last executing test programs: 9m27.293224464s ago: executing program 1 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9m26.92423707s ago: executing program 1 (id=737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) 9m26.839728733s ago: executing program 1 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0000000009010100000000000000000a00000708000340fffffaed0900010073797a3100000000a80002002c00018014000300fef5ffffff00000000000000000000aa14000400fe8000000000000000000000000000bb0c00028005"], 0xec}, 0x1, 0x0, 0x0, 0x2044084}, 0x800) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0x4, 0x20000007}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@random="9eaa60d4114c", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x20, @private2}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) getpeername$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x40, 0xb, 0x100, 0x820, r9, 0x7, '\x00', r10, r11, 0x0, 0x2, 0x1, 0x4}, 0x50) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/85, 0x55}], 0x1}, 0x2b48}], 0x1, 0x1, 0x0) 9m26.756361097s ago: executing program 1 (id=740): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast1}, &(0x7f0000000340)=0xc) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) readahead(r2, 0xe, 0x7fffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000003, 0x8, 0xe, 0x4, {0xc, 0x2, 0x6, 0x3, 0x8, 0x5}, {0x7, 0x1, 0x0, 0x1ff, 0x4, 0x80}, 0xc8be, 0x857, 0x9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 9m26.537999037s ago: executing program 1 (id=743): clock_settime(0xfffffffb, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0x1000145, 0x7ffffffc) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9m26.110683686s ago: executing program 1 (id=744): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9m26.110275326s ago: executing program 32 (id=744): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 7m12.627306073s ago: executing program 3 (id=2526): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) creat(&(0x7f0000000000)='./file1\x00', 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = getpgrp(0x0) r5 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, r4, 0x0, r2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='%\x00') bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7m12.598419835s ago: executing program 3 (id=2527): sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40005) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 7m11.727972783s ago: executing program 3 (id=2539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 7m11.700868245s ago: executing program 3 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000230900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000048334d1a46c6fc710800ed5e69c6203f96c9429e9c9e9fe464ef89ead543dc33fb4016ddf08b1df510081c6d3ccde262c9954f866d762b8c9a244b00572371e4bfe9b0f40e674ca962712721fba359076c14483e98e97f3d8a09d11641beae94b1b6369d98d0f0118a24c98e584380d218bebf3b8ed5622ad390d996f54ea5313efd51a615b6fa65575e83ed51502d78e7404817"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ALPHA={0x8, 0x4, 0xb}]}}]}, 0x40}}, 0x20000000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000300)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) 7m11.664836386s ago: executing program 3 (id=2542): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000001840)='net/hci\x00') (async) syz_open_procfs(r1, &(0x7f0000001840)='net/hci\x00') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r2, 0xe0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x30, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xf, &(0x7f0000001c00)=ANY=[@ANYBLOB="18000000020004000095b82228eca98301110000fca3f07d4805e31b5e6464a85e57dda6c2a567820aa6ef6665af3f65bcd9b1deea70f9c3cf2e7d85ff83d35e4e230b0a1f1e0f6a87142044ad01e10fcf23b3df8358cd73ed8d6e8c0a5881e3f8921b1b566ad9420fd9c0aa7f1c18d7ac7ece5e329329535d", @ANYRES64=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xf, &(0x7f0000001c00)=ANY=[@ANYBLOB="18000000020004000095b82228eca98301110000fca3f07d4805e31b5e6464a85e57dda6c2a567820aa6ef6665af3f65bcd9b1deea70f9c3cf2e7d85ff83d35e4e230b0a1f1e0f6a87142044ad01e10fcf23b3df8358cd73ed8d6e8c0a5881e3f8921b1b566ad9420fd9c0aa7f1c18d7ac7ece5e329329535d", @ANYRES64=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r6, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000180)="f66a2a73938832aa6f6a8105c60c4b7ec7fb3b69a9420b73ac84b0395283746a691515d2126314af1a891cd3a8cfbc91640908395cb7e2d972e56e01f31cb2cb6fa38a27f50f78ca164541ee0638e58c27093ee8f4b03572438b7948", 0x5c}, {&(0x7f00000003c0)="c17ede98de86deea9f370ca579bc88b2f901f9c1182145fc281bdfdcf6346273e7f97be2fca03fe594cbd15005e21a8ad64ae6ead86bab570fd6216085eb5566d2cfea89eec5dc3cbcbc5c694fa427ba3ea90b6e2392a3c627008fcd451f2f0544920469166ffb09c4fe0cf65b25637968f26b3dacc6b52934eeb91e2e8cfdaf60e8a20bea69b37933b842fc2a29d0025c390bc20079b5e08289b5ee18a068386662e01ca1af9b746bca40348183fda9c7c93016d5f12e76935c8c5781634be750ba19ea859825c75cef79637137b5fa2725bed92d64e5076942f37d93d04545c84611f2eeba81", 0xe7}, {&(0x7f0000000040)}, {&(0x7f00000004c0)="eaa7ce3a364f65bb106e7e417c6c2afd084418aafb87744fe73c925a1c6885932de3bab7374bf280099c9fb3cc9e71340253a377350466abdb06c660446c1e523b2ef1e5bd3b4e9ca839793c99096f4791bf78e0aed310c2b7458940cd1d8573af7259d80c83245ce667913dece30247b5a76aadd1df104a3e", 0x79}, {&(0x7f0000000540)="04a10c99795df03d4292870252214b285e7ceb3f182b8ca135ed48914f67d706e3523fef58e5c57f4990b7c62e36a93d3c8839dabc72271adc341ceac89282e55b52f3a48062fd", 0x47}, {&(0x7f00000005c0)="a060d584d3023c6f9ad79936c97c5120fac0a4cf679aa573f20ee94b8c29dc1ba48912162394a20b07161e9634ffafca36aca93c0962c1c5fbb2787bb4655c0f7ccdc0d0a1525a3511935b8e03c4a561c3f8434218eeacfd72f00954c2e0", 0x5e}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000240)="293ef36efee44f4c66930020430c46938608ef09dc8218102330808774f375cd", 0x20}, {&(0x7f0000001680)="863fee4a66f002644f118426ecc62420", 0x10}, {&(0x7f00000016c0)="861edbcc27b986a49cd0dfcc39ad1e1e80118fbfe13009ca0d97c215671c0c41a350361c9c08217160fa62a9785cb4e39c369298f68aa054467f9d36d79ff6f585753dde68a10603a740762ac26c5455cf11a5ee6384048309a1d98703dce59f9230a311a99010f9da", 0x69}], 0xa}, 0x4000000) (async) sendmsg$inet(r6, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000180)="f66a2a73938832aa6f6a8105c60c4b7ec7fb3b69a9420b73ac84b0395283746a691515d2126314af1a891cd3a8cfbc91640908395cb7e2d972e56e01f31cb2cb6fa38a27f50f78ca164541ee0638e58c27093ee8f4b03572438b7948", 0x5c}, {&(0x7f00000003c0)="c17ede98de86deea9f370ca579bc88b2f901f9c1182145fc281bdfdcf6346273e7f97be2fca03fe594cbd15005e21a8ad64ae6ead86bab570fd6216085eb5566d2cfea89eec5dc3cbcbc5c694fa427ba3ea90b6e2392a3c627008fcd451f2f0544920469166ffb09c4fe0cf65b25637968f26b3dacc6b52934eeb91e2e8cfdaf60e8a20bea69b37933b842fc2a29d0025c390bc20079b5e08289b5ee18a068386662e01ca1af9b746bca40348183fda9c7c93016d5f12e76935c8c5781634be750ba19ea859825c75cef79637137b5fa2725bed92d64e5076942f37d93d04545c84611f2eeba81", 0xe7}, {&(0x7f0000000040)}, {&(0x7f00000004c0)="eaa7ce3a364f65bb106e7e417c6c2afd084418aafb87744fe73c925a1c6885932de3bab7374bf280099c9fb3cc9e71340253a377350466abdb06c660446c1e523b2ef1e5bd3b4e9ca839793c99096f4791bf78e0aed310c2b7458940cd1d8573af7259d80c83245ce667913dece30247b5a76aadd1df104a3e", 0x79}, {&(0x7f0000000540)="04a10c99795df03d4292870252214b285e7ceb3f182b8ca135ed48914f67d706e3523fef58e5c57f4990b7c62e36a93d3c8839dabc72271adc341ceac89282e55b52f3a48062fd", 0x47}, {&(0x7f00000005c0)="a060d584d3023c6f9ad79936c97c5120fac0a4cf679aa573f20ee94b8c29dc1ba48912162394a20b07161e9634ffafca36aca93c0962c1c5fbb2787bb4655c0f7ccdc0d0a1525a3511935b8e03c4a561c3f8434218eeacfd72f00954c2e0", 0x5e}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000240)="293ef36efee44f4c66930020430c46938608ef09dc8218102330808774f375cd", 0x20}, {&(0x7f0000001680)="863fee4a66f002644f118426ecc62420", 0x10}, {&(0x7f00000016c0)="861edbcc27b986a49cd0dfcc39ad1e1e80118fbfe13009ca0d97c215671c0c41a350361c9c08217160fa62a9785cb4e39c369298f68aa054467f9d36d79ff6f585753dde68a10603a740762ac26c5455cf11a5ee6384048309a1d98703dce59f9230a311a99010f9da", 0x69}], 0xa}, 0x4000000) 7m11.663262766s ago: executing program 3 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 7m10.775597116s ago: executing program 0 (id=2550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x1, 0xffffffffffffff75, 0x3}) 7m10.745257947s ago: executing program 0 (id=2551): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') gettid() timer_create(0x6, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000f80)="1d41ba9e9f1ba149940bed143f57dfcd1a8f4aa563d1fbec30456190992b795e22644af0c7cc04c52ac4392cb4196f1c1679b66e635805b86108d08f21de0a9a7feaeb29932280894f7270e42fca3e67c5477ca3350664190e1f7c32be89e04bb5d10439ad37b9869757691e4789d171bf5d7941e16cc0748d46c6e54b7f213e799b49170733bb9f58ce485c8deca8a4af0787da660a783d5047c011b9c753471de5a54e756ba5262fe11e3e603142fa4ec09a08c3bb2ef647ea97a721fc3453f7263f5c45dedee58a90ff10f3e151d837d65551b5cc8e731b0f19e84e1659d978d7", &(0x7f0000000040)="2ea8c7c73078bdef38ad163c7c18d65c6e30e6df50d0fbd52a4adc31514315aed4c7065a85b7f63e894611aca3"}}, &(0x7f0000bbdffc)=0x0) waitid(0x1, 0x0, &(0x7f00000002c0), 0xe7c33858c97241a2, &(0x7f0000000b00)) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000900)={@local, 0x0}, &(0x7f00000008c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @loopback}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000001080)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x7, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0xd4}, @ssrr={0x89, 0x3, 0xee}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x4, 0xd8, 0x0, 0xb}, @generic={0x9e, 0xf, "1f9ba3e91d994d3c31a32d7e19"}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@empty, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x7f95}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') cachestat(r5, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0xee) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a00)="39e8dcfa461ac09e8a722e34d7e498893ffa560200133b06000000", 0x1b}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000e40)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c808", @ANYRES64=r2, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="14000200200000c7f762e5a113abb756f9ed"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc)=0x2, 0x86, 0x80000002, 0x0, 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x1a) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r8, @ANYRESOCT=r4], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) 7m10.576051344s ago: executing program 0 (id=2552): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) 7m10.542176236s ago: executing program 0 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES8=r0, @ANYRESDEC=0x0], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000e000000181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) fcntl$notify(r1, 0x402, 0x5) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @val=@tcx}, 0x1c) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0xff, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0xfc, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r9, r9, 0x0, 0x800000009) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x9, 0xc, 0x0, 0xfffffff7}, {0x8, 0xda}, {0x100, 0x0, 0xb, 0xd}]}) fcntl$setlease(r8, 0x400, 0x1) 7m10.22614899s ago: executing program 0 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 7m9.933598523s ago: executing program 0 (id=2564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m9.921803623s ago: executing program 33 (id=2564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m56.559029484s ago: executing program 34 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 6m27.011813809s ago: executing program 7 (id=3246): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x81) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0x4}, 0x18) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000b40)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r6 = syz_open_dev$sg(&(0x7f0000000240), 0x311, 0x400000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0xfffffffffffffed2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sock_ops, r7}, 0x94) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000d16) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r9, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r9, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x50e5, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) dup(r0) 6m26.158279927s ago: executing program 7 (id=3264): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6m26.143963418s ago: executing program 7 (id=3265): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6m25.399245s ago: executing program 7 (id=3279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xf0) pwrite64(r0, &(0x7f0000000080)='O', 0x1, 0x8ffd) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\n\x00\x00\a', @ANYBLOB="2664e91ba03fb5e26353c530ffce202b1d5976f3528da881605793f1f942e0e3594331bb818b863f0113d51c52222c695d37939ad72b3b40ddededa5acc2fe12d77263cb7f25ddda83ec"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1251, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ptrace(0x10, r1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000040)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "1667c48e3a7c3006a7a363924097ffb78f990abcf43ad63aedd8dac061eaad1b", 0x7, 0x9, 0x1, 0x100}, 0x3c) ptrace$setregs(0xd, r1, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="000000000000000000000e000000000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="180000001f000000000000007e00000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500004e36866d00"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6m25.213640659s ago: executing program 7 (id=3281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x800, 0x1a0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x100, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000680)={0x0, 0x803351, 0x40, 0xffffffff, 0x3d2}, &(0x7f0000000200), &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) syz_clone(0xf7b81e80, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 6m24.835958105s ago: executing program 7 (id=3284): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000500)={[], [{@fowner_eq}, {@fsmagic={'fsmagic', 0x3d, 0x400000000004}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_role={'subj_role', 0x3d, ':$^\'@'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x31, 0x30, 0x37, 0x57, 0x34, 0x32], 0x2d, [0x31, 0x6, 0x63, 0x30], 0x2d, [0x33, 0x66, 0x31], 0x2d, [0x39, 0x62, 0x39, 0x31], 0x2d, [0x62, 0x65, 0x39, 0x66, 0x35, 0x64, 0x32, 0x65]}}}, {@smackfshat={'smackfshat', 0x3d, '/\x15'}}, {@dont_appraise}]}, 0x45, 0x789, &(0x7f0000002a00)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 6m24.835811775s ago: executing program 35 (id=3284): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000500)={[], [{@fowner_eq}, {@fsmagic={'fsmagic', 0x3d, 0x400000000004}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_role={'subj_role', 0x3d, ':$^\'@'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x31, 0x30, 0x37, 0x57, 0x34, 0x32], 0x2d, [0x31, 0x6, 0x63, 0x30], 0x2d, [0x33, 0x66, 0x31], 0x2d, [0x39, 0x62, 0x39, 0x31], 0x2d, [0x62, 0x65, 0x39, 0x66, 0x35, 0x64, 0x32, 0x65]}}}, {@smackfshat={'smackfshat', 0x3d, '/\x15'}}, {@dont_appraise}]}, 0x45, 0x789, &(0x7f0000002a00)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.842598864s ago: executing program 4 (id=7345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.807454186s ago: executing program 4 (id=7346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.783919437s