T13298] dump_stack+0x15/0x1b [ 179.984520][T13298] should_fail_ex+0x265/0x280 [ 179.984538][T13298] should_fail+0xb/0x20 [ 179.984622][T13298] should_fail_usercopy+0x1a/0x20 [ 179.984641][T13298] _copy_from_user+0x1c/0xb0 [ 179.984715][T13298] ___sys_sendmsg+0xc1/0x1d0 [ 179.984744][T13298] __x64_sys_sendmsg+0xd4/0x160 [ 179.984765][T13298] x64_sys_call+0x191e/0x2ff0 [ 179.984786][T13298] do_syscall_64+0xd2/0x200 [ 179.984844][T13298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.984863][T13298] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.984888][T13298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.984905][T13298] RIP: 0033:0x7f5f366cebe9 [ 179.984965][T13298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.984979][T13298] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.984996][T13298] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 179.985010][T13298] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000004 [ 179.985023][T13298] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 179.985097][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.985108][T13298] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 179.985126][T13298] [ 180.187552][T13287] __nla_validate_parse: 9 callbacks suppressed [ 180.187587][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3781'. [ 180.226662][T13309] program syz.6.3788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.867227][T13337] 9pnet_fd: Insufficient options for proto=fd [ 180.975777][T13346] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 180.975777][T13346] program syz.3.3798 not setting count and/or reply_len properly [ 181.147428][ T10] tipc: Node number set to 2886997162 [ 181.163102][T13358] FAULT_INJECTION: forcing a failure. [ 181.163102][T13358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.176455][T13358] CPU: 1 UID: 0 PID: 13358 Comm: syz.6.3802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.176478][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.176502][T13358] Call Trace: [ 181.176509][T13358] [ 181.176518][T13358] __dump_stack+0x1d/0x30 [ 181.176541][T13358] dump_stack_lvl+0xe8/0x140 [ 181.176558][T13358] dump_stack+0x15/0x1b [ 181.176572][T13358] should_fail_ex+0x265/0x280 [ 181.176606][T13358] should_fail+0xb/0x20 [ 181.176624][T13358] should_fail_usercopy+0x1a/0x20 [ 181.176647][T13358] _copy_from_user+0x1c/0xb0 [ 181.176675][T13358] ___sys_sendmsg+0xc1/0x1d0 [ 181.176713][T13358] __x64_sys_sendmsg+0xd4/0x160 [ 181.176736][T13358] x64_sys_call+0x191e/0x2ff0 [ 181.176756][T13358] do_syscall_64+0xd2/0x200 [ 181.176781][T13358] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.176806][T13358] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.176908][T13358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.176981][T13358] RIP: 0033:0x7f590f64ebe9 [ 181.176998][T13358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.177023][T13358] RSP: 002b:00007f590e0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.177071][T13358] RAX: ffffffffffffffda RBX: 00007f590f875fa0 RCX: 00007f590f64ebe9 [ 181.177082][T13358] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 181.177093][T13358] RBP: 00007f590e0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.177107][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.177126][T13358] R13: 00007f590f876038 R14: 00007f590f875fa0 R15: 00007ffd3392c1d8 [ 181.177146][T13358] [ 181.374042][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 181.374080][ T29] audit: type=1400 audit(951.955:8791): avc: denied { recv } for pid=10469 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.106 dest=57916 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.417821][ T29] audit: type=1400 audit(952.007:8792): avc: denied { allowed } for pid=13361 comm="syz.6.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.448854][ T29] audit: type=1400 audit(952.018:8793): avc: denied { append } for pid=13364 comm="syz.3.3807" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.472784][ T29] audit: type=1400 audit(952.018:8794): avc: denied { open } for pid=13364 comm="syz.3.3807" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.496544][ T29] audit: type=1400 audit(952.018:8795): avc: denied { map_create } for pid=13364 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.515760][ T29] audit: type=1400 audit(952.018:8796): avc: denied { bpf } for pid=13364 comm="syz.3.3807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.536262][ T29] audit: type=1400 audit(952.018:8797): avc: denied { prog_load } for pid=13364 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.555162][ T29] audit: type=1400 audit(952.018:8798): avc: denied { perfmon } for pid=13364 comm="syz.3.3807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.578866][ T29] audit: type=1400 audit(952.018:8799): avc: denied { create } for pid=13364 comm="syz.3.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.600761][ T29] audit: type=1400 audit(952.028:8800): avc: denied { bind } for pid=13364 comm="syz.3.3807" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.706602][T13383] netlink: 'syz.6.3814': attribute type 10 has an invalid length. [ 181.807067][T13392] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 181.807067][T13392] program syz.5.3816 not setting count and/or reply_len properly [ 181.840987][T13395] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 181.840987][T13395] program syz.5.3817 not setting count and/or reply_len properly [ 181.921642][T13397] lo speed is unknown, defaulting to 1000 [ 182.658590][T13448] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 182.658590][T13448] program syz.4.3829 not setting count and/or reply_len properly [ 182.699630][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.706848][T13444] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.764383][T13444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.842535][ T157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.853720][ T157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.864362][ T157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.885436][T13465] FAULT_INJECTION: forcing a failure. [ 182.885436][T13465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.898858][T13465] CPU: 0 UID: 0 PID: 13465 Comm: syz.3.3835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.898886][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.898899][T13465] Call Trace: [ 182.898905][T13465] [ 182.898913][T13465] __dump_stack+0x1d/0x30 [ 182.898942][T13465] dump_stack_lvl+0xe8/0x140 [ 182.899013][T13465] dump_stack+0x15/0x1b [ 182.899118][T13465] should_fail_ex+0x265/0x280 [ 182.899140][T13465] should_fail+0xb/0x20 [ 182.899158][T13465] should_fail_usercopy+0x1a/0x20 [ 182.899180][T13465] strncpy_from_user+0x25/0x230 [ 182.899247][T13465] strncpy_from_user_nofault+0x68/0xf0 [ 182.899379][T13465] bpf_probe_read_user_str+0x2a/0x70 [ 182.899411][T13465] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 182.899434][T13465] bpf_trace_run2+0x107/0x1c0 [ 182.899456][T13465] ? rds_cmsg_rdma_args+0xbc5/0xc10 [ 182.899485][T13465] ? rds_cmsg_rdma_args+0xbc5/0xc10 [ 182.899505][T13465] kfree+0x27b/0x320 [ 182.899530][T13465] rds_cmsg_rdma_args+0xbc5/0xc10 [ 182.899558][T13465] rds_cmsg_send+0x24e/0x3d0 [ 182.899585][T13465] rds_sendmsg+0xca7/0x14a0 [ 182.899630][T13465] ? __pfx_rds_sendmsg+0x10/0x10 [ 182.899656][T13465] __sock_sendmsg+0x145/0x180 [ 182.899704][T13465] ____sys_sendmsg+0x31e/0x4e0 [ 182.899729][T13465] ___sys_sendmsg+0x17b/0x1d0 [ 182.899762][T13465] __x64_sys_sendmsg+0xd4/0x160 [ 182.899787][T13465] x64_sys_call+0x191e/0x2ff0 [ 182.899809][T13465] do_syscall_64+0xd2/0x200 [ 182.899892][T13465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.899914][T13465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 182.899938][T13465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.900075][T13465] RIP: 0033:0x7f2d3cfbebe9 [ 182.900089][T13465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.900106][T13465] RSP: 002b:00007f2d3b9fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.900129][T13465] RAX: ffffffffffffffda RBX: 00007f2d3d1e6090 RCX: 00007f2d3cfbebe9 [ 182.900153][T13465] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 182.900165][T13465] RBP: 00007f2d3b9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 182.900177][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.900189][T13465] R13: 00007f2d3d1e6128 R14: 00007f2d3d1e6090 R15: 00007ffdbc5b3378 [ 182.900207][T13465] [ 182.928685][ T157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.094922][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.162371][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.341564][T13487] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 183.341564][T13487] program syz.3.3841 not setting count and/or reply_len properly [ 183.363665][T13485] SELinux: Context system_u:object_r:init_var_run_t:s0 is not valid (left unmapped). [ 183.469251][T13495] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 183.469251][T13495] program syz.3.3844 not setting count and/or reply_len properly [ 183.722398][T13506] FAULT_INJECTION: forcing a failure. [ 183.722398][T13506] name failslab, interval 1, probability 0, space 0, times 0 [ 183.735390][T13506] CPU: 1 UID: 0 PID: 13506 Comm: syz.4.3848 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.735418][T13506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.735429][T13506] Call Trace: [ 183.735435][T13506] [ 183.735443][T13506] __dump_stack+0x1d/0x30 [ 183.735481][T13506] dump_stack_lvl+0xe8/0x140 [ 183.735517][T13506] dump_stack+0x15/0x1b [ 183.735535][T13506] should_fail_ex+0x265/0x280 [ 183.735556][T13506] should_failslab+0x8c/0xb0 [ 183.735575][T13506] kmem_cache_alloc_noprof+0x50/0x310 [ 183.735598][T13506] ? getname_flags+0x80/0x3b0 [ 183.735638][T13506] getname_flags+0x80/0x3b0 [ 183.735660][T13506] user_path_at+0x28/0x130 [ 183.735717][T13506] do_faccessat+0x380/0x800 [ 183.735736][T13506] __x64_sys_faccessat+0x41/0x50 [ 183.735760][T13506] x64_sys_call+0x950/0x2ff0 [ 183.735777][T13506] do_syscall_64+0xd2/0x200 [ 183.735861][T13506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.735883][T13506] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.735912][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.735929][T13506] RIP: 0033:0x7fb25facebe9 [ 183.735943][T13506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.736029][T13506] RSP: 002b:00007fb25e537038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 183.736117][T13506] RAX: ffffffffffffffda RBX: 00007fb25fcf5fa0 RCX: 00007fb25facebe9 [ 183.736129][T13506] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 183.736140][T13506] RBP: 00007fb25e537090 R08: 0000000000000000 R09: 0000000000000000 [ 183.736150][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.736163][T13506] R13: 00007fb25fcf6038 R14: 00007fb25fcf5fa0 R15: 00007ffff3f343f8 [ 183.736232][T13506] [ 183.932398][T13504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.934592][T13508] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.954529][T13504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.273285][T13520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3850'. [ 184.524103][T13525] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 184.524103][T13525] program syz.5.3855 not setting count and/or reply_len properly [ 184.890076][T13500] Set syz1 is full, maxelem 65536 reached [ 185.034240][T13552] lo speed is unknown, defaulting to 1000 [ 185.176450][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 185.274353][T13609] batman_adv: batadv0: Adding interface: dummy0 [ 185.281068][T13609] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.307057][T13609] batman_adv: batadv0: Interface activated: dummy0 [ 185.322759][T13609] batadv0: mtu less than device minimum [ 185.329545][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.340511][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.351312][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.362213][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.362310][T13615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 185.373309][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.379469][T13615] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.390337][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.397861][T13615] vhci_hcd vhci_hcd.0: Device attached [ 185.409053][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.425134][T13609] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.472510][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 185.489295][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 185.667758][ T1078] usb 2-1: SetAddress Request (2) to port 0 [ 185.673838][ T1078] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 185.901341][T13710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13710 comm=syz.4.3877 [ 186.154906][T13728] lo speed is unknown, defaulting to 1000 [ 186.387949][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 186.387963][ T29] audit: type=1326 audit(957.228:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.469762][ T29] audit: type=1326 audit(957.228:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.493274][ T29] audit: type=1326 audit(957.249:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.516546][ T29] audit: type=1326 audit(957.249:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.541518][ T29] audit: type=1326 audit(957.249:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.565440][ T29] audit: type=1326 audit(957.249:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.590530][ T29] audit: type=1326 audit(957.249:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.615504][ T29] audit: type=1326 audit(957.260:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.639685][ T29] audit: type=1326 audit(957.260:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 186.663062][ T29] audit: type=1326 audit(957.260:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590f64ebe9 code=0x7ffc0000 [ 187.033422][T13815] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.124202][T13815] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.261116][T13815] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.287126][T13852] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 187.463608][T13815] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.686775][ T157] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.756771][ T157] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.808171][ T157] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.866061][ T157] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.954081][T13616] vhci_hcd: connection reset by peer [ 187.962187][ T51] vhci_hcd: stop threads [ 187.966745][ T51] vhci_hcd: release socket [ 187.971199][ T51] vhci_hcd: disconnect device [ 188.036913][T13900] lo speed is unknown, defaulting to 1000 [ 188.192166][T13940] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 188.192166][T13940] program syz.6.3904 not setting count and/or reply_len properly [ 188.240945][T13946] FAULT_INJECTION: forcing a failure. [ 188.240945][T13946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.254135][T13946] CPU: 1 UID: 0 PID: 13946 Comm: syz.3.3907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.254163][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.254175][T13946] Call Trace: [ 188.254183][T13946] [ 188.254191][T13946] __dump_stack+0x1d/0x30 [ 188.254241][T13946] dump_stack_lvl+0xe8/0x140 [ 188.254258][T13946] dump_stack+0x15/0x1b [ 188.254274][T13946] should_fail_ex+0x265/0x280 [ 188.254294][T13946] should_fail+0xb/0x20 [ 188.254370][T13946] should_fail_usercopy+0x1a/0x20 [ 188.254389][T13946] _copy_from_user+0x1c/0xb0 [ 188.254421][T13946] __x64_sys_epoll_ctl+0x92/0x100 [ 188.254444][T13946] x64_sys_call+0x706/0x2ff0 [ 188.254573][T13946] do_syscall_64+0xd2/0x200 [ 188.254650][T13946] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.254674][T13946] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.254699][T13946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.254720][T13946] RIP: 0033:0x7f2d3cfbebe9 [ 188.254736][T13946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.254801][T13946] RSP: 002b:00007f2d3ba1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 188.254821][T13946] RAX: ffffffffffffffda RBX: 00007f2d3d1e5fa0 RCX: 00007f2d3cfbebe9 [ 188.254835][T13946] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 188.254845][T13946] RBP: 00007f2d3ba1f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.254904][T13946] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 188.254918][T13946] R13: 00007f2d3d1e6038 R14: 00007f2d3d1e5fa0 R15: 00007ffdbc5b3378 [ 188.254935][T13946] [ 188.516443][T13958] FAULT_INJECTION: forcing a failure. [ 188.516443][T13958] name failslab, interval 1, probability 0, space 0, times 0 [ 188.529274][T13958] CPU: 0 UID: 0 PID: 13958 Comm: syz.5.3911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.529326][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.529337][T13958] Call Trace: [ 188.529343][T13958] [ 188.529351][T13958] __dump_stack+0x1d/0x30 [ 188.529370][T13958] dump_stack_lvl+0xe8/0x140 [ 188.529394][T13958] dump_stack+0x15/0x1b [ 188.529446][T13958] should_fail_ex+0x265/0x280 [ 188.529463][T13958] should_failslab+0x8c/0xb0 [ 188.529481][T13958] kmem_cache_alloc_noprof+0x50/0x310 [ 188.529502][T13958] ? skb_clone+0x151/0x1f0 [ 188.529520][T13958] skb_clone+0x151/0x1f0 [ 188.529558][T13958] __netlink_deliver_tap+0x2c9/0x500 [ 188.529579][T13958] netlink_unicast+0x66b/0x690 [ 188.529656][T13958] netlink_sendmsg+0x58b/0x6b0 [ 188.529675][T13958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.529692][T13958] __sock_sendmsg+0x145/0x180 [ 188.529729][T13958] ____sys_sendmsg+0x31e/0x4e0 [ 188.529811][T13958] ___sys_sendmsg+0x17b/0x1d0 [ 188.529835][T13958] __x64_sys_sendmsg+0xd4/0x160 [ 188.529855][T13958] x64_sys_call+0x191e/0x2ff0 [ 188.529872][T13958] do_syscall_64+0xd2/0x200 [ 188.529979][T13958] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.529997][T13958] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.530017][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.530034][T13958] RIP: 0033:0x7f5f366cebe9 [ 188.530047][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.530101][T13958] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.530116][T13958] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 188.530127][T13958] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 188.530137][T13958] RBP: 00007f5f35137090 R08: 0000000000000000 R09: 0000000000000000 [ 188.530147][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.530164][T13958] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 188.530246][T13958] [ 188.562159][T13958] netlink: 'syz.5.3911': attribute type 10 has an invalid length. [ 188.568112][T13967] netlink: 'syz.5.3911': attribute type 10 has an invalid length. [ 188.764010][T13958] batman_adv: batadv0: Interface deactivated: dummy0 [ 188.771143][T13958] dummy0: left allmulticast mode [ 188.777210][T13958] batman_adv: batadv0: Removing interface: dummy0 [ 188.788747][T13958] dummy0: entered allmulticast mode [ 188.795183][T13958] team0: Port device dummy0 added [ 188.813892][T13967] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.826491][T13967] dummy0: left allmulticast mode [ 188.832488][T13967] team0: Failed to send options change via netlink (err -105) [ 188.841465][T13977] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 188.841465][T13977] program syz.3.3915 not setting count and/or reply_len properly [ 188.864492][T13967] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.876610][T13967] team0: Port device dummy0 removed [ 188.899255][T13967] dummy0: entered allmulticast mode [ 188.907475][T13967] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.990125][T13994] lo speed is unknown, defaulting to 1000 [ 189.133595][T14034] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 189.133595][T14034] program syz.5.3928 not setting count and/or reply_len properly [ 189.289304][T14046] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 189.289304][T14046] program syz.5.3933 not setting count and/or reply_len properly [ 189.426034][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3932'. [ 189.452218][T14043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.479202][T14043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.219676][T14094] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 190.219676][T14094] program syz.3.3947 not setting count and/or reply_len properly [ 190.300923][T14106] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 190.300923][T14106] program syz.4.3944 not setting count and/or reply_len properly [ 190.321380][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3950'. [ 190.330546][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3950'. [ 190.434165][T14121] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 190.434165][T14121] program syz.5.3956 not setting count and/or reply_len properly [ 190.515686][T14130] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 190.515686][T14130] program syz.5.3959 not setting count and/or reply_len properly [ 190.543171][ T1078] usb 2-1: device descriptor read/8, error -110 [ 190.646689][ T1078] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 190.665788][ T1078] usb 2-1: enqueue for inactive port 0 [ 190.671502][ T1078] usb 2-1: enqueue for inactive port 0 [ 190.677498][ T1078] usb 2-1: enqueue for inactive port 0 [ 191.237914][T14141] FAULT_INJECTION: forcing a failure. [ 191.237914][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.251500][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.4.3964 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.251528][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.251541][T14141] Call Trace: [ 191.251549][T14141] [ 191.251557][T14141] __dump_stack+0x1d/0x30 [ 191.251624][T14141] dump_stack_lvl+0xe8/0x140 [ 191.251642][T14141] dump_stack+0x15/0x1b [ 191.251659][T14141] should_fail_ex+0x265/0x280 [ 191.251681][T14141] should_fail+0xb/0x20 [ 191.251695][T14141] should_fail_usercopy+0x1a/0x20 [ 191.251714][T14141] _copy_from_user+0x1c/0xb0 [ 191.251858][T14141] memdup_user+0x5e/0xd0 [ 191.251991][T14141] strndup_user+0x68/0xb0 [ 191.252011][T14141] __se_sys_fsconfig+0x551/0x770 [ 191.252037][T14141] __x64_sys_fsconfig+0x67/0x80 [ 191.252095][T14141] x64_sys_call+0x1f83/0x2ff0 [ 191.252164][T14141] do_syscall_64+0xd2/0x200 [ 191.252187][T14141] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.252280][T14141] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 191.252378][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.252397][T14141] RIP: 0033:0x7fb25facebe9 [ 191.252413][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.252427][T14141] RSP: 002b:00007fb25e537038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 191.252445][T14141] RAX: ffffffffffffffda RBX: 00007fb25fcf5fa0 RCX: 00007fb25facebe9 [ 191.252457][T14141] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000000000000003 [ 191.252486][T14141] RBP: 00007fb25e537090 R08: 0000000000000000 R09: 0000000000000000 [ 191.252492][T14141] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 191.252500][T14141] R13: 00007fb25fcf6038 R14: 00007fb25fcf5fa0 R15: 00007ffff3f343f8 [ 191.252515][T14141] [ 191.452779][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 191.452797][ T29] audit: type=1326 audit(962.533:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.3.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 191.482919][ T29] audit: type=1326 audit(962.533:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.3.