last executing test programs: 3.589721536s ago: executing program 1 (id=5186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x8c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) clock_adjtime(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001bc0)='syz0\x00', 0x1ff) 3.365116607s ago: executing program 1 (id=5188): socket$netlink(0x10, 0x3, 0x13) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x80047437, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004004}, 0x204c031) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x0, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, 0x0, 0x0) getsockopt$MRT6(r2, 0x29, 0xcf, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) setrlimit(0x40000000000008, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) ioctl$TUNSETLINK(r6, 0x400454cd, 0x18) 2.240426768s ago: executing program 1 (id=5197): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0xff91, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, &(0x7f0000000300)=0x5) 2.125141319s ago: executing program 1 (id=5198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000003000000000000002a03000088421000000100000000000000000000993122d562b22708d09275e745b9dc530f4523ac40c322d4fa10035ec5bd67a03c89894690802abcd5a2c9d4014a86970a3ae085264a78cd08d64fb6b4a503b85165d1b05e0e0000000000000066ef70deb1fcb9a8eeafe8d429d87d73aba6c78b866acc267a79a6fa419df2d33397f194a1931edae22c53273d8fd25e34bf6445f0bb68f2784e39e26d3720072635c8bf6b0df53cbb7fd4beaeb9a99d83678bd0420ce09025b3b4c2"], &(0x7f0000001340)='GPL\x00', 0x7, 0x1000, &(0x7f0000001ec0)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000013c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001440)=[{0x2, 0x2, 0xd, 0x5}, {0x5, 0x4, 0xc, 0x2}, {0x2, 0x5, 0xe, 0xc}, {0x5, 0x2, 0x10, 0xa}], 0x10, 0x3}, 0x94) 2.116816649s ago: executing program 1 (id=5199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[K\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.747588793s ago: executing program 2 (id=5203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 1.693304997s ago: executing program 2 (id=5204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703018008000000b70400000000000085000000030000009500000000000000", @ANYRESHEX=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = inotify_init1(0x80000) r8 = inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) close(r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRESDEC, @ANYRES16=r3, @ANYRESDEC=r8, @ANYRES16=r2, @ANYRES32=r6, @ANYRESDEC], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x1fffff, 0x8, 0x7fc, 0x6, 0x87, 0x40000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xff5c) unshare(0x68040200) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.430074841s ago: executing program 2 (id=5206): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000001c0)=0x1d, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x4000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 639.671783ms ago: executing program 4 (id=5214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000280)=0x5, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 639.063112ms ago: executing program 4 (id=5215): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0x6}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 597.692246ms ago: executing program 4 (id=5216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000020000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) 597.160506ms ago: executing program 4 (id=5217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703018008000000b70400000000000085000000030000009500000000000000", @ANYRESHEX=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) close(r5) 580.565328ms ago: executing program 4 (id=5218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}}, 0x14}}, 0x0) 565.178359ms ago: executing program 4 (id=5219): r0 = socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xffffffffffffffff, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000020000020c000000180001801400020076657468305f746f5f626f6e6400000004000380"], 0x30}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x27}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2b6ed798}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 435.631741ms ago: executing program 0 (id=5221): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r8, 0x0, 0x7}, 0x18) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x70bd25, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c1}, 0x4040880) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8ebd, 0x8, 0x1, 0x6369, 0x3}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r9, 0xb9}, 0xff45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 361.663027ms ago: executing program 2 (id=5224): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0xd, 0x4, 0x4, 0x8, 0x8, 0x9, 0x31, 0x2, 0x8, 0x7, 0x1, 0x0, 0x1}, 0xe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]}) pidfd_send_signal(0xffffffffffffffff, 0x2000, &(0x7f0000000000)={0x1, 0x9, 0x5}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 347.311949ms ago: executing program 3 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff44) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsmount(0xffffffffffffffff, 0x0, 0x8) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000004e2800000700000001feffff19000300", @ANYRES32=r1, @ANYBLOB="8e00"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0200000002000000010000000500"/24, @ANYRES32, @ANYBLOB="a057c5a425ae132411f73ecf34fcf79f172245b70122b6ff4a8ead07ac44e3c3e130fce7eae383ffee696bc25e85564b4a8b2cf70329dc1961"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0xffffffffffffffde, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f00000002c0), &(0x7f00000005c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f00000002c0), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030abf7d0000000000000100010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000200)={0x18, 0x0, 0xfffffffe}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0x11, r10, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0x11, r10, 0x8000000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r13}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000b44000/0x4000)=nil) 313.980072ms ago: executing program 0 (id=5226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000280)=0x5, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 312.352892ms ago: executing program 2 (id=5227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = creat(0x0, 0x14c) fallocate(r2, 0x0, 0x9, 0x2000403) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575163f8864", 0x12}, {&(0x7f0000000580)="0000000035577f48", 0x8}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (fail_nth: 5) 294.156004ms ago: executing program 3 (id=5228): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x24008000}, 0x4000) 284.108465ms ago: executing program 0 (id=5229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}}, 0x14}}, 0x0) 257.383007ms ago: executing program 2 (id=5230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x2, 0x223b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000) utimensat(r6, 0x0, &(0x7f0000000180), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYRES64=r3], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 257.019577ms ago: executing program 0 (id=5231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xffffc000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 256.797227ms ago: executing program 3 (id=5232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 196.779662ms ago: executing program 0 (id=5233): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4044080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780"], 0x64}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x2, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0xfff, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x64}}, 0x24040084) 196.337592ms ago: executing program 0 (id=5234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000001c0)=0x1d, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x4000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 147.650317ms ago: executing program 3 (id=5235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 72.349384ms ago: executing program 3 (id=5236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="48040000673e2b00"/18, @ANYRES16=r2, @ANYBLOB="0a052cbd7000fddbdf250100000034000480050003000600000005000300000000000500030000000000050003000000000005000300060000000500030006000000"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x815) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r5 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r5}) io_uring_enter(r5, 0x66ab, 0x4, 0x2, 0x0, 0x0) 13.507119ms ago: executing program 3 (id=5237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) (fail_nth: 20) 0s ago: executing program 1 (id=5238): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0xd, 0x4, 0x4, 0x8, 0x8, 0x9, 0x31, 0x2, 0x8, 0x7, 0x1, 0x0, 0x1}, 0xe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fffffff}]}) pidfd_send_signal(0xffffffffffffffff, 0x2000, &(0x7f0000000000)={0x1, 0x9, 0x5}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) kernel console output (not intermixed with test programs): e Compute Engine, BIOS Google 10/25/2025 [ 187.947054][T13618] Call Trace: [ 187.947062][T13618] [ 187.947070][T13618] __dump_stack+0x1d/0x30 [ 187.947097][T13618] dump_stack_lvl+0x95/0xd0 [ 187.947168][T13618] dump_stack+0x15/0x1b [ 187.947188][T13618] should_fail_ex+0x265/0x280 [ 187.947212][T13618] should_fail+0xb/0x20 [ 187.947230][T13618] should_fail_usercopy+0x1a/0x20 [ 187.947253][T13618] _copy_from_user+0x1c/0xb0 [ 187.947358][T13618] ___sys_sendmsg+0xc1/0x1d0 [ 187.947442][T13618] __x64_sys_sendmsg+0xd4/0x160 [ 187.947587][T13618] x64_sys_call+0x17ba/0x3000 [ 187.947648][T13618] do_syscall_64+0xca/0x2b0 [ 187.947798][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.947820][T13618] RIP: 0033:0x7f51cf7df749 [ 187.947837][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.947872][T13618] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.947907][T13618] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 187.947920][T13618] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000007 [ 187.947934][T13618] RBP: 00007f51ce247090 R08: 0000000000000000 R09: 0000000000000000 [ 187.947947][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.947960][T13618] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 187.947980][T13618] [ 187.948824][T13607] macvlan1: left promiscuous mode [ 188.293460][T13638] hub 2-0:1.0: USB hub found [ 188.298148][T13638] hub 2-0:1.0: 8 ports detected [ 188.653380][T13671] hub 2-0:1.0: USB hub found [ 188.660930][T13671] hub 2-0:1.0: 8 ports detected [ 189.003643][T13692] smc: net device bond0 applied user defined pnetid SYZ0 [ 189.021194][T13692] smc: net device bond0 erased user defined pnetid SYZ0 [ 189.687569][T13729] hsr_slave_0: left promiscuous mode [ 189.693617][T13729] hsr_slave_1: left promiscuous mode [ 189.992673][T13758] x_tables: duplicate underflow at hook 2 [ 190.126049][T13774] netlink: 'syz.4.4040': attribute type 4 has an invalid length. [ 190.171031][T13774] netlink: 'syz.4.4040': attribute type 4 has an invalid length. [ 190.559292][T13808] __nla_validate_parse: 11 callbacks suppressed [ 190.559310][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4056'. [ 190.589024][T13806] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4055'. [ 190.766072][T13818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13818 comm=syz.4.4060 [ 190.792776][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 190.792791][ T29] audit: type=1400 audit(1767919392.784:21332): avc: denied { audit_write } for pid=13817 comm="syz.4.4060" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 190.928278][ T29] audit: type=1326 audit(1767919392.914:21333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 190.979427][ T29] audit: type=1326 audit(1767919392.944:21334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.002601][ T29] audit: type=1326 audit(1767919392.944:21335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.025682][ T29] audit: type=1326 audit(1767919392.944:21336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.048997][ T29] audit: type=1326 audit(1767919392.944:21337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.072261][ T29] audit: type=1326 audit(1767919392.944:21338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.095472][ T29] audit: type=1326 audit(1767919392.944:21339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 191.142265][T13827] 9p: Bad value for 'wfdno' [ 191.189125][T13835] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 191.196344][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'. [ 191.257590][T13840] macvlan1: entered promiscuous mode [ 191.341257][T13840] macvlan1: left promiscuous mode [ 191.396716][ T29] audit: type=1326 audit(1767919393.384:21340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13854 comm="syz.3.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 191.405547][T13855] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4075'. [ 191.450661][ T29] audit: type=1326 audit(1767919393.384:21341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13854 comm="syz.3.