ago: executing program 4 (id=7347): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000000940)=""/221, 0xdd}], 0x5, &(0x7f0000000a40)=""/192, 0xc0}, 0x8}], 0x1, 0x10002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(r2, r2, 0x2) 2.633699763s ago: executing program 4 (id=7349): socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') 1.916172155s ago: executing program 4 (id=7353): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.847922139s ago: executing program 4 (id=7354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000600000000000500070000000000080005", @ANYRES32=r6], 0x4c}}, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x800, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xb8, 0xdf72c67}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 1.707190365s ago: executing program 6 (id=7355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.692106435s ago: executing program 6 (id=7356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.635934158s ago: executing program 6 (id=7357): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000789800000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.635679878s ago: executing program 6 (id=7358): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x9, 0x8, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x18000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8000000000000000, 0x7}, 0x12140, 0xffff, 0x8, 0x3, 0x7, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x2a53}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.434360317s ago: executing program 6 (id=7359): keyctl$assume_authority(0x10, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) fcntl$lock(r0, 0x25, &(0x7f00000005c0)={0x0, 0x4, 0x5, 0x9}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x10000206, 0x8000, 0xda) 1.36201963s ago: executing program 2 (id=7360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) socket$inet(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4b, 0x8c, &(0x7f0000000180)="a1a876798a2c838b658ad4118c436c0ddc64329d10282b79f7d3fb08e7ea489e4bfc57d10897d503b78144466716ec9125685b36230153a9e611e955b3ebe1879fd7ddb9f558af2432b8a5", &(0x7f0000000200)=""/140, 0x2, 0x0, 0xaa, 0xffc, &(0x7f00000003c0)="3962c18b35e81afe6e8fd9cef92f5c50c90506787a5715f3383875c37ebf1039329fe8993e3cc178246aeea472c3ddb90595d96594421bb35cd5a413fc935ce9edd45b811d59dd26546bc17ccff3b95032b0ba6ac0f8a29457393ae84d1f88b31b8a298320893cb74809e0182ba3a6775e34566644bd2b108f284efb4c33814d311ec1455755bf2084d27c2cc4579c67f58b8466d1f0763bd61c61ee866f619a86e5c028d141e3e46c5c", &(0x7f0000001d40)="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", 0x0, 0x0, 0x5}, 0x50) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) 1.280743403s ago: executing program 8 (id=7361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f00000004c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114c830ab110600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.263628004s ago: executing program 8 (id=7362): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 1.245996225s ago: executing program 8 (id=7363): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.242182145s ago: executing program 2 (id=7364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.219600606s ago: executing program 8 (id=7365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tlb_flush\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) unshare(0x62040200) 1.219162666s ago: executing program 2 (id=7366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x203, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.12883717s ago: executing program 2 (id=7367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.077572032s ago: executing program 2 (id=7368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) 731.047878ms ago: executing program 5 (id=7371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f00000004c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114c830ab110600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 705.830279ms ago: executing program 5 (id=7372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 589.100394ms ago: executing program 5 (id=7373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) socket$inet(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4b, 0x8c, &(0x7f0000000180)="a1a876798a2c838b658ad4118c436c0ddc64329d10282b79f7d3fb08e7ea489e4bfc57d10897d503b78144466716ec9125685b36230153a9e611e955b3ebe1879fd7ddb9f558af2432b8a5", &(0x7f0000000200)=""/140, 0x2, 0x0, 0xaa, 0xffc, &(0x7f00000003c0)="3962c18b35e81afe6e8fd9cef92f5c50c90506787a5715f3383875c37ebf1039329fe8993e3cc178246aeea472c3ddb90595d96594421bb35cd5a413fc935ce9edd45b811d59dd26546bc17ccff3b95032b0ba6ac0f8a29457393ae84d1f88b31b8a298320893cb74809e0182ba3a6775e34566644bd2b108f284efb4c33814d311ec1455755bf2084d27c2cc4579c67f58b8466d1f0763bd61c61ee866f619a86e5c028d141e3e46c5c", &(0x7f0000001d40)="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", 0x0, 0x0, 0x5}, 0x50) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) 570.447865ms ago: executing program 6 (id=7374): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000580)="50f2855a1900000000c1b044b18aa05e441138a18365a8cbf563d0d3b7505fbfac6b7b872a765f963f04c24d144a3280756c1abcf7c1c0ce30c09694c182172773d5395d91073a2ed531f807e435dc7cfd16bc88be4ff21f72fb9c2c4ce3fbced0cee266a218429108515c8194ac4459e22a8d541831716b6d95b93556000000", 0x80}]) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3, {0x7, 0x0, 0x0, 0xfffe, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x3, 0xfffffffd, 0xffffba09, 0x8, 0xffffffff, 0x2, 0x6, 0x0, 0x4, 0x5, 0x34, 0x2, 0x4, 0xfffffe00, 0x9, 0xffff8000, 0xfffffff8, 0xe5, 0x53aee169, 0xcdb, 0x7, 0xfffffffb, 0x6b5, 0x4, 0x7, 0x3, 0x9, 0x7, 0x3, 0x0, 0x7, 0x3ff, 0x5, 0x1, 0x2, 0x2, 0x3, 0x8, 0xd, 0x1, 0x7, 0x40, 0x7f, 0x8001, 0x4, 0xf, 0xd, 0x5, 0x1, 0x1, 0x400, 0x7, 0x1ff, 0x9, 0x3, 0x0, 0x100, 0x1, 0x9, 0x1b2, 0x2, 0x8, 0x1000, 0xc, 0x8, 0x6, 0x10, 0x6, 0x3, 0x8, 0x0, 0x5, 0x4, 0x9, 0x5f64, 0x80000000, 0x1, 0x7, 0x19b, 0x1e5e, 0x0, 0x5ff, 0x3, 0x2, 0x28, 0x32, 0x9, 0x3, 0x6e3a, 0xfed4, 0xfffffba4, 0x4, 0xdb, 0x4, 0x8, 0x3, 0x4, 0x2, 0x8, 0xfffffff8, 0x7fff, 0x7fff, 0x8, 0x7, 0x7, 0x535b046b, 0x80000001, 0x2, 0x81, 0x80, 0x0, 0x8000, 0x1, 0x2, 0xff, 0x7ff, 0xbc7e, 0x37, 0x1, 0x10000, 0x2, 0x5724, 0x3, 0x4, 0x2, 0x8, 0x6a, 0xb1, 0x2, 0x9, 0x100, 0xff, 0x8, 0x40, 0x8001, 0x4, 0x9, 0xfffff0a0, 0xfffffffb, 0x705, 0x9, 0x7, 0x800, 0xb2, 0x9, 0x6, 0x5, 0x3, 0x1, 0x7, 0x2, 0x7, 0xcc96, 0xb, 0x5, 0x800, 0x1, 0xce, 0x8, 0x9, 0x0, 0x6, 0xe6a8, 0x9, 0x1fa00, 0x61, 0x9, 0x25b, 0x8, 0x6667, 0x20c, 0x6, 0x6, 0x8, 0x7, 0x4, 0x8, 0x3ff, 0x80, 0x2, 0x9, 0xffffffff, 0x4, 0x76ac, 0x8, 0x1005, 0x59a, 0xc35, 0x7, 0x8, 0x4, 0x3, 0x2, 0x2, 0x7fff, 0x8, 0x6, 0x2, 0xff, 0xf3c1, 0x2, 0x2, 0x9, 0x65, 0xf7d0, 0x34, 0x5, 0x4, 0x3094, 0x76, 0x10000, 0x797d991, 0xff, 0xffff, 0x200, 0x6, 0x9, 0x7, 0x0, 0xf, 0xd, 0x79, 0x8bdd, 0x9, 0x8, 0x0, 0x101, 0x0, 0x4, 0x0, 0x8000, 0x5, 0x5, 0x3, 0xa, 0x200, 0x9, 0xfffffff9, 0x9a2, 0x8, 0xe1, 0x8, 0x5, 0x10000, 0x9, 0x264, 0x3, 0x400, 0xfffffffd, 0x6, 0x7, 0x3, 0x6, 0xfffffff8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x439, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 526.453017ms ago: executing program 5 (id=7375): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 459.03166ms ago: executing program 5 (id=7376): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x20400, 0x0) r5 = socket(0xa, 0x3, 0x3a) lsetxattr$trusted_overlay_upper(&(0x7f0000000480)='./file2\x00', &(0x7f0000000540), &(0x7f0000000580)={0x0, 0xfb, 0x15, 0x5, 0x6, "a61b145474c8141f6f86182b5d6f6070"}, 0x15, 0x1) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x7ff]}}, 0x5c) close_range(r3, r2, 0x0) syz_clone3(&(0x7f0000000800)={0x122000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, 0x0, 0xc080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x4, 0x80000001}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_io_uring_setup(0x5f4b, &(0x7f0000000680)={0x0, 0xec1b, 0x10000, 0x2, 0x285}, &(0x7f0000001e40), 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) 429.660091ms ago: executing program 5 (id=7377): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x7049, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x101200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @alu={0x7, 0x1, 0x6, 0xa, 0x4, 0x100, 0x4}, @generic={0x2, 0x6, 0x9, 0x1, 0x92}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x39, &(0x7f0000000380)=""/57, 0x20680, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1000, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380"], 0xa8}}, 0x0) 339.548785ms ago: executing program 2 (id=7378): keyctl$assume_authority(0x10, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) fcntl$lock(r0, 0x25, &(0x7f00000005c0)={0x0, 0x4, 0x5, 0x9}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f00000002c0)=""/232, 0xe8}], 0x10000206, 0x8000, 0xda) 319.043326ms ago: executing program 8 (id=7379): timer_create(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000040)='\f', 0x1, 0x0, &(0x7f0000000340), 0x10) 0s ago: executing program 8 (id=7380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x2) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000800)=[@in6={0xa, 0x4e21, 0x86d, @private1, 0x6}, @in={0x2, 0x4e21, @local}], 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000040)={'ip_vti0\x00', @ifru_map={0x9, 0x8, 0x5, 0x3, 0x87, 0x80}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000004071113d00000000008510000002000000850000002700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r7, r7, 0x0, 0x800000009) kernel console output (not intermixed with test programs): 21740] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6323'. [ 596.246582][T21742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.255214][T21742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.341327][T21759] serio: Serial port ttyS3 [ 596.450017][T21763] netem: change failed [ 596.475062][T21766] lo speed is unknown, defaulting to 1000 [ 596.508327][T21766] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6333'. [ 596.518675][T11106] Bluetooth: hci0: Frame reassembly failed (-84) [ 596.753145][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6341'. [ 596.822470][T21788] netem: change failed [ 596.877926][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 596.878008][ T29] audit: type=1326 audit(1765366455.875:33805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 596.911810][ T29] audit: type=1326 audit(1765366455.915:33806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 596.935480][ T29] audit: type=1326 audit(1765366455.915:33807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 596.959251][ T29] audit: type=1326 audit(1765366455.915:33808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 596.982940][ T29] audit: type=1326 audit(1765366455.915:33809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.006593][ T29] audit: type=1326 audit(1765366455.915:33810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.030168][ T29] audit: type=1326 audit(1765366455.915:33811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.053781][ T29] audit: type=1326 audit(1765366455.915:33812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.077449][ T29] audit: type=1326 audit(1765366455.915:33813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.101049][ T29] audit: type=1326 audit(1765366455.915:33814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.8.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f99a81df749 code=0x7ffc0000 [ 597.196448][T21808] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6352'. [ 597.216850][T21810] loop8: detected capacity change from 0 to 2048 [ 597.266265][T21810] Alternate GPT is invalid, using primary GPT. [ 597.272656][T21810] loop8: p1 p2 p3 [ 597.276438][T21810] loop8: partition table partially beyond EOD, truncated [ 597.291563][T21814] netem: change failed [ 597.298951][T21817] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6356'. [ 597.311672][T21810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.320955][T21810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.699820][T21826] lo speed is unknown, defaulting to 1000 [ 597.901598][T21828] loop5: detected capacity change from 0 to 512 [ 597.910214][T21828] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 597.928846][T21828] EXT4-fs (loop5): 1 truncate cleaned up [ 597.935493][T21828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.409418][T21837] serio: Serial port ttyS3 [ 598.415986][T21824] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6359'. [ 598.578807][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.584925][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 598.751954][T21848] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6367'. [ 598.834227][T21851] netem: change failed [ 598.856008][T21854] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6369'. [ 599.239173][T21859] serio: Serial port ttyS3 [ 599.332405][T21868] lo speed is unknown, defaulting to 1000 [ 599.341381][T21873] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6375'. [ 599.351381][T11106] Bluetooth: hci0: Frame reassembly failed (-84) [ 599.521441][T21879] netem: change failed [ 599.539339][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.552870][T21877] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6379'. [ 599.591541][T21887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.600217][T21887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.613562][T21887] loop6: detected capacity change from 0 to 512 [ 599.620970][T21887] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 599.632513][T21887] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 599.647268][T21887] EXT4-fs (loop6): 1 truncate cleaned up [ 599.653423][T21887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.692214][T21890] loop5: detected capacity change from 0 to 164 [ 599.711991][T21890] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 599.730577][T21890] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 599.743109][T21890] Symlink component flag not implemented [ 599.748794][T21890] Symlink component flag not implemented [ 599.754550][T21890] Symlink component flag not implemented (7) [ 599.760578][T21890] Symlink component flag not implemented (116) [ 599.810533][T21894] lo speed is unknown, defaulting to 1000 [ 599.813361][T21896] serio: Serial port ttyS3 [ 599.835707][T21899] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6384'. [ 599.861817][T11102] Bluetooth: hci1: Frame reassembly failed (-84) [ 599.868348][T11102] Bluetooth: hci1: Frame reassembly failed (-84) [ 599.982134][T21913] loop5: detected capacity change from 0 to 512 [ 599.989071][T21913] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 600.000534][T21913] EXT4-fs (loop5): 1 truncate cleaned up [ 600.006492][T21913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.029815][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.159653][T21919] tipc: Enabling of bearer rejected, already enabled [ 600.253603][T21921] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6395'. [ 600.317897][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.347620][T21924] lo speed is unknown, defaulting to 1000 [ 600.356980][T21926] loop5: detected capacity change from 0 to 164 [ 600.364149][T21926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 600.383276][T21926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 600.391634][T21926] Symlink component flag not implemented [ 