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3cfbebe9 code=0x7ffc0000 [ 191.513196][ T29] audit: type=1400 audit(962.596:9565): avc: denied { create } for pid=14145 comm="syz.3.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.562277][T14148] lo speed is unknown, defaulting to 1000 [ 191.642116][T14149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.654016][ T1078] usb usb2-port1: attempt power cycle [ 191.717102][T14149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.742688][ T29] audit: type=1400 audit(962.858:9566): avc: denied { ioctl } for pid=14184 comm="syz.4.3969" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.797739][T14149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.799802][ T29] audit: type=1400 audit(962.900:9567): avc: denied { ioctl } for pid=14184 comm="syz.4.3969" path="ipc:[4026533456]" dev="nsfs" ino=4026533456 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.870854][T14199] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 191.870854][T14199] program syz.0.3972 not setting count and/or reply_len properly [ 191.929701][T14149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.971803][T14212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'. [ 192.021980][ T29] audit: type=1400 audit(963.142:9568): avc: denied { write } for pid=14206 comm="syz.4.3975" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.087445][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.138315][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.161996][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.180993][ T29] audit: type=1326 audit(963.299:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.4.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 192.204086][ T29] audit: type=1326 audit(963.299:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.4.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 192.206851][ T51] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.228081][ T29] audit: type=1326 audit(963.299:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.4.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 192.260524][ T29] audit: type=1326 audit(963.299:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.4.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb25facebe9 code=0x7ffc0000 [ 192.378173][T14257] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 192.378173][T14257] program syz.0.3984 not setting count and/or reply_len properly [ 192.453018][T14261] lo speed is unknown, defaulting to 1000 [ 192.998404][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3996'. [ 193.007617][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3996'. [ 193.205837][T14338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14338 comm=syz.3.3999 [ 193.281087][T14346] netlink: 'syz.4.4003': attribute type 30 has an invalid length. [ 193.354260][T14356] lo speed is unknown, defaulting to 1000 [ 193.417498][ T1078] usb usb2-port1: unable to enumerate USB device [ 193.473942][T14384] FAULT_INJECTION: forcing a failure. [ 193.473942][T14384] name failslab, interval 1, probability 0, space 0, times 0 [ 193.486760][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.0.4007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.486792][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.486804][T14384] Call Trace: [ 193.486811][T14384] [ 193.486819][T14384] __dump_stack+0x1d/0x30 [ 193.486839][T14384] dump_stack_lvl+0xe8/0x140 [ 193.486921][T14384] dump_stack+0x15/0x1b [ 193.486996][T14384] should_fail_ex+0x265/0x280 [ 193.487015][T14384] ? __pfx_cgroup_show_path+0x10/0x10 [ 193.487042][T14384] ? cgroup_show_path+0x6a/0x2b0 [ 193.487088][T14384] should_failslab+0x8c/0xb0 [ 193.487112][T14384] __kmalloc_cache_noprof+0x4c/0x320 [ 193.487149][T14384] ? __pfx_cgroup_show_path+0x10/0x10 [ 193.487175][T14384] cgroup_show_path+0x6a/0x2b0 [ 193.487196][T14384] ? kernfs_sop_show_path+0xa4/0xf0 [ 193.487293][T14384] ? __pfx_cgroup_show_path+0x10/0x10 [ 193.487314][T14384] kernfs_sop_show_path+0xb3/0xf0 [ 193.487385][T14384] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 193.487477][T14384] show_path+0x5a/0x80 [ 193.487496][T14384] show_mountinfo+0xd8/0x600 [ 193.487527][T14384] m_show+0x3e/0x50 [ 193.487587][T14384] traverse+0x144/0x3a0 [ 193.487611][T14384] seq_read_iter+0x853/0x940 [ 193.487633][T14384] ? avc_policy_seqno+0x15/0x30 [ 193.487652][T14384] ? selinux_file_permission+0x1e4/0x320 [ 193.487714][T14384] ? __pfx_seq_read_iter+0x10/0x10 [ 193.487815][T14384] vfs_read+0x649/0x770 [ 193.487830][T14384] ? __pfx_seq_read_iter+0x10/0x10 [ 193.487848][T14384] __x64_sys_pread64+0xfd/0x150 [ 193.487861][T14384] x64_sys_call+0x29e2/0x2ff0 [ 193.487892][T14384] do_syscall_64+0xd2/0x200 [ 193.487907][T14384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.487920][T14384] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 193.488013][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.488032][T14384] RIP: 0033:0x7f330a7debe9 [ 193.488047][T14384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.488061][T14384] RSP: 002b:00007f3309247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 193.488078][T14384] RAX: ffffffffffffffda RBX: 00007f330aa05fa0 RCX: 00007f330a7debe9 [ 193.488090][T14384] RDX: 0000000000001002 RSI: 0000200000000200 RDI: 0000000000000003 [ 193.488171][T14384] RBP: 00007f3309247090 R08: 0000000000000000 R09: 0000000000000000 [ 193.488185][T14384] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 193.488197][T14384] R13: 00007f330aa06038 R14: 00007f330aa05fa0 R15: 00007ffe3c0e07d8 [ 193.488228][T14384] [ 193.841151][T14401] tipc: Started in network mode [ 193.846268][T14401] tipc: Node identity ac141413, cluster identity 4711 [ 193.853683][T14401] tipc: New replicast peer: 10.1.1.2 [ 193.859301][T14401] tipc: Enabled bearer , priority 10 [ 193.892542][T14403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4014'. [ 193.902755][T14403] bond0: option downdelay: invalid value (18446744073709551615) [ 193.910973][T14403] bond0: option downdelay: allowed values 0 - 2147483647 [ 193.971780][T14411] hub 6-0:1.0: USB hub found [ 193.986998][T14411] hub 6-0:1.0: 8 ports detected [ 194.056444][T14415] lo speed is unknown, defaulting to 1000 [ 194.207759][T14458] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 194.207759][T14458] program syz.3.4027 not setting count and/or reply_len properly [ 194.253727][T14464] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 194.253727][T14464] program syz.4.4026 not setting count and/or reply_len properly [ 194.329164][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4033'. [ 194.338346][T14472] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4033'. [ 194.348041][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4033'. [ 194.483780][T14487] 9pnet_fd: Insufficient options for proto=fd [ 194.484510][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.499640][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.522489][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.538480][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.930805][ T10] tipc: Node number set to 2886997011 [ 195.098363][T14538] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 195.098363][T14538] program syz.4.4054 not setting count and/or reply_len properly [ 195.099131][T14536] syzkaller1: entered promiscuous mode [ 195.121908][T14536] syzkaller1: entered allmulticast mode [ 195.217041][T14546] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 195.217041][T14546] program syz.0.4057 not setting count and/or reply_len properly [ 195.242289][T14548] tipc: Enabling of bearer rejected, already enabled [ 195.400729][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 195.410073][T14568] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4066'. [ 195.420176][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4066'. [ 