last executing test programs: 5m42.542029488s ago: executing program 0 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setuid(0xee01) 5m42.492681523s ago: executing program 0 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYRESOCT=r5, @ANYRESHEX=r3, @ANYRES16=r5, @ANYRESOCT=r6, @ANYRES8=r1], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000200)=ANY=[], 0xdb, 0x1226, &(0x7f0000003a80)="$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") open(0x0, 0x14927e, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r7, @ANYBLOB="a463cb8b5f5e7c3847e68c4944fec594dcc30a26819b1db1ce5ffbb5f3e97cbc2d98bd4df0b9f17bbd15e382ed89969e17c0d6ad3815", @ANYBLOB="e8b7d3ca62cd7ef12b5c2efd87831d94dbd330ac92dbefa8e40d4394d281a48a7d938c8a1a9af96ae57b76854a20988fbf4b5fbbaeec60800687ee52164fb5eed48dc35fefb995dcd7f22e5a6a5abb06d8ca0c364f7b8aa9320eafc72ecc96d632"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fcntl$setlease(r4, 0x400, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r10}, &(0x7f0000000900), &(0x7f0000000940)=r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r12], 0x48) 5m41.113997954s ago: executing program 0 (id=684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) sendmsg$key(0xffffffffffffffff, 0x0, 0x40880) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x158d617f513333b8}}]}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 5m40.900514825s ago: executing program 0 (id=688): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmsg$sock(r0, &(0x7f0000001640)={&(0x7f0000000300)=@nfc={0x27, r3, 0x0, 0x5}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)}, {&(0x7f0000000540)="6b0305869e6a9e70418fe688a21c86e9a0988f13025b1f1eef30bad97c48294579e58694f945c8a4fa7429f7cf2ab4d72102cf251c7a8791976ad895942344c74d63f8fca1c13f470e1624e0740656c5d4e11c06ff1abaa1f1c5a7307271bcf99e73cc45e64b2a1319308cf69c7d3d1007f99878c1bff3229d7834cc5536872380f84a2a7e121d1762f14ee90b156c224705d92570715e002669d383928c5a832d828710652a70f1a92e37772007f4d642bacf570bff3c1368ed8d51ee37430a0be6f1128e6869ec2c5a2cab414a82862c31252ed9cc079e1db0662764bb91a5b7034e264d57fd8d34afdadbdc271c099beb0a540ed1ffeae51be4eddf2c86ab108830eb6af6ed3d03bd92194b02e201d9ee6032f3d5afd7abd89212acc6a38aa5af6ff1ab325936f34985ca0473769abdf5b5908b606ec3d2cc40976d917f1650cfc5e0ec757059cc92a6302aae0cf5738cb0c96ec693b5af47ea6a1a2c33f22ba3de4b42e712ad40f3ba921aab926d2a75fe4723924e87f5a1e7c387c62fcd87d908d1cede8636a23f4edeaddea69d1555db2def40bdb983fb452c6059c950d301643d0aaeb94c93831516965b136f13280915c2b025bb8aca6654f5fe7f8a8ac87d8ba806fd34b5f63a612981a3c59f1ec5a4c2f45e3608ec1ef7783acc918f05e15b7e689bad0d4633b49fbf1629db673774a486984f2d92f8952c798239787ee05ab124715a5f5d3de8d3478573436b86a918f2d1fe2ba7755186eb5c2a567f2d87b868304c8f90b5775e991ec5ccb2c78068af34eae2114d5f69d647d7d34b05dfc601995520b742ff629c05bf47edc1ab54180930fa52ad2d4221a878f879134f330d37d54495cf8d87a015d38abbb7e0a6610502ddfbcd37db44f00b52b00af88cec3748fb1f98b6ee3c9e50d057fe254c56701da17bd4e202f1a6f4000d517cee2e88cbcfa8dbba33b71e9d31ef076458c450ab123ab488875355b1e2e06def61ecc33fec17c002d1320e878323403f4b9c299bace9c38f97b1a423beea4844b6e00bc02857d52a0ce55d1496692a52ccdd69c216e0c9c540f94243ab63779d9e1477427d6509199c204fc4f347d5eb5aee37da48edae2c2016529059347e141182defd585752b79c0871895c7bae0753bf074efcf5b71a32ef3ed5c91ad915d8653c6899bdec298786e0e2c3de9f13b1c6ec7f7005a5212be947164877d82ba141560cee8c6cf8302523826658ab0724e3e4e2add6a87b532a2aba82faad6212ff98f94b63c5d1aa52dead0008419558fab009153cb606486d53ef209538eb9bbdb03db047acff910ee61a80b1d6c04282e33713ba13f5e666aa4a410f3b4a4b6b71909ecdcdcf331ac07f27e1279182af73b9e0d3db48c900ff96608cf40f1dd1d3ccdafbc8706e3d4eb9789918388573998fbb6d833683d5353115fba63401862afc452cf760215369566bb4783a4ec4d0020ce3b9ff171caada8d71d37df25722ecd1834ed8adc3dcf2ae1ed841096fb8e6e9764fcbf2699a018e3ed72c6fef6c149430a957d94918193d018f7d9b71b469fb925218a209bf5860a338513822214bdcadee7869b05c8a81ce20f11d733f82b463def2e38c4f790194e0646f55307472634e061572f0f66d4a7b151146ea7a0a99c22fa8f229b1f906e70897f24fd1c1573c19a24d2c9adce1418c03a5edaa905d74ee203a86df9394000ace795827cde2489a95fb3a3405f9f0e1ac516d4f8b6b04a8132425133031dab37eb9f86fd8788ac9846851cfee5eb241668eee7447afdeca6215314fc6ca1506660d3f68389728b7eda27367201d60fef951313d37fab47fb376054c36d9a4da271104bc1acde68b3226a32efdceb01e1a1bf3cfd69413e58951e79bdcf7638f211530e13ebfa05cb04f7d306ab991a40ad8b283f55ef6ea511b8cc47cb59e2d9213b332cf05abef38f2ceb39f368e923f6ffc6a388ada0f8fbb41b6bfffe33174fc7098d9071a7afb5416acf5af9b342376a32d69297d81f65448b911465f537a4eaf8338f6c24ab689d4ec8f991998ce8371c0d766796702ea647411b50de3ce59b2db36fc55a51343bded373e9b25eeb25b06fe765e9cc5c0b5bc2fb25b03e1444ab8b2513daffaf2d1261b71c733ae2fc20dac8e7fd237d858716527494efe16cb9fbbf3ae70d9492fb2009d8b58894a4452234b8c0e1e97ecb5775c67ac696be2d00a04c9e89974f62d2d5e6a26899bcbe490f515b08c32bd03bbf2decdefede7ceca9e058123d80b6034f430e803baa4ec4fc2f52432e680932c11ed922a35d5f8afecbe173eba72f879f5f0ecf26315c0168805c30be3cc5c2472b481ea625cceed866387d36badf0d59740eca12ce35a0e29d20ce39556a4eaccdc0b24908b385d138157ca0f6e85baa0c4fac42fb8ab168b0f655376e1358fc8ea51bbf0ce4d6dc5dfe2185f75e54332a72b560edb663f14ef393163bdbe8118a30a7a1e26cd694d7d740eb6b72207aac76d4acbbf55527580e6a124a4ca2c03795f25fe018465e9a7222064723553a6b44df3ecc05bfc30e2cfaa6028c24600a859d1e27212356be6220958ccf1ae683d13fed7ba6d3c0faddc0cbe88265f0812e9e0820ba35d1bbe9a19dd02ab626d34445cde612f7da96967975527d22b4afb96f54222dd837779e3c6a64da1b08d10e7e45c720cf2646b728e4406a8d11dd017fef620308dfc1437e9ae11ca2bd491ce9ddd313362006cedd9ba068ae838266101d10e211aaf85835c61c6c05e7c71e7e4d613809653fdd27356d3eb3b59cd560d786187b1c17a47572229816c1e5b2ac1b85a07d848d56f9e591635e526631b27c7a6b56e5a8fea8e4810b26e1d4cc6811d4c90f7e7ce73c85670c86966fd42bbfa4ff74b14bf377076103363469c48e297bed8ebdf50aa0c85d884eb608a82a7a5c7f75852d6f612674d6001e125960c2ce870889408ace3bf15fba40a6b1f5748906dbe7abea8cfdde5a397263bc018a38fb831dceef672714f67d3acbb325a277d1d232c1942b0c707286fb6a285e13a9546281085977bb25bc5fd17397a52c62c7c10bb4c05e6847134073b4459b3c9dbb125a3ada069a6b2cdbc09a281bb85abfcd168828fc6e41b3b7f18202a1ca6bd5de30fd3b86addf4f2d24c0e9b1cb9cec36d556b3c8ce54e4de02b45c0ba2338770fb685852b247e4ef420a0468d1e86488e3ccfa8da4b4aebcc261204480a21b5df4167727fe4edfb7f4b2970570d55aaa4783f988236dc2a682d61c27273a565825b7a13ad51aca0fc4e985739b1e52c9ecac1680a826b1cb6928be091830c070b478b075acf26cf78a4eca0b533fa52bd050816629ae21ca56c77b5ea179de2e23f6160cc73a812a7118661be1927f5a1d9fe0f5ae5a7a30e87f9af1e1b837a4e05fbc4a3d9894e2917107467534ccbb10f338fef47a40a2d3b2b37510d34698cbe9858c46eaad03c192525dbbe6c39cce43ec77e6b52143af04eff601db429a53bcf1ae4eeb747867baf166c3e8341d45cf39a5eb87fa57fe233f2f88fc6c127d9c7fa80938e1f6bb04244b7da53c67424ed6e343ceea92385ee3d24be51e948fa29a863e1d63223f38813d6572b3b6464c4c3d345a54b77f0320d476b8decfea14ab2ee5621178436846f3bd4fa5627fda2d235d7d318bf5879590f93b9bd74733a60c220b750421aaeb2a738397b619a311a506a8295edc46b6ebd02c3f23a8b78d06dd2624b82a3af32b03a0ee9f7a277d1d6dca60c58435a68f87cf112d4f1830b94336a9203980aa155e612dbcc24fb0e2cf0398b304eae1ca150c3d460babc164e05424914985a8380e17af3e34a666736a91242f778d93dc86b779e16badab138ced325c1f623a927de3bd755be7e80e1ec1626fd280090510285ac515af46e4cb97d7cbcb95c85b9250bd77c74deae7ef1c7955bb00af60d928c796a22c45715e709abb3c607aac2d0bb2351cb8aef8d7e1c554b431da4b993b40e4b381c2fa0c8387797868c4fc7152efb416aded7973da40243c9f63e93744c0a0dad83cef6b326c7385f9e067896db47fa431b14ab0d0b8477551ff7bcc9ed18bcc80db1fe3d6602e01635c37b13ac676a7923fb064afdca79e46621a655a0914471b52423837da35bf09a931adea88fdd965a8d8eff4f20258e799b2462ee1e23582c56de52c0b12f1dee634f9ba281da68d11fb13121e8b58b4e459a1ec35d3245ab32dadfbbba547dd99857ef60187715ca3597e071e2adbba642c4aa5889dd5182215a6b3a3f3e0d9d68e39dce37bb85e9e4b5f1c4aab8e8f1ae93ed8e979515cca21d29c204ae81d5e6b579cc585da8e943c268fc449c01c567c877f9605e21e66edd44c5a2d0fa5a8ae33dd4896b3ed27be71f6db859ca7985de8dd656d409645e6a255d0fb2860dad19e63ac12efa1bb80ae55d494d279cc3c5c97f244223ec7ef6823f2e78ff68f54ee805527c818be1f7a388ddf312237c2e0900aa09b52b125228628100fd53a1f6a0acc88fe743ebfcf69b3cfcd54aaa27d39c1c0317f61dad4650923bd44120d35ddd4fb955727cc060e8ad769b8bac65128edc0d53393ff2137ca48c64beff80a907ba00aa16810f81eb14fdafe6d2154901340afb215e680172747bb75cfb29d78625aed95faf1193f66b8eed2a3eb8a7722ef1779b38e9f83ad843136b718f0ee072e2fb7d034c306cb97c88be9d512c18e213385a2211968ebd3bc0aaec45034e4f1fdca1c75af46bc3cbd18aab8d68e926e35fac1f35649c2a72b65032aaea6453cbb3b7e24f32bab9bfbd7c1b40a55fa5e3f351319f1490100f54d25f9380ecd0f0cc1379fd12d88a7296a4228903f6508a99b02ca9301b1f637f62eb925d044214e78cc24ff62aa54bf73ce61642abb97512b53a9e22bed49b9adbc241021a96601e2ca22ab8cac7e75acbfee9c1759917c60671b92662c8c3ac5e07c0127af856314e4089efdef688f2866454203b4c2cb5ce39048c254704984200b0bed9deca6588af5db8229803f453815d17f5a97dda2f3d02d14426887d5179da5b294d97c2964d690ae0f06492580690536b13b78d2d58e208eac0375520168cb2448ff7dd6df10283783b79e2026f979e8d2ca1a2fdfb329533aad168396e495b9fa4abcd436210f90f54126364e4203981f9699756d50c1236693a94a431950cfebd4dcd36149a9b592d11d5bb9ad68de14af1d63af1bec3b5a885cc2187605e8c618f5d15974c16e874eadd04407869b3d94b7945f7e8ac06dc2b59a556cd5003d9b491cac01ffb6c0bfb385ea18bc0275cba4c9d22246ae743c750501ae6ef13f21aa3a7fe14410455dbe7298c11c0bd84ad8143a168ec71dff3db947c0501e9ca346fa0cb30a0c9211c4e4369d34cdbdcf5c08236f5ae4a5d6c441527df3b66aefeef57ef9eea7fbbc1132ab78c683737a0d0018860e6ae6d552291d8af980d6bbdce0f3cd9ce1ce76f1d28365f8de74e8b183cd5f275f7f3f3d5de2c471dc33b0501510f8f2800c197fba7f116bc8a901c47062c5a4bd253677ed5f3f201ab64f4e69aa20578cbb2f1f931f65dadef12f5a8ef48aa285995edbcc1019e25dd0027939d95e62986817a0f78aef0498570c03c7c4afbe8405a2a3b0faf2addbc7e8c035c952aa366c59aa874e5fc2df5e7cd06c269d5b00c7c60ce98f12177911729cec69a35fcf459d96c72da1ddc3f9e8ccad0512e306168d53dd2bbe91602d26b3a4493979291bdd630c2aabfb1bb5edce9aa3feeef7465", 