600.397304][T21926] Symlink component flag not implemented [ 600.403052][T21926] Symlink component flag not implemented (7) [ 600.409149][T21926] Symlink component flag not implemented (116) [ 600.416968][T21924] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6396'. [ 600.428978][T11102] Bluetooth: hci2: Frame reassembly failed (-84) [ 601.280644][T21953] lo speed is unknown, defaulting to 1000 [ 601.378529][T13839] Bluetooth: hci0: command 0x1003 tx timeout [ 601.384947][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 601.572866][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.582680][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.598290][T21957] loop5: detected capacity change from 0 to 512 [ 601.606007][T21957] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 601.627724][T21957] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 601.642720][T21957] EXT4-fs (loop5): 1 truncate cleaned up [ 601.648938][T21957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.938567][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 602.123821][T21974] serio: Serial port ttyS3 [ 602.143398][T21976] tipc: Enabling of bearer rejected, already enabled [ 602.262314][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.420131][T21986] netlink: 'syz.5.6419': attribute type 12 has an invalid length. [ 602.508712][ T4445] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 602.563164][T21992] lo speed is unknown, defaulting to 1000 [ 602.959710][T22000] __nla_validate_parse: 3 callbacks suppressed [ 602.959724][T22000] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6424'. [ 603.022760][T22008] lo speed is unknown, defaulting to 1000 [ 603.057013][ T2481] Bluetooth: hci0: Frame reassembly failed (-84) [ 603.227800][T22024] lo speed is unknown, defaulting to 1000 [ 603.250933][T22026] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6436'. [ 603.301390][T22033] loop5: detected capacity change from 0 to 512 [ 603.310750][T22033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 603.320480][T22031] lo speed is unknown, defaulting to 1000 [ 603.327786][T22033] EXT4-fs (loop5): 1 truncate cleaned up [ 603.334347][T22033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.355772][T22036] SELinux: failed to load policy [ 603.373724][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.444732][T22031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6438'. [ 603.453778][T22031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6438'. [ 603.462959][T22031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6438'. [ 603.472280][T22031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6438'. [ 603.606251][T22053] loop6: detected capacity change from 0 to 2048 [ 603.669579][T22053] Alternate GPT is invalid, using primary GPT. [ 603.675893][T22053] loop6: p1 p2 p3 [ 603.679709][T22053] loop6: partition table partially beyond EOD, truncated [ 603.695803][T22053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.715130][T22053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.725312][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 603.725325][ T29] audit: type=1326 audit(1765366462.735:33889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm="syz.6.6447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.746279][T22058] netem: change failed [ 603.788646][ T29] audit: type=1326 audit(1765366462.765:33890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm="syz.6.6447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.812268][ T29] audit: type=1326 audit(1765366462.765:33891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.835851][ T29] audit: type=1326 audit(1765366462.765:33892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.840635][T22060] loop5: detected capacity change from 0 to 512 [ 603.859450][ T29] audit: type=1326 audit(1765366462.765:33893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.869003][T22060] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 603.889586][ T29] audit: type=1326 audit(1765366462.765:33894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.922972][ T29] audit: type=1326 audit(1765366462.765:33895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.946687][ T29] audit: type=1326 audit(1765366462.765:33896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.970313][ T29] audit: type=1326 audit(1765366462.765:33897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.993884][ T29] audit: type=1326 audit(1765366462.765:33898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22052 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 603.999628][T22060] EXT4-fs (loop5): 1 truncate cleaned up [ 604.023887][T22060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.052193][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.184589][T22065] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6451'. [ 604.550436][T22081] lo speed is unknown, defaulting to 1000 [ 604.557926][ T57] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.623450][ T57] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.802626][ T57] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.835430][T22081] chnl_net:caif_netlink_parms(): no params data found [ 604.860966][ T57] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.926908][T22112] loop5: detected capacity change from 0 to 512 [ 604.935208][T22112] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 604.950643][T22112] EXT4-fs (loop5): 1 truncate cleaned up [ 604.956893][T22112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.982904][T22081] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.990065][T22081] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.015763][T22081] bridge_slave_0: entered allmulticast mode [ 605.040998][T22081] bridge_slave_0: entered promiscuous mode [ 605.058542][ T4445] Bluetooth: hci0: command 0x1003 tx timeout [ 605.061268][T22081] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.064834][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 605.071973][T22081] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.123689][T22081] bridge_slave_1: entered allmulticast mode [ 605.137368][T22081] bridge_slave_1: entered promiscuous mode [ 605.197971][T22081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.209349][ T57] bridge_slave_1: left allmulticast mode [ 605.214998][ T57] bridge_slave_1: left promiscuous mode [ 605.220837][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.245792][ T57] bridge_slave_0: left allmulticast mode [ 605.251525][ T57] bridge_slave_0: left promiscuous mode [ 605.257245][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.366634][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.398815][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.417742][ T57] bond0 (unregistering): Released all slaves [ 605.437563][T22081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.449061][T22132] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6473'. [ 605.498942][ T57] tipc: Disabling bearer [ 605.504195][ T57] tipc: Left network mode [ 605.510000][T22081] team0: Port device team_slave_0 added [ 605.519780][T22081] team0: Port device team_slave_1 added [ 605.543101][ T57] hsr_slave_0: left promiscuous mode [ 605.559359][ T57] hsr_slave_1: left promiscuous mode [ 605.565053][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.572615][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.612425][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.619946][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.640318][ T57] veth1_macvtap: left promiscuous mode [ 605.645888][ T57] veth0_macvtap: left promiscuous mode [ 605.656710][ T57] veth1_vlan: left promiscuous mode [ 605.662791][ T57] veth0_vlan: left promiscuous mode [ 605.821958][ T57] team0 (unregistering): Port device team_slave_1 removed [ 605.832689][ T57] team0 (unregistering): Port device team_slave_0 removed [ 605.895840][T22158] FAULT_INJECTION: forcing a failure. [ 605.895840][T22158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.908980][T22158] CPU: 0 UID: 0 PID: 22158 Comm: syz.6.6485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 605.909013][T22158] Tainted: [W]=WARN [ 605.909041][T22158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.909049][T22158] Call Trace: [ 605.909053][T22158] [ 605.909081][T22158] __dump_stack+0x1d/0x30 [ 605.909097][T22158] dump_stack_lvl+0xe8/0x140 [ 605.909110][T22158] dump_stack+0x15/0x1b [ 605.909202][T22158] should_fail_ex+0x265/0x280 [ 605.909216][T22158] should_fail+0xb/0x20 [ 605.909227][T22158] should_fail_usercopy+0x1a/0x20 [ 605.909241][T22158] _copy_from_user+0x1c/0xb0 [ 605.909347][T22158] ___sys_sendmsg+0xc1/0x1d0 [ 605.909371][T22158] __x64_sys_sendmsg+0xd4/0x160 [ 605.909414][T22158] x64_sys_call+0x17ba/0x3000 [ 605.909428][T22158] do_syscall_64+0xd8/0x2a0 [ 605.909447][T22158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.909468][T22158] RIP: 0033:0x7f5f9ab0f749 [ 605.909487][T22158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.909497][T22158] RSP: 002b:00007f5f9956f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.909513][T22158] RAX: ffffffffffffffda RBX: 00007f5f9ad65fa0 RCX: 00007f5f9ab0f749 [ 605.909521][T22158] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 605.909528][T22158] RBP: 00007f5f9956f090 R08: 0000000000000000 R09: 0000000000000000 [ 605.909545][T22158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.909633][T22158] R13: 00007f5f9ad66038 R14: 00007f5f9ad65fa0 R15: 00007fffb30e7af8 [ 605.909644][T22158] [ 606.084495][ T3525] lo speed is unknown, defaulting to 1000 [ 606.090303][ T3525] infiniband syz0: ib_query_port failed (-19) [ 606.096474][T22160] netem: change failed [ 606.101582][T22081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.108597][T22081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.134568][T22081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.179688][T22081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.186748][T22081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.212767][T22081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.353962][T22081] hsr_slave_0: entered promiscuous mode [ 606.381968][T22081] hsr_slave_1: entered promiscuous mode [ 606.867305][T22182] netlink: 'syz.6.6494': attribute type 12 has an invalid length. [ 606.893658][T22081] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.904136][T22081] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 606.917949][T22081] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 606.927830][T22081] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.985422][T22081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.997566][T22195] netem: change failed [ 607.018787][T22081] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.030295][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.037451][T11114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.061802][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.068898][T11084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.119032][T22200] netem: change failed [ 607.199451][T22081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.252263][T22216] netem: change failed [ 607.963378][T22081] veth0_vlan: entered promiscuous mode [ 607.976782][T22081] veth1_vlan: entered promiscuous mode [ 607.991776][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.001987][T22081] veth0_macvtap: entered promiscuous mode [ 608.010152][T22081] veth1_macvtap: entered promiscuous mode [ 608.027061][T22081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.038903][T22081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.053964][T11106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.072081][T11084] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.088797][T11084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.107236][T11084] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.250058][T22245] loop8: detected capacity change from 0 to 2048 [ 608.258514][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 608.301505][T22245] Alternate GPT is invalid, using primary GPT. [ 608.307823][T22245] loop8: p1 p2 p3 [ 608.311580][T22245] loop8: partition table partially beyond EOD, truncated [ 608.476597][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 608.503185][T22253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.565335][T22253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.331201][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 609.331218][ T29] audit: type=1400 audit(1765366468.335:34124): avc: denied { read } for pid=22274 comm="syz.8.6520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 609.383534][T22277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.392859][T22277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.402821][ T29] audit: type=1326 audit(1765366468.405:34125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm="syz.2.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.426641][ T29] audit: type=1326 audit(1765366468.405:34126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm="syz.2.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.450320][ T29] audit: type=1326 audit(1765366468.405:34127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.477151][ T29] audit: type=1326 audit(1765366468.405:34128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.500814][ T29] audit: type=1326 audit(1765366468.405:34129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.524457][ T29] audit: type=1326 audit(1765366468.405:34130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.548498][ T29] audit: type=1326 audit(1765366468.405:34131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.572666][ T29] audit: type=1326 audit(1765366468.405:34132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.596295][ T29] audit: type=1326 audit(1765366468.405:34133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22276 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 609.911726][T22288] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6526'. [ 609.960997][T22292] loop5: detected capacity change from 0 to 2048 [ 610.009683][T22292] Alternate GPT is invalid, using primary GPT. [ 610.015987][T22292] loop5: p1 p2 p3 [ 610.019731][T22292] loop5: partition table partially beyond EOD, truncated [ 610.042617][T22292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.062094][T22292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.498555][ T4445] Bluetooth: hci1: command 0x1003 tx timeout [ 610.504707][ T3651] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 610.537983][T22309] netem: change failed [ 610.733592][T22317] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6536'. [ 610.787716][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 611.013236][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 611.128237][T22332] tipc: Enabling of bearer rejected, already enabled [ 611.158580][T22326] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 611.215457][T22343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.224391][T22343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.277207][T22340] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6544'. [ 611.683748][T22358] netem: change failed [ 611.711265][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6553'. [ 611.789917][T22367] netlink: 'syz.2.6556': attribute type 178 has an invalid length. [ 611.931215][T22372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6557'. [ 611.940289][T22372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6557'. [ 