195.420531][T14569] FAULT_INJECTION: forcing a failure. [ 195.420531][T14569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.442763][T14569] CPU: 1 UID: 0 PID: 14569 Comm: syz.0.4065 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.442790][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.442828][T14569] Call Trace: [ 195.442836][T14569] [ 195.442844][T14569] __dump_stack+0x1d/0x30 [ 195.442866][T14569] dump_stack_lvl+0xe8/0x140 [ 195.442883][T14569] dump_stack+0x15/0x1b [ 195.442977][T14569] should_fail_ex+0x265/0x280 [ 195.443160][T14569] should_fail+0xb/0x20 [ 195.443177][T14569] should_fail_usercopy+0x1a/0x20 [ 195.443208][T14569] _copy_to_user+0x20/0xa0 [ 195.443319][T14569] rng_dev_read+0x3ef/0x740 [ 195.443345][T14569] ? __pfx_rng_dev_read+0x10/0x10 [ 195.443363][T14569] vfs_readv+0x3fb/0x690 [ 195.443397][T14569] __x64_sys_preadv+0xfd/0x1c0 [ 195.443421][T14569] x64_sys_call+0x282a/0x2ff0 [ 195.443483][T14569] do_syscall_64+0xd2/0x200 [ 195.443507][T14569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.443528][T14569] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.443598][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.443672][T14569] RIP: 0033:0x7f330a7debe9 [ 195.443696][T14569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.443726][T14569] RSP: 002b:00007f3309226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 195.443746][T14569] RAX: ffffffffffffffda RBX: 00007f330aa06090 RCX: 00007f330a7debe9 [ 195.443759][T14569] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 195.443772][T14569] RBP: 00007f3309226090 R08: 0000000000000000 R09: 0000000000000000 [ 195.443785][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.443853][T14569] R13: 00007f330aa06128 R14: 00007f330aa06090 R15: 00007ffe3c0e07d8 [ 195.443872][T14569] [ 195.628803][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.648702][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.698799][T14585] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 195.698799][T14585] program syz.0.4072 not setting count and/or reply_len properly [ 195.845200][T14594] FAULT_INJECTION: forcing a failure. [ 195.845200][T14594] name failslab, interval 1, probability 0, space 0, times 0 [ 195.850682][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 195.858011][T14594] CPU: 1 UID: 0 PID: 14594 Comm: syz.0.4075 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.858036][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.858129][T14594] Call Trace: [ 195.858138][T14594] [ 195.858148][T14594] __dump_stack+0x1d/0x30 [ 195.858171][T14594] dump_stack_lvl+0xe8/0x140 [ 195.858190][T14594] dump_stack+0x15/0x1b [ 195.858206][T14594] should_fail_ex+0x265/0x280 [ 195.858228][T14594] should_failslab+0x8c/0xb0 [ 195.858283][T14594] __kmalloc_noprof+0xa5/0x3e0 [ 195.858308][T14594] ? copy_splice_read+0xc2/0x660 [ 195.858327][T14594] copy_splice_read+0xc2/0x660 [ 195.858362][T14594] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 195.858386][T14594] splice_direct_to_actor+0x290/0x680 [ 195.858465][T14594] ? __pfx_direct_splice_actor+0x10/0x10 [ 195.858496][T14594] do_splice_direct+0xda/0x150 [ 195.858514][T14594] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 195.858539][T14594] do_sendfile+0x380/0x650 [ 195.858606][T14594] __x64_sys_sendfile64+0x105/0x150 [ 195.858633][T14594] x64_sys_call+0x2bb0/0x2ff0 [ 195.858673][T14594] do_syscall_64+0xd2/0x200 [ 195.858751][T14594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.858791][T14594] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.858816][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.858837][T14594] RIP: 0033:0x7f330a7debe9 [ 195.858854][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.858871][T14594] RSP: 002b:00007f3309247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.858904][T14594] RAX: ffffffffffffffda RBX: 00007f330aa05fa0 RCX: 00007f330a7debe9 [ 195.858917][T14594] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 195.858930][T14594] RBP: 00007f3309247090 R08: 0000000000000000 R09: 0000000000000000 [ 195.858942][T14594] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 195.858954][T14594] R13: 00007f330aa06038 R14: 00007f330aa05fa0 R15: 00007ffe3c0e07d8 [ 195.858972][T14594] [ 196.088420][T14608] lo speed is unknown, defaulting to 1000 [ 196.204441][T14648] tipc: Enabling of bearer rejected, already enabled [ 196.213386][T14651] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 196.213386][T14651] program syz.0.4087 not setting count and/or reply_len properly [ 196.266807][ T29] kauditd_printk_skb: 724 callbacks suppressed [ 196.266844][ T29] audit: type=1326 audit(967.606:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.297463][ T29] audit: type=1326 audit(967.606:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.333040][ T29] audit: type=1326 audit(967.606:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.356583][ T29] audit: type=1326 audit(967.606:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.380187][ T29] audit: type=1326 audit(967.606:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.403681][ T29] audit: type=1326 audit(967.606:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.427198][ T29] audit: type=1326 audit(967.606:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.450446][ T29] audit: type=1326 audit(967.606:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.474055][ T29] audit: type=1326 audit(967.606:10305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.497290][ T29] audit: type=1326 audit(967.606:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 196.594180][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'. [ 196.649873][T14670] lo speed is unknown, defaulting to 1000 [ 196.827889][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.842363][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.858061][T14710] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4099'. [ 196.871131][T14710] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4099'. [ 196.902863][T14714] tipc: Started in network mode [ 196.908835][T14714] tipc: Node identity ac141413, cluster identity 4711 [ 196.949632][T14714] tipc: New replicast peer: 10.1.1.2 [ 196.955202][T14714] tipc: Enabled bearer , priority 10 [ 197.271186][T14726] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 197.271186][T14726] program syz.5.4103 not setting count and/or reply_len properly [ 197.363141][T14738] syzkaller1: entered promiscuous mode [ 197.368820][T14738] syzkaller1: entered allmulticast mode [ 197.409445][T14744] lo speed is unknown, defaulting to 1000 [ 197.710014][T14794] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 197.710014][T14794] program syz.6.4116 not setting count and/or reply_len properly [ 197.730686][T14798] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.760644][T14800] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4119'. [ 197.910244][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4123'. [ 197.929958][ T3360] tipc: Node number set to 2886997011 [ 197.946025][T14821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4124'. [ 198.213944][T14842] net_ratelimit: 11 callbacks suppressed [ 198.213961][T14842] openvswitch: netlink: Message has 6 unknown bytes. [ 198.323071][T14847] lo speed is unknown, defaulting to 1000 [ 198.738501][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.747456][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.819722][T14886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.830279][T14896] netlink: 'syz.6.4143': attribute type 1 has an invalid length. [ 198.903785][T14910] lo speed is unknown, defaulting to 1000 [ 199.197540][T14944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.220453][T14944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.354308][T14981] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 199.354308][T14981] program syz.3.4159 not setting count