0x1000}, {&(0x7f0000000380)="846ceee33bfa2162adefc07531b83843ff", 0x11}, {&(0x7f0000001540)="7e750560101601b34267201beac907608e68ee108b783fdc375fdb87e6f9eae43a218c0814c9ff152180b21ed9f4386cb1b314c8998e140dfbe846573c433cc74016343f53e1d44e893fe875814c40092153b39470373b3b36e5c08465465d1463f2223e7cabf0390308120fbda8a23de6f06299f2cb2363d277f02c589f2b517ea2258fd02b19d357eab37ec10a90ed303e049e8d430b3d53be8f1f2fe8acd72516e2d868a7600ca0593ed909f2fbea43b4031a5c052ede1e511b696e7f02c283ed64c0845deaa57926fbf3d238a93ecffca261", 0xd4}], 0x4, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x3e80000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}], 0x60}, 0x20008000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') dup(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r6, &(0x7f0000007800)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x7f, @private0, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="05d8", 0x2}], 0x1}}], 0x1, 0x800) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0x0, 0x7ffffffe}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000800010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7, 0x0, 0x1000000}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r8, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) 5m40.003745307s ago: executing program 0 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff00000000070000008500000075000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b707000005000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='io_uring_create\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_io_uring_setup(0xfbe, &(0x7f0000000240)={0x0, 0x9a3e, 0x10000, 0x3, 0x285}, &(0x7f0000000000), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x42}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) close(r4) 5m39.815205446s ago: executing program 0 (id=703): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000400000008000000"], 0x50) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "524f3639c4a60c88", "dc67985c2a2c1d6dc8810794183c364c", "50d3f32e", "3c18504c3bc0a46b"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close_range(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 5m39.790074059s ago: executing program 32 (id=703): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000400000008000000"], 0x50) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "524f3639c4a60c88", "dc67985c2a2c1d6dc8810794183c364c", "50d3f32e", "3c18504c3bc0a46b"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close_range(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 5.917099207s ago: executing program 3 (id=5256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r2, &(0x7f0000000100)=""/44, 0xbb) 5.057498944s ago: executing program 3 (id=5265): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d80)=""/110, 0x6e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 4.873672474s ago: executing program 3 (id=5267): socket$kcm(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) 3.957606007s ago: executing program 1 (id=5280): socket$kcm(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) 3.885884084s ago: executing program 1 (id=5282): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) lstat(&(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x100010, &(0x7f0000000d40)={[{@memory_hugetlb_accounting}, {@pids_localevents}, {@subsystem='cpu'}, {@favordynmods}], [{@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'syz'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsname={'fsname', 0x3d, 'btrfs_convert_extent_bit\x00'}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x3, 0xf6, &(0x7f00000002c0)=""/246, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0xfb1, 0xfffff000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0xa}, {0x4, 0x1, 0xf}, {0x1, 0x1, 0x1, 0x6}], 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000002000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000085ffe5009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xf2}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/88, 0x58}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xf, 0xac00000, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8017, 0x965013d20764d558, 0x1000, 0x1}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11, 0x0, 0x2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendfile(r5, r5, 0x0, 0x2) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14, 0x0, 0x10000002}, 0x18) r15 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='btrfs_convert_extent_bit\x00', r4, 0x0, 0xe07f}, 0x18) 2.981784226s ago: executing program 1 (id=5293): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8008800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 2.819249453s ago: executing program 3 (id=5294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1da75a56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x4, 0xc000000}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x10, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6, 0x2}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x6, 0x747}, {0x8, 0xfffffffc, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x1e2d}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0xbd8faa57c88324dc}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) unshare(0x62040200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffff1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x8, 0x2047, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r7}, 0x18) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2.639340971s ago: executing program 5 (id=5295): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r4, 0x3fc}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0xe, 0x6f5d, 0x22a2, 0x0, 0x5, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.575335027s ago: executing program 5 (id=5296): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000200000000000000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 2.471094578s ago: executing program 5 (id=5297): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.441194931s ago: executing program 5 (id=5298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r2, &(0x7f0000000100)=""/44, 0xbb) 1.924554354s ago: executing program 2 (id=5300): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000580)={0x60, 0xbc01287d71eb16c2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3, 0x0, 0x0, 0x1a82, 0x1, 0x12, 0x11, 0x68}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.853919561s ago: executing program 2 (id=5301): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x13) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='fib_table_lookup\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4040800) capget(&(0x7f0000000380)={0x20080522}, &(0x7f0000000440)={0xfff, 0x5a0, 0x6, 0x1, 0x9, 0x7}) 1.851034751s ago: executing program 3 (id=5302): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000780), 0xfe, 0x4f7, &(0x7f0000000180)="$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") r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff}) cachestat(0xffffffffffffffff, &(0x7f0000000680)={0xffffffffffffff00, 0x8}, &(0x7f00000006c0), 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) 1.806177106s ago: executing program 2 (id=5303): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) lstat(&(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x100010, &(0x7f0000000d40)={[{@memory_hugetlb_accounting}, {@pids_localevents}, {@subsystem='cpu'}, {@favordynmods}], [{@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'syz'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsname={'fsname', 0x3d, 'btrfs_convert_extent_bit\x00'}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x3, 0xf6, &(0x7f00000002c0)=""/246, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0xfb1, 0xfffff000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0xa}, {0x4, 0x1, 0xf}, {0x1, 0x1, 0x1, 0x6}], 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000002000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000085ffe5009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xf2}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r6, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/88, 0x58}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xf, 0xac00000, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8017, 0x965013d20764d558, 0x1000, 0x1}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11, 0x0, 0x2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendfile(r5, r5, 0x0, 0x2) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14, 0x0, 0x10000002}, 0x18) r15 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='btrfs_convert_extent_bit\x00', r4, 