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 191.576403][T13870] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4082'. [ 191.639000][T13878] FAULT_INJECTION: forcing a failure. [ 191.639000][T13878] name failslab, interval 1, probability 0, space 0, times 0 [ 191.651925][T13878] CPU: 1 UID: 0 PID: 13878 Comm: syz.1.4085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.651951][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.652042][T13878] Call Trace: [ 191.652049][T13878] [ 191.652056][T13878] __dump_stack+0x1d/0x30 [ 191.652081][T13878] dump_stack_lvl+0x95/0xd0 [ 191.652102][T13878] dump_stack+0x15/0x1b [ 191.652122][T13878] should_fail_ex+0x265/0x280 [ 191.652196][T13878] should_failslab+0x8c/0xb0 [ 191.652216][T13878] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 191.652235][T13878] ? __alloc_skb+0x2ff/0x4b0 [ 191.652273][T13878] __alloc_skb+0x2ff/0x4b0 [ 191.652295][T13878] ? __alloc_skb+0x228/0x4b0 [ 191.652328][T13878] audit_log_start+0x3a0/0x720 [ 191.652345][T13878] ? kstrtouint+0x76/0xc0 [ 191.652532][T13878] audit_seccomp+0x48/0x100 [ 191.652593][T13878] ? __seccomp_filter+0x832/0x1260 [ 191.652620][T13878] __seccomp_filter+0x843/0x1260 [ 191.652700][T13878] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.652755][T13878] ? vfs_write+0x7e8/0x960 [ 191.652771][T13878] ? __rcu_read_unlock+0x4f/0x70 [ 191.652790][T13878] ? __fget_files+0x184/0x1c0 [ 191.652869][T13878] __secure_computing+0x82/0x150 [ 191.652911][T13878] syscall_trace_enter+0xcf/0x1e0 [ 191.652932][T13878] do_syscall_64+0xa4/0x2b0 [ 191.652965][T13878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.653033][T13878] RIP: 0033:0x7ff767e7f749 [ 191.653054][T13878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.653072][T13878] RSP: 002b:00007ff7668e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c0 [ 191.653092][T13878] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7f749 [ 191.653103][T13878] RDX: 0000000000000000 RSI: 0700000000000000 RDI: ffffffffffffffff [ 191.653115][T13878] RBP: 00007ff7668e7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.653142][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.653154][T13878] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 191.653174][T13878] [ 191.915807][T13881] macvlan1: entered promiscuous mode [ 192.071252][T13881] macvlan1: left promiscuous mode [ 192.133558][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4089'. [ 192.148435][T13891] bridge_slave_1: left allmulticast mode [ 192.154127][T13891] bridge_slave_1: left promiscuous mode [ 192.159925][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.194921][T13891] bridge_slave_0: left allmulticast mode [ 192.200626][T13891] bridge_slave_0: left promiscuous mode [ 192.206339][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.284515][T13898] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4092'. [ 192.442724][T13908] macvlan1: entered promiscuous mode [ 192.581783][T13908] macvlan1: left promiscuous mode [ 192.621406][T13924] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4104'. [ 193.401026][T13925] syz.4.4102 (13925) used greatest stack depth: 9520 bytes left [ 193.486834][T13957] macvlan1: entered promiscuous mode [ 193.529622][T13959] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 193.556797][T13962] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4118'. [ 193.613107][T13957] macvlan1: left promiscuous mode [ 193.660472][T13966] SELinux: failed to load policy [ 193.668768][T13966] block device autoloading is deprecated and will be removed. [ 193.795633][T13936] syz.0.4109 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 193.809844][T13936] CPU: 0 UID: 0 PID: 13936 Comm: syz.0.4109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.809909][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.809923][T13936] Call Trace: [ 193.809929][T13936] [ 193.809936][T13936] __dump_stack+0x1d/0x30 [ 193.809961][T13936] dump_stack_lvl+0x95/0xd0 [ 193.809999][T13936] dump_stack+0x15/0x1b [ 193.810016][T13936] dump_header+0x81/0x240 [ 193.810040][T13936] oom_kill_process+0x295/0x350 [ 193.810142][T13936] out_of_memory+0x97b/0xb80 [ 193.810163][T13936] try_charge_memcg+0x610/0xa10 [ 193.810200][T13936] obj_cgroup_charge_pages+0xa6/0x150 [ 193.810276][T13936] __memcg_kmem_charge_page+0x9f/0x170 [ 193.810305][T13936] __alloc_frozen_pages_noprof+0x18f/0x360 [ 193.810339][T13936] alloc_pages_mpol+0xb3/0x260 [ 193.810368][T13936] alloc_pages_noprof+0x90/0x130 [ 193.810457][T13936] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 193.810491][T13936] __kvmalloc_node_noprof+0x492/0x6b0 [ 193.810533][T13936] ? ip_set_alloc+0x24/0x30 [ 193.810562][T13936] ? ip_set_alloc+0x24/0x30 [ 193.810614][T13936] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 193.810642][T13936] ip_set_alloc+0x24/0x30 [ 193.810670][T13936] hash_netiface_create+0x282/0x740 [ 193.810703][T13936] ? __pfx_hash_netiface_create+0x10/0x10 [ 193.810792][T13936] ip_set_create+0x3cc/0x970 [ 193.810827][T13936] ? __nla_parse+0x40/0x60 [ 193.810854][T13936] nfnetlink_rcv_msg+0x4c6/0x590 [ 193.810893][T13936] netlink_rcv_skb+0x123/0x220 [ 193.810918][T13936] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 193.810947][T13936] nfnetlink_rcv+0x167/0x16c0 [ 193.810967][T13936] ? kmem_cache_free+0xe3/0x3a0 [ 193.811004][T13936] ? __kfree_skb+0x109/0x150 [ 193.811035][T13936] ? nlmon_xmit+0x4f/0x60 [ 193.811056][T13936] ? consume_skb+0x49/0x150 [ 193.811156][T13936] ? nlmon_xmit+0x4f/0x60 [ 193.811176][T13936] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 193.811205][T13936] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 193.811303][T13936] ? __dev_queue_xmit+0x148/0x1ee0 [ 193.811326][T13936] ? ref_tracker_free+0x37d/0x3e0 [ 193.811383][T13936] ? __netlink_deliver_tap+0x4dc/0x500 [ 193.811418][T13936] netlink_unicast+0x5c0/0x690 [ 193.811444][T13936] netlink_sendmsg+0x58b/0x6b0 [ 193.811514][T13936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.811539][T13936] __sock_sendmsg+0x145/0x180 [ 193.811560][T13936] ____sys_sendmsg+0x31e/0x4a0 [ 193.811592][T13936] ___sys_sendmsg+0x17b/0x1d0 [ 193.811689][T13936] __x64_sys_sendmsg+0xd4/0x160 [ 193.811720][T13936] x64_sys_call+0x17ba/0x3000 [ 193.811745][T13936] do_syscall_64+0xca/0x2b0 [ 193.811846][T13936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.811865][T13936] RIP: 0033:0x7f51cf7df749 [ 193.811879][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.811899][T13936] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.811969][T13936] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 193.812037][T13936] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 193.812051][T13936] RBP: 00007f51cf863f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.812065][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.812078][T13936] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 193.812095][T13936] [ 194.138197][T13936] memory: usage 307200kB, limit 307200kB, failcnt 1917 [ 194.145249][T13936] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 [ 194.153245][T13936] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 194.160591][T13936] Memory cgroup stats for /syz0: [ 194.161162][T13936] cache 8192 [ 194.169413][T13936] rss 8192 [ 194.172460][T13936] shmem 0 [ 194.175397][T13936] mapped_file 4096 [ 194.179161][T13936] dirty 0 [ 194.182131][T13936] writeback 0 [ 194.185406][T13936] workingset_refault_anon 46 [ 194.190033][T13936] workingset_refault_file 1152 [ 194.194895][T13936] swap 114688 [ 194.198173][T13936] swapcached 110592 [ 194.202097][T13936] pgpgin 287505 [ 194.205558][T13936] pgpgout 287476 [ 194.209097][T13936] pgfault 290741 [ 194.212859][T13936] pgmajfault 53 [ 194.216449][T13936] inactive_anon 98304 [ 194.220420][T13936] active_anon 12288 [ 194.224237][T13936] inactive_file 8192 [ 194.228164][T13936] active_file 0 [ 194.231703][T13936] unevictable 0 [ 194.235149][T13936] hierarchical_memory_limit 314572800 [ 194.240545][T13936] hierarchical_memsw_limit 9223372036854771712 [ 194.246696][T13936] total_cache 8192 [ 194.250405][T13936] total_rss 8192 [ 194.253969][T13936] total_shmem 0 [ 194.257455][T13936] total_mapped_file 4096 [ 194.261700][T13936] total_dirty 0 [ 194.265229][T13936] total_writeback 0 [ 194.269071][T13936] total_workingset_refault_anon 46 [ 194.274190][T13936] total_workingset_refault_file 1152 [ 194.279538][T13936] total_swap 114688 [ 194.283349][T13936] total_swapcached 110592 [ 194.287669][T13936] total_pgpgin 287505 [ 194.291768][T13936] total_pgpgout 287476 [ 194.295852][T13936] total_pgfault 290741 [ 194.299918][T13936] total_pgmajfault 53 [ 194.303925][T13936] total_inactive_anon 98304 [ 194.308483][T13936] total_active_anon 12288 [ 194.312837][T13936] total_inactive_file 8192 [ 194.317251][T13936] total_active_file 0 [ 194.321255][T13936] total_unevictable 0 [ 194.325304][T13936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4109,pid=13935,uid=0 [ 194.339983][T13936] Memory cgroup out of memory: Killed process 13935 (syz.0.4109) total-vm:94100kB, anon-rss:1124kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 194.408581][T13936] syz.0.4109 (13936) used greatest stack depth: 7032 bytes left [ 194.429633][T13986] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 194.607885][T14003] tQ±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 194.827547][T14009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.019358][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.036350][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.085777][T14040] !yz!: rxe_newlink: already configured on team_slave_0 [ 195.156855][T14049] macvlan1: entered promiscuous mode [ 195.211159][T14051] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.222874][T14049] macvlan1: left promiscuous mode [ 195.263070][T14051] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.313716][T14051] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.373450][T14051] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.449279][T13019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.460614][T13019] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.473960][T13019] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.487136][T13019] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.643496][T14080] __nla_validate_parse: 8 callbacks suppressed [ 195.643512][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4161'. [ 195.754366][T14093] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.812737][T14093] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.878028][T14101] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.913828][T14093] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.942763][T14093] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.968867][T14116] macvlan1: entered promiscuous mode [ 196.012532][T14116] macvlan1: left promiscuous mode [ 196.208839][T14131] SELinux: policydb version 133 does not match my version range 15-35 [ 196.219036][T14131] SELinux: failed to load policy [ 196.389011][T14139] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4185'. [ 196.416570][T14141] macvlan1: entered promiscuous mode [ 196.452391][T14141] macvlan1: left promiscuous mode [ 196.626170][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 196.653986][T14167] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4197'. [ 197.118467][T14181] hub 2-0:1.0: USB hub found [ 197.126125][T14181] hub 2-0:1.0: 8 ports detected [ 197.154899][T14184] macvlan1: entered promiscuous mode [ 197.231298][T14184] macvlan1: left promiscuous mode [ 197.256334][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 197.256347][ T29] audit: type=1326 audit(1767919399.249:21773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.260785][T14186] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4204'. [ 197.262625][ T29] audit: type=1326 audit(1767919399.249:21774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.318742][ T29] audit: type=1326 audit(1767919399.249:21775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.342329][ T29] audit: type=1326 audit(1767919399.249:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.365933][ T29] audit: type=1326 audit(1767919399.249:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.389493][ T29] audit: type=1326 audit(1767919399.249:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.413238][ T29] audit: type=1326 audit(1767919399.249:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.437691][ T29] audit: type=1326 audit(1767919399.249:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 197.461625][ T29] audit: type=1326 audit(1767919399.249:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51cf7ddf90 code=0x7ffc0000 [ 197.485229][ T29] audit: type=1326 audit(1767919399.249:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.0.4204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f51cf7e0f77 code=0x7ffc0000 [ 197.569028][T14194] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4207'. [ 197.594918][T14199] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 197.613434][T14202] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4208'. [ 197.650186][T14208] warn_alloc: 5 callbacks suppressed [ 197.650199][T14208] syz.2.4212: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 197.670118][T14208] CPU: 1 UID: 0 PID: 14208 Comm: syz.2.4212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.670238][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.670298][T14208] Call Trace: [ 197.670305][T14208] [ 197.670314][T14208] __dump_stack+0x1d/0x30 [ 197.670339][T14208] dump_stack_lvl+0x95/0xd0 [ 197.670405][T14208] dump_stack+0x15/0x1b [ 197.670470][T14208] warn_alloc+0x12b/0x1a0 [ 197.670569][T14208] ? __schedule+0x85f/0xcd0 [ 197.670592][T14208] ? __rcu_read_unlock+0x4f/0x70 [ 197.670613][T14208] __vmalloc_node_range_noprof+0xa0/0x1310 [ 197.670717][T14208] ? __futex_wait+0x1fa/0x260 [ 197.670734][T14208] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.670765][T14208] ? __rcu_read_unlock+0x4f/0x70 [ 197.670786][T14208] ? avc_has_perm_noaudit+0xab/0x130 [ 197.670840][T14208] vmalloc_user_noprof+0x7d/0xb0 [ 197.670932][T14208] ? xskq_create+0x80/0xe0 [ 197.671029][T14208] xskq_create+0x80/0xe0 [ 197.671060][T14208] xsk_init_queue+0x95/0xf0 [ 197.671117][T14208] xsk_setsockopt+0x3f5/0x640 [ 197.671143][T14208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.671171][T14208] __sys_setsockopt+0x184/0x200 [ 197.671259][T14208] __x64_sys_setsockopt+0x64/0x80 [ 197.671285][T14208] x64_sys_call+0x21d5/0x3000 [ 197.671309][T14208] do_syscall_64+0xca/0x2b0 [ 197.671400][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.671446][T14208] RIP: 0033:0x7f1dc00ff749 [ 197.671463][T14208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.671482][T14208] RSP: 