and/or reply_len properly [ 199.403290][T14986] lo speed is unknown, defaulting to 1000 [ 199.455887][T14997] netlink: 'syz.4.4164': attribute type 7 has an invalid length. [ 199.463857][T14997] netlink: 'syz.4.4164': attribute type 8 has an invalid length. [ 199.565158][T15029] siw: device registration error -23 [ 199.608105][T15038] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 199.608105][T15038] program syz.0.4172 not setting count and/or reply_len properly [ 199.850150][T15057] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 199.850150][T15057] program syz.6.4178 not setting count and/or reply_len properly [ 199.883608][T15061] lo speed is unknown, defaulting to 1000 [ 200.008237][T15091] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 200.008237][T15091] program syz.6.4184 not setting count and/or reply_len properly [ 200.060745][T15093] veth2: entered allmulticast mode [ 200.087514][T15093] veth3: entered promiscuous mode [ 200.122947][T15110] FAULT_INJECTION: forcing a failure. [ 200.122947][T15110] name failslab, interval 1, probability 0, space 0, times 0 [ 200.135723][T15110] CPU: 0 UID: 0 PID: 15110 Comm: syz.6.4186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.135752][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.135763][T15110] Call Trace: [ 200.135768][T15110] [ 200.135775][T15110] __dump_stack+0x1d/0x30 [ 200.135849][T15110] dump_stack_lvl+0xe8/0x140 [ 200.135905][T15110] dump_stack+0x15/0x1b [ 200.135922][T15110] should_fail_ex+0x265/0x280 [ 200.135944][T15110] should_failslab+0x8c/0xb0 [ 200.135989][T15110] kmem_cache_alloc_noprof+0x50/0x310 [ 200.136014][T15110] ? audit_log_start+0x365/0x6c0 [ 200.136045][T15110] audit_log_start+0x365/0x6c0 [ 200.136105][T15110] audit_seccomp+0x48/0x100 [ 200.136172][T15110] ? __seccomp_filter+0x68c/0x10d0 [ 200.136270][T15110] __seccomp_filter+0x69d/0x10d0 [ 200.136293][T15110] ? cred_has_capability+0x210/0x280 [ 200.136388][T15110] ? proc_id_connector+0x114/0x270 [ 200.136430][T15110] ? set_dumpable+0xb5/0x150 [ 200.136450][T15110] __secure_computing+0x82/0x150 [ 200.136472][T15110] syscall_trace_enter+0xcf/0x1e0 [ 200.136496][T15110] do_syscall_64+0xac/0x200 [ 200.136522][T15110] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.136543][T15110] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.136569][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.136638][T15110] RIP: 0033:0x7f590f64d5fc [ 200.136654][T15110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 200.136753][T15110] RSP: 002b:00007f590e096030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.136773][T15110] RAX: ffffffffffffffda RBX: 00007f590f876090 RCX: 00007f590f64d5fc [ 200.136787][T15110] RDX: 000000000000000f RSI: 00007f590e0960a0 RDI: 0000000000000007 [ 200.136799][T15110] RBP: 00007f590e096090 R08: 0000000000000000 R09: 0000000000000000 [ 200.136813][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.136826][T15110] R13: 00007f590f876128 R14: 00007f590f876090 R15: 00007ffd3392c1d8 [ 200.136860][T15110] [ 200.524699][T15127] __nla_validate_parse: 10 callbacks suppressed [ 200.524712][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 200.555881][T15139] hub 9-0:1.0: USB hub found [ 200.562341][T15125] lo speed is unknown, defaulting to 1000 [ 200.568507][T15139] hub 9-0:1.0: 8 ports detected [ 200.633615][T15127] lo speed is unknown, defaulting to 1000 [ 200.666766][T15155] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 200.666766][T15155] program syz.6.4202 not setting count and/or reply_len properly [ 200.813767][T15157] hub 6-0:1.0: USB hub found [ 200.831588][T15157] hub 6-0:1.0: 8 ports detected [ 200.848112][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4204'. [ 200.857166][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4204'. [ 200.865108][T15157] syzkaller0: entered promiscuous mode [ 200.871533][T15157] syzkaller0: entered allmulticast mode [ 200.965865][T15213] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 200.965865][T15213] program syz.3.4205 not setting count and/or reply_len properly [ 201.056043][ T29] kauditd_printk_skb: 789 callbacks suppressed [ 201.056072][ T29] audit: type=1400 audit(972.606:11094): avc: denied { read write } for pid=15218 comm="syz.0.4208" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 201.087670][ T29] audit: type=1400 audit(972.606:11095): avc: denied { open } for pid=15218 comm="syz.0.4208" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 201.113559][ T29] audit: type=1326 audit(972.606:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.137320][ T29] audit: type=1326 audit(972.606:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.161397][ T29] audit: type=1326 audit(972.606:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.184491][ T29] audit: type=1326 audit(972.606:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.208027][ T29] audit: type=1326 audit(972.606:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.231361][ T29] audit: type=1326 audit(972.606:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.254778][ T29] audit: type=1326 audit(972.606:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.278608][ T29] audit: type=1326 audit(972.606:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz.0.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330a7debe9 code=0x7ffc0000 [ 201.523884][T15230] 9pnet_fd: Insufficient options for proto=fd [ 201.531233][ T36] hid_parser_main: 18 callbacks suppressed [ 201.531247][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.544836][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.552430][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.562980][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.571003][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.579109][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.587216][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.595276][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.603679][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.611345][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 201.709346][T15236] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 201.709346][T15236] program syz.4.4213 not setting count and/or reply_len properly [ 201.733034][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 201.859745][T15250] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 201.859745][T15250] program syz.3.4217 not setting count and/or reply_len properly [ 201.981629][T15252] hub 6-0:1.0: USB hub found [ 201.994986][T15252] hub 6-0:1.0: 8 ports detected [ 202.037982][T15252] syzkaller0: entered promiscuous mode [ 202.043884][T15252] syzkaller0: entered allmulticast mode [ 202.202601][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4223'. [ 202.228811][T15290] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 202.228811][T15290] program syz.4.4231 not setting count and/or reply_len properly [ 202.639622][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 202.695099][T15331] netlink: 87 bytes leftover after parsing attributes in process `syz.6.4248'. [ 203.048963][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.062266][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.202753][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4261'. [ 203.212266][T15365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.232531][T15365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.447048][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.459007][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.611210][T15392] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 203.611210][T15392] program syz.4.4269 not setting count and/or reply_len properly [ 203.710109][T15395] tipc: Enabling of bearer rejected, already enabled [ 203.879642][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 203.888791][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 