0x0, 0xe07f}, 0x18) 1.676721109s ago: executing program 3 (id=5304): socket$kcm(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) 1.56863337s ago: executing program 5 (id=5305): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x2, &(0x7f0000000480)) r0 = gettid() move_pages(r0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac"], 0xfdef) fcntl$setstatus(r1, 0x4, 0x42000) 879.92515ms ago: executing program 1 (id=5313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x20f4, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) 862.796072ms ago: executing program 2 (id=5314): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newsa={0x138, 0x10, 0x1, 0x70bd29, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0xb46b, 0x4e23, 0x1, 0x0, 0x80, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40, 0x6}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffc0000000002}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x2, 0x8}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 720.443257ms ago: executing program 5 (id=5316): socket$kcm(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3109d5850001050500000000000000000a01"], 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="89d678ce056c6ec3a758a18badbd3f1e8e69623f3a521c407ec0d5f1a2755b4249a56d0b131c3bb9f38c99db3a276c94a27e6f85360ab92b31216fad2398a44e7cd39359af752369a27c1852725ddbf74a2b5dec2e27c4dcefd2ddc9b5a41af61293026e8ef680188f6ad68f8f85264053b003a1a119ff6bca14fbb9238a3d699738efaef34f6cf94a487157402c5c4a27dcdf687365710b68b4d89cb38359f3e57aee5d8c4bd49a421acc3eb0f92fc9dd28df931d97a80f4f0dbe59b0778f2cc02fe8d0ce1a96b578b4546abc5122ef4f94f79816abfa2e0555043ccf0b1e4ac1febe6a6a7e0f19ffc02c1d925f9236382928a5ea08be32cb8ca2571b6c94c5dc893541472b70d102c1a36219f4fb9f0690284b7d4cf8f99ab014688db7c7b0d1cfe978b9275a8269870ba255e17282fa697100b6cf1756a521e22b7411836b6a20d6e74b689d31e0f34c061d42fd4730ca843e86a09945d45a55ac0b5f7d003afdc2c6654a59dc8820d86c7dbee17f35142c6c20a1ac6afe27a4b862373e62609908ecb8f752a9359c09af8700a366c5838b03832b184feaee01c8f7fb55eae5ffd05e33b66d8547c48f258da49186f2b8f36ec8d1191f70637c194e2ba5576e98d78bdf617ae2bb8253318b869459d4abc16160fc35d55bfc7520c021aa66f424522215e7a11f36df3433d321b8578ad5e5340d594321f9e40de502539a910c6f7483fdf7194d59765b987c2a938683aa05c29d1c851d1ac03b2c261c1e027cee876d0c192272eb5504714bccf86d8eca4448dc905c3d99e4fc40297f56c90e9e845e40f9573899e308f7bda4137c4088e0ad0bc1583104094f5820dbe4861ea8988aaaf564419d75e602694a7e0b6a9d3dfd19818bd79d5d117be2d9002b24", 0x281}], 0x2}}], 0x4, 0x8008800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) 695.925539ms ago: executing program 2 (id=5317): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d80)=""/110, 0x6e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 527.372206ms ago: executing program 4 (id=5319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f00000003c0)=r0}, 0x20) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x20f4, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) 518.406477ms ago: executing program 2 (id=5320): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) lstat(&(0x7f0000000c80)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x100010, &(0x7f0000000d40)={[{@memory_hugetlb_accounting}, {@pids_localevents}, {@subsystem='cpu'}, {@favordynmods}], [{@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'syz'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsname={'fsname', 0x3d, 'btrfs_convert_extent_bit\x00'}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x3, 0xf6, &(0x7f00000002c0)=""/246, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0xfb1, 0xfffff000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0xa}, {0x4, 0x1, 0xf}, {0x1, 0x1, 0x1, 0x6}], 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000800000000000000000200", @ANYBLOB="0000000000000000b7020000000000008500000085ffe5009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xf2}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/88, 0x58}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xf, 0xac00000, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8017, 0x965013d20764d558, 0x1000, 0x1}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendfile(r4, r4, 0x0, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='btrfs_convert_extent_bit\x00', r3, 0x0, 0xe07f}, 0x18) 471.460122ms ago: executing program 4 (id=5321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0)="1f542bcd161c733a62e51ae672b1c5ab7008f6eb57294061386cea911c293a2401008eadf1586b1ffd33fc98d3abbb59af40885e08ebe2389c7d1bee4925e74048126d9fcbe67ca50af9616387603338db1d4a032483dbf87d82c676db6f89802db04ae390e2f612a287409027689378429ddd4d9a943c46808cceb88fcc49073359c898804518064f825f240bd2a671a70428d61ea142f5794f4740500ae16edfa265bc2e08de6ee7d8bf28d52411e5ce83d9631863d8b2f75935bacd5367f528c40d1c580f1d92b65fce68b499bbda0fe2cea0a857a8a0884041df25be6e392a95c6d33cfcdc6d724c4410bfd5b92a779a04", &(0x7f0000000340)=""/174}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x23}, @loopback, 0x0, "ce98c257a3cf4ad8d33dddf7996c6a8438cc19363dbe7dea12f455b9c7742022", 0x4, 0xfffffff8, 0x7dbb, 0x2}, 0x3c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x0, 0xe876, 0x3, 0x0, 0x0) 395.25333ms ago: executing program 4 (id=5322): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000580)={0x60, 0xbc01287d71eb16c2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3, 0x0, 0x0, 0x1a82, 0x1, 0x12, 0x11, 0x68}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 394.3572ms ago: executing program 4 (id=5323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64=0xffffffffffffffff], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c3042, 0xa8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ac90780669000000000000000000000018110000", @ANYRES8=r2, @ANYRESHEX=r2], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffa55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 335.331216ms ago: executing program 4 (id=5324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000090000007f603000f0ffffff9500000000000000185600000500000000000000000000008520000001000000180000000000000000000000b90000008520000002000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000063d8000085000000a50000009500"/32], &(0x7f00000004c0)='GPL\x00', 0x200, 0x3c, &(0x7f0000000500)=""/60, 0x41100, 0xa, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x6, 0xa}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000740)=[{0x4, 0x3, 0xb, 0x4}, {0x4, 0x4, 0xb, 0x5}, {0x3, 0x5, 0x10, 0xc}, {0x2, 0x2, 0xd}], 0x10, 0x4}, 0x94) 295.67344ms ago: executing program 4 (id=5325): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfffe, 0x5, 0x7, 0x9}, {0x1, 0x2, 0x56, 0x400}, {0xd, 0x8, 0x4, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x602000, 0x1000, 0x8, 0x1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 997.07µs ago: executing program 1 (id=5326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 0s ago: executing program 1 (id=5327): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00'}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x6) ioctl$TCSBRKP(r4, 0x5425, 0x80000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) sync() r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000000000)={0xc, 0x1}) kernel console output (not intermixed with test programs): hci0: Frame reassembly failed (-90) [ 363.350775][T15824] Bluetooth: hci0: Frame reassembly failed (-84) [ 364.256968][T15853] __nla_validate_parse: 6 callbacks suppressed [ 364.256986][T15853] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4164'. [ 365.127498][T15867] serio: Serial port ptm1 [ 365.299664][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'. [ 365.355836][ T3613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.439788][T15877] lo speed is unknown, defaulting to 1000 [ 365.447645][T15877] lo speed is unknown, defaulting to 1000 [ 365.655806][ T4852] Bluetooth: hci0: Frame reassembly failed (-84) [ 365.803180][T15880] Bluetooth: hci0: Frame reassembly failed (-90) [ 365.824958][ T4852] Bluetooth: hci1: Frame reassembly failed (-84) [ 366.747203][ T4829] Bluetooth: hci2: Frame reassembly failed (-84) [ 366.899871][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4183'. [ 366.958781][ T4799] Bluetooth: hci4: Frame reassembly failed (-90) [ 366.967209][T15911] Bluetooth: hci4: Frame reassembly failed (-84) [ 367.675606][T15912] Bluetooth: hci0: command 0x1003 tx timeout [ 367.677724][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 367.706738][ T4852] Bluetooth: hci0: Frame reassembly failed (-84) [ 367.835707][ T3613] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 368.712763][T15919] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 368.772071][T15922] lo: entered allmulticast mode [ 368.795775][ T3509] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 368.796765][ T3613] Bluetooth: hci2: command 0x1003 tx timeout [ 368.823806][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 368.823825][ T29] audit: type=1326 audit(1763043367.090:48305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.854069][ T29] audit: type=1326 audit(1763043367.090:48306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.877934][ T29] audit: type=1326 