611.949345][T22372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6557'. [ 611.979852][T22372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6557'. [ 612.456772][T22376] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6559'. [ 612.720807][T22384] loop6: detected capacity change from 0 to 512 [ 612.727727][T22384] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 612.740225][T22384] EXT4-fs (loop6): 1 truncate cleaned up [ 612.746425][T22384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.818519][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 612.828709][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 612.915028][T22390] netem: change failed [ 613.022788][T22395] tipc: Enabling of bearer rejected, already enabled [ 613.058704][ T3651] Bluetooth: hci1: command 0x1003 tx timeout [ 613.092582][T22399] netem: change failed [ 613.098483][ T4445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 613.461474][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.807083][T22411] serio: Serial port ttyS3 [ 613.872642][T22409] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6571'. [ 614.014390][T22417] loop5: detected capacity change from 0 to 2048 [ 614.080503][T22417] Alternate GPT is invalid, using primary GPT. [ 614.086798][T22417] loop5: p1 p2 p3 [ 614.090541][T22417] loop5: partition table partially beyond EOD, truncated [ 614.322280][T22425] tipc: Started in network mode [ 614.327184][T22425] tipc: Node identity ac14140e, cluster identity 4711 [ 614.338500][T22425] tipc: New replicast peer: 255.255.255.255 [ 614.344618][T22425] tipc: Enabled bearer , priority 10 [ 614.435943][T22435] loop8: detected capacity change from 0 to 512 [ 614.443104][T22435] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 614.464354][T22435] EXT4-fs (loop8): 1 truncate cleaned up [ 614.470515][T22435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.502604][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.529187][T22443] loop8: detected capacity change from 0 to 512 [ 614.536277][T22443] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 615.066739][T22443] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 615.081208][T22451] netem: change failed [ 615.103256][T22443] EXT4-fs (loop8): 1 truncate cleaned up [ 615.109908][T22461] __nla_validate_parse: 3 callbacks suppressed [ 615.109922][T22461] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6591'. [ 615.117559][T22443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.445553][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.458623][ T3482] tipc: Node number set to 2886997006 [ 615.502559][T22480] serio: Serial port ttyS3 [ 615.524350][T22481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6597'. [ 615.555520][T22482] FAULT_INJECTION: forcing a failure. [ 615.555520][T22482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.568645][T22482] CPU: 0 UID: 0 PID: 22482 Comm: syz.6.6599 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 615.568713][T22482] Tainted: [W]=WARN [ 615.568721][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.568812][T22482] Call Trace: [ 615.568819][T22482] [ 615.568828][T22482] __dump_stack+0x1d/0x30 [ 615.568854][T22482] dump_stack_lvl+0xe8/0x140 [ 615.568878][T22482] dump_stack+0x15/0x1b [ 615.568898][T22482] should_fail_ex+0x265/0x280 [ 615.568951][T22482] should_fail+0xb/0x20 [ 615.568971][T22482] should_fail_usercopy+0x1a/0x20 [ 615.568996][T22482] _copy_to_user+0x20/0xa0 [ 615.569025][T22482] simple_read_from_buffer+0xb5/0x130 [ 615.569096][T22482] proc_fail_nth_read+0x10e/0x150 [ 615.569123][T22482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.569151][T22482] vfs_read+0x1a8/0x770 [ 615.569170][T22482] ? __rcu_read_unlock+0x4f/0x70 [ 615.569264][T22482] ? __fget_files+0x184/0x1c0 [ 615.569287][T22482] ? mutex_lock+0x58/0x90 [ 615.569314][T22482] ksys_read+0xda/0x1a0 [ 615.569415][T22482] __x64_sys_read+0x40/0x50 [ 615.569442][T22482] x64_sys_call+0x2889/0x3000 [ 615.569464][T22482] do_syscall_64+0xd8/0x2a0 [ 615.569525][T22482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.569566][T22482] RIP: 0033:0x7f5f9ab0e15c [ 615.569622][T22482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 615.569641][T22482] RSP: 002b:00007f5f9954e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.569660][T22482] RAX: ffffffffffffffda RBX: 00007f5f9ad66090 RCX: 00007f5f9ab0e15c [ 615.569671][T22482] RDX: 000000000000000f RSI: 00007f5f9954e0a0 RDI: 0000000000000003 [ 615.569761][T22482] RBP: 00007f5f9954e090 R08: 0000000000000000 R09: 0000000000000000 [ 615.569775][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.569789][T22482] R13: 00007f5f9ad66128 R14: 00007f5f9ad66090 R15: 00007fffb30e7af8 [ 615.569807][T22482] [ 616.042095][T22489] netlink: 'syz.6.6601': attribute type 12 has an invalid length. [ 616.674815][T22500] netlink: 'syz.8.6605': attribute type 12 has an invalid length. [ 617.428253][T22516] netlink: 'syz.8.6610': attribute type 178 has an invalid length. [ 617.628645][ T4445] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 617.898967][T22547] tipc: Enabling of bearer rejected, already enabled [ 617.977473][T22555] netem: change failed [ 618.034038][T22562] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 618.042631][T22562] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 618.056179][T22550] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 618.071513][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 618.071528][ T29] audit: type=1400 audit(1765366477.055:34270): avc: denied { write } for pid=22548 comm="syz.5.6627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 618.097366][ T29] audit: type=1400 audit(1765366477.055:34271): avc: denied { relabelfrom } for pid=22548 comm="syz.5.6627" name="AF_VSOCK" dev="sockfs" ino=84622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.121075][ T29] audit: type=1400 audit(1765366477.055:34272): avc: denied { mac_admin } for pid=22548 comm="syz.5.6627" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.142317][ T29] audit: type=1400 audit(1765366477.075:34273): avc: denied { relabelto } for pid=22548 comm="syz.5.6627" name="AF_VSOCK" dev="sockfs" ino=84622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="system_u:object_r:dpkg_lock_t:s0" [ 619.694076][T11106] Bluetooth: hci0: Frame reassembly failed (-84) [ 619.991991][T22600] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6642'. [ 620.971145][ T29] audit: type=1326 audit(1765366479.915:34274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 620.994907][ T29] audit: type=1326 audit(1765366479.915:34275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 621.018555][ T29] audit: type=1326 audit(1765366479.915:34276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 621.042135][ T29] audit: type=1326 audit(1765366479.915:34277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 621.066397][ T29] audit: type=1326 audit(1765366479.915:34278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 621.067551][T22610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6645'. [ 621.090338][ T29] audit: type=1326 audit(1765366479.915:34279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22608 comm="syz.6.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 621.124196][T22610] ipvlan2: entered promiscuous mode [ 621.140403][T22610] wireguard0: entered promiscuous mode [ 621.145900][T22610] wireguard0: entered allmulticast mode [ 621.778569][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 621.784906][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 621.938497][ T4445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 621.940161][ T3558] Bluetooth: hci1: command 0x1003 tx timeout [ 622.028916][T22621] loop6: detected capacity change from 0 to 164 [ 622.035948][T22621] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 622.044738][T22621] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 622.059406][T22621] Symlink component flag not implemented [ 622.065053][T22621] Symlink component flag not implemented [ 622.070809][T22621] Symlink component flag not implemented (7) [ 622.076775][T22621] Symlink component flag not implemented (116) [ 622.099958][T22623] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6649'. [ 622.338202][T22635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6653'. [ 622.347443][T22635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6653'. [ 622.356745][T22635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6653'. [ 622.373381][T22635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6653'. [ 622.465626][T22640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6655'. [ 622.600687][T22643] loop8: detected capacity change from 0 to 164 [ 622.609457][T11102] Bluetooth: hci0: Frame reassembly failed (-84) [ 622.622069][T22643] FAULT_INJECTION: forcing a failure. [ 622.622069][T22643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.635233][T22643] CPU: 0 UID: 0 PID: 22643 Comm: syz.8.6656 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 622.635323][T22643] Tainted: [W]=WARN [ 622.635329][T22643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.635341][T22643] Call Trace: [ 622.635348][T22643] [ 622.635355][T22643] __dump_stack+0x1d/0x30 [ 622.635404][T22643] dump_stack_lvl+0xe8/0x140 [ 622.635428][T22643] dump_stack+0x15/0x1b [ 622.635447][T22643] should_fail_ex+0x265/0x280 [ 622.635467][T22643] should_fail+0xb/0x20 [ 622.635555][T22643] should_fail_usercopy+0x1a/0x20 [ 622.635580][T22643] strncpy_from_user+0x27/0x260 [ 622.635613][T22643] getname_flags+0xae/0x3b0 [ 622.635639][T22643] getname_uflags+0x21/0x30 [ 622.635731][T22643] __x64_sys_execveat+0x5d/0x90 [ 622.635765][T22643] x64_sys_call+0x1c0e/0x3000 [ 622.635790][T22643] do_syscall_64+0xd8/0x2a0 [ 622.635825][T22643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.635852][T22643] RIP: 0033:0x7fd291f2f749 [ 622.635869][T22643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.635884][T22643] RSP: 002b:00007fd290997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 622.635900][T22643] RAX: ffffffffffffffda RBX: 00007fd292185fa0 RCX: 00007fd291f2f749 [ 622.635913][T22643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 622.635974][T22643] RBP: 00007fd290997090 R08: 0000000000001000 R09: 0000000000000000 [ 622.635985][T22643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.635996][T22643] R13: 00007fd292186038 R14: 00007fd292185fa0 R15: 00007ffcd197d288 [ 622.636014][T22643] [ 623.020657][T22654] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6661'. [ 623.070831][T22657] loop6: detected capacity change from 0 to 512 [ 623.077522][T22657] EXT4-fs: inline encryption not supported [ 623.129672][T22657] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 623.163311][T22657] EXT4-fs (loop6): 1 truncate cleaned up [ 623.175917][T22657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.271955][T22652] SELinux: failed to load policy [ 623.338242][T22657] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6660'. [ 623.347311][T22657] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6660'. [ 623.530139][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 623.530152][ T29] audit: type=1400 audit(1765366482.535:34297): avc: denied { connect } for pid=22670 comm="syz.5.6666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 623.791684][T22677] netem: change failed [ 623.867542][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.873891][ T29] audit: type=1400 audit(1765366482.865:34298): avc: denied { shutdown } for pid=22683 comm="syz.8.6672" laddr=fe80::f lport=40412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 624.003187][T22693] loop6: detected capacity change from 0 to 512 [ 624.027140][T22693] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 624.103522][T22693] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 624.136630][T22693] EXT4-fs (loop6): 1 truncate cleaned up [ 624.147884][T22693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.388991][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.529198][T22720] loop8: detected capacity change from 0 to 2048 [ 624.581983][T22720] Alternate GPT is invalid, using primary GPT. [ 624.588317][T22720] loop8: p1 p2 p3 [ 624.592226][T22720] loop8: partition table partially beyond EOD, truncated [ 624.629662][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.657832][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.665912][ T4445] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.692962][ T29] audit: type=1326 audit(1765366483.695:34299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.8.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.731175][ T29] audit: type=1326 audit(1765366483.715:34300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.8.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.754956][ T29] audit: type=1326 audit(1765366483.715:34301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.8.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.778571][ T29] audit: type=1326 audit(1765366483.715:34302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.802498][ T29] audit: type=1326 audit(1765366483.715:34303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.826348][ T29] audit: type=1326 audit(1765366483.715:34304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.835132][T22728] netlink: 'syz.6.6689': attribute type 12 has an invalid length. [ 624.849959][ T29] audit: type=1326 audit(1765366483.715:34305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 624.849990][ T29] audit: type=1326 audit(1765366483.715:34306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 625.679599][T22761] loop8: detected capacity change from 0 to 1024 [ 625.800223][T22761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.880684][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.002391][T22771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.011086][T22771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.137976][T22787] loop6: detected capacity change from 0 to 2048 [ 626.152123][T22781] FAULT_INJECTION: forcing a failure. [ 626.152123][T22781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.165413][T22781] CPU: 1 UID: 0 PID: 22781 Comm: syz.8.6708 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 626.165441][T22781] Tainted: [W]=WARN [ 626.165447][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.165457][T22781] Call Trace: [ 626.165464][T22781] [ 626.165471][T22781] __dump_stack+0x1d/0x30 [ 626.165495][T22781] dump_stack_lvl+0xe8/0x140 [ 626.165577][T22781] dump_stack+0x15/0x1b [ 626.165623][T22781] should_fail_ex+0x265/0x280 [ 626.165642][T22781] should_fail_alloc_page+0xf2/0x100 [ 626.165722][T22781] __alloc_frozen_pages_noprof+0x109/0x360 [ 626.165746][T22781] alloc_pages_mpol+0xb3/0x260 [ 626.165770][T22781] vma_alloc_folio_noprof+0x1aa/0x300 [ 626.165821][T22781] handle_mm_fault+0xef5/0x2c60 [ 626.165910][T22781] do_user_addr_fault+0x630/0x1080 [ 626.165935][T22781] exc_page_fault+0x62/0xa0 [ 626.165956][T22781] asm_exc_page_fault+0x26/0x30 [ 626.165972][T22781] RIP: 0033:0x7fd291e00616 [ 626.165992][T22781] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 6c 4e 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 626.166007][T22781] RSP: 002b:00007fd290994f70 EFLAGS: 00010202 [ 626.166021][T22781] RAX: 0000000000000000 RBX: 00007fd292185fa0 RCX: 0000000000000000 [ 626.166032][T22781] RDX: 0000200000000040 RSI: 0000200000000040 RDI: 00007fd291fb5479 [ 626.166043][T22781] RBP: 00007fd290997090 R08: 00007fd291dee2f0 R09: 0000000000000000 [ 626.166053][T22781] R10: 0000000000000001 R11: 0000200000000040 