204.329196][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 204.575617][T15451] netlink: 'syz.5.4293': attribute type 4 has an invalid length. [ 204.583970][T15451] netlink: 'syz.5.4293': attribute type 3 has an invalid length. [ 204.696874][T15461] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 204.696874][T15461] program syz.0.4296 not setting count and/or reply_len properly [ 204.916285][T15477] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 204.916285][T15477] program syz.0.4303 not setting count and/or reply_len properly [ 205.525568][T15516] __nla_validate_parse: 3 callbacks suppressed [ 205.525582][T15516] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4319'. [ 205.556026][T15520] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4321'. [ 205.719407][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4328'. [ 205.881750][T15556] FAULT_INJECTION: forcing a failure. [ 205.881750][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 205.896367][T15556] CPU: 0 UID: 0 PID: 15556 Comm: syz.3.4335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.896396][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.896413][T15556] Call Trace: [ 205.896421][T15556] [ 205.896429][T15556] __dump_stack+0x1d/0x30 [ 205.896451][T15556] dump_stack_lvl+0xe8/0x140 [ 205.896518][T15556] dump_stack+0x15/0x1b [ 205.896573][T15556] should_fail_ex+0x265/0x280 [ 205.896594][T15556] should_failslab+0x8c/0xb0 [ 205.896647][T15556] kmem_cache_alloc_noprof+0x50/0x310 [ 205.896673][T15556] ? skb_clone+0x151/0x1f0 [ 205.896757][T15556] skb_clone+0x151/0x1f0 [ 205.896821][T15556] nfnetlink_rcv+0x305/0x1690 [ 205.897029][T15556] ? __account_obj_stock+0x211/0x350 [ 205.897054][T15556] ? xas_load+0x413/0x430 [ 205.897145][T15556] ? xas_load+0x413/0x430 [ 205.897169][T15556] ? __rcu_read_unlock+0x4f/0x70 [ 205.897190][T15556] ? xa_load+0xb1/0xe0 [ 205.897296][T15556] ? __account_obj_stock+0x211/0x350 [ 205.897382][T15556] ? obj_cgroup_charge_account+0x122/0x1a0 [ 205.897413][T15556] ? should_fail_ex+0x30/0x280 [ 205.897477][T15556] ? __rcu_read_unlock+0x4f/0x70 [ 205.897497][T15556] ? should_fail_ex+0xdb/0x280 [ 205.897523][T15556] netlink_unicast+0x5bd/0x690 [ 205.897648][T15556] netlink_sendmsg+0x58b/0x6b0 [ 205.897672][T15556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.897693][T15556] __sock_sendmsg+0x145/0x180 [ 205.897756][T15556] ____sys_sendmsg+0x31e/0x4e0 [ 205.897780][T15556] ___sys_sendmsg+0x17b/0x1d0 [ 205.897882][T15556] __x64_sys_sendmsg+0xd4/0x160 [ 205.897910][T15556] x64_sys_call+0x191e/0x2ff0 [ 205.897932][T15556] do_syscall_64+0xd2/0x200 [ 205.897957][T15556] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.897979][T15556] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.898003][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.898104][T15556] RIP: 0033:0x7f2d3cfbebe9 [ 205.898120][T15556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.898136][T15556] RSP: 002b:00007f2d3ba1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.898156][T15556] RAX: ffffffffffffffda RBX: 00007f2d3d1e5fa0 RCX: 00007f2d3cfbebe9 [ 205.898169][T15556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 205.898244][T15556] RBP: 00007f2d3ba1f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.898257][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.898270][T15556] R13: 00007f2d3d1e6038 R14: 00007f2d3d1e5fa0 R15: 00007ffdbc5b3378 [ 205.898289][T15556] [ 206.210185][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 206.210219][ T29] audit: type=1326 audit(978.047:11899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.240178][ T29] audit: type=1326 audit(978.047:11900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.280200][ T29] audit: type=1326 audit(978.058:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.304303][ T29] audit: type=1326 audit(978.058:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.328034][ T29] audit: type=1326 audit(978.058:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.351619][ T29] audit: type=1326 audit(978.058:11904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.375364][ T29] audit: type=1326 audit(978.058:11905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.400793][ T29] audit: type=1326 audit(978.058:11906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.424389][ T29] audit: type=1326 audit(978.058:11907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.447902][ T29] audit: type=1326 audit(978.058:11908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15563 comm="syz.5.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f366cebe9 code=0x7ffc0000 [ 206.477979][T15569] tipc: Enabling of bearer rejected, already enabled [ 206.486098][T15570] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 206.486098][T15570] program syz.0.4338 not setting count and/or reply_len properly [ 206.577397][T15580] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4342'. [ 206.739196][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4353'. [ 206.782453][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4348'. [ 206.803673][T15588] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 207.038873][T15627] macvtap0: refused to change device tx_queue_len [ 207.121943][T15640] FAULT_INJECTION: forcing a failure. [ 207.121943][T15640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.135604][T15640] CPU: 1 UID: 0 PID: 15640 Comm: syz.0.4368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.135629][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.135640][T15640] Call Trace: [ 207.135647][T15640] [ 207.135655][T15640] __dump_stack+0x1d/0x30 [ 207.135709][T15640] dump_stack_lvl+0xe8/0x140 [ 207.135727][T15640] dump_stack+0x15/0x1b [ 207.135744][T15640] should_fail_ex+0x265/0x280 [ 207.135765][T15640] should_fail+0xb/0x20 [ 207.135780][T15640] should_fail_usercopy+0x1a/0x20 [ 207.135847][T15640] _copy_from_iter+0x390/0xe80 [ 207.135923][T15640] ? __alloc_skb+0x223/0x320 [ 207.135945][T15640] netlink_sendmsg+0x471/0x6b0 [ 207.136014][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.136034][T15640] __sock_sendmsg+0x145/0x180 [ 207.136091][T15640] ____sys_sendmsg+0x31e/0x4e0 [ 207.136113][T15640] ___sys_sendmsg+0x17b/0x1d0 [ 207.136140][T15640] __x64_sys_sendmsg+0xd4/0x160 [ 207.136161][T15640] x64_sys_call+0x191e/0x2ff0 [ 207.136178][T15640] do_syscall_64+0xd2/0x200 [ 207.136243][T15640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.136262][T15640] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.136282][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.136365][T15640] RIP: 0033:0x7f330a7debe9 [ 207.136381][T15640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.136434][T15640] RSP: 002b:00007f3309247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.136456][T15640] RAX: ffffffffffffffda RBX: 00007f330aa05fa0 RCX: 00007f330a7debe9 [ 207.136467][T15640] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 207.136477][T15640] RBP: 00007f3309247090 R08: 0000000000000000 R09: 0000000000000000 [ 207.136488][T15640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.136500][T15640] R13: 00007f330aa06038 R14: 00007f330aa05fa0 R15: 00007ffe3c0e07d8 [ 207.136568][T15640] [ 207.359813][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4367'. [ 207.369206][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4367'. [ 207.411461][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4369'. [ 207.422934][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4364'. [ 207.476362][T15650] bridge1: entered promiscuous mode [ 207.481959][T15650] bridge1: entered allmulticast mode [ 207.489738][T15650] team0: Port device bridge1 added [ 207.614786][T15667] tipc: Enabling of bearer rejected, already enabled [ 207.616308][T15671] 9pnet_fd: Insufficient options for proto=fd [ 207.857894][T15683] FAULT_INJECTION: forcing a failure. [ 