audit(1763043367.090:48307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.901874][ T29] audit: type=1326 audit(1763043367.090:48308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.925393][ T29] audit: type=1326 audit(1763043367.090:48309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.948983][ T29] audit: type=1326 audit(1763043367.090:48310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.972632][ T3509] Bluetooth: hci3: command 0x1003 tx timeout [ 368.972654][ T29] audit: type=1326 audit(1763043367.090:48311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 368.978803][ T3630] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 369.002477][ T29] audit: type=1326 audit(1763043367.090:48312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 369.032247][ T29] audit: type=1326 audit(1763043367.090:48313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 369.032438][T15921] lo: left allmulticast mode [ 369.055947][ T29] audit: type=1326 audit(1763043367.090:48314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 369.060626][ T3630] Bluetooth: hci4: command 0x1003 tx timeout [ 369.095026][ T3558] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 369.157247][T15936] serio: Serial port ptm1 [ 369.198733][ T4829] Bluetooth: hci1: Frame reassembly failed (-90) [ 369.330227][ T4799] Bluetooth: hci2: Frame reassembly failed (-84) [ 369.408012][T15947] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.479601][ T4829] Bluetooth: hci3: Frame reassembly failed (-84) [ 369.755684][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 369.756672][ T3613] Bluetooth: hci0: command 0x1003 tx timeout [ 369.847686][ T4829] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.856527][T15961] Bluetooth: hci0: Frame reassembly failed (-90) [ 370.639809][T15969] serio: Serial port ptm4 [ 370.894446][T15977] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 370.920950][ T4852] Bluetooth: hci4: Frame reassembly failed (-84) [ 371.275599][T15912] Bluetooth: hci1: command 0x1003 tx timeout [ 371.275599][ T3558] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 371.355616][ T3558] Bluetooth: hci2: command 0x1003 tx timeout [ 371.355631][ T3630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 371.407275][T15988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.434850][T15988] netlink: 'syz.3.4213': attribute type 10 has an invalid length. [ 371.442775][T15988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4213'. [ 371.515638][ T3630] Bluetooth: hci3: command 0x1003 tx timeout [ 371.515679][ T3509] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 371.915630][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.915635][ T3509] Bluetooth: hci0: command 0x1003 tx timeout [ 372.010381][T16004] infiniband !yz!: set down [ 372.014938][T16004] infiniband !yz!: added team_slave_0 [ 372.026120][T16004] RDS/IB: !yz!: added [ 372.030216][T16004] smc: adding ib device !yz! with port count 1 [ 372.036743][T16004] smc: ib device !yz! port 1 has no pnetid [ 372.200965][T16008] serio: Serial port ptm0 [ 372.427208][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4224'. [ 372.467173][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4226'. [ 372.540400][T16035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.569932][T16035] netlink: 'syz.3.4229': attribute type 10 has an invalid length. [ 372.577977][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4229'. [ 372.578418][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4228'. [ 372.955605][ T3575] Bluetooth: hci4: command 0x1003 tx timeout [ 372.955790][ T3613] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 373.214023][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4236'. [ 373.376619][T16063] ./file0: Can't open blockdev [ 373.386842][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4242'. [ 373.433103][T16076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.452239][T16076] netlink: 'syz.4.4245': attribute type 10 has an invalid length. [ 373.460267][T16076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4245'. [ 373.482627][T16076] veth1_vlan: left promiscuous mode [ 373.498191][T16076] batman_adv: batadv0: Interface activated: veth1_vlan [ 373.506579][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4248'. [ 373.526277][T16084] FAULT_INJECTION: forcing a failure. [ 373.526277][T16084] name failslab, interval 1, probability 0, space 0, times 0 [ 373.539027][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.3.4249 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.539067][T16084] Tainted: [W]=WARN [ 373.539074][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.539089][T16084] Call Trace: [ 373.539095][T16084] [ 373.539104][T16084] __dump_stack+0x1d/0x30 [ 373.539209][T16084] dump_stack_lvl+0xe8/0x140 [ 373.539232][T16084] dump_stack+0x15/0x1b [ 373.539251][T16084] should_fail_ex+0x265/0x280 [ 373.539274][T16084] should_failslab+0x8c/0xb0 [ 373.539322][T16084] kmem_cache_alloc_noprof+0x50/0x480 [ 373.539356][T16084] ? getname_flags+0x80/0x3b0 [ 373.539391][T16084] getname_flags+0x80/0x3b0 [ 373.539528][T16084] do_sys_openat2+0x60/0x110 [ 373.539576][T16084] __x64_sys_open+0xe6/0x110 [ 373.539598][T16084] x64_sys_call+0x1457/0x3000 [ 373.539624][T16084] do_syscall_64+0xd2/0x200 [ 373.539654][T16084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 373.539685][T16084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 373.539745][T16084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.539768][T16084] RIP: 0033:0x7f3bd0d6f6c9 [ 373.539785][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.539805][T16084] RSP: 002b:00007f3bcf7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 373.539826][T16084] RAX: ffffffffffffffda RBX: 00007f3bd0fc5fa0 RCX: 00007f3bd0d6f6c9 [ 373.539908][T16084] RDX: 0000000000000040 RSI: 0000000000000200 RDI: 0000200000000080 [ 373.539922][T16084] RBP: 00007f3bcf7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.539935][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.539948][T16084] R13: 00007f3bd0fc6038 R14: 00007f3bd0fc5fa0 R15: 00007ffc4d8ff588 [ 373.540036][T16084] [ 373.782195][T16096] pim6reg1: entered promiscuous mode [ 373.787779][T16096] pim6reg1: entered allmulticast mode [ 373.885393][T16114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.901909][T16114] netlink: 'syz.4.4261': attribute type 10 has an invalid length. [ 374.002365][ T29] kauditd_printk_skb: 1156 callbacks suppressed [ 374.002381][ T29] audit: type=1326 audit(1763043372.270:49471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.055426][ T29] audit: type=1326 audit(1763043372.270:49472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.079218][ T29] audit: type=1326 audit(1763043372.310:49473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.102831][ T29] audit: type=1326 audit(1763043372.310:49474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.126459][ T29] audit: type=1326 audit(1763043372.310:49475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.150140][ T29] audit: type=1326 audit(1763043372.310:49476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.174024][ T29] audit: type=1326 audit(1763043372.310:49477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.197639][ T29] audit: type=1326 audit(1763043372.310:49478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.221411][ T29] audit: type=1326 audit(1763043372.310:49479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.245148][ T29] audit: type=1326 audit(1763043372.310:49480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 374.598818][T16139] netlink: 'syz.2.4268': attribute type 4 has an invalid length. [ 374.606626][T16139] netlink: 'syz.2.4268': attribute type 3 has an invalid length. [ 374.887277][T16153] FAULT_INJECTION: forcing a failure. [ 374.887277][T16153] name failslab, interval 1, probability 0, space 0, times 0 [ 374.900313][T16153] CPU: 1 UID: 0 PID: 16153 Comm: syz.1.4273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 374.900355][T16153] Tainted: [W]=WARN [ 374.900362][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.900376][T16153] Call Trace: [ 374.900384][T16153] [ 374.900395][T16153] __dump_stack+0x1d/0x30 [ 374.900419][T16153] dump_stack_lvl+0xe8/0x140 [ 374.900448][T16153] dump_stack+0x15/0x1b [ 374.900544][T16153] should_fail_ex+0x265/0x280 [ 374.900571][T16153] should_failslab+0x8c/0xb0 [ 374.900671][T16153] __kmalloc_noprof+0xa5/0x570 [ 374.900754][T16153] ? bpf_prog_bind_map+0x2cc/0x590 [ 374.900791][T16153] bpf_prog_bind_map+0x2cc/0x590 [ 374.900838][T16153] __sys_bpf+0x747/0x7c0 [ 374.900877][T16153] __x64_sys_bpf+0x41/0x50 [ 374.900970][T16153] x64_sys_call+0x2aee/0x3000 [ 374.901021][T16153] do_syscall_64+0xd2/0x200 [ 374.901042][T16153] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 374.901111][T16153] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 374.901192][T16153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.901218][T16153] RIP: 0033:0x7f59ad81f6c9 [ 374.901237][T16153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.901255][T16153] RSP: 002b:00007f59ac27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.901352][T16153] RAX: ffffffffffffffda RBX: 00007f59ada75fa0 RCX: 00007f59ad81f6c9 [ 374.901365][T16153] RDX: 000000000000000c RSI: 0000200000000140 RDI: 0000000000000023 [ 374.901378][T16153] RBP: 00007f59ac27f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.901391][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.901403][T16153] R13: 00007f59ada76038 R14: 00007f59ada75fa0 R15: 00007ffd2dbe7258 [ 374.901437][T16153] [ 375.205405][T16161] lo speed is unknown, defaulting to 1000 [ 375.213348][T16161] lo speed is unknown, defaulting to 1000 [ 375.541958][T16155] serio: Serial port ptm0 [ 375.643647][T16178] bridge2: entered promiscuous mode [ 375.649252][T16178] bridge2: entered allmulticast mode [ 375.655967][T16178] team0: Port device bridge2 added [ 375.677367][T16178] bridge0: port 1(team0) entered blocking state [ 375.683913][T16178] bridge0: port 1(team0) entered disabled state [ 375.710957][T16178] team0: entered allmulticast mode [ 375.726087][T16178] team0: entered promiscuous mode [ 377.064830][T16221] block device autoloading is deprecated and will be removed. [ 377.232803][T16226] lo speed is unknown, defaulting to 1000 [ 377.241795][T16226] lo speed is unknown, defaulting to 1000 [ 377.593688][ T4829] bridge_slave_1: left allmulticast mode [ 377.599439][ T4829] bridge_slave_1: left promiscuous mode [ 377.605181][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.697871][ T4829] bridge_slave_0: left allmulticast mode [ 377.703590][ T4829] bridge_slave_0: left promiscuous mode [ 377.709386][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.306582][T16246] serio: Serial port ptm0 [ 378.449173][ T4829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.466991][ T4829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.488076][ T4829] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 378.501384][ T4829] bond0 (unregistering): Released all slaves [ 378.559494][ T4829] IPVS: stopping master sync thread 5782 ... [ 378.597378][T16255] bridge3: entered promiscuous mode [ 378.602681][T16255] bridge3: entered allmulticast mode [ 378.614853][T16255] team0: Port device bridge3 added [ 378.691618][T16265] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 378.707862][ T4829] hsr_slave_0: left promiscuous mode [ 378.715137][ T4829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.731726][ T4829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.860339][ T4829] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 378.867503][ T4829] batman_adv: batadv0: Removing interface: veth1_vlan [ 379.080288][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 379.080303][ T29] audit: type=1326 audit(1763043377.350:49888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 379.307236][ T29] audit: type=1326 audit(1763043377.380:49889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb13e56f703 code=0x7ffc0000 [ 379.330887][ T29] audit: type=1326 audit(1763043377.380:49890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb13e56f787 code=0x7ffc0000 [ 379.354731][ T29] audit: type=1326 audit(1763043377.380:49891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb13e526b2d code=0x7ffc0000 [ 379.378398][ T29] audit: type=1326 audit(1763043377.380:49892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb13e5a3e09 code=0x7ffc0000 [ 379.402352][ T29] audit: type=1326 audit(1763043377.380:49893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb13e526b97 code=0x7ffc0000 [ 379.425946][ T29] audit: type=1326 audit(1763043377.380:49894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 379.449932][ T29] audit: type=1326 audit(1763043377.380:49895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 379.473564][ T29] audit: type=1326 audit(1763043377.400:49896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb13e5262a7 code=0x7ffc0000 [ 379.497312][ T29] audit: type=1326 audit(1763043377.400:49897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16277 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb13e526306 code=0x7ffc0000 [ 379.651978][ T4829] IPVS: stop unused estimator thread 0... [ 379.782374][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.858099][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.924298][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.934650][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.333606][T16334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 380.365302][T16334] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 380.498082][T16336] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 380.537982][T16340] __nla_validate_parse: 10 callbacks suppressed [ 380.538000][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4337'. [ 381.392033][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4348'. [ 381.595590][ T3613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 381.607716][T16381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4353'. [ 381.616818][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4353'. [ 381.670229][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4357'. [ 381.713082][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4359'. [ 382.391809][ T4799] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.441336][T16413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4366'. [ 382.450419][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4366'. [ 382.510655][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4369'. [ 382.536087][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 382.563277][ T4846] Bluetooth: hci1: Frame reassembly failed (-90) [ 382.700725][T16430] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.730344][T16430] netlink: 'syz.5.4373': attribute type 10 has an invalid length. [ 382.881806][ T4799] Bluetooth: hci2: Frame reassembly failed (-84) [ 383.267697][T16442] lo speed is unknown, defaulting to 1000 [ 384.395614][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 384.395628][ T3613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 384.477470][T16467] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 384.509566][ T29] kauditd_printk_skb: 1877 callbacks suppressed [ 384.509586][ T29] audit: type=1326 audit(1763043382.780:51775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.539611][ T29] audit: type=1326 audit(1763043382.780:51776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.568034][ T29] audit: type=1326 audit(1763043382.790:51777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.591835][ T29] audit: type=1326 audit(1763043382.790:51778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.615602][ T29] audit: type=1326 audit(1763043382.820:51779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.639392][ T29] audit: type=1326 audit(1763043382.820:51780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.639746][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 384.663039][ T29] audit: type=1326 audit(1763043382.820:51781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.692837][ T29] audit: type=1326 audit(1763043382.820:51782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.716629][ T29] audit: type=1326 audit(1763043382.820:51783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.740257][ T29] audit: type=1326 audit(1763043382.820:51784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16469 comm="syz.5.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 384.955713][ T3613] Bluetooth: hci2: command 0x1003 tx timeout [ 384.962396][ T3509] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 384.977457][ T4829] Bluetooth: hci0: Frame reassembly failed (-84) [ 385.185213][T16499] lo speed is unknown, defaulting to 1000 [ 385.569498][T16503] __nla_validate_parse: 7 callbacks suppressed [ 385.569561][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4401'. [ 386.706625][ T4857] Bluetooth: hci1: Frame reassembly failed (-84) [ 387.036001][ T3575] Bluetooth: hci0: command 0x1003 tx timeout [ 387.042065][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 387.189193][T16547] lo speed is unknown, defaulting to 1000 [ 387.756557][T16552] lo speed is unknown, defaulting to 1000 [ 388.260395][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'. [ 388.507272][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4419'. [ 388.671552][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 388.715606][ T3613] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 388.721837][ T3509] Bluetooth: hci1: command 0x1003 tx timeout [ 389.004455][T16579] team0: left allmulticast mode [ 389.009582][T16579] team0: left promiscuous mode [ 389.014813][T16579] bridge0: port 1(team0) entered disabled state [ 389.062224][T16581] netlink: 'syz.1.4423': attribute type 10 has an invalid length. [ 389.070136][T16581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4423'. [ 389.082177][T16579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.543880][T16607] serio: Serial port ptm0 [ 389.741814][T16613] lo speed is unknown, defaulting to 1000 [ 389.985605][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 389.985621][ T29] audit: type=1326 audit(1763045966.224:52110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.1.