002b:00007f1dbeb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.671503][T14208] RAX: ffffffffffffffda RBX: 00007f1dc0355fa0 RCX: 00007f1dc00ff749 [ 197.671523][T14208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 197.671536][T14208] RBP: 00007f1dc0183f91 R08: 0000000000000004 R09: 0000000000000000 [ 197.671554][T14208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.671566][T14208] R13: 00007f1dc0356038 R14: 00007f1dc0355fa0 R15: 00007ffe96b85b78 [ 197.671585][T14208] [ 197.881686][T14208] Mem-Info: [ 197.884861][T14208] active_anon:4191 inactive_anon:2 isolated_anon:0 [ 197.884861][T14208] active_file:21200 inactive_file:2484 isolated_file:0 [ 197.884861][T14208] unevictable:16393 dirty:362 writeback:0 [ 197.884861][T14208] slab_reclaimable:3277 slab_unreclaimable:19004 [ 197.884861][T14208] mapped:29948 shmem:175 pagetables:1423 [ 197.884861][T14208] sec_pagetables:0 bounce:0 [ 197.884861][T14208] kernel_misc_reclaimable:0 [ 197.884861][T14208] free:1816489 free_pcp:53676 free_cma:0 [ 197.930167][T14208] Node 0 active_anon:16764kB inactive_anon:8kB active_file:84800kB inactive_file:9936kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:119792kB dirty:1448kB writeback:0kB shmem:700kB kernel_stack:4688kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.957733][T14208] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.987385][T14208] lowmem_reserve[]: 0 2880 7859 7859 [ 197.992782][T14208] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 198.024160][T14208] lowmem_reserve[]: 0 0 4978 4978 [ 198.029282][T14208] Node 0 Normal free:4304712kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16764kB inactive_anon:8kB active_file:84800kB inactive_file:9936kB unevictable:65572kB writepending:1448kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:211080kB local_pcp:141280kB free_cma:0kB [ 198.063015][T14208] lowmem_reserve[]: 0 0 0 0 [ 198.067772][T14208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.080471][T14208] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 198.096645][T14208] Node 0 Normal: 3058*4kB (UME) 1802*8kB (UME) 719*16kB (UME) 598*32kB (UME) 262*64kB (UME) 128*128kB (UME) 102*256kB (UME) 158*512kB (UM) 131*1024kB (UME) 66*2048kB (UM) 937*4096kB (UM) = 4304712kB [ 198.116349][T14208] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 198.125716][T14208] 40250 total pagecache pages [ 198.130400][T14208] 2 pages in swap cache [ 198.134570][T14208] Free swap = 124972kB [ 198.138721][T14208] Total swap = 124996kB [ 198.142897][T14208] 2097051 pages RAM [ 198.146699][T14208] 0 pages HighMem/MovableOnly [ 198.151400][T14208] 81272 pages reserved [ 198.162876][T14212] macvlan1: entered promiscuous mode [ 198.221367][T14212] macvlan1: left promiscuous mode [ 198.303821][T14228] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4221'. [ 198.417153][T14239] netlink: 'syz.0.4226': attribute type 39 has an invalid length. [ 198.592467][T14262] macvlan1: entered promiscuous mode [ 198.654382][T14262] macvlan1: left promiscuous mode [ 198.683194][T14285] netlink: 'syz.3.4243': attribute type 13 has an invalid length. [ 198.744381][T14293] macvlan1: entered promiscuous mode [ 198.761521][T14293] macvlan1: left promiscuous mode [ 199.093804][T14332] hub 2-0:1.0: USB hub found [ 199.098587][T14332] hub 2-0:1.0: 8 ports detected [ 199.256471][T14347] macvlan1: entered promiscuous mode [ 199.264071][T14347] macvlan1: left promiscuous mode [ 199.563979][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'. [ 199.805395][T13018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.815780][T13018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.827607][T13018] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.839991][T14378] macvlan1: entered promiscuous mode [ 199.850646][T13018] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.925934][T14370] 9p: Bad value for 'wfdno' [ 199.951328][T14378] macvlan1: left promiscuous mode [ 200.136723][T14414] netem: change failed [ 200.709009][T14426] __nla_validate_parse: 2 callbacks suppressed [ 200.709021][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 200.959848][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.967000][T14447] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4308'. [ 200.980330][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.050257][T14457] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.114058][ T1683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.121689][ T1683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.151910][T11795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.317750][T11795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.396636][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'. [ 201.406365][T14484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.413769][T14484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.421588][T14484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.429918][T14484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.547049][T14488] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.640741][T14498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.649240][T14498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.681400][T14498] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 201.689955][T14498] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 201.890664][T11795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.906521][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.915357][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.958771][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4344'. [ 202.462349][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 202.462378][ T29] audit: type=1107 audit(1767919404.461:22297): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s' [ 202.489784][T14549] FAULT_INJECTION: forcing a failure. [ 202.489784][T14549] name failslab, interval 1, probability 0, space 0, times 0 [ 202.502589][T14549] CPU: 1 UID: 0 PID: 14549 Comm: syz.1.4352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.502664][T14549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.502671][T14549] Call Trace: [ 202.502675][T14549] [ 202.502680][T14549] __dump_stack+0x1d/0x30 [ 202.502696][T14549] dump_stack_lvl+0x95/0xd0 [ 202.502708][T14549] dump_stack+0x15/0x1b [ 202.502777][T14549] should_fail_ex+0x265/0x280 [ 202.502823][T14549] should_failslab+0x8c/0xb0 [ 202.502836][T14549] __kmalloc_cache_noprof+0x65/0x4c0 [ 202.502851][T14549] ? __se_sys_mount+0xef/0x2e0 [ 202.502908][T14549] ? memdup_user+0x99/0xd0 [ 202.502918][T14549] __se_sys_mount+0xef/0x2e0 [ 202.502929][T14549] ? fput+0x8f/0xc0 [ 202.502943][T14549] ? ksys_write+0x192/0x1a0 [ 202.502966][T14549] __x64_sys_mount+0x67/0x80 [ 202.502977][T14549] x64_sys_call+0x2cca/0x3000 [ 202.502991][T14549] do_syscall_64+0xca/0x2b0 [ 202.503036][T14549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.503056][T14549] RIP: 0033:0x7ff767e7f749 [ 202.503065][T14549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.503076][T14549] RSP: 002b:00007ff7668e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.503088][T14549] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7f749 [ 202.503095][T14549] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 202.503102][T14549] RBP: 00007ff7668e7090 R08: 0000200000000600 R09: 0000000000000000 [ 202.503131][T14549] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001 [ 202.503138][T14549] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 202.503149][T14549] [ 202.754913][ T29] audit: type=1326 audit(1767919404.751:22298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 202.788191][ T29] audit: type=1326 audit(1767919404.751:22299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 202.811904][ T29] audit: type=1326 audit(1767919404.751:22300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 202.813540][T14560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4356'. [ 202.835714][ T29] audit: type=1326 audit(1767919404.751:22301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa939523e89 code=0x7ffc0000 [ 202.847341][T14560] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 202.868325][ T29] audit: type=1326 audit(1767919404.751:22302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa9394a6c47 code=0x7ffc0000 [ 202.901220][ T29] audit: type=1326 audit(1767919404.751:22303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa9394ef749 code=0x7ffc0000 [ 202.988020][T14569] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 202.996589][T14569] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 203.022169][T14572] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 203.022624][ T29] audit: type=1326 audit(1767919405.021:22304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.2.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc00ff749 code=0x7ffc0000 [ 203.030159][T14572] netlink: 'syz.1.4360': attribute type 13 has an invalid length. [ 203.061797][ T29] audit: type=1326 audit(1767919405.061:22305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.2.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc00ff749 code=0x7ffc0000 [ 203.087081][ T29] audit: type=1326 audit(1767919405.061:22306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.2.4361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc00ff749 code=0x7ffc0000 [ 203.111133][T14572] gretap0: refused to change device tx_queue_len [ 203.117713][T14572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 203.226027][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 203.385563][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.394080][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.656262][T14615] macvlan1: entered promiscuous mode [ 203.719841][T14623] macvlan1: entered promiscuous mode [ 203.728670][T14623] macvlan1: left promiscuous mode [ 203.761656][T14615] macvlan1: left promiscuous mode [ 203.875175][T14641] FAULT_INJECTION: forcing a failure. [ 203.875175][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 203.887954][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.2.4389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.887977][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.887989][T14641] Call Trace: [ 203.887997][T14641] [ 203.888003][T14641] __dump_stack+0x1d/0x30 [ 203.888023][T14641] dump_stack_lvl+0x95/0xd0 [ 203.888040][T14641] dump_stack+0x15/0x1b [ 203.888055][T14641] should_fail_ex+0x265/0x280 [ 203.888076][T14641] should_failslab+0x8c/0xb0 [ 203.888097][T14641] kmem_cache_alloc_noprof+0x69/0x4b0 [ 203.888118][T14641] ? __mpol_dup+0x42/0x1b0 [ 203.888142][T14641] __mpol_dup+0x42/0x1b0 [ 203.888163][T14641] vma_dup_policy+0x29/0x70 [ 203.888183][T14641] __split_vma+0x266/0x660 [ 203.888202][T14641] vms_gather_munmap_vmas+0x17a/0x7b0 [ 203.888231][T14641] ? mas_find+0x608/0x700 [ 203.888259][T14641] mmap_region+0x573/0x1410 [ 203.888292][T14641] ? selinux_file_open+0x2dc/0x330 [ 203.888337][T14641] do_mmap+0x9b3/0xbe0 [ 203.888372][T14641] vm_mmap_pgoff+0x17a/0x2e0 [ 203.888391][T14641] ksys_mmap_pgoff+0xc2/0x310 [ 203.888413][T14641] ? __x64_sys_mmap+0x49/0x70 [ 203.888440][T14641] x64_sys_call+0x16bb/0x3000 [ 203.888463][T14641] do_syscall_64+0xca/0x2b0 [ 203.888491][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.888508][T14641] RIP: 0033:0x7f1dc00ff749 [ 203.888521][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.888535][T14641] RSP: 002b:00007f1dbeb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 203.888552][T14641] RAX: ffffffffffffffda RBX: 00007f1dc0355fa0 RCX: 00007f1dc00ff749 [ 203.888565][T14641] RDX: 0000000000000003 RSI: 0000000000c00000 RDI: 0000200000001000 [ 203.888578][T14641] RBP: 00007f1dbeb67090 R08: ffffffffffffffff R09: 0000000000000000 [ 203.888590][T14641] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 203.888603][T14641] R13: 00007f1dc0356038 R14: 00007f1dc0355fa0 R15: 00007ffe96b85b78 [ 203.888621][T14641] [ 204.143405][T14646] hub 2-0:1.0: USB hub found [ 204.148215][T14646] hub 2-0:1.0: 8 ports detected [ 204.388437][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.399644][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.504243][T14651] block device autoloading is deprecated and will be removed. [ 204.930668][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.025872][T14705] macvlan1: entered promiscuous mode [ 205.037213][T14705] macvlan1: left promiscuous mode [ 205.084348][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.093196][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.190141][T14726] macvlan1: entered promiscuous mode [ 205.218798][T14726] macvlan1: left promiscuous mode [ 205.453090][T14745] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.501056][T14756] macvlan1: entered promiscuous mode [ 205.522856][T14745] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.611455][T14756] macvlan1: left promiscuous mode [ 205.647155][T14745] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.729235][T14778] __nla_validate_parse: 22 callbacks suppressed [ 205.729252][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 205.748338][T14745] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.764547][T14779] hub 2-0:1.0: USB hub found [ 205.769546][T14779] hub 2-0:1.0: 8 ports detected [ 205.789590][T13019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.809772][T13019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.831055][ T1683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.847962][ T1683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.858707][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4446'. [ 205.894984][T14792] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4448'. [ 205.905384][T14792] netlink: zone id is out of range [ 205.910641][T14792] netlink: zone id is out of range [ 205.926406][T14792] netlink: set zone limit has 8 unknown bytes [ 205.936698][T14800] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4450'. [ 205.946255][T14800] netlink: zone id is out of range [ 205.951507][T14800] netlink: zone id is out of range [ 205.982545][T14800] netlink: set