R12: 0000000000000001 [ 626.166084][T22781] R13: 000000000000002d R14: 0000200000000040 R15: 00007ffcd197d288 [ 626.166175][T22781] [ 626.166187][T22781] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 626.337606][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.346092][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.350935][T22787] Alternate GPT is invalid, using primary GPT. [ 626.360043][T22787] loop6: p1 p2 p3 [ 626.363821][T22787] loop6: partition table partially beyond EOD, truncated [ 626.383874][T22787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.394293][T22787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.484884][T22803] __nla_validate_parse: 4 callbacks suppressed [ 626.484913][T22803] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6718'. [ 626.491331][T22798] loop5: detected capacity change from 0 to 512 [ 626.507045][T22798] EXT4-fs: inline encryption not supported [ 626.513217][T22798] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 626.524707][T22798] EXT4-fs (loop5): 1 truncate cleaned up [ 626.531109][T22798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.562015][T22798] SELinux: failed to load policy [ 626.633861][T22809] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6716'. [ 626.642887][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6716'. [ 626.651874][T22809] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6716'. [ 626.675404][T22809] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6716'. [ 627.007863][T22819] netem: change failed [ 627.045716][T22826] loop8: detected capacity change from 0 to 164 [ 627.053380][T22826] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 627.062768][T22826] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 627.071934][T22826] Symlink component flag not implemented [ 627.077650][T22826] Symlink component flag not implemented [ 627.083816][T22826] Symlink component flag not implemented (7) [ 627.089833][T22826] Symlink component flag not implemented (116) [ 627.152722][T22832] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6730'. [ 627.282530][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.452058][T22845] loop5: detected capacity change from 0 to 2048 [ 627.508044][T22845] Alternate GPT is invalid, using primary GPT. [ 627.514438][T22845] loop5: p1 p2 p3 [ 627.518180][T22845] loop5: partition table partially beyond EOD, truncated [ 627.518985][T22849] netem: change failed [ 627.544155][T22845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.552950][T22845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.047102][T22861] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6741'. [ 628.106628][T22865] serio: Serial port ttyS3 [ 628.120576][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6744'. [ 628.130038][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6744'. [ 628.142205][T22867] netlink: 182 bytes leftover after parsing attributes in process `syz.6.6744'. [ 628.152686][T22867] netlink: 'syz.6.6744': attribute type 21 has an invalid length. [ 628.359419][T22874] loop8: detected capacity change from 0 to 512 [ 628.367129][T22874] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 628.380036][T22874] EXT4-fs (loop8): 1 truncate cleaned up [ 628.386459][T22874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.546420][T22879] tipc: Enabling of bearer rejected, already enabled [ 628.594545][T22881] netem: change failed [ 628.822956][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.833517][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.851163][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 628.851202][ T29] audit: type=1326 audit(1765366487.855:34469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 628.891234][ T29] audit: type=1326 audit(1765366487.885:34470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.4.6753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 628.914903][ T29] audit: type=1326 audit(1765366487.885:34471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 628.938567][ T29] audit: type=1326 audit(1765366487.885:34472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 628.962190][ T29] audit: type=1326 audit(1765366487.885:34473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 628.985935][ T29] audit: type=1326 audit(1765366487.885:34474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 629.009607][ T29] audit: type=1326 audit(1765366487.885:34475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 629.033190][ T29] audit: type=1326 audit(1765366487.885:34476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 629.056772][ T29] audit: type=1326 audit(1765366487.885:34477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 629.080467][ T29] audit: type=1326 audit(1765366487.885:34478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 629.502968][T22907] tipc: Enabling of bearer rejected, already enabled [ 629.521346][T22908] loop6: detected capacity change from 0 to 512 [ 629.528654][T22908] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 629.541052][T22908] EXT4-fs (loop6): 1 truncate cleaned up [ 629.547324][T22908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.758794][T22911] netem: change failed [ 630.104157][T22934] tipc: Enabling of bearer rejected, already enabled [ 630.312571][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.378002][T22936] netlink: 'syz.4.6771': attribute type 12 has an invalid length. [ 630.666479][T22951] loop6: detected capacity change from 0 to 164 [ 630.681920][T22951] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 630.721247][T22951] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 630.758675][T22951] Symlink component flag not implemented [ 630.764411][T22951] Symlink component flag not implemented [ 630.788504][T22951] Symlink component flag not implemented (7) [ 630.794560][T22951] Symlink component flag not implemented (116) [ 630.910848][T22958] loop6: detected capacity change from 0 to 164 [ 631.110091][T22958] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 631.149554][T22958] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 631.179148][T22962] tipc: Enabling of bearer rejected, already enabled [ 631.209520][T22958] Symlink component flag not implemented [ 631.215194][T22958] Symlink component flag not implemented [ 631.250801][T22964] serio: Serial port ttyS3 [ 631.287323][T22958] Symlink component flag not implemented (7) [ 631.293429][T22958] Symlink component flag not implemented (116) [ 631.563952][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.746374][ T2408] Bluetooth: hci0: Frame reassembly failed (-84) [ 631.801581][T22987] __nla_validate_parse: 2 callbacks suppressed [ 631.801599][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'. [ 632.009214][T22998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22998 comm=syz.2.6795 [ 633.127930][T23011] tipc: Enabling of bearer rejected, already enabled [ 633.270551][T23018] SELinux: failed to load policy [ 633.469615][T23023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6800'. [ 633.478747][T23023] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6800'. [ 633.487734][T23023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6800'. [ 634.267221][ T4445] Bluetooth: hci0: command 0x1003 tx timeout [ 634.272632][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 634.299600][T23023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6800'. [ 634.679621][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 634.679636][ T29] audit: type=1326 audit(1765366493.675:34575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.709574][ T29] audit: type=1326 audit(1765366493.675:34576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.733136][ T29] audit: type=1326 audit(1765366493.675:34577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.756865][ T29] audit: type=1326 audit(1765366493.675:34578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.781162][ T29] audit: type=1326 audit(1765366493.675:34579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.804818][ T29] audit: type=1326 audit(1765366493.675:34580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.828643][ T29] audit: type=1326 audit(1765366493.675:34581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.852424][ T29] audit: type=1326 audit(1765366493.675:34582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.876261][ T29] audit: type=1326 audit(1765366493.675:34583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.897684][T23039] netem: change failed [ 634.899892][ T29] audit: type=1326 audit(1765366493.675:34584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.5.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f8b6222f749 code=0x7ffc0000 [ 634.984282][T23045] tipc: Enabling of bearer rejected, already enabled [ 635.997253][T23072] loop5: detected capacity change from 0 to 2048 [ 636.079612][T23072] Alternate GPT is invalid, using primary GPT. [ 636.085933][T23072] loop5: p1 p2 p3 [ 636.089718][T23072] loop5: partition table partially beyond EOD, truncated [ 636.119635][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.148546][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.318605][T23076] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 636.325198][T23076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 636.333388][T23076] vhci_hcd vhci_hcd.0: Device attached [ 636.351315][T23080] loop8: detected capacity change from 0 to 164 [ 636.373974][T23080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 636.389040][T23081] 9p: Bad value for 'rfdno' [ 636.390041][T23080] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 636.459036][T23080] Symlink component flag not implemented [ 636.464776][T23080] Symlink component flag not implemented [ 636.471051][T23080] Symlink component flag not implemented (7) [ 636.477041][T23080] Symlink component flag not implemented (116) [ 636.508798][ T3482] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 636.663612][T23090] tipc: Enabling of bearer rejected, already enabled [ 636.688481][ T3482] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 637.848678][T23077] vhci_hcd: connection reset by peer [ 638.108776][ T1663] vhci_hcd vhci_hcd.4: stop threads [ 638.114148][ T1663] vhci_hcd vhci_hcd.4: release socket [ 638.119544][ T1663] vhci_hcd vhci_hcd.4: disconnect device [ 638.480731][T23108] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6834'. [ 638.597764][T23115] SELinux: failed to load policy [ 638.661920][T23112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6836'. [ 638.671046][T23112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6836'. [ 638.680100][T23112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6836'. [ 638.701996][T23112] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6836'. [ 638.763579][T23119] netem: change failed [ 638.793411][T23122] tipc: Enabling of bearer rejected, already enabled [ 638.857894][T23126] loop6: detected capacity change from 0 to 2048 [ 638.933428][T23126] Alternate GPT is invalid, using primary GPT. [ 638.939763][T23126] loop6: p1 p2 p3 [ 638.943484][T23126] loop6: partition table partially beyond EOD, truncated [ 638.981267][T23126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.998936][T23126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.029357][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6839'. [ 639.039080][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6839'. [ 639.055201][T23131] netlink: 182 bytes leftover after parsing attributes in process `syz.4.6839'. [ 639.218736][T23134] SELinux: failed to load policy [ 639.301671][T23136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6844'. [ 639.310772][T23136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6844'. [ 639.701861][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 639.701920][ T29] audit: type=1326 audit(1765366498.705:34756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.746864][T23143] loop5: detected capacity change from 0 to 164 [ 639.871907][ T29] audit: type=1326 audit(1765366498.735:34757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.895609][ T29] audit: type=1326 audit(1765366498.735:34758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.919151][ T29] audit: type=1326 audit(1765366498.735:34759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.943173][ T29] audit: type=1326 audit(1765366498.735:34760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.966781][ T29] audit: type=1326 audit(1765366498.735:34761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 639.990730][ T29] audit: type=1326 audit(1765366498.735:34762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 640.014384][ T29] audit: type=1326 audit(1765366498.735:34763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 640.014510][T23143] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 640.037982][ T29] audit: type=1326 audit(1765366498.735:34764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 640.038012][ T29] audit: type=1326 audit(1765366498.735:34765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.6.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9ab0f749 code=0x7ffc0000 [ 640.124709][T23143] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 640.145270][T23143] Symlink component flag not implemented [ 640.151047][T23143] Symlink component flag not implemented [ 640.188754][T23143] Symlink component flag not implemented (7) [ 640.194770][T23143] Symlink component flag not implemented (116) [ 640.462671][T23182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.483206][T23182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.540094][T23188] loop8: detected capacity change from 0 to 512 [ 640.547261][T23188] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 640.568384][T23188] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 640.591048][T23188] EXT4-fs (loop8): 1 truncate cleaned up [ 640.601304][T23188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.765032][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.782284][T23200] loop6: detected capacity change from 0 to 512 [ 640.807947][T23200] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 640.879406][T23200] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 641.065781][T23200] EXT4-fs (loop6): 1 truncate cleaned up [ 641.076035][T23200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.393190][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.417532][ T3482] usb 9-1: enqueue for inactive port 0 [ 642.427329][ T3482] usb 9-1: enqueue for inactive port 0 [ 642.518481][ T3482] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 642.541054][T23221] netem: change failed [ 642.785424][T23250] netem: change failed [ 642.918966][T23254] SELinux: failed to load policy [ 643.220892][T23261] netlink: 'syz.5.6881': attribute type 12 has an invalid length. [ 643.823844][T23286] FAULT_INJECTION: forcing a failure. [ 643.823844][T23286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.836944][T23286] CPU: 0 UID: 0 PID: 23286 Comm: syz.2.6886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.836977][T23286] Tainted: [W]=WARN [ 643.836984][T23286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.837027][T23286] Call Trace: [ 643.837034][T23286] [ 643.837041][T23286] __dump_stack+0x1d/0x30 [ 643.837129][T23286] dump_stack_lvl+0xe8/0x140 [ 643.837148][T23286] dump_stack+0x15/0x1b [ 643.837164][T23286] should_fail_ex+0x265/0x280 [ 643.837184][T23286] should_fail+0xb/0x20 [ 643.837247][T23286] should_fail_usercopy+0x1a/0x20 [ 643.837272][T23286] _copy_from_user+0x1c/0xb0 [ 643.837295][T23286] copy_from_sockptr_offset+0x66/0xa0 [ 643.837380][T23286] do_ip6t_set_ctl+0x5d1/0x840 [ 643.837453][T23286] nf_setsockopt+0x199/0x1b0 [ 643.837477][T23286] ipv6_setsockopt+0x11a/0x130 [ 643.837517][T23286] udpv6_setsockopt+0x99/0xb0 [ 643.837559][T23286] sock_common_setsockopt+0x69/0x80 [ 643.837582][T23286] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 643.837601][T23286] __sys_setsockopt+0x184/0x200 [ 643.837691][T23286] __x64_sys_setsockopt+0x64/0x80 [ 643.837712][T23286] x64_sys_call+0x21d5/0x3000 [ 643.837735][T23286] do_syscall_64+0xd8/0x2a0 [ 643.837769][T23286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.837851][T23286] RIP: 0033:0x7f5d352ff749 [ 643.837867][T23286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.837886][T23286] RSP: 002b:00007f5d33d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.837907][T23286] RAX: ffffffffffffffda RBX: 00007f5d35555fa0 RCX: 00007f5d352ff749 [ 643.837921][T23286] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 643.837932][T23286] RBP: 00007f5d33d67090 R08: 00000000000005b8 R09: 0000000000000000 [ 643.837988][T23286] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000001 [ 643.838000][T23286] R13: 00007f5d35556038 R14: 00007f5d35555fa0 R15: 00007ffc0ad2a118 [ 643.838017][T23286] [ 644.170051][T23285] loop6: detected capacity change from 0 to 164 [ 644.188147][T23285] syz.6.6887: attempt to access beyond end of device [ 644.188147][T23285] loop6: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 644.215424][T23285] syz.6.6887: attempt to access beyond end of device [ 644.215424][T23285] loop6: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 644.366781][T23292] netem: change failed [ 644.444518][T23296] __nla_validate_parse: 7 callbacks suppressed [ 644.444534][T23296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6888'. [ 644.532028][T23296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23296 comm=syz.2.6888 [ 644.740882][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 644.740896][ T29] audit: type=1326 audit(1765366503.745:34832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.813562][ T29] audit: type=1326 audit(1765366503.775:34833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.837254][ T29] audit: type=1326 audit(1765366503.775:34834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.860940][ T29] audit: type=1326 audit(1765366503.775:34835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.884549][ T29] audit: type=1326 audit(1765366503.775:34836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.908156][ T29] audit: type=1326 audit(1765366503.775:34837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.931741][ T29] audit: type=1326 audit(1765366503.775:34838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.955471][ T29] audit: type=1326 audit(1765366503.775:34839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 644.979128][ T29] audit: type=1326 audit(1765366503.775:34840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 645.002751][ T29] audit: type=1326 audit(1765366503.775:34841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.8.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 645.152034][T23327] netem: change failed [ 645.168067][T23322] netlink: 'syz.5.6900': attribute type 12 has an invalid length. [ 645.213896][T23337] loop8: detected capacity change from 0 to 2048 [ 645.350993][T23337] Alternate GPT is invalid, using primary GPT. [ 645.357695][T23337] loop8: p1 p2 p3 [ 645.361455][T23337] loop8: partition table partially beyond EOD, truncated [ 645.385486][T23337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.404496][T23337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.198897][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6911'. [ 646.221324][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6911'. [ 646.330488][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6913'. [ 646.389769][T23360] loop5: detected capacity change from 0 to 1024 [ 646.427948][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6913'. [ 646.446833][T23360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.492993][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.701152][T23372] netem: change failed [ 647.304768][T23388] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6923'. [ 647.497597][ T4438] Bluetooth: hci0: Frame reassembly failed (-84) [ 647.648544][T23400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 647.655149][T23400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 647.663819][T23400] vhci_hcd vhci_hcd.0: Device attached [ 647.697730][T23403] 9p: Bad value for 'rfdno' [ 647.724007][T23401] vhci_hcd: connection closed [ 647.724173][ T2481] vhci_hcd vhci_hcd.4: stop threads [ 647.734119][ T2481] vhci_hcd vhci_hcd.4: release socket [ 647.739509][ T2481] vhci_hcd vhci_hcd.4: disconnect device [ 647.779755][T23405] netem: change failed [ 648.100654][T23417] loop8: detected capacity change from 0 to 512 [ 648.113664][T23417] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 648.160136][T23417] EXT4-fs (loop8): 1 truncate cleaned up [ 648.166318][T23417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.171415][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6934'. [ 648.187585][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6934'. [ 648.306251][T11105] Bluetooth: hci1: Frame reassembly failed (-84) [ 648.465243][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6938'. [ 648.548607][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6938'. [ 648.679095][T23436] serio: Serial port ttyS3 [ 648.696582][T23434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.713111][T23434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.272045][T23440] netem: change failed [ 649.538516][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 649.544643][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 650.101681][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.147982][T23463] loop8: detected capacity change from 0 to 2048 [ 650.188120][T23465] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6953'. [ 650.202297][T23463] Alternate GPT is invalid, using primary GPT. [ 650.208689][T23463] loop8: p1 p2 p3 [ 650.212407][T23463] loop8: partition table partially beyond EOD, truncated [ 650.230927][T23463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.240268][T23463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.249684][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 650.249699][ T29] audit: type=1326 audit(1765366509.255:35036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.294095][ T29] audit: type=1326 audit(1765366509.255:35037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.317822][ T29] audit: type=1326 audit(1765366509.255:35038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.341636][ T29] audit: type=1326 audit(1765366509.255:35039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.352040][ T4445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 650.365359][ T29] audit: type=1326 audit(1765366509.255:35040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.396205][ T29] audit: type=1326 audit(1765366509.255:35041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.419993][ T29] audit: type=1326 audit(1765366509.255:35042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.443565][ T29] audit: type=1326 audit(1765366509.255:35043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.467141][ T29] audit: type=1326 audit(1765366509.285:35044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.490917][ T29] audit: type=1326 audit(1765366509.285:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23462 comm="syz.8.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 650.560290][T23469] netem: change failed [ 650.566770][T23471] loop6: detected capacity change from 0 to 2048 [ 650.590653][T23471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.616653][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.641289][T23483] loop5: detected capacity change from 0 to 512 [ 650.672807][T23483] EXT4-fs: inline encryption not supported [ 650.699271][T23483] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 650.740252][T23485] loop6: detected capacity change from 0 to 164 [ 650.769165][T23483] EXT4-fs (loop5): 1 truncate cleaned up [ 650.778588][T23483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.877663][T23477] SELinux: failed to load policy [ 650.919644][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6961'. [ 650.955431][T23483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6956'. [ 650.964806][T23483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6956'. [ 650.973806][T23483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6956'. [ 650.983130][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6961'. [ 650.993979][T23483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6956'. [ 651.291245][T23501] SELinux: failed to load policy [ 651.444846][T23504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6965'. [ 651.453877][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6965'. [ 651.462935][T23504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6965'. [ 651.477749][T23497] netlink: 'syz.8.6963': attribute type 12 has an invalid length. [ 651.486727][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.968795][T23522] loop8: detected capacity change from 0 to 2048 [ 652.039464][T23522] Alternate GPT is invalid, using primary GPT. [ 652.045844][T23522] loop8: p1 p2 p3 [ 652.049664][T23522] loop8: partition table partially beyond EOD, truncated [ 652.158970][T23522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.204647][T23522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.895149][T23554] loop8: detected capacity change from 0 to 512 [ 652.904863][ T2408] Bluetooth: hci0: Frame reassembly failed (-84) [ 652.914548][T23554] EXT4-fs: inline encryption not supported [ 652.941265][T23554] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 652.992767][T23554] EXT4-fs (loop8): 1 truncate cleaned up [ 653.014865][T23554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.067471][T23552] SELinux: failed to load policy [ 653.100346][ T2408] Bluetooth: hci1: Frame reassembly failed (-84) [ 653.473835][T23574] SELinux: failed to load policy [ 653.851962][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.064509][T23584] loop8: detected capacity change from 0 to 164 [ 654.071589][T23584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 654.080687][T23584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 654.089360][T23584] Symlink component flag not implemented [ 654.094996][T23584] Symlink component flag not implemented [ 654.101050][T23584] Symlink component flag not implemented (7) [ 654.107084][T23584] Symlink component flag not implemented (116) [ 654.978482][T13839] Bluetooth: hci0: command 0x1003 tx timeout [ 654.978636][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 655.138499][ T3558] Bluetooth: hci1: command 0x1003 tx timeout [ 655.138507][ T4445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 655.345855][T23615] __nla_validate_parse: 10 callbacks suppressed [ 655.345871][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7010'. [ 655.387653][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7010'. [ 655.614066][T23623] loop5: detected capacity change from 0 to 512 [ 655.621950][T23623] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 655.633361][T23623] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 655.648118][T23623] EXT4-fs (loop5): 1 truncate cleaned up [ 655.654136][T23623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.797912][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7015'. [ 655.808066][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.833135][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7015'. [ 655.914898][T23637] loop5: detected capacity change from 0 to 164 [ 655.924698][T23637] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 655.935296][T23637] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 655.943886][T23637] Symlink component flag not implemented [ 655.949584][T23637] Symlink component flag not implemented [ 655.957857][T23637] Symlink component flag not implemented (7) [ 655.963896][T23637] Symlink component flag not implemented (116) [ 656.341479][T23670] loop5: detected capacity change from 0 to 164 [ 656.348930][T23670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 656.367017][T23670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 656.375409][T23670] Symlink component flag not implemented [ 656.381193][T23670] Symlink component flag not implemented [ 656.387490][T23670] Symlink component flag not implemented (7) [ 656.393566][T23670] Symlink component flag not implemented (116) [ 656.467960][T23684] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7040'. [ 656.477349][T23684] 0ªX¹¦À: renamed from caif0 [ 656.484513][T23684] 0ªX¹¦À: entered allmulticast mode [ 656.490583][T23684] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 656.506372][ T4445] Bluetooth: hci2: command 0x1003 tx timeout [ 656.507022][ T3651] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 656.567751][T23692] loop5: detected capacity change from 0 to 512 [ 656.576307][T23692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 656.604795][T23692] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 656.638689][T23692] EXT4-fs (loop5): 1 truncate cleaned up [ 656.645014][T23692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.748558][T23698] netlink: 'syz.4.7045': attribute type 12 has an invalid length. [ 656.805735][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.879279][T23704] loop5: detected capacity change from 0 to 512 [ 656.886012][T23704] EXT4-fs: Ignoring removed i_version option [ 656.892024][T23704] EXT4-fs: Ignoring removed bh option [ 656.902930][T23704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.915944][T23704] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.927410][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 656.927427][ T29] audit: type=1400 audit(1765366515.935:35132): avc: denied { read write } for pid=23703 comm="syz.5.7047" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.956382][ T29] audit: type=1400 audit(1765366515.935:35133): avc: denied { open } for pid=23703 comm="syz.5.7047" path="/526/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.984211][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.016966][T23708] loop5: detected capacity change from 0 to 164 [ 657.024607][T23708] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 657.033625][T23708] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 657.044460][T23708] Symlink component flag not implemented [ 657.050142][T23708] Symlink component flag not implemented [ 657.055872][T23708] Symlink component flag not implemented (7) [ 657.062165][T23708] Symlink component flag not implemented (116) [ 657.217964][T23721] serio: Serial port ttyS3 [ 657.508235][T23733] loop6: detected capacity change from 0 to 2048 [ 657.531996][T23733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.609716][ T29] audit: type=1400 audit(1765366516.615:35134): avc: denied { ioctl } for pid=23732 comm="syz.6.7056" path="socket:[89209]" dev="sockfs" ino=89209 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.713139][ T29] audit: type=1400 audit(1765366516.675:35135): avc: denied { create } for pid=23732 comm="syz.6.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 657.732805][ T29] audit: type=1400 audit(1765366516.675:35136): avc: denied { write } for pid=23732 comm="syz.6.