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 390.015671][ T29] audit: type=1326 audit(1763045966.224:52111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.1.4430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 390.167893][ T29] audit: type=1400 audit(1763045966.444:52112): avc: denied { getopt } for pid=16618 comm="syz.5.4435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.248252][T16623] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 390.265527][ T29] audit: type=1326 audit(1763045966.534:52113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16620 comm="syz.3.4434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bd0d6f6c9 code=0x0 [ 390.404173][T16630] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4438'. [ 390.598677][T16645] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4442'. [ 391.036341][T16652] serio: Serial port ptm0 [ 391.096761][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 391.520198][ T29] audit: type=1326 audit(1763045967.704:52114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.543881][ T29] audit: type=1326 audit(1763045967.704:52115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.567715][ T29] audit: type=1326 audit(1763045967.714:52116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.591756][ T29] audit: type=1326 audit(1763045967.714:52117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.615555][ T29] audit: type=1326 audit(1763045967.714:52118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.639152][ T29] audit: type=1326 audit(1763045967.714:52119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16665 comm="syz.3.4449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 391.685210][T16668] lo speed is unknown, defaulting to 1000 [ 391.883910][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 391.962208][T16678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4453'. [ 391.975749][T16679] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 391.994825][T16681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4455'. [ 392.071607][T16692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.101040][T16692] netlink: 'syz.1.4460': attribute type 10 has an invalid length. [ 392.109046][T16692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4460'. [ 392.164830][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'. [ 392.986505][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 393.115200][ T3613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 393.216210][T16733] lo speed is unknown, defaulting to 1000 [ 393.563637][T16740] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4479'. [ 393.638877][T16742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4480'. [ 393.825589][T16751] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.994808][T16768] netlink: 'syz.1.4488': attribute type 10 has an invalid length. [ 394.023468][T16764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.140574][ T4829] Bluetooth: hci0: Frame reassembly failed (-84) [ 394.487478][ T4799] Bluetooth: hci1: Frame reassembly failed (-90) [ 395.011558][T16790] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 395.025854][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 395.025873][ T29] audit: type=1326 audit(1763045971.305:52160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.2.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 395.062305][T16807] Bluetooth: hci2: Frame reassembly failed (-90) [ 395.069186][ T3630] Bluetooth: hci2: sending frame failed (-49) [ 395.069238][ T29] audit: type=1326 audit(1763045971.335:52161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.2.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 395.075339][ T3575] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 395.104955][ T29] audit: type=1326 audit(1763045971.335:52162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.2.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 395.128626][ T29] audit: type=1326 audit(1763045971.335:52163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.2.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 395.270633][ T4829] Bluetooth: hci2: Frame reassembly failed (-84) [ 395.507305][T16825] serio: Serial port ptm3 [ 395.787352][ T4799] Bluetooth: hci3: Frame reassembly failed (-84) [ 395.794609][T16839] Bluetooth: hci3: Frame reassembly failed (-90) [ 395.867685][ T29] audit: type=1326 audit(1763045972.145:52164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 395.891509][ T29] audit: type=1326 audit(1763045972.145:52165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 395.915279][ T29] audit: type=1326 audit(1763045972.145:52166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 395.938885][ T29] audit: type=1326 audit(1763045972.145:52167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 395.962547][ T29] audit: type=1326 audit(1763045972.145:52168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 395.986329][ T29] audit: type=1326 audit(1763045972.195:52169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 396.077844][T16842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.097723][T16842] netlink: 'syz.5.4515': attribute type 10 has an invalid length. [ 396.105806][T16842] __nla_validate_parse: 5 callbacks suppressed [ 396.105819][T16842] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4515'. [ 396.154793][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 396.154851][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 396.179006][ T4799] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.206475][T16855] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4520'. [ 396.285279][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'. [ 396.554850][ T3613] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 396.554862][ T3558] Bluetooth: hci1: command 0x1003 tx timeout [ 397.249056][T16865] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4524'. [ 397.274694][ T3630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 397.278400][ T3613] Bluetooth: hci2: command 0x1003 tx timeout [ 397.353377][T16873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.377540][T16873] netlink: 'syz.3.4527': attribute type 10 has an invalid length. [ 397.385477][T16873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4527'. [ 397.498201][T16880] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.580814][T16885] lo speed is unknown, defaulting to 1000 [ 397.834698][ T3575] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 397.840922][ T3630] Bluetooth: hci3: command 0x1003 tx timeout [ 398.192190][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 398.234516][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 398.234719][ T3575] Bluetooth: hci0: command 0x1003 tx timeout [ 398.346835][T16912] serio: Serial port ptm0 [ 398.379302][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 398.395841][T16921] Bluetooth: hci0: Frame reassembly failed (-90) [ 398.410402][T16916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 398.415417][T16924] netlink: 'syz.2.4542': attribute type 10 has an invalid length. [ 398.434258][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4542'. [ 398.510736][ T4857] Bluetooth: hci1: Frame reassembly failed (-84) [ 398.541928][T16937] lo speed is unknown, defaulting to 1000 [ 398.825040][T16947] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4555'. [ 398.886505][T16954] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4557'. [ 398.974289][T16965] block device autoloading is deprecated and will be removed. [ 399.061577][T16966] lo speed is unknown, defaulting to 1000 [ 399.826076][T16985] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4568'. [ 400.232225][T17009] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.274709][T17013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.291400][T17013] netlink: 'syz.4.4579': attribute type 10 has an invalid length. [ 400.352019][T17012] lo speed is unknown, defaulting to 1000 [ 400.395725][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 400.395744][ T29] audit: type=1326 audit(1763045976.665:52283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.425641][ T29] audit: type=1326 audit(1763045976.665:52284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.449473][ T29] audit: type=1326 audit(1763045976.665:52285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.455581][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 400.473186][ T29] audit: type=1326 audit(1763045976.665:52286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.502883][ T29] audit: type=1326 audit(1763045976.665:52287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.526654][ T29] audit: type=1326 audit(1763045976.665:52288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.550251][ T29] audit: type=1326 audit(1763045976.665:52289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.554374][ T3630] Bluetooth: hci1: command 0x1003 tx timeout [ 400.573896][ T29] audit: type=1326 audit(1763045976.675:52290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.581143][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 400.603543][ T29] audit: type=1326 audit(1763045976.675:52291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.633207][ T29] audit: type=1326 audit(1763045976.675:52292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 