zone limit has 8 unknown bytes [ 206.013160][T14805] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4452'. [ 206.161708][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4457'. [ 206.268404][T14829] FAULT_INJECTION: forcing a failure. [ 206.268404][T14829] name failslab, interval 1, probability 0, space 0, times 0 [ 206.281084][T14829] CPU: 1 UID: 0 PID: 14829 Comm: syz.1.4461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.281111][T14829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.281125][T14829] Call Trace: [ 206.281133][T14829] [ 206.281142][T14829] __dump_stack+0x1d/0x30 [ 206.281247][T14829] dump_stack_lvl+0x95/0xd0 [ 206.281290][T14829] dump_stack+0x15/0x1b [ 206.281309][T14829] should_fail_ex+0x265/0x280 [ 206.281332][T14829] should_failslab+0x8c/0xb0 [ 206.281354][T14829] __kmalloc_cache_noprof+0x65/0x4c0 [ 206.281377][T14829] ? __se_sys_mount+0xef/0x2e0 [ 206.281439][T14829] ? memdup_user+0x99/0xd0 [ 206.281456][T14829] __se_sys_mount+0xef/0x2e0 [ 206.281532][T14829] ? fput+0x8f/0xc0 [ 206.281555][T14829] ? ksys_write+0x192/0x1a0 [ 206.281572][T14829] __x64_sys_mount+0x67/0x80 [ 206.281619][T14829] x64_sys_call+0x2cca/0x3000 [ 206.281639][T14829] do_syscall_64+0xca/0x2b0 [ 206.281665][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.281687][T14829] RIP: 0033:0x7ff767e7f749 [ 206.281701][T14829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.281719][T14829] RSP: 002b:00007ff7668e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.281740][T14829] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7f749 [ 206.281754][T14829] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 206.281768][T14829] RBP: 00007ff7668e7090 R08: 0000200000000600 R09: 0000000000000000 [ 206.281805][T14829] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001 [ 206.281818][T14829] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 206.281836][T14829] [ 206.528115][T14843] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4468'. [ 206.870811][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.881215][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.971396][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.984611][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.566400][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 207.580394][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 207.674697][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4494'. [ 207.760594][ T29] kauditd_printk_skb: 1482 callbacks suppressed [ 207.760608][ T29] audit: type=1326 audit(1767919409.745:23789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.790565][ T29] audit: type=1326 audit(1767919409.745:23790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.814565][ T29] audit: type=1326 audit(1767919409.745:23791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.838271][ T29] audit: type=1326 audit(1767919409.745:23792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.862002][ T29] audit: type=1326 audit(1767919409.745:23793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.885755][ T29] audit: type=1326 audit(1767919409.745:23794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.909597][ T29] audit: type=1326 audit(1767919409.745:23795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.933359][ T29] audit: type=1326 audit(1767919409.745:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.964733][T14920] FAULT_INJECTION: forcing a failure. [ 207.964733][T14920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.966895][ T29] audit: type=1326 audit(1767919409.745:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 207.977816][T14920] CPU: 0 UID: 0 PID: 14920 Comm: syz.1.4497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.977840][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.977905][T14920] Call Trace: [ 207.977911][T14920] [ 207.977921][T14920] __dump_stack+0x1d/0x30 [ 207.977946][T14920] dump_stack_lvl+0x95/0xd0 [ 207.977966][T14920] dump_stack+0x15/0x1b [ 207.978028][T14920] should_fail_ex+0x265/0x280 [ 207.978051][T14920] should_fail+0xb/0x20 [ 207.978070][T14920] should_fail_usercopy+0x1a/0x20 [ 207.978093][T14920] _copy_to_user+0x20/0xa0 [ 207.978157][T14920] simple_read_from_buffer+0xb5/0x130 [ 207.978178][T14920] proc_fail_nth_read+0x10e/0x150 [ 207.978251][T14920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.978276][T14920] vfs_read+0x1a8/0x770 [ 207.978292][T14920] ? __rcu_read_unlock+0x4f/0x70 [ 207.978312][T14920] ? __fget_files+0x184/0x1c0 [ 207.978334][T14920] ? mutex_lock+0x58/0x90 [ 207.978436][T14920] ksys_read+0xda/0x1a0 [ 207.978455][T14920] __x64_sys_read+0x40/0x50 [ 207.978473][T14920] x64_sys_call+0x2889/0x3000 [ 207.978496][T14920] do_syscall_64+0xca/0x2b0 [ 207.978559][T14920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.978616][T14920] RIP: 0033:0x7ff767e7e15c [ 207.978631][T14920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.978648][T14920] RSP: 002b:00007ff7668e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.978667][T14920] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7e15c [ 207.978756][T14920] RDX: 000000000000000f RSI: 00007ff7668e70a0 RDI: 0000000000000004 [ 207.978768][T14920] RBP: 00007ff7668e7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.978782][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.978800][T14920] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 207.978819][T14920] [ 208.192832][ T29] audit: type=1326 audit(1767919409.865:23798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14917 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 208.193089][T14931] FAULT_INJECTION: forcing a failure. [ 208.193089][T14931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.229665][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.2.4501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.229750][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.229758][T14931] Call Trace: [ 208.229763][T14931] [ 208.229775][T14931] __dump_stack+0x1d/0x30 [ 208.229824][T14931] dump_stack_lvl+0x95/0xd0 [ 208.229836][T14931] dump_stack+0x15/0x1b [ 208.229848][T14931] should_fail_ex+0x265/0x280 [ 208.229924][T14931] should_fail+0xb/0x20 [ 208.229934][T14931] should_fail_usercopy+0x1a/0x20 [ 208.229948][T14931] _copy_from_user+0x1c/0xb0 [ 208.229963][T14931] proc_do_submiturb+0x866/0x1d20 [ 208.230028][T14931] ? proc_do_submiturb+0xc1/0x1d20 [ 208.230045][T14931] ? should_fail_ex+0xdb/0x280 [ 208.230132][T14931] proc_submiturb+0x7b/0xa0 [ 208.230147][T14931] usbdev_ioctl+0xcb6/0x1700 [ 208.230234][T14931] ? __pfx_usbdev_ioctl+0x10/0x10 [ 208.230254][T14931] __se_sys_ioctl+0xce/0x140 [ 208.230271][T14931] __x64_sys_ioctl+0x43/0x50 [ 208.230288][T14931] x64_sys_call+0x14b0/0x3000 [ 208.230301][T14931] do_syscall_64+0xca/0x2b0 [ 208.230341][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.230353][T14931] RIP: 0033:0x7f1dc00ff749 [ 208.230363][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.230392][T14931] RSP: 002b:00007f1dbeb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.230404][T14931] RAX: ffffffffffffffda RBX: 00007f1dc0355fa0 RCX: 00007f1dc00ff749 [ 208.230411][T14931] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 208.230418][T14931] RBP: 00007f1dbeb67090 R08: 0000000000000000 R09: 0000000000000000 [ 208.230425][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.230432][T14931] R13: 00007f1dc0356038 R14: 00007f1dc0355fa0 R15: 00007ffe96b85b78 [ 208.230443][T14931] [ 209.046649][ T1683] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.383058][T15009] warn_alloc: 6 callbacks suppressed [ 210.383070][T15009] syz.0.4529: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 210.403004][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.0.4529 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.403033][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.403059][T15009] Call Trace: [ 210.403065][T15009] [ 210.403072][T15009] __dump_stack+0x1d/0x30 [ 210.403096][T15009] dump_stack_lvl+0x95/0xd0 [ 210.403119][T15009] dump_stack+0x15/0x1b [ 210.403142][T15009] warn_alloc+0x12b/0x1a0 [ 210.403230][T15009] ? __schedule+0x85f/0xcd0 [ 210.403250][T15009] ? __rcu_read_unlock+0x4f/0x70 [ 210.403267][T15009] __vmalloc_node_range_noprof+0xa0/0x1310 [ 210.403288][T15009] ? __futex_wait+0x1fa/0x260 [ 210.403304][T15009] ? __pfx_futex_wake_mark+0x10/0x10 [ 210.403382][T15009] ? __rcu_read_unlock+0x4f/0x70 [ 210.403402][T15009] ? avc_has_perm_noaudit+0xab/0x130 [ 210.403440][T15009] vmalloc_user_noprof+0x7d/0xb0 [ 210.403526][T15009] ? xskq_create+0x80/0xe0 [ 210.403556][T15009] xskq_create+0x80/0xe0 [ 210.403587][T15009] xsk_init_queue+0x95/0xf0 [ 210.403617][T15009] xsk_setsockopt+0x3f5/0x640 [ 210.403667][T15009] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.403696][T15009] __sys_setsockopt+0x184/0x200 [ 210.403757][T15009] __x64_sys_setsockopt+0x64/0x80 [ 210.403836][T15009] x64_sys_call+0x21d5/0x3000 [ 210.403856][T15009] do_syscall_64+0xca/0x2b0 [ 210.403959][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.403978][T15009] RIP: 0033:0x7f51cf7df749 [ 210.404009][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.404025][T15009] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.404049][T15009] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 210.404061][T15009] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 210.404075][T15009] RBP: 00007f51cf863f91 R08: 0000000000000004 R09: 0000000000000000 [ 210.404087][T15009] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.404101][T15009] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 210.404121][T15009] [ 210.404128][T15009] Mem-Info: [ 210.614846][T15009] active_anon:8213 inactive_anon:2 isolated_anon:0 [ 210.614846][T15009] active_file:21267 inactive_file:2490 isolated_file:0 [ 210.614846][T15009] unevictable:16433 dirty:153 writeback:0 [ 210.614846][T15009] slab_reclaimable:3277 slab_unreclaimable:20335 [ 210.614846][T15009] mapped:33212 shmem:3050 pagetables:1434 [ 210.614846][T15009] sec_pagetables:0 bounce:0 [ 210.614846][T15009] kernel_misc_reclaimable:0 [ 210.614846][T15009] free:1843984 free_pcp:20239 free_cma:0 [ 210.660336][T15009] Node 0 active_anon:26820kB inactive_anon:8kB active_file:85068kB inactive_file:9960kB unevictable:65732kB isolated(anon):0kB isolated(file):0kB mapped:121364kB dirty:612kB writeback:0kB shmem:10808kB kernel_stack:4656kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.688013][T15009] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.717672][T15009] lowmem_reserve[]: 0 2880 7859 7859 [ 210.717705][T15009] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 210.717769][T15009] lowmem_reserve[]: 0 0 4978 4978 [ 210.717804][T15009] Node 0 Normal free:4433288kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16844kB inactive_anon:8kB active_file:85068kB inactive_file:9960kB unevictable:65732kB writepending:612kB zspages:0kB present:5242880kB managed:5098240kB mlocked:160kB bounce:0kB free_pcp:75072kB local_pcp:25804kB free_cma:0kB [ 210.717939][T15009] lowmem_reserve[]: 0 0 0 0 [ 210.717970][T15009] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.718153][T15009] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 210.718352][T15009] Node 0 Normal: 2875*4kB (UME) 1757*8kB (UME) 490*16kB (UME) 775*32kB (UME) 421*64kB (UME) 278*128kB (UME) 234*256kB (UME) 154*512kB (UM) 126*1024kB (UME) 71*2048kB (UM) 952*4096kB (UM) = 4433300kB [ 210.718638][T15009] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 210.718683][T15009] 40330 total pagecache pages [ 210.718690][T15009] 5 pages in swap cache [ 210.718695][T15009] Free swap = 124968kB [ 210.718707][T15009] Total swap = 124996kB [ 210.718715][T15009] 2097051 pages RAM [ 210.718720][T15009] 0 pages HighMem/MovableOnly [ 210.718726][T15009] 81272 pages reserved [ 210.891484][T15016] __nla_validate_parse: 6 callbacks suppressed [ 210.891501][T15016] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 210.961830][T15022] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4534'. [ 211.111446][ T4411] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.117663][ T3572] Bluetooth: hci0: command 0x1003 tx timeout [ 211.305686][T15046] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 211.327631][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4542'. [ 211.336674][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4542'. [ 211.432380][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 211.458519][T15062] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4548'. [ 211.857274][T15080] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 211.916010][T15091] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4560'. [ 211.947795][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.956946][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.967134][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4559'. [ 212.451815][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.460185][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.770583][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 212.936069][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 212.936110][ T29] audit: type=1400 audit(212.929:24392): avc: denied { ioctl } for pid=15137 comm="syz.3.4578" path="/dev/usbmon3" dev="devtmpfs" ino=151 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 213.655427][ T29] audit: type=1326 audit(213.649:24393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.678601][ T29] audit: type=1326 audit(213.649:24394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.701929][ T29] audit: type=1326 audit(213.649:24395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.724941][ T29] audit: type=1326 audit(213.649:24396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.748133][ T29] audit: type=1326 audit(213.649:24397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.771166][ T29] audit: type=1326 audit(213.649:24398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.794199][ T29] audit: type=1326 audit(213.649:24399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.817427][ T29] audit: type=1326 audit(213.649:24400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.840344][ T29] audit: type=1326 audit(213.649:24401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 213.973153][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.986297][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.608139][T15212] SELinux: Context Ü is not valid (left unmapped). [ 214.671645][T15215] FAULT_INJECTION: forcing a failure. [ 214.671645][T15215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.684894][T15215] CPU: 0 UID: 0 PID: 15215 Comm: syz.0.4601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.684977][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.684987][T15215] Call Trace: [ 214.684993][T15215] [ 214.685006][T15215] __dump_stack+0x1d/0x30 [ 214.685026][T15215] dump_stack_lvl+0x95/0xd0 [ 214.685043][T15215] dump_stack+0x15/0x1b [ 214.685063][T15215] should_fail_ex+0x265/0x280 [ 214.685082][T15215] should_fail+0xb/0x20 [ 214.685115][T15215] should_fail_usercopy+0x1a/0x20 [ 214.685133][T15215] _copy_from_user+0x1c/0xb0 [ 214.685219][T15215] __copy_msghdr+0x244/0x300 [ 214.685240][T15215] ___sys_sendmsg+0x109/0x1d0 [ 214.685259][T15215] ? trace_event_buffer_commit+0x196/0x5c0 [ 214.685399][T15215] __sys_sendmmsg+0x178/0x300 [ 214.685439][T15215] __x64_sys_sendmmsg+0x57/0x70 [ 214.685460][T15215] x64_sys_call+0x1e28/0x3000 [ 214.685478][T15215] do_syscall_64+0xca/0x2b0 [ 214.685504][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.685594][T15215] RIP: 0033:0x7f51cf7df749 [ 214.685607][T15215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.685621][T15215] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.685637][T15215] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 214.685648][T15215] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 214.685696][T15215] RBP: 00007f51ce247090 R08: 0000000000000000 R09: 0000000000000000 [ 214.685706][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.685717][T15215] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 214.685732][T15215] [ 214.965965][T15229] futex_wake_op: syz.0.4608 tries to shift op by -3; fix this program [ 215.276084][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.323235][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.551253][T15264] nfs: Unknown parameter ' ' [ 215.827663][T15281] macvlan1: entered promiscuous mode [ 215.893112][T15281] macvlan1: left promiscuous mode [ 215.954485][T15288] __nla_validate_parse: 10 callbacks suppressed [ 215.954539][T15288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4632'. [ 216.255920][T15287] cgroup2: Unknown parameter '·' [ 216.412947][T15310] hub 2-0:1.0: USB hub found [ 216.417666][T15310] hub 2-0:1.0: 8 ports detected [ 216.428920][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4638'. [ 216.446652][T15317] macvlan1: entered promiscuous mode [ 216.479910][T15323] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4646'. [ 216.489562][T15323] netlink: zone id is out of range [ 216.494802][T15323] netlink: zone id is out of range [ 216.500189][T15323] netlink: zone id is out of range [ 216.513764][T15323] netlink: set zone limit has 8 unknown bytes [ 216.542106][T15317] macvlan1: left promiscuous mode [ 216.559810][T15327] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4648'. [ 216.606012][T15332] ip6gre0: entered promiscuous mode [ 216.614501][T15332] ip6gre0: entered allmulticast mode [ 216.619815][T15332] team0: Device ip6gre0 is of different type [ 216.644803][T15339] FAULT_INJECTION: forcing a failure. [ 216.644803][T15339] name failslab, interval 1, probability 0, space 0, times 0 [ 216.657604][T15339] CPU: 0 UID: 0 PID: 15339 Comm: syz.2.4654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.657628][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.657639][T15339] Call Trace: [ 216.657645][T15339] [ 216.657720][T15339] __dump_stack+0x1d/0x30 [ 216.657771][T15339] dump_stack_lvl+0x95/0xd0 [ 216.657792][T15339] dump_stack+0x15/0x1b [ 216.657810][T15339] should_fail_ex+0x265/0x280 [ 216.657833][T15339] should_failslab+0x8c/0xb0 [ 216.657886][T15339] kmem_cache_alloc_noprof+0x69/0x4b0 [ 216.657907][T15339] ? security_inode_alloc+0x37/0x100 [ 216.657929][T15339] security_inode_alloc+0x37/0x100 [ 216.657949][T15339] inode_init_always_gfp+0x4b7/0x500 [ 216.657971][T15339] ? __pfx_sock_alloc_inode+0x10/0x10 [ 216.658059][T15339] alloc_inode+0x58/0x170 [ 216.658079][T15339] do_accept+0xa0/0x3a0 [ 216.658099][T15339] ? _raw_spin_lock+0x52/0xa0 [ 216.658125][T15339] io_accept+0x1b9/0x450 [ 216.658180][T15339] __io_issue_sqe+0xfe/0x2e0 [ 216.658249][T15339] ? io_assign_file+0x13d/0x200 [ 216.658277][T15339] io_issue_sqe+0x56/0xa80 [ 216.658319][T15339] ? io_accept_prep+0x27b/0x2a0 [ 216.658343][T15339] io_submit_sqes+0x78b/0x11b0 [ 216.658379][T15339] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 216.658409][T15339] ? 0xffffffff81000000 [ 216.658449][T15339] ? __rcu_read_unlock+0x4f/0x70 [ 216.658470][T15339] ? proc_fail_nth_write+0x13b/0x160 [ 216.658496][T15339] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.658522][T15339] ? vfs_write+0x7e8/0x960 [ 216.658581][T15339] ? __rcu_read_unlock+0x4f/0x70 [ 216.658600][T15339] ? __fget_files+0x184/0x1c0 [ 216.658637][T15339] ? mutex_unlock+0x4f/0x90 [ 216.658725][T15339] ? fput+0x8f/0xc0 [ 216.658750][T15339] __x64_sys_io_uring_enter+0x78/0x90 [ 216.658837][T15339] x64_sys_call+0x27e4/0x3000 [ 216.658860][T15339] do_syscall_64+0xca/0x2b0 [ 216.658890][T15339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.658911][T15339] RIP: 0033:0x7f1dc00ff749 [ 216.658940][T15339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.658957][T15339] RSP: 002b:00007f1dbeb67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 216.658983][T15339] RAX: ffffffffffffffda RBX: 00007f1dc0355fa0 RCX: 00007f1dc00ff749 [ 216.658999][T15339] RDX: 0000000000003e44 RSI: 0000000000003516 RDI: 0000000000000003 [ 216.659011][T15339] RBP: 00007f1dbeb67090 R08: 0000000000000000 R09: 0000000000000000 [ 216.659081][T15339] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 216.659093][T15339] R13: 00007f1dc0356038 R14: 00007f1dc0355fa0 R15: 00007ffe96b85b78 [ 216.659113][T15339] [ 216.980430][T15345] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 216.988943][T15345] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 217.048299][T15354] netlink: 199808 bytes leftover after parsing attributes in process `syz.1.4660'. [ 217.304618][T15372] bridge0: entered promiscuous mode [ 217.309967][T15372] macsec1: entered promiscuous mode [ 217.316155][T15372] bridge0: port 3(macsec1) entered blocking state [ 217.322691][T15372] bridge0: port 3(macsec1) entered disabled state [ 217.329327][T15372] macsec1: entered allmulticast mode [ 217.334678][T15372] bridge0: entered allmulticast mode [ 217.340615][T15372] macsec1: left allmulticast mode [ 217.345718][T15372] bridge0: left allmulticast mode [ 217.351491][T15372] bridge0: left promiscuous mode [ 217.414323][T15376] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4666'. [ 217.486834][T15386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4671'. [ 217.574869][T15402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'. [ 217.607067][T15407] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.947681][T15440] hub 2-0:1.0: USB hub found [ 217.980807][T15440] hub 2-0:1.0: 8 ports detected [ 218.650488][T15455] cgroup2: Unknown parameter '·' [ 218.683166][T15488] hub 2-0:1.0: USB hub found [ 218.720346][T15488] hub 2-0:1.0: 8 ports detected [ 218.838306][T15508] loop0: detected capacity change from 0 to 128 [ 218.843778][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 218.843794][ T29] audit: type=1326 audit(218.828:25228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 218.873748][ T29] audit: type=1326 audit(218.828:25229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 218.896731][ T29] audit: type=1326 audit(218.828:25230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 218.919741][ T29] audit: type=1326 audit(218.828:25231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 218.943006][ T29] audit: type=1326 audit(218.828:25232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51cf7df783 code=0x7ffc0000 [ 218.965900][ T29] audit: type=1326 audit(218.828:25233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f51cf7de1ff code=0x7ffc0000 [ 218.988833][ T29] audit: type=1326 audit(218.828:25234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f51cf7df7d7 code=0x7ffc0000 [ 219.001766][T15508] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.011828][ T29] audit: type=1326 audit(218.828:25235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51cf7ddf90 code=0x7ffc0000 [ 219.046689][ T29] audit: type=1326 audit(218.828:25236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51cf7df34b code=0x7ffc0000 [ 219.069596][ T29] audit: type=1326 audit(218.858:25237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.0.4718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f51cf7de3aa code=0x7ffc0000 [ 219.160844][T15539] FAULT_INJECTION: forcing a failure. [ 219.160844][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 219.173538][T15539] CPU: 0 UID: 0 PID: 15539 Comm: syz.3.4728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 219.173564][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.173577][T15539] Call Trace: [ 219.173584][T15539] [ 219.173591][T15539] __dump_stack+0x1d/0x30 [ 219.173617][T15539] dump_stack_lvl+0x95/0xd0 [ 219.173685][T15539] dump_stack+0x15/0x1b [ 219.173706][T15539] should_fail_ex+0x265/0x280 [ 219.173729][T15539] should_failslab+0x8c/0xb0 [ 219.173750][T15539] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 219.173844][T15539] ? alloc_vmap_area+0x241/0xea0 [ 219.173862][T15539] ? avc_has_perm+0xf7/0x180 [ 219.173891][T15539] alloc_vmap_area+0x241/0xea0 [ 219.173927][T15539] ? __kmalloc_cache_node_noprof+0x446/0x4d0 [ 219.173953][T15539] __get_vm_area_node+0x173/0x1d0 [ 219.173974][T15539] __vmalloc_node_range_noprof+0x28e/0x1310 [ 219.173995][T15539] ? sel_write_load+0x157/0x380 [ 219.174040][T15539] ? path_openat+0x1e82/0x23b0 [ 219.174079][T15539] ? _parse_integer_limit+0x170/0x190 [ 219.174102][T15539] ? _parse_integer+0x27/0x40 [ 219.174134][T15539] ? __rcu_read_unlock+0x4f/0x70 [ 219.174154][T15539] ? avc_has_perm_noaudit+0xab/0x130 [ 219.174187][T15539] ? sel_write_load+0x157/0x380 [ 219.174216][T15539] vmalloc_noprof+0x82/0xc0 [ 219.174245][T15539] ? sel_write_load+0x157/0x380 [ 219.174274][T15539] sel_write_load+0x157/0x380 [ 219.174384][T15539] ? __pfx_sel_write_load+0x10/0x10 [ 219.174447][T15539] vfs_write+0x269/0x960 [ 219.174465][T15539] ? __rcu_read_unlock+0x4f/0x70 [ 219.174486][T15539] ? __fget_files+0x184/0x1c0 [ 219.174529][T15539] ? mutex_lock+0x58/0x90 [ 219.174556][T15539] ksys_write+0xda/0x1a0 [ 219.174577][T15539] __x64_sys_write+0x40/0x50 [ 219.174597][T15539] x64_sys_call+0x2847/0x3000 [ 219.174640][T15539] do_syscall_64+0xca/0x2b0 [ 219.174696][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.174719][T15539] RIP: 0033:0x7fa81d71f749 [ 219.174736][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.174754][T15539] RSP: 002b:00007fa81c17f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.174775][T15539] RAX: ffffffffffffffda RBX: 00007fa81d975fa0 RCX: 00007fa81d71f749 [ 219.174804][T15539] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 219.174817][T15539] RBP: 00007fa81c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.174831][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.174844][T15539] R13: 00007fa81d976038 R14: 00007fa81d975fa0 R15: 00007ffc01d07fe8 [ 219.174977][T15539] [ 219.180367][T12043] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.243846][T15536] SELinux: failed to load policy [ 219.464818][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.472137][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.489899][T15552] bridge0: entered allmulticast mode [ 219.530269][T15559] macvlan1: entered promiscuous mode [ 219.536012][T15546] bridge_slave_1: left allmulticast mode [ 219.542202][T15546] bridge_slave_1: left promiscuous mode [ 219.549169][T15546] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.580896][T15546] bridge_slave_0: left allmulticast mode [ 219.586827][T15546] bridge_slave_0: left promiscuous mode [ 219.593200][T15546] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.604724][T15534] cgroup2: Unknown parameter '·' [ 219.617247][T15563] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=15563 comm=îBC [ 219.671431][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.684476][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.852113][T15559] macvlan1: left promiscuous mode [ 220.123372][T15614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15614 comm=syz.3.4754 [ 220.161952][T15614] block device autoloading is deprecated and will be removed. [ 220.184743][T15606] cgroup2: Unknown parameter '·' [ 221.069941][ T3507] IPVS: starting estimator thread 0... [ 221.137658][T15689] __nla_validate_parse: 9 callbacks suppressed [ 221.137673][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4781'. [ 221.167321][T15686] IPVS: using max 2448 ests per chain, 122400 per kthread [ 221.184886][T15696] FAULT_INJECTION: forcing a failure. [ 221.184886][T15696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.198253][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.1.4783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.198283][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.198295][T15696] Call Trace: [ 221.198303][T15696] [ 221.198316][T15696] __dump_stack+0x1d/0x30 [ 221.198340][T15696] dump_stack_lvl+0x95/0xd0 [ 221.198361][T15696] dump_stack+0x15/0x1b [ 221.198440][T15696] should_fail_ex+0x265/0x280 [ 221.198528][T15696] should_fail+0xb/0x20 [ 221.198546][T15696] should_fail_usercopy+0x1a/0x20 [ 221.198569][T15696] _copy_from_user+0x1c/0xb0 [ 221.198594][T15696] bpf_test_init+0xb9/0x140 [ 221.198661][T15696] bpf_prog_test_run_xdp+0x305/0x970 [ 221.198690][T15696] ? __rcu_read_unlock+0x4f/0x70 [ 221.198743][T15696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.198770][T15696] bpf_prog_test_run+0x204/0x340 [ 221.198793][T15696] __sys_bpf+0x4c0/0x7c0 [ 221.198819][T15696] __x64_sys_bpf+0x41/0x50 [ 221.198898][T15696] x64_sys_call+0x28e1/0x3000 [ 221.198921][T15696] do_syscall_64+0xca/0x2b0 [ 221.198961][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.199045][T15696] RIP: 0033:0x7ff767e7f749 [ 221.199061][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.199078][T15696] RSP: 002b:00007ff7668e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.199098][T15696] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7f749 [ 221.199111][T15696] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 221.199123][T15696] RBP: 00007ff7668e7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.199134][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.199184][T15696] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 221.199204][T15696] [ 221.410328][T15703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4786'. [ 221.417872][T15705] macvlan1: entered promiscuous mode [ 221.472700][T15711] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 221.481240][T15711] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 221.531318][T15705] macvlan1: left promiscuous mode [ 221.670084][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.678930][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.719108][T15722] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 221.727684][T15722] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 222.071590][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4797'. [ 222.126004][T15736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4798'. [ 222.306295][T15751] netlink: 'syz.3.4804': attribute type 13 has an invalid length. [ 222.355800][T15751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.381220][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4806'. [ 222.390273][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4806'. [ 222.412420][T15762] netem: change failed [ 222.591909][ T9] IPVS: starting estimator thread 0... [ 222.680580][T15788] IPVS: using max 2496 ests per chain, 124800 per kthread [ 222.928876][T15801] Set syz1 is full, maxelem 6117 reached [ 223.122845][T15808] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 223.141891][T15819] macvlan1: entered promiscuous mode [ 223.160907][T15824] FAULT_INJECTION: forcing a failure. [ 223.160907][T15824] name failslab, interval 1, probability 0, space 0, times 0 [ 223.173648][T15824] CPU: 1 UID: 0 PID: 15824 Comm: syz.3.4830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.173665][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.173672][T15824] Call Trace: [ 223.173698][T15824] [ 223.173705][T15824] __dump_stack+0x1d/0x30 [ 223.173728][T15824] dump_stack_lvl+0x95/0xd0 [ 223.173808][T15824] dump_stack+0x15/0x1b [ 223.173819][T15824] should_fail_ex+0x265/0x280 [ 223.173859][T15824] should_failslab+0x8c/0xb0 [ 223.173950][T15824] __kmalloc_noprof+0xb9/0x5a0 [ 223.173963][T15824] ? kernfs_fop_read_iter+0xd6/0x330 [ 223.174025][T15824] kernfs_fop_read_iter+0xd6/0x330 [ 223.174117][T15824] ? rw_verify_area+0x8d/0x160 [ 223.174143][T15824] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 223.174160][T15824] __io_read+0x442/0xc30 [ 223.174249][T15824] ? __rcu_read_unlock+0x4f/0x70 [ 223.174261][T15824] io_read+0x4a/0x190 [ 223.174368][T15824] __io_issue_sqe+0xfe/0x2e0 [ 223.174437][T15824] ? io_assign_file+0x1b6/0x200 [ 223.174454][T15824] io_issue_sqe+0x56/0xa80 [ 223.174532][T15824] ? io_prep_rwv+0xef/0x250 [ 223.174626][T15824] io_submit_sqes+0x78b/0x11b0 [ 223.174648][T15824] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 223.174666][T15824] ? 0xffffffff81000000 [ 223.174684][T15824] ? __rcu_read_unlock+0x4f/0x70 [ 223.174695][T15824] ? proc_fail_nth_write+0x13b/0x160 [ 223.174711][T15824] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.174734][T15824] ? vfs_write+0x7e8/0x960 [ 223.174798][T15824] ? __rcu_read_unlock+0x4f/0x70 [ 223.174809][T15824] ? __fget_files+0x184/0x1c0 [ 223.174828][T15824] ? mutex_unlock+0x4f/0x90 [ 223.174858][T15824] ? fput+0x8f/0xc0 [ 223.174975][T15824] __x64_sys_io_uring_enter+0x78/0x90 [ 223.174994][T15824] x64_sys_call+0x27e4/0x3000 [ 223.175007][T15824] do_syscall_64+0xca/0x2b0 [ 223.175091][T15824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.175104][T15824] RIP: 0033:0x7fa81d71f749 [ 223.175113][T15824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.175123][T15824] RSP: 002b:00007fa81c17f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 223.175165][T15824] RAX: ffffffffffffffda RBX: 00007fa81d975fa0 RCX: 00007fa81d71f749 [ 223.175172][T15824] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000004 [ 223.175179][T15824] RBP: 00007fa81c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 223.175186][T15824] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 223.175193][T15824] R13: 00007fa81d976038 R14: 00007fa81d975fa0 R15: 00007ffc01d07fe8 [ 223.175203][T15824] [ 223.481475][T15819] macvlan1: left promiscuous mode [ 223.634111][T15847] hub 2-0:1.0: USB hub found [ 223.638861][T15847] hub 2-0:1.0: 8 ports detected [ 223.672930][T15850] IPVS: dh: FWM 3 0x00000003 - no destination available [ 223.680043][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 223.847592][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 223.847607][ T29] audit: type=1400 audit(223.838:25949): avc: denied { create } for pid=15855 comm="syz.4.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.902393][ T29] audit: type=1400 audit(223.878:25950): avc: denied { bind } for pid=15855 comm="syz.4.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.921274][ T29] audit: type=1400 audit(223.878:25951): avc: denied { write } for pid=15855 comm="syz.4.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.031782][T15866] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.092499][T15866] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.153869][T15866] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.203291][T15866] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.244248][T13018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.256113][T13018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.280640][T13018] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.292899][T13018] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.488844][T15882] pim6reg: entered allmulticast mode [ 224.599836][ T29] audit: type=1400 audit(224.478:25952): avc: denied { setopt } for pid=15881 comm="syz.2.4849" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.986500][ T29] audit: type=1400 audit(224.928:25953): avc: denied { egress } for pid=15874 comm="syz.4.4846" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 225.009715][ T29] audit: type=1400 audit(224.928:25954): avc: denied { sendto } for pid=15874 comm="syz.4.4846" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 225.057895][T15886] hub 2-0:1.0: USB hub found [ 225.095844][T15886] hub 2-0:1.0: 8 ports detected [ 225.440724][ T29] audit: type=1326 audit(225.388:25955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 225.463764][ T29] audit: type=1326 audit(225.388:25956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 225.486775][ T29] audit: type=1326 audit(225.398:25957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 225.509827][ T29] audit: type=1326 audit(225.398:25958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 226.208393][T15907] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.333086][T15907] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.412853][T15907] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.469790][T15911] __nla_validate_parse: 7 callbacks suppressed [ 226.469804][T15911] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4858'. [ 226.486472][T15907] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.529521][T15881] pim6reg: left allmulticast mode [ 226.589697][T13018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.610092][T13018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.650281][T13018] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.673457][T13018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.707618][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.730974][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.764042][T15920] hub 2-0:1.0: USB hub found [ 226.768745][T15920] hub 2-0:1.0: 8 ports detected [ 226.807733][T15923] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 226.816349][T15918] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 226.824829][T15918] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 226.893888][T15931] IPVS: dh: FWM 3 0x00000003 - no destination available [ 226.901111][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 226.952776][T13018] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.000914][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4868'. [ 227.192751][T15942] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4871'. [ 227.287189][T15948] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4874'. [ 227.613179][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4885'. [ 228.026281][T16003] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4896'. [ 228.130590][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.450465][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4901'. [ 228.464522][T16015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16015 comm=syz.0.4901 [ 228.478117][T16015] FAULT_INJECTION: forcing a failure. [ 228.478117][T16015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.491608][T16015] CPU: 0 UID: 0 PID: 16015 Comm: syz.0.4901 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.491700][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.491710][T16015] Call Trace: [ 228.491716][T16015] [ 228.491723][T16015] __dump_stack+0x1d/0x30 [ 228.491777][T16015] dump_stack_lvl+0x95/0xd0 [ 228.491798][T16015] dump_stack+0x15/0x1b [ 228.491814][T16015] should_fail_ex+0x265/0x280 [ 228.491834][T16015] should_fail_alloc_page+0xf2/0x100 [ 228.491866][T16015] __alloc_frozen_pages_noprof+0x109/0x360 [ 228.491895][T16015] alloc_pages_mpol+0xb3/0x260 [ 228.491924][T16015] alloc_frozen_pages_noprof+0x90/0x110 [ 228.492032][T16015] ___kmalloc_large_node+0x3f/0xf0 [ 228.492053][T16015] __kmalloc_large_node_noprof+0x16/0xa0 [ 228.492167][T16015] __kmalloc_noprof+0x35a/0x5a0 [ 228.492184][T16015] ? tcf_em_tree_validate+0x13f/0x890 [ 228.492212][T16015] tcf_em_tree_validate+0x13f/0x890 [ 228.492238][T16015] ? tcf_exts_validate+0x42/0x60 [ 228.492259][T16015] basic_change+0x38a/0x7e0 [ 228.492332][T16015] ? __pfx_basic_change+0x10/0x10 [ 228.492353][T16015] tc_new_tfilter+0xde4/0x10a0 [ 228.492454][T16015] ? __rcu_read_unlock+0x4f/0x70 [ 228.492479][T16015] ? ns_capable+0x7d/0xb0 [ 228.492501][T16015] ? __pfx_tc_new_tfilter+0x10/0x10 [ 228.492535][T16015] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 228.492563][T16015] netlink_rcv_skb+0x123/0x220 [ 228.492587][T16015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.492615][T16015] rtnetlink_rcv+0x1c/0x30 [ 228.492681][T16015] netlink_unicast+0x5c0/0x690 [ 228.492704][T16015] netlink_sendmsg+0x58b/0x6b0 [ 228.492728][T16015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.492760][T16015] __sock_sendmsg+0x145/0x180 [ 228.492776][T16015] ____sys_sendmsg+0x31e/0x4a0 [ 228.492799][T16015] ___sys_sendmsg+0x17b/0x1d0 [ 228.492831][T16015] __x64_sys_sendmsg+0xd4/0x160 [ 228.492894][T16015] x64_sys_call+0x17ba/0x3000 [ 228.492913][T16015] do_syscall_64+0xca/0x2b0 [ 228.492974][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.492991][T16015] RIP: 0033:0x7f51cf7df749 [ 228.493005][T16015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.493020][T16015] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.493036][T16015] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 228.493049][T16015] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 228.493059][T16015] RBP: 00007f51ce247090 R08: 0000000000000000 R09: 0000000000000000 [ 228.493070][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.493080][T16015] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 228.493096][T16015] [ 228.840953][T16025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.885526][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 228.885543][ T29] audit: type=1326 audit(228.878:26295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 228.922580][T16025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.940629][ T29] audit: type=1326 audit(228.878:26296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 228.963685][ T29] audit: type=1326 audit(228.878:26297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 228.986706][ T29] audit: type=1326 audit(228.878:26298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.009861][ T29] audit: type=1326 audit(228.878:26299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.010586][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 229.033063][ T29] audit: type=1326 audit(228.878:26300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.038950][ T4411] Bluetooth: hci0: command 0x1003 tx timeout [ 229.067908][ T29] audit: type=1326 audit(228.878:26301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.090940][ T29] audit: type=1326 audit(228.878:26302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.113897][ T29] audit: type=1326 audit(228.878:26303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.137026][ T29] audit: type=1326 audit(228.878:26304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.0.