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 657.878225][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7061'. [ 657.910083][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.931856][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7061'. [ 658.116121][T23759] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 658.122663][T23759] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 658.130594][T23759] vhci_hcd vhci_hcd.0: Device attached [ 658.149156][T23759] 9p: Bad value for 'rfdno' [ 658.158178][T23759] loop8: detected capacity change from 0 to 512 [ 658.179864][T23759] EXT4-fs: Ignoring removed i_version option [ 658.185902][T23759] EXT4-fs: Ignoring removed bh option [ 658.200572][T23759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.214367][T23759] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.228496][T23772] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 658.235109][T23772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 658.240310][T23760] vhci_hcd: connection closed [ 658.242870][T23772] vhci_hcd vhci_hcd.0: Device attached [ 658.253343][ T29] audit: type=1400 audit(1765366517.235:35137): avc: denied { ioctl } for pid=23758 comm="syz.8.7065" path="/101/bus/file1" dev="loop8" ino=15 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 658.285933][ T1663] vhci_hcd vhci_hcd.8: stop threads [ 658.291194][T23777] 9p: Bad value for 'rfdno' [ 658.295781][ T1663] vhci_hcd vhci_hcd.8: release socket [ 658.296033][T23777] loop6: detected capacity change from 0 to 512 [ 658.301195][ T1663] vhci_hcd vhci_hcd.8: disconnect device [ 658.338930][T23777] EXT4-fs: Ignoring removed i_version option [ 658.344969][T23777] EXT4-fs: Ignoring removed bh option [ 658.350576][T18883] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 658.471998][ T1038] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 658.530618][T23777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.543303][ T1038] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 658.552424][T23777] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.570612][T23773] vhci_hcd: connection reset by peer [ 658.576967][T11106] vhci_hcd vhci_hcd.6: stop threads [ 658.582210][T11106] vhci_hcd vhci_hcd.6: release socket [ 658.587785][T11106] vhci_hcd vhci_hcd.6: disconnect device [ 658.762006][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.154596][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.452849][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7081'. [ 659.543861][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7081'. [ 659.682087][T23826] loop6: detected capacity change from 0 to 512 [ 659.709137][T23826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 659.741000][T23826] EXT4-fs (loop6): 1 truncate cleaned up [ 659.746989][T23826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.053162][T23834] Alternate GPT is invalid, using primary GPT. [ 660.059502][T23834] loop8: p1 p2 p3 [ 660.063221][T23834] loop8: partition table partially beyond EOD, truncated [ 660.102115][T23834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.138576][T23834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.155258][T23838] EXT4-fs: Ignoring removed i_version option [ 660.161451][T23838] EXT4-fs: Ignoring removed bh option [ 660.182444][T23838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.198663][T23838] ext4 filesystem being mounted at /542/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 660.260577][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.484997][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7096'. [ 660.514703][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7096'. [ 660.691972][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7099'. [ 660.707180][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7099'. [ 660.842675][T23867] tipc: Enabling of bearer rejected, already enabled [ 661.312681][T23885] set_capacity_and_notify: 2 callbacks suppressed [ 661.312696][T23885] loop8: detected capacity change from 0 to 512 [ 661.341277][T23885] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 661.391566][T23885] EXT4-fs (loop8): 1 truncate cleaned up [ 661.409979][T23885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.468621][T23890] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 661.475204][T23890] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 661.482897][T23890] vhci_hcd vhci_hcd.0: Device attached [ 661.489132][T23890] 9p: Bad value for 'rfdno' [ 661.496094][T23890] loop5: detected capacity change from 0 to 512 [ 661.502735][T23890] EXT4-fs: Ignoring removed i_version option [ 661.508900][T23890] EXT4-fs: Ignoring removed bh option [ 661.534099][T23890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.552060][T23890] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.658505][ T23] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 661.728523][ T23] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 661.752787][T23891] vhci_hcd: connection closed [ 661.753067][ T2408] vhci_hcd vhci_hcd.5: stop threads [ 661.762988][ T2408] vhci_hcd vhci_hcd.5: release socket [ 661.768369][ T2408] vhci_hcd vhci_hcd.5: disconnect device [ 661.784329][ T23] usb 11-1: enqueue for inactive port 0 [ 661.808501][ T23] usb 11-1: enqueue for inactive port 0 [ 661.828970][ T23] usb 11-1: enqueue for inactive port 0 [ 661.840045][T23881] netlink: 'syz.2.7109': attribute type 12 has an invalid length. [ 661.928536][ T23] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 662.089709][T23901] tipc: Enabling of bearer rejected, already enabled [ 662.369477][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.847907][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.930934][T23933] loop6: detected capacity change from 0 to 164 [ 662.938134][T23933] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 662.958998][T23933] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 662.967803][T23933] Symlink component flag not implemented [ 662.973524][T23933] Symlink component flag not implemented [ 663.018335][T23933] Symlink component flag not implemented (7) [ 663.024443][T23933] Symlink component flag not implemented (116) [ 663.134594][T23928] netlink: 'syz.5.7125': attribute type 12 has an invalid length. [ 663.622831][ T1038] usb 13-1: enqueue for inactive port 0 [ 663.642734][ T1038] usb 13-1: enqueue for inactive port 0 [ 663.671125][ T29] audit: type=1400 audit(1765366522.665:35138): avc: denied { read } for pid=23954 comm="syz.4.7136" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 663.694449][ T29] audit: type=1400 audit(1765366522.665:35139): avc: denied { open } for pid=23954 comm="syz.4.7136" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 663.718071][ T29] audit: type=1400 audit(1765366522.665:35140): avc: denied { ioctl } for pid=23954 comm="syz.4.7136" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 663.858492][ T1038] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 664.887861][T23966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.898606][T23966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.955790][ T29] audit: type=1326 audit(1765366523.955:35141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.036106][ T29] audit: type=1326 audit(1765366524.035:35142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.059950][ T29] audit: type=1326 audit(1765366524.035:35143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.083538][ T29] audit: type=1326 audit(1765366524.035:35144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.218557][ T29] audit: type=1326 audit(1765366524.055:35145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.242164][ T29] audit: type=1326 audit(1765366524.055:35146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.265822][ T29] audit: type=1326 audit(1765366524.055:35147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8302bdf749 code=0x7ffc0000 [ 665.970799][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.351118][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.369500][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.400490][T24030] loop8: detected capacity change from 0 to 2048 [ 666.410041][T24030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.574934][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.059194][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7180'. [ 667.073577][T11102] Bluetooth: hci0: Frame reassembly failed (-84) [ 667.274294][T24076] loop5: detected capacity change from 0 to 512 [ 667.281203][T24076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 667.294867][T24076] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 667.309630][T24076] EXT4-fs (loop5): 1 truncate cleaned up [ 667.315956][T24076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.341480][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.483128][T24085] loop5: detected capacity change from 0 to 2048 [ 667.529707][T24085] Alternate GPT is invalid, using primary GPT. [ 667.536023][T24085] loop5: p1 p2 p3 [ 667.539866][T24085] loop5: partition table partially beyond EOD, truncated [ 667.550040][T24085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.558605][T24085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.619630][T24093] netem: change failed [ 667.815021][T24100] loop8: detected capacity change from 0 to 512 [ 667.824720][T24100] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 667.849691][T24100] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 667.864619][T24100] EXT4-fs (loop8): 1 truncate cleaned up [ 667.879066][T24100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.903119][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.986097][T11108] Bluetooth: hci1: Frame reassembly failed (-84) [ 668.227533][T24123] serio: Serial port ttyS3 [ 669.126494][T24135] loop8: detected capacity change from 0 to 512 [ 669.133584][T24135] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 669.143480][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 669.149624][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 669.158312][T24135] EXT4-fs (loop8): 1 truncate cleaned up [ 669.164497][T24135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.180943][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 669.180957][ T29] audit: type=1400 audit(1765366528.185:35348): avc: denied { setattr } for pid=24133 comm="syz.8.7209" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 669.263025][T24141] loop5: detected capacity change from 0 to 512 [ 669.269651][T24141] EXT4-fs: Ignoring removed i_version option [ 669.275686][T24141] EXT4-fs: Ignoring removed bh option [ 669.290165][T24141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.303141][T24141] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.323645][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.348631][T24145] loop5: detected capacity change from 0 to 2048 [ 669.385683][ T29] audit: type=1326 audit(1765366528.385:35349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.410106][ T29] audit: type=1326 audit(1765366528.385:35350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.411096][T24145] Alternate GPT is invalid, using primary GPT. [ 669.433723][ T29] audit: type=1326 audit(1765366528.385:35351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.433753][ T29] audit: type=1326 audit(1765366528.385:35352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.440090][T24145] loop5: p1 p2 p3 [ 669.463391][ T29] audit: type=1326 audit(1765366528.385:35353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.486911][T24145] loop5: partition table partially beyond EOD, truncated [ 669.496725][T24145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.514323][ T29] audit: type=1326 audit(1765366528.385:35354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.514360][ T29] audit: type=1326 audit(1765366528.385:35355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.522234][T24145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.529777][ T29] audit: type=1326 audit(1765366528.385:35356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.608100][ T29] audit: type=1326 audit(1765366528.385:35357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24150 comm="syz.2.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5d352ff749 code=0x7ffc0000 [ 669.916228][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.018508][ T4445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 670.018844][ T3651] Bluetooth: hci1: command 0x1003 tx timeout [ 670.197819][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7228'. [ 670.215754][ T2408] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.222406][T24182] loop5: detected capacity change from 0 to 512 [ 670.233446][T24182] EXT4-fs: inline encryption not supported [ 670.239819][T24182] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 670.304756][T24182] EXT4-fs (loop5): 1 truncate cleaned up [ 670.310925][T24182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.336292][T24182] SELinux: failed to load policy [ 670.394685][T24186] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7229'. [ 670.403729][T24186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7229'. [ 670.412704][T24186] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7229'. [ 670.426273][T24186] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7229'. [ 670.855895][T24207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.865178][T24207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.012588][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.243517][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7251'. [ 671.252510][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7251'. [ 671.291502][T24234] loop5: detected capacity change from 0 to 512 [ 671.308795][T24234] EXT4-fs: Ignoring removed i_version option [ 671.314808][T24234] EXT4-fs: Ignoring removed bh option [ 671.350489][T24234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.363515][T24234] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.389666][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.552530][T24257] netem: change failed [ 671.641233][T24278] serio: Serial port ttyS3 [ 671.657400][T24269] loop8: detected capacity change from 0 to 2048 [ 671.749892][T24269] Alternate GPT is invalid, using primary GPT. [ 671.756305][T24269] loop8: p1 p2 p3 [ 671.760046][T24269] loop8: partition table partially beyond EOD, truncated [ 671.770591][T24269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.779402][T24269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.917056][T24295] loop5: detected capacity change from 0 to 512 [ 671.924162][T24295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 671.935730][T24295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 671.950847][T24295] EXT4-fs (loop5): 1 truncate cleaned up [ 671.956899][T24295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.958232][T24302] loop6: detected capacity change from 0 to 164 [ 671.977582][T24302] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.986483][T24302] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.994922][T24302] Symlink component flag not implemented [ 672.000734][T24302] Symlink component flag not implemented [ 672.006633][T24302] Symlink component flag not implemented (7) [ 672.012667][T24302] Symlink component flag not implemented (116) [ 672.120086][T16185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.258537][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 672.258756][ T4445] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 672.567143][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7302'. [ 673.202975][T24374] loop6: detected capacity change from 0 to 512 [ 673.254495][T24374] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 673.281288][T24374] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 673.296137][T24374] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7309: bg 0: block 248: padding at end of block bitmap is not set [ 673.311016][T24374] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7309: Failed to acquire dquot type 1 [ 673.323476][T24374] EXT4-fs (loop6): 1 truncate cleaned up [ 673.330312][T24374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 673.783528][T19221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 673.883558][T24395] netem: change failed [ 674.319015][T24427] loop6: detected capacity change from 0 to 164 [ 674.319071][T24429] loop5: detected capacity change from 0 to 512 [ 674.332058][T24429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 674.352740][T24429] EXT4-fs (loop5): 1 truncate cleaned up [ 674.353647][T24427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.359054][T24429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.387078][T24427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.389436][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7330'. [ 674.395556][T24427] Symlink component flag not implemented [ 674.409804][T24427] Symlink component flag not implemented [ 674.415573][T24427] Symlink component flag not implemented (7) [ 674.421625][T24427] Symlink component flag not implemented (116) [ 674.444807][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 675.130558][T22760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.170896][ T52] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.211648][T24466] serio: Serial port ttyS3 [ 675.226012][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 675.226028][ T29] audit: type=1400 audit(1765366534.225:35468): avc: denied { mounton } for pid=24467 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 675.271376][ T52] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.340335][ T52] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.372136][ T52] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.447165][T24467] chnl_net:caif_netlink_parms(): no params data found [ 675.457562][ T52] bridge_slave_1: left allmulticast mode [ 675.463408][ T52] bridge_slave_1: left promiscuous mode [ 675.469096][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.480212][ T52] bridge_slave_0: left allmulticast mode [ 675.485956][ T52] bridge_slave_0: left promiscuous mode [ 675.491785][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.538503][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (2) [ 675.547058][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (2) [ 675.566636][ T52] bond1 (unregistering): (slave geneve2): Releasing active interface [ 675.620753][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.630709][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.640397][ T52] bond0 (unregistering): Released all slaves [ 675.648641][ T52] bond1 (unregistering): Released all slaves [ 675.693590][T24467] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.700738][T24467] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.711823][T24467] bridge_slave_0: entered allmulticast mode [ 675.718616][T24467] bridge_slave_0: entered promiscuous mode [ 675.725238][ T52] tipc: Disabling bearer [ 675.730582][ T52] tipc: Left network mode [ 675.738784][T24467] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.745859][T24467] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.755062][T24467] bridge_slave_1: entered allmulticast mode [ 675.761649][T24467] bridge_slave_1: entered promiscuous mode [ 675.778190][ T52] hsr_slave_0: left promiscuous mode [ 675.783861][ T52] hsr_slave_1: left promiscuous mode [ 675.793721][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.801134][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.809204][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.816597][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.830367][ T52] veth1_macvtap: left promiscuous mode [ 675.835989][ T52] veth0_macvtap: left promiscuous mode [ 675.847035][ T52] veth1_vlan: left promiscuous mode [ 675.859276][ T52] veth0_vlan: left promiscuous mode [ 676.034444][ T52] team0 (unregistering): Port device team_slave_1 removed [ 676.045504][ T52] team0 (unregistering): Port device team_slave_0 removed [ 676.110372][ T29] audit: type=1326 audit(1765366535.115:35469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.139167][ T29] audit: type=1326 audit(1765366535.135:35470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.163526][ T29] audit: type=1326 audit(1765366535.135:35471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.187292][ T29] audit: type=1326 audit(1765366535.135:35472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.211672][ T29] audit: type=1326 audit(1765366535.135:35473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.235290][ T29] audit: type=1326 audit(1765366535.135:35474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.259445][ T29] audit: type=1326 audit(1765366535.135:35475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.283080][ T29] audit: type=1326 audit(1765366535.135:35476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.306777][ T29] audit: type=1326 audit(1765366535.135:35477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.8.7350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd291f2f749 code=0x7ffc0000 [ 676.337041][T24467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.352793][T24467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.375039][T24467] team0: Port device team_slave_0 added [ 676.419746][T24467] team0: Port device team_slave_1 added [ 676.460899][T24467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.467956][T24467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.493988][T24467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.507533][ T4445] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 676.513879][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 676.548816][T24467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.555999][T24467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.582423][T24467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.665553][T24467] hsr_slave_0: entered promiscuous mode [ 676.671704][T24467] hsr_slave_1: entered promiscuous mode [ 676.677756][T24467] debugfs: 'hsr0' already exists in 'hsr' [ 676.683538][T24467] Cannot create hsr debugfs directory [ 676.872025][ T1663] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.911700][ T52] IPVS: stop unused estimator thread 0... [ 677.116495][T24467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.133872][T24467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.142648][T24467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.155206][T24467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.203301][T24467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.224057][T24467] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.234419][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.241691][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.253227][T24534] serio: Serial port ttyS3 [ 677.254605][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.264954][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.328550][T24467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.470334][T24467] veth0_vlan: entered promiscuous mode [ 677.478784][T24467] veth1_vlan: entered promiscuous mode [ 677.494412][T24467] veth0_macvtap: entered promiscuous mode [ 677.503034][T24467] veth1_macvtap: entered promiscuous mode [ 677.514927][T24467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.527096][T24467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.547514][ T2408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.559360][ T2408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.577200][ T2408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.593926][ T2408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.616636][T24573] loop5: detected capacity change from 0 to 512 [ 677.631131][T24573] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 677.644772][T24573] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 677.663646][T24573] EXT4-fs (loop5): 1 truncate cleaned up [ 677.669926][T24573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.783307][T24467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.806232][T24580] loop5: detected capacity change from 0 to 2048 [ 677.839854][T24580] Alternate GPT is invalid, using primary GPT. [ 677.846178][T24580] loop5: p1 p2 p3 [ 677.849955][T24580] loop5: partition table partially beyond EOD, truncated [ 677.875861][T24582] loop5: detected capacity change from 0 to 512 [ 677.883039][T24582] EXT4-fs: Ignoring removed i_version option [ 677.889112][T24582] EXT4-fs: Ignoring removed bh option [ 677.900552][T24582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.913268][T24582] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.933302][T24467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.163294][T24597] loop5: detected capacity change from 0 to 512 [ 678.180363][T24597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.194060][T24597] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.234341][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.245113][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.256011][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.267916][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.279283][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.333251][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.347199][T24603] serio: Serial port ttyS3 [ 678.347434][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.362345][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.373266][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.386293][T24467] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 678.406584][T24606] loop8: detected capacity change from 0 to 512 [ 678.414016][T24606] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 678.428399][T24606] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 678.451852][T24606] EXT4-fs (loop8): 1 truncate cleaned up [ 678.460946][T24606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.620461][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.658664][T24612] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 678.665282][T24612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 678.672926][T24612] vhci_hcd vhci_hcd.0: Device attached [ 678.678548][T24600] ================================================================== [ 678.679696][T24612] 9p: Bad value for 'rfdno' [ 678.686622][T24600] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 678.697687][T24600] [ 678.700008][T24600] write to 0xffff88811b754310 of 88 bytes by interrupt on cpu 0: [ 678.701822][T24612] loop8: detected capacity change from 0 to 512 [ 678.707721][T24600] __bpf_get_stackid+0x737/0x7d0 [ 678.707751][T24600] bpf_get_stackid+0xf3/0x130 [ 678.707772][T24600] bpf_get_stackid_raw_tp+0xf6/0x120 [ 678.707796][T24600] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 678.714456][T24612] EXT4-fs: Ignoring removed i_version option [ 678.718914][T24600] bpf_trace_run2+0x107/0x1d0 [ 678.723625][T24612] EXT4-fs: Ignoring removed bh option [ 678.728846][T24600] __traceiter_kfree+0x2e/0x50 [ 678.728876][T24600] kfree+0x353/0x3c0 [ 678.728892][T24600] rcu_free_wq+0x195/0x1d0 [ 678.763274][T24600] rcu_core+0x5d7/0xc60 [ 678.767425][T24600] rcu_core_si+0xd/0x20 [ 678.771579][T24600] handle_softirqs+0xba/0x290 [ 678.776253][T24600] __irq_exit_rcu+0x3a/0xc0 [ 678.780758][T24600] sysvec_apic_timer_interrupt+0x37/0x80 [ 678.786385][T24600] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.792353][T24600] [ 678.794663][T24600] read to 0xffff88811b754358 of 8 bytes by task 24600 on cpu 1: [ 678.802275][T24600] bcmp+0x23/0x90 [ 678.805980][T24600] __bpf_get_stackid+0x382/0x7d0 [ 678.810910][T24600] bpf_get_stackid+0xf3/0x130 [ 678.815578][T24600] bpf_get_stackid_raw_tp+0xf6/0x120 [ 678.820855][T24600] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 678.826308][T24600] bpf_trace_run2+0x107/0x1d0 [ 678.830980][T24600] __traceiter_kfree+0x2e/0x50 [ 678.835742][T24600] kfree+0x353/0x3c0 [ 678.839621][T24600] ___sys_recvmsg+0x135/0x370 [ 678.844295][T24600] do_recvmmsg+0x1ef/0x540 [ 678.848708][T24600] __x64_sys_recvmmsg+0xe5/0x170 [ 678.853644][T24600] x64_sys_call+0x2b75/0x3000 [ 678.858317][T24600] do_syscall_64+0xd8/0x2a0 [ 678.862814][T24600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.868694][T24600] [ 678.871000][T24600] value changed: 0xffffffff81000130 -> 0xffffffff85762547 [ 678.878088][T24600] [ 678.880394][T24600] Reported by Kernel Concurrency Sanitizer on: [ 678.886527][T24600] CPU: 1 UID: 0 PID: 24600 Comm: syz.6.7374 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 678.897899][T24600] Tainted: [W]=WARN [ 678.901682][T24600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.911725][T24600] ================================================================== [ 678.921935][ T3651] Bluetooth: hci0: command 0x1003 tx timeout [ 678.928020][ T4445] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 678.936753][T24612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.950582][T24612] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.979974][T24613] vhci_hcd: connection closed [ 678.980348][T11108] vhci_hcd vhci_hcd.8: stop threads [ 678.990324][T11108] vhci_hcd vhci_hcd.8: release socket [ 678.995704][T11108] vhci_hcd vhci_hcd.8: disconnect device [ 679.008591][T23282] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 679.510397][T22081] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.400158][T24467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.411846][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.001766][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.061474][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.151292][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.224235][ T52] bridge_slave_1: left allmulticast mode [ 682.229977][ T52] bridge_slave_1: left promiscuous mode [ 682.235638][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.243781][ T52] bridge_slave_0: left allmulticast mode [ 682.249469][ T52] bridge_slave_0: left promiscuous mode [ 682.255161][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.350869][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.360713][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.370540][ T52] bond0 (unregistering): Released all slaves [ 682.414845][ T52] hsr_slave_0: left promiscuous mode [ 682.420945][ T52] hsr_slave_1: left promiscuous mode [ 682.426600][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.434058][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.441844][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.449399][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.460231][ T52] veth1_macvtap: left promiscuous mode [ 682.465788][ T52] veth0_macvtap: left promiscuous mode [ 682.471565][ T52] veth1_vlan: left promiscuous mode [ 682.476766][ T52] veth0_vlan: left promiscuous mode [ 682.548219][ T52] team0 (unregistering): Port device team_slave_1 removed [ 682.558093][ T52] team0 (unregistering): Port device team_slave_0 removed