400.721222][T17024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.729903][T17024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.782200][T17030] 0ªX¹¦À: renamed from caif0 [ 400.788987][T17030] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 400.911600][ T5219] hid_parser_main: 233 callbacks suppressed [ 400.911628][ T5219] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 400.925683][ T5219] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.164076][T17052] __nla_validate_parse: 3 callbacks suppressed [ 401.164095][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4590'. [ 401.240294][ T4829] Bluetooth: hci0: Frame reassembly failed (-84) [ 401.251006][T17059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4592'. [ 402.210882][T17091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4603'. [ 402.267868][T17096] serio: Serial port ptm1 [ 402.561061][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 402.971125][ T4846] Bluetooth: hci1: Frame reassembly failed (-90) [ 403.283932][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.283944][ T3509] Bluetooth: hci0: command 0x1003 tx timeout [ 403.319849][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.329397][T17125] Bluetooth: hci0: Frame reassembly failed (-90) [ 403.549572][T17136] serio: Serial port ptm2 [ 403.775933][T17147] random: crng reseeded on system resumption [ 403.788395][T17147] ip6t_srh: unknown srh match flags 4000 [ 403.848802][T17146] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4623'. [ 404.198547][ T4857] Bluetooth: hci2: Frame reassembly failed (-84) [ 404.205763][T17162] Bluetooth: hci2: Frame reassembly failed (-90) [ 404.680797][T17170] serio: Serial port ptm3 [ 405.037940][ T3613] Bluetooth: hci1: command 0x1003 tx timeout [ 405.044082][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 405.122883][T17200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4645'. [ 405.290626][T17222] FAULT_INJECTION: forcing a failure. [ 405.290626][T17222] name failslab, interval 1, probability 0, space 0, times 0 [ 405.303346][T17222] CPU: 1 UID: 0 PID: 17222 Comm: syz.2.4652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 405.303378][T17222] Tainted: [W]=WARN [ 405.303384][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.303397][T17222] Call Trace: [ 405.303403][T17222] [ 405.303410][T17222] __dump_stack+0x1d/0x30 [ 405.303431][T17222] dump_stack_lvl+0xe8/0x140 [ 405.303457][T17222] dump_stack+0x15/0x1b [ 405.303482][T17222] should_fail_ex+0x265/0x280 [ 405.303576][T17222] should_failslab+0x8c/0xb0 [ 405.303612][T17222] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 405.303653][T17222] ? __alloc_skb+0x101/0x320 [ 405.303695][T17222] __alloc_skb+0x101/0x320 [ 405.303746][T17222] netlink_alloc_large_skb+0xbf/0xf0 [ 405.303777][T17222] netlink_sendmsg+0x3cf/0x6b0 [ 405.303798][T17222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.303816][T17222] __sock_sendmsg+0x145/0x180 [ 405.303843][T17222] ____sys_sendmsg+0x31e/0x4e0 [ 405.303884][T17222] ___sys_sendmsg+0x17b/0x1d0 [ 405.303989][T17222] __x64_sys_sendmsg+0xd4/0x160 [ 405.304012][T17222] x64_sys_call+0x191e/0x3000 [ 405.304102][T17222] do_syscall_64+0xd2/0x200 [ 405.304124][T17222] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 405.304211][T17222] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 405.304243][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.304267][T17222] RIP: 0033:0x7f2a7534f6c9 [ 405.304306][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.304325][T17222] RSP: 002b:00007f2a73daf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.304414][T17222] RAX: ffffffffffffffda RBX: 00007f2a755a5fa0 RCX: 00007f2a7534f6c9 [ 405.304428][T17222] RDX: 0000000004000884 RSI: 0000200000000080 RDI: 0000000000000006 [ 405.304440][T17222] RBP: 00007f2a73daf090 R08: 0000000000000000 R09: 0000000000000000 [ 405.304452][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.304463][T17222] R13: 00007f2a755a6038 R14: 00007f2a755a5fa0 R15: 00007ffe4138e478 [ 405.304528][T17222] [ 405.363719][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.364616][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 405.403875][ T29] kauditd_printk_skb: 977 callbacks suppressed [ 405.403894][ T29] audit: type=1326 audit(1763045981.686:53270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.563457][ T29] audit: type=1326 audit(1763045981.726:53271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.587217][ T29] audit: type=1326 audit(1763045981.736:53272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.610839][ T29] audit: type=1326 audit(1763045981.736:53273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.622435][ T4857] Bluetooth: hci0: Frame reassembly failed (-90) [ 405.634631][ T29] audit: type=1326 audit(1763045981.736:53274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.634700][ T29] audit: type=1326 audit(1763045981.736:53275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.634727][ T29] audit: type=1326 audit(1763045981.736:53276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.712073][ T29] audit: type=1326 audit(1763045981.736:53277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.733255][T17231] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4653'. [ 405.735798][ T29] audit: type=1326 audit(1763045981.736:53278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.768438][ T29] audit: type=1326 audit(1763045981.736:53279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.1.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59ad851f85 code=0x7ffc0000 [ 405.884957][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4658'. [ 406.217867][ T4852] Bluetooth: hci1: Frame reassembly failed (-84) [ 406.228088][T17264] Bluetooth: hci1: Frame reassembly failed (-90) [ 406.234517][ T3613] Bluetooth: hci2: command 0x1003 tx timeout [ 406.240623][ T3509] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 406.269545][T17266] netlink: 'syz.3.4666': attribute type 9 has an invalid length. [ 406.277408][T17266] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4666'. [ 406.688120][T17272] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4668'. [ 406.932828][T17288] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4673'. [ 406.954977][T17288] lo speed is unknown, defaulting to 1000 [ 407.089719][T17297] netlink: 'syz.2.4677': attribute type 9 has an invalid length. [ 407.097564][T17297] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4677'. [ 407.188224][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4679'. [ 407.673409][ T3509] Bluetooth: hci0: command 0x1003 tx timeout [ 407.673458][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 408.191685][T17332] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4687'. [ 408.234564][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 408.374972][T17337] netlink: 'syz.5.4690': attribute type 9 has an invalid length. [ 408.382791][T17337] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4690'. [ 408.569711][T17344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.603429][T17344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.664843][ T4846] Bluetooth: hci0: Frame reassembly failed (-84) [ 408.988010][T17355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.004574][T17355] netlink: 'syz.4.4697': attribute type 10 has an invalid length. [ 409.012465][T17355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4697'. [ 409.044409][T17361] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4700'. [ 409.130703][ T3509] Bluetooth: hci1: sending frame failed (-49) [ 409.137010][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 409.239529][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4707'. [ 409.284944][T17393] selinux_netlink_send: 56 callbacks suppressed [ 409.285024][T17393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=17393 comm=syz.3.4710 [ 409.353236][T17399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.374637][T17399] netlink: 'syz.3.4712': attribute type 10 has an invalid length. [ 409.409640][ T4846] Bluetooth: hci1: Frame reassembly failed (-84) [ 410.363891][T17425] $Hÿ: renamed from bond0 [ 410.370083][T17425] $Hÿ: entered promiscuous mode [ 410.481342][T17428] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.548998][T17437] 9pnet_fd: Insufficient options for proto=fd [ 410.576087][T17440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.597051][T17440] netlink: 'syz.3.4725': attribute type 10 has an invalid length. [ 410.628008][T17444] FAULT_INJECTION: forcing a failure. [ 410.628008][T17444] name failslab, interval 1, probability 0, space 0, times 0 [ 410.640825][T17444] CPU: 0 UID: 0 PID: 17444 Comm: syz.4.4727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 410.640936][T17444] Tainted: [W]=WARN [ 410.640945][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.640963][T17444] Call Trace: [ 410.640971][T17444] [ 410.640981][T17444] __dump_stack+0x1d/0x30 [ 410.641007][T17444] dump_stack_lvl+0xe8/0x140 [ 410.641063][T17444] dump_stack+0x15/0x1b [ 410.641088][T17444] should_fail_ex+0x265/0x280 [ 410.641111][T17444] should_failslab+0x8c/0xb0 [ 410.641228][T17444] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 410.641340][T17444] ? __alloc_skb+0x101/0x320 [ 