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 229.275983][T16025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.763455][T16025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.888251][T13007] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.899512][T13007] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.110899][T13007] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.119586][T13007] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.199723][T16076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.377934][T16076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.444536][T16076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.532129][T16076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.578526][T13007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.606171][T13007] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.625868][T13007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.634312][T13007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.055438][T16123] program syz.3.4941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.121081][T16129] macvlan1: entered promiscuous mode [ 231.222744][T16129] macvlan1: left promiscuous mode [ 231.238147][T16131] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.259330][T16134] macvlan1: entered promiscuous mode [ 231.341967][T16131] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.399059][ T583] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.412618][T16131] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.423376][T16134] macvlan1: left promiscuous mode [ 231.462796][T16131] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.483428][T16146] __nla_validate_parse: 5 callbacks suppressed [ 231.483446][T16146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4950'. [ 231.528970][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4952'. [ 231.584808][T16154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.596102][T16154] x_tables: duplicate underflow at hook 1 [ 231.618802][T16156] macvlan1: entered promiscuous mode [ 231.655386][T16158] binfmt_misc: register: failed to install interpreter file ./file2 [ 231.722653][T16156] macvlan1: left promiscuous mode [ 231.847790][T16187] FAULT_INJECTION: forcing a failure. [ 231.847790][T16187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.860980][T16187] CPU: 0 UID: 0 PID: 16187 Comm: syz.0.4967 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.861070][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.861126][T16187] Call Trace: [ 231.861132][T16187] [ 231.861140][T16187] __dump_stack+0x1d/0x30 [ 231.861181][T16187] dump_stack_lvl+0x95/0xd0 [ 231.861277][T16187] dump_stack+0x15/0x1b [ 231.861297][T16187] should_fail_ex+0x265/0x280 [ 231.861321][T16187] should_fail+0xb/0x20 [ 231.861339][T16187] should_fail_usercopy+0x1a/0x20 [ 231.861358][T16187] _copy_from_iter+0xcf/0xe70 [ 231.861418][T16187] ? __alloc_skb+0x396/0x4b0 [ 231.861449][T16187] ? __alloc_skb+0x228/0x4b0 [ 231.861474][T16187] netlink_sendmsg+0x471/0x6b0 [ 231.861570][T16187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.861596][T16187] __sock_sendmsg+0x145/0x180 [ 231.861612][T16187] ____sys_sendmsg+0x31e/0x4a0 [ 231.861780][T16187] ___sys_sendmsg+0x17b/0x1d0 [ 231.861820][T16187] __x64_sys_sendmsg+0xd4/0x160 [ 231.861848][T16187] x64_sys_call+0x17ba/0x3000 [ 231.861882][T16187] do_syscall_64+0xca/0x2b0 [ 231.861912][T16187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.861934][T16187] RIP: 0033:0x7f51cf7df749 [ 231.861950][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.862008][T16187] RSP: 002b:00007f51ce247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.862028][T16187] RAX: ffffffffffffffda RBX: 00007f51cfa35fa0 RCX: 00007f51cf7df749 [ 231.862041][T16187] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 231.862054][T16187] RBP: 00007f51ce247090 R08: 0000000000000000 R09: 0000000000000000 [ 231.862066][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.862101][T16187] R13: 00007f51cfa36038 R14: 00007f51cfa35fa0 R15: 00007ffd1463dbe8 [ 231.862121][T16187] [ 231.990445][T16184] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 232.066306][T16184] SELinux: failed to load policy [ 232.108671][T16193] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4969'. [ 232.175841][T16197] SELinux: ebitmap: truncated map [ 232.182468][T16197] SELinux: failed to load policy [ 232.245285][T16204] macvlan1: entered promiscuous mode [ 232.252295][T16205] macvlan1: entered promiscuous mode [ 232.351044][T16204] macvlan1: left promiscuous mode [ 232.375778][T16209] x_tables: unsorted underflow at hook 2 [ 232.459440][T16213] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 232.704495][T16229] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.346022][T13019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.357414][T13019] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.368527][T13019] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.379793][T13019] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.411897][ T4411] Bluetooth: hci0: command 0x1003 tx timeout [ 233.418114][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.489978][T16242] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 233.498505][T16242] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 234.055288][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 234.055303][ T29] audit: type=1400 audit(234.048:26596): avc: denied { bind } for pid=16246 comm=1AEE4243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.081136][ T29] audit: type=1400 audit(234.078:26597): avc: denied { setopt } for pid=16246 comm=1AEE4243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.082625][T16247] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=16247 comm=îBC [ 234.353419][T16249] hub 2-0:1.0: USB hub found [ 234.358093][T16249] hub 2-0:1.0: 8 ports detected [ 234.406337][ T29] audit: type=1400 audit(234.398:26598): avc: denied { create } for pid=16254 comm="LX[X" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.425461][ T29] audit: type=1400 audit(234.398:26599): avc: denied { write } for pid=16254 comm="LX[X" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.480807][ T3507] usb usb6-port1: attempt power cycle [ 234.546494][ T29] audit: type=1400 audit(234.538:26600): avc: denied { create } for pid=16258 comm="syz.3.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.566795][ T29] audit: type=1400 audit(234.558:26601): avc: denied { read } for pid=16258 comm="syz.3.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.741131][T16205] macvlan1: left promiscuous mode [ 234.934302][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4999'. [ 235.011672][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.042694][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.119318][T16269] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 235.127801][T16269] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 235.505039][T16285] hub 2-0:1.0: USB hub found [ 235.510009][T16285] hub 2-0:1.0: 8 ports detected [ 235.543695][ T29] audit: type=1400 audit(235.538:26602): avc: denied { read write } for pid=16286 comm="syz.3.5008" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.567009][ T29] audit: type=1400 audit(235.538:26603): avc: denied { open } for pid=16286 comm="syz.3.5008" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.682028][T16287] netlink: 'syz.3.5008': attribute type 178 has an invalid length. [ 236.220554][ T29] audit: type=1326 audit(236.178:26604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 236.243189][ T29] audit: type=1326 audit(236.178:26605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 236.330999][ T3507] usb usb6-port1: unable to enumerate USB device [ 236.472310][T16308] hub 2-0:1.0: USB hub found [ 236.477028][T16308] hub 2-0:1.0: 8 ports detected [ 236.534744][T16313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.543703][T16313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.583522][T16314] block device autoloading is deprecated and will be removed. [ 236.619853][T16313] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 236.628405][T16313] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 237.095550][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5021'. [ 239.973392][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 239.973405][ T29] audit: type=1400 audit(239.968:26638): avc: denied { write } for pid=16360 comm="syz.2.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.013467][T16361] FAULT_INJECTION: forcing a failure. [ 240.013467][T16361] name failslab, interval 1, probability 0, space 0, times 0 [ 240.026157][T16361] CPU: 0 UID: 0 PID: 16361 Comm: syz.2.5032 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.026260][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.026274][T16361] Call Trace: [ 240.026280][T16361] [ 240.026287][T16361] __dump_stack+0x1d/0x30 [ 240.026309][T16361] dump_stack_lvl+0x95/0xd0 [ 240.026332][T16361] dump_stack+0x15/0x1b [ 240.026388][T16361] should_fail_ex+0x265/0x280 [ 240.026515][T16361] should_failslab+0x8c/0xb0 [ 240.026533][T16361] kmem_cache_alloc_noprof+0x69/0x4b0 [ 240.026551][T16361] ? audit_log_start+0x342/0x720 [ 240.026572][T16361] audit_log_start+0x342/0x720 [ 240.026593][T16361] audit_seccomp+0x48/0x100 [ 240.026694][T16361] ? __seccomp_filter+0x832/0x1260 [ 240.026774][T16361] __seccomp_filter+0x843/0x1260 [ 240.026799][T16361] ? __schedule+0x85f/0xcd0 [ 240.026826][T16361] __secure_computing+0x82/0x150 [ 240.026853][T16361] syscall_trace_enter+0xcf/0x1e0 [ 240.026893][T16361] do_syscall_64+0xa4/0x2b0 [ 240.026925][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.026946][T16361] RIP: 0033:0x7f1dc00fe15c [ 240.026970][T16361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.027026][T16361] RSP: 002b:00007f1dbeb67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.027047][T16361] RAX: ffffffffffffffda RBX: 00007f1dc0355fa0 RCX: 00007f1dc00fe15c [ 240.027106][T16361] RDX: 000000000000000f RSI: 00007f1dbeb670a0 RDI: 0000000000000005 [ 240.027116][T16361] RBP: 00007f1dbeb67090 R08: 0000000000000000 R09: 0000000000000000 [ 240.027127][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.027206][T16361] R13: 00007f1dc0356038 R14: 00007f1dc0355fa0 R15: 00007ffe96b85b78 [ 240.027222][T16361] [ 240.027228][T16361] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 240.067965][ T29] audit: type=1326 audit(239.998:26639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.070997][T16361] audit: out of memory in audit_log_start [ 240.075600][ T29] audit: type=1326 audit(239.998:26640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.075637][ T29] audit: type=1326 audit(239.998:26641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.083473][T16363] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5033'. [ 240.085957][ T29] audit: type=1326 audit(239.998:26642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.243240][T16371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.264976][ T29] audit: type=1326 audit(239.998:26643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.288191][T16371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.297023][ T29] audit: type=1326 audit(239.998:26644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.381848][ T29] audit: type=1326 audit(239.998:26645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16362 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff767e7f749 code=0x7ffc0000 [ 240.534973][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 240.535640][T16379] syzkaller0: entered promiscuous mode [ 240.549550][T16379] syzkaller0: entered allmulticast mode [ 240.560633][T16382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.569155][T16382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.587300][T16380] gre1: entered promiscuous mode [ 240.592395][T16380] gre1: entered allmulticast mode [ 240.600974][T16382] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 240.609431][T16382] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 240.621173][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 240.669289][T16387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5042'. [ 240.707417][T16393] netem: change failed [ 240.749009][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5044'. [ 241.166416][T16403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=16403 comm=syz.1.5048 [ 241.628148][T16417] __nla_validate_parse: 2 callbacks suppressed [ 241.628163][T16417] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 241.647134][T16420] netlink: 'syz.4.5053': attribute type 1 has an invalid length. [ 241.659460][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 241.668474][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 241.710613][T16420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.751006][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5053'. [ 241.816668][T16423] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.829109][T16423] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 241.845356][T16423] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 241.845624][T16430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.861268][T16430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.875987][T16420] bond1 (unregistering): Released all slaves [ 242.013351][T16443] hub 2-0:1.0: USB hub found [ 242.018148][T16443] hub 2-0:1.0: 8 ports detected [ 242.445965][T16456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5064'. [ 242.493127][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5063'. [ 242.505242][T16461] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 242.540937][T16466] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.562704][T16466] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.612388][T16466] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.672429][T16466] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.738209][T12988] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.755206][T12988] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.771753][T12988] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.788739][T12988] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.931441][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5077'. [ 242.941862][T16494] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 242.981946][T16492] netlink: 'syz.1.5077': attribute type 13 has an invalid length. [ 