207.857894][T15683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.871240][T15683] CPU: 0 UID: 0 PID: 15683 Comm: syz.4.4382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.871265][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.871279][T15683] Call Trace: [ 207.871285][T15683] [ 207.871294][T15683] __dump_stack+0x1d/0x30 [ 207.871324][T15683] dump_stack_lvl+0xe8/0x140 [ 207.871418][T15683] dump_stack+0x15/0x1b [ 207.871432][T15683] should_fail_ex+0x265/0x280 [ 207.871518][T15683] should_fail+0xb/0x20 [ 207.871533][T15683] should_fail_usercopy+0x1a/0x20 [ 207.871564][T15683] _copy_to_user+0x20/0xa0 [ 207.871599][T15683] simple_read_from_buffer+0xb5/0x130 [ 207.871670][T15683] proc_fail_nth_read+0x10e/0x150 [ 207.871697][T15683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.871723][T15683] vfs_read+0x1a8/0x770 [ 207.871762][T15683] ? __rcu_read_unlock+0x4f/0x70 [ 207.871781][T15683] ? __fget_files+0x184/0x1c0 [ 207.871806][T15683] ksys_read+0xda/0x1a0 [ 207.871825][T15683] __x64_sys_read+0x40/0x50 [ 207.871842][T15683] x64_sys_call+0x27bc/0x2ff0 [ 207.871923][T15683] do_syscall_64+0xd2/0x200 [ 207.871945][T15683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.871997][T15683] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.872020][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.872037][T15683] RIP: 0033:0x7fb25facd5fc [ 207.872051][T15683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.872065][T15683] RSP: 002b:00007fb25e537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.872090][T15683] RAX: ffffffffffffffda RBX: 00007fb25fcf5fa0 RCX: 00007fb25facd5fc [ 207.872100][T15683] RDX: 000000000000000f RSI: 00007fb25e5370a0 RDI: 0000000000000007 [ 207.872111][T15683] RBP: 00007fb25e537090 R08: 0000000000000000 R09: 0000000000000000 [ 207.872169][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.872183][T15683] R13: 00007fb25fcf6038 R14: 00007fb25fcf5fa0 R15: 00007ffff3f343f8 [ 207.872202][T15683] [ 208.260180][T15702] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.292342][T15714] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 208.310526][T15714] SELinux: failed to load policy [ 208.330158][T15702] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.366946][T15702] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.417570][T15702] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.471638][ T3329] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.513051][ T157] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.529704][ T157] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.542031][T15749] tipc: Enabling of bearer rejected, already enabled [ 208.556437][ T157] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.243568][T15795] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 209.245123][T15796] tipc: Enabling of bearer rejected, already enabled [ 209.263806][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.276896][T15795] SELinux: failed to load policy [ 209.286628][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.606968][T15831] FAULT_INJECTION: forcing a failure. [ 209.606968][T15831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.621126][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.5.4430 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.621151][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.621189][T15831] Call Trace: [ 209.621195][T15831] [ 209.621202][T15831] __dump_stack+0x1d/0x30 [ 209.621254][T15831] dump_stack_lvl+0xe8/0x140 [ 209.621271][T15831] dump_stack+0x15/0x1b [ 209.621286][T15831] should_fail_ex+0x265/0x280 [ 209.621379][T15831] should_fail+0xb/0x20 [ 209.621396][T15831] should_fail_usercopy+0x1a/0x20 [ 209.621432][T15831] _copy_from_user+0x1c/0xb0 [ 209.621500][T15831] do_ipv6_setsockopt+0x124/0x2160 [ 209.621521][T15831] ? _parse_integer+0x27/0x40 [ 209.621592][T15831] ? kstrtoull+0x111/0x140 [ 209.621610][T15831] ? __rcu_read_unlock+0x4f/0x70 [ 209.621631][T15831] ? avc_has_perm_noaudit+0x1b1/0x200 [ 209.621684][T15831] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 209.621767][T15831] ipv6_setsockopt+0x59/0x130 [ 209.621787][T15831] rawv6_setsockopt+0x1d2/0x420 [ 209.621806][T15831] sock_common_setsockopt+0x69/0x80 [ 209.621878][T15831] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 209.621949][T15831] __sys_setsockopt+0x184/0x200 [ 209.621969][T15831] __x64_sys_setsockopt+0x64/0x80 [ 209.621990][T15831] x64_sys_call+0x20ec/0x2ff0 [ 209.622009][T15831] do_syscall_64+0xd2/0x200 [ 209.622065][T15831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.622085][T15831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.622109][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.622154][T15831] RIP: 0033:0x7f5f366cebe9 [ 209.622170][T15831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.622199][T15831] RSP: 002b:00007f5f35137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.622219][T15831] RAX: ffffffffffffffda RBX: 00007f5f368f5fa0 RCX: 00007f5f366cebe9 [ 209.622232][T15831] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000006 [ 209.622243][T15831] RBP: 00007f5f35137090 R08: 000000000000005c R09: 0000000000000000 [ 209.622253][T15831] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.622265][T15831] R13: 00007f5f368f6038 R14: 00007f5f368f5fa0 R15: 00007fff4aa78df8 [ 209.622285][T15831] [ 209.637299][T15833] lo speed is unknown, defaulting to 1000 [ 209.706681][T15842] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.103014][T15875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.113294][T15875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.330874][T15898] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 210.330874][T15898] program syz.0.4448 not setting count and/or reply_len properly [ 210.396779][T15900] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 210.396779][T15900] program syz.0.4449 not setting count and/or reply_len properly [ 210.495338][T15906] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 210.495338][T15906] program syz.0.4452 not setting count and/or reply_len properly [ 210.524520][T15880] ================================================================== [ 210.532814][T15880] BUG: KCSAN: data-race in touch_atime / touch_atime [ 210.539677][T15880] [ 210.542094][T15880] write to 0xffff88811a32af70 of 4 bytes by task 15874 on cpu 0: [ 210.549805][T15880] touch_atime+0x1e8/0x340 [ 210.554232][T15880] shmem_file_splice_read+0x5b1/0x600 [ 210.559617][T15880] splice_direct_to_actor+0x26f/0x680 [ 210.565609][T15880] do_splice_direct+0xda/0x150 [ 210.570542][T15880] do_sendfile+0x380/0x650 [ 210.575803][T15880] __x64_sys_sendfile64+0x105/0x150 [ 210.581322][T15880] x64_sys_call+0x2bb0/0x2ff0 [ 210.586264][T15880] do_syscall_64+0xd2/0x200 [ 210.591024][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.598219][T15880] [ 210.600979][T15880] read to 0xffff88811a32af70 of 4 bytes by task 15880 on cpu 1: [ 210.608790][T15880] touch_atime+0x194/0x340 [ 210.613478][T15880] shmem_file_splice_read+0x5b1/0x600 [ 210.619200][T15880] splice_direct_to_actor+0x26f/0x680 [ 210.624660][T15880] do_splice_direct+0xda/0x150 [ 210.630025][T15880] do_sendfile+0x380/0x650 [ 210.634527][T15880] __x64_sys_sendfile64+0x105/0x150 [ 210.640430][T15880] x64_sys_call+0x2bb0/0x2ff0 [ 210.645632][T15880] do_syscall_64+0xd2/0x200 [ 210.650238][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.656268][T15880] [ 210.658756][T15880] value changed: 0x22483b74 -> 0x22e88378 [ 210.664574][T15880] [ 210.666892][T15880] Reported by Kernel Concurrency Sanitizer on: [ 210.673369][T15880] CPU: 1 UID: 0 PID: 15880 Comm: syz.6.4440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.683297][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.693341][T15880] ================================================================== [ 210.722395][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.732429][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16