243.018857][ T1683] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.021091][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5077'. [ 243.036893][ T1683] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.049034][ T1683] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.059351][ T1683] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.134066][T16515] bridge_slave_0: left allmulticast mode [ 243.139760][T16515] bridge_slave_0: left promiscuous mode [ 243.145770][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.154358][T16515] bridge_slave_1: left allmulticast mode [ 243.160152][T16515] bridge_slave_1: left promiscuous mode [ 243.165854][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.174280][T16515] bond0: (slave bond_slave_0): Releasing backup interface [ 243.182316][T16515] bond0: (slave bond_slave_1): Releasing backup interface [ 243.191188][T16515] team0: Port device team_slave_0 removed [ 243.197582][T16518] netlink: 'syz.1.5085': attribute type 10 has an invalid length. [ 243.205759][T16515] team0: Port device team_slave_1 removed [ 243.211765][T16515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.219350][T16515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.227072][T16518] veth1_vlan: left promiscuous mode [ 243.232948][T16518] batman_adv: batadv0: Adding interface: veth1_vlan [ 243.239558][T16518] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.266078][T16518] batman_adv: batadv0: Interface activated: veth1_vlan [ 243.281361][T16517] hub 2-0:1.0: USB hub found [ 243.289526][T16517] hub 2-0:1.0: 8 ports detected [ 243.636711][T16546] syz.0.5098 (16546): /proc/16545/oom_adj is deprecated, please use /proc/16545/oom_score_adj instead. [ 243.785728][T16550] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.824172][T16550] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.923266][T16550] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.003179][T16550] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.036872][T12988] Bluetooth: hci0: Frame reassembly failed (-84) [ 244.080125][T12988] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.096318][T12988] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.108762][T12988] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.117967][T12988] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.260556][T16578] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 244.294611][T16576] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 244.311414][ T3507] IPVS: starting estimator thread 0... [ 244.400644][T16581] IPVS: using max 2736 ests per chain, 136800 per kthread [ 244.573442][T16596] hub 2-0:1.0: USB hub found [ 244.578185][T16596] hub 2-0:1.0: 8 ports detected [ 245.049024][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 245.049083][ T29] audit: type=1326 audit(245.038:27011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 245.088535][ T29] audit: type=1326 audit(245.038:27012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 245.142568][ T29] audit: type=1326 audit(245.138:27013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f51cf7df807 code=0x7ffc0000 [ 245.169039][ T29] audit: type=1326 audit(245.138:27014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f51cf796bdd code=0x7ffc0000 [ 245.192066][ T29] audit: type=1326 audit(245.138:27015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f51cf813e89 code=0x7ffc0000 [ 245.215121][ T29] audit: type=1326 audit(245.138:27016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f51cf796c47 code=0x7ffc0000 [ 245.238337][ T29] audit: type=1326 audit(245.138:27017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 245.261409][ T29] audit: type=1326 audit(245.138:27018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cf7df749 code=0x7ffc0000 [ 245.284393][ T29] audit: type=1326 audit(245.138:27019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f51cf796357 code=0x7ffc0000 [ 245.307447][ T29] audit: type=1326 audit(245.138:27020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16613 comm="syz.0.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f51cf7963b6 code=0x7ffc0000 [ 245.465832][T16625] hub 2-0:1.0: USB hub found [ 245.470637][T16625] hub 2-0:1.0: 8 ports detected [ 246.050573][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 246.173408][T16660] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.174104][ T3507] IPVS: starting estimator thread 0... [ 246.270622][T16663] IPVS: using max 2496 ests per chain, 124800 per kthread [ 246.382541][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.391449][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.536336][T16697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16697 comm=syz.3.5157 [ 246.894589][T16722] FAULT_INJECTION: forcing a failure. [ 246.894589][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 246.907285][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.1.5167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.907335][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.907348][T16722] Call Trace: [ 246.907354][T16722] [ 246.907433][T16722] __dump_stack+0x1d/0x30 [ 246.907458][T16722] dump_stack_lvl+0x95/0xd0 [ 246.907478][T16722] dump_stack+0x15/0x1b [ 246.907601][T16722] should_fail_ex+0x265/0x280 [ 246.907626][T16722] should_failslab+0x8c/0xb0 [ 246.907648][T16722] __kmalloc_cache_noprof+0x65/0x4c0 [ 246.907672][T16722] ? audit_log_d_path+0x8d/0x150 [ 246.907712][T16722] audit_log_d_path+0x8d/0x150 [ 246.907734][T16722] audit_log_d_path_exe+0x42/0x70 [ 246.907755][T16722] audit_log_task+0x1e9/0x250 [ 246.907782][T16722] audit_seccomp+0x61/0x100 [ 246.907839][T16722] ? __seccomp_filter+0x832/0x1260 [ 246.907866][T16722] __seccomp_filter+0x843/0x1260 [ 246.907954][T16722] ? up_write+0x18/0x60 [ 246.907970][T16722] ? shmem_file_write_iter+0xd0/0xf0 [ 246.907995][T16722] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 246.908078][T16722] ? vfs_write+0x7e8/0x960 [ 246.908101][T16722] __secure_computing+0x82/0x150 [ 246.908128][T16722] syscall_trace_enter+0xcf/0x1e0 [ 246.908153][T16722] do_syscall_64+0xa4/0x2b0 [ 246.908190][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.908213][T16722] RIP: 0033:0x7ff767e7e15c [ 246.908227][T16722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.908242][T16722] RSP: 002b:00007ff7668e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.908315][T16722] RAX: ffffffffffffffda RBX: 00007ff7680d5fa0 RCX: 00007ff767e7e15c [ 246.908328][T16722] RDX: 000000000000000f RSI: 00007ff7668e70a0 RDI: 0000000000000007 [ 246.908342][T16722] RBP: 00007ff7668e7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.908359][T16722] R10: 0000000008080c61 R11: 0000000000000246 R12: 0000000000000002 [ 246.908373][T16722] R13: 00007ff7680d6038 R14: 00007ff7680d5fa0 R15: 00007fff2e83bad8 [ 246.908393][T16722] [ 247.221373][T16736] __nla_validate_parse: 16 callbacks suppressed [ 247.221391][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5170'. [ 248.608440][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.665605][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.604859][T13018] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.941059][T16832] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 250.053642][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 250.053657][ T29] audit: type=1326 audit(250.048:27650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa81d7165e7 code=0x7ffc0000 [ 250.083790][ T29] audit: type=1326 audit(250.048:27651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa81d6bb829 code=0x7ffc0000 [ 250.106885][ T29] audit: type=1326 audit(250.048:27652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 250.130562][ T29] audit: type=1326 audit(250.078:27653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa81d7165e7 code=0x7ffc0000 [ 250.153450][ T29] audit: type=1326 audit(250.078:27654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa81d6bb829 code=0x7ffc0000 [ 250.176967][ T29] audit: type=1326 audit(250.078:27655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 250.200109][ T29] audit: type=1326 audit(250.078:27656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa81d7165e7 code=0x7ffc0000 [ 250.223606][ T29] audit: type=1326 audit(250.078:27657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa81d6bb829 code=0x7ffc0000 [ 250.246506][ T29] audit: type=1326 audit(250.078:27658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa81d71f749 code=0x7ffc0000 [ 250.270543][ T29] audit: type=1326 audit(250.098:27659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16814 comm="syz.3.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa81d7165e7 code=0x7ffc0000 [ 250.297686][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.329449][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.369861][T16842] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 250.378439][T16842] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 251.096331][T16871] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5216'. [ 251.286828][T16882] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 251.337076][T16881] can0: slcan on ttyS3. [ 251.375020][T16881] can0 (unregistered): slcan off ttyS3. [ 251.469615][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5232'. [ 251.487776][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5232'. [ 251.522755][T16913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.531479][T16913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.557524][T16913] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 251.566052][T16913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 251.660560][ T3572] Bluetooth: hci0: command 0x1003 tx timeout [ 251.660571][ T4411] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.660687][ T3572] ================================================================== [ 251.660717][ T3572] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 251.660750][ T3572] [ 251.660758][ T3572] write to 0xffffffff88ea2a58 of 13 bytes by task 4411 on cpu 0: [ 251.660777][ T3572] vsnprintf+0x2ce/0x860 [ 251.660799][ T3572] vscnprintf+0x41/0x90 [ 251.660820][ T3572] printk_sprint+0x30/0x2d0 [ 251.660848][ T3572] vprintk_store+0x568/0x830 [ 251.660884][ T3572] vprintk_emit+0x15a/0x5c0 [ 251.660909][ T3572] vprintk_default+0x26/0x30 [ 251.660938][ T3572] vprintk+0x1d/0x30 [ 251.660960][ T3572] _printk+0x79/0xa0 [ 251.660977][ T3572] bt_err+0x9d/0xd0 [ 251.661006][ T3572] hci_dev_open_sync+0xfa4/0x2290 [ 251.661030][ T3572] hci_power_on+0xef/0x390 [ 251.661051][ T3572] process_scheduled_works+0x4ce/0x9d0 [ 251.661075][ T3572] worker_thread+0x582/0x770 [ 251.661099][ T3572] kthread+0x489/0x510 [ 251.661125][ T3572] ret_from_fork+0x149/0x290 [ 251.661151][ T3572] ret_from_fork_asm+0x1a/0x30 [ 251.661177][ T3572] [ 251.661184][ T3572] read to 0xffffffff88ea2a60 of 8 bytes by task 3572 on cpu 1: [ 251.661203][ T3572] data_push_tail+0x100/0x470 [ 251.661230][ T3572] data_alloc+0x11b/0x390 [ 251.661255][ T3572] prb_reserve+0x8d7/0xad0 [ 251.661281][ T3572] vprintk_store+0x53c/0x830 [ 251.661309][ T3572] vprintk_emit+0x15a/0x5c0 [ 251.661337][ T3572] vprintk_default+0x26/0x30 [ 251.661366][ T3572] vprintk+0x1d/0x30 [ 251.661387][ T3572] _printk+0x79/0xa0 [ 251.661404][ T3572] bt_err+0x9d/0xd0 [ 251.661430][ T3572] hci_cmd_timeout+0x97/0x140 [ 251.661451][ T3572] process_scheduled_works+0x4ce/0x9d0 [ 251.661475][ T3572] worker_thread+0x582/0x770 [ 251.661499][ T3572] kthread+0x489/0x510 [ 251.661526][ T3572] ret_from_fork+0x149/0x290 [ 251.661551][ T3572] ret_from_fork_asm+0x1a/0x30 [ 251.661576][ T3572] [ 251.661582][ T3572] value changed: 0x00000000ffffedd2 -> 0x3a30696368203a68 [ 251.661595][ T3572] [ 251.661601][ T3572] Reported by Kernel Concurrency Sanitizer on: [ 251.661615][ T3572] CPU: 1 UID: 0 PID: 3572 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.661643][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.661659][ T3572] Workqueue: hci0 hci_cmd_timeout [ 251.661683][ T3572] ================================================================== [ 251.669695][T16921] FAULT_INJECTION: forcing a failure. [ 251.669695][T16921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.911766][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.3.5237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.911843][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.911851][T16921] Call Trace: [ 251.911855][T16921] [ 251.911926][T16921] __dump_stack+0x1d/0x30 [ 251.911942][T16921] dump_stack_lvl+0x95/0xd0 [ 251.911954][T16921] dump_stack+0x15/0x1b [ 251.911988][T16921] should_fail_ex+0x265/0x280 [ 251.912016][T16921] should_fail+0xb/0x20 [ 251.912046][T16921] should_fail_usercopy+0x1a/0x20 [ 251.912084][T16921] copy_folio_from_iter_atomic+0x26a/0x1150 [ 251.912103][T16921] ? shmem_write_begin+0xfc/0x1f0 [ 251.912117][T16921] ? shmem_write_begin+0x135/0x1f0 [ 251.912137][T16921] generic_perform_write+0x2c2/0x490 [ 251.912187][T16921] shmem_file_write_iter+0xc5/0xf0 [ 251.912264][T16921] do_iter_readv_writev+0x4a1/0x540 [ 251.912288][T16921] vfs_writev+0x2df/0x8b0 [ 251.912330][T16921] __se_sys_pwritev2+0xfc/0x1c0 [ 251.912377][T16921] __x64_sys_pwritev2+0x67/0x80 [ 251.912389][T16921] x64_sys_call+0x2c9e/0x3000 [ 251.912403][T16921] do_syscall_64+0xca/0x2b0 [ 251.912477][T16921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.912489][T16921] RIP: 0033:0x7fa81d71f749 [ 251.912499][T16921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.912509][T16921] RSP: 002b:00007fa81c17f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 251.912521][T16921] RAX: ffffffffffffffda RBX: 00007fa81d975fa0 RCX: 00007fa81d71f749 [ 251.912529][T16921] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 251.912549][T16921] RBP: 00007fa81c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.912556][T16921] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000002 [ 251.912563][T16921] R13: 00007fa81d976038 R14: 00007fa81d975fa0 R15: 00007ffc01d07fe8 [ 251.912577][T16921] [ 259.490638][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!