410.641387][T17444] ? __rtnl_unlock+0x95/0xb0 [ 410.641419][T17444] __alloc_skb+0x101/0x320 [ 410.641514][T17444] netlink_ack+0xfd/0x500 [ 410.641558][T17444] ? avc_has_perm_noaudit+0x1b1/0x200 [ 410.641659][T17444] netlink_rcv_skb+0x192/0x220 [ 410.641702][T17444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.641819][T17444] rtnetlink_rcv+0x1c/0x30 [ 410.641925][T17444] netlink_unicast+0x5c0/0x690 [ 410.641966][T17444] netlink_sendmsg+0x58b/0x6b0 [ 410.641996][T17444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.642024][T17444] __sock_sendmsg+0x145/0x180 [ 410.642119][T17444] ____sys_sendmsg+0x345/0x4e0 [ 410.642170][T17444] ___sys_sendmsg+0x17b/0x1d0 [ 410.642271][T17444] ? __rcu_read_unlock+0x4f/0x70 [ 410.642308][T17444] __sys_sendmmsg+0x178/0x300 [ 410.642358][T17444] __x64_sys_sendmmsg+0x57/0x70 [ 410.642392][T17444] x64_sys_call+0x1c4a/0x3000 [ 410.642423][T17444] do_syscall_64+0xd2/0x200 [ 410.642451][T17444] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 410.642497][T17444] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 410.642543][T17444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.642609][T17444] RIP: 0033:0x7f7bd1c1f6c9 [ 410.642630][T17444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.642658][T17444] RSP: 002b:00007f7bd067f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 410.642748][T17444] RAX: ffffffffffffffda RBX: 00007f7bd1e75fa0 RCX: 00007f7bd1c1f6c9 [ 410.642766][T17444] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 410.642783][T17444] RBP: 00007f7bd067f090 R08: 0000000000000000 R09: 0000000000000000 [ 410.642799][T17444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.642816][T17444] R13: 00007f7bd1e76038 R14: 00007f7bd1e75fa0 R15: 00007fffa693d848 [ 410.642843][T17444] [ 410.890836][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 410.897860][ T4799] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.906418][ T4799] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.922671][ T4799] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.931349][ T4799] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.949497][ T29] kauditd_printk_skb: 1285 callbacks suppressed [ 410.949513][ T29] audit: type=1326 audit(1763045987.217:54565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 410.979576][ T29] audit: type=1326 audit(1763045987.217:54566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.003218][ T29] audit: type=1326 audit(1763045987.217:54567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.026833][ T29] audit: type=1326 audit(1763045987.217:54568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.050542][ T29] audit: type=1326 audit(1763045987.217:54569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.074247][ T29] audit: type=1326 audit(1763045987.217:54570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.098111][ T29] audit: type=1326 audit(1763045987.217:54571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.121898][ T29] audit: type=1326 audit(1763045987.217:54572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.145888][ T29] audit: type=1326 audit(1763045987.217:54573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.169513][ T29] audit: type=1326 audit(1763045987.227:54574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 411.347474][T17463] lo speed is unknown, defaulting to 1000 [ 411.433053][ T3509] Bluetooth: hci1: command 0x1003 tx timeout [ 411.439139][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.463602][T17466] __nla_validate_parse: 9 callbacks suppressed [ 411.463666][T17466] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4734'. [ 411.499406][T17468] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 411.522446][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4736'. [ 411.531709][T17470] netlink: 'syz.1.4736': attribute type 1 has an invalid length. [ 411.539490][T17470] netlink: 'syz.1.4736': attribute type 2 has an invalid length. [ 411.547380][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4736'. [ 411.681070][T17478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.701658][T17478] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 411.709613][T17478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4739'. [ 411.766432][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4742'. [ 411.813378][T17483] Falling back ldisc for ttyS3. [ 412.052118][T17494] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4745'. [ 412.095947][T17492] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.286688][T17506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4750'. [ 412.302287][T17506] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 412.517959][T17513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.540684][T17513] netlink: 'syz.2.4752': attribute type 10 has an invalid length. [ 412.548713][T17513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4752'. [ 412.768014][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4754'. [ 412.788976][T17527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4757'. [ 412.825591][T17524] lo speed is unknown, defaulting to 1000 [ 413.106384][T17546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.125724][T17546] netlink: 'syz.4.4764': attribute type 10 has an invalid length. [ 413.348506][T17558] lo speed is unknown, defaulting to 1000 [ 413.628880][T17576] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.635709][T17579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.668487][T17584] netlink: 'syz.5.4777': attribute type 10 has an invalid length. [ 413.952094][T17596] lo speed is unknown, defaulting to 1000 [ 414.130859][ T4829] Bluetooth: hci0: Frame reassembly failed (-90) [ 414.146229][T17612] Bluetooth: hci0: Frame reassembly failed (-84) [ 414.325865][T17611] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.442166][T17615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.459824][T17616] netlink: 'syz.5.4790': attribute type 10 has an invalid length. [ 414.855170][T17646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.876545][T17646] netlink: 'syz.3.4802': attribute type 10 has an invalid length. [ 414.884366][T17645] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.608111][T17681] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.632604][T17683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.649041][T17683] netlink: 'syz.4.4815': attribute type 10 has an invalid length. [ 415.824605][T17686] lo speed is unknown, defaulting to 1000 [ 416.152354][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 416.349554][ T29] kauditd_printk_skb: 1432 callbacks suppressed [ 416.349573][ T29] audit: type=1326 audit(1763045992.627:56007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.385223][ T29] audit: type=1326 audit(1763045992.627:56008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.409009][ T29] audit: type=1326 audit(1763045992.627:56009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.432759][ T29] audit: type=1326 audit(1763045992.627:56010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.456492][ T29] audit: type=1326 audit(1763045992.627:56011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.480222][ T29] audit: type=1326 audit(1763045992.627:56012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.504002][ T29] audit: type=1326 audit(1763045992.627:56013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.527692][ T29] audit: type=1326 audit(1763045992.637:56014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.551429][ T29] audit: type=1326 audit(1763045992.637:56015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.575141][ T29] audit: type=1326 audit(1763045992.637:56016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 416.609356][T17710] lo speed is unknown, defaulting to 1000 [ 416.656055][ T3509] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 416.657459][ T3575] Bluetooth: hci1: command 0x1003 tx timeout [ 416.719886][T17718] __nla_validate_parse: 11 callbacks suppressed [ 416.719905][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4829'. [ 416.784502][T17727] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4834'. [ 416.867815][T17735] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4838'. [ 416.908714][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 417.168371][T17753] lo speed is unknown, defaulting to 1000 [ 417.324145][T17758] FAULT_INJECTION: forcing a failure. [ 417.324145][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 417.337043][T17758] CPU: 1 UID: 0 PID: 17758 Comm: syz.1.4845 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.337134][T17758] Tainted: [W]=WARN [ 417.337142][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.337229][T17758] Call Trace: [ 417.337237][T17758] [ 417.337247][T17758] __dump_stack+0x1d/0x30 [ 417.337271][T17758] dump_stack_lvl+0xe8/0x140 [ 417.337292][T17758] dump_stack+0x15/0x1b [ 417.337313][T17758] should_fail_ex+0x265/0x280 [ 417.337340][T17758] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 417.337431][T17758] should_failslab+0x8c/0xb0 [ 417.337471][T17758] __kmalloc_cache_noprof+0x4c/0x4a0 [ 417.337518][T17758] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 417.337579][T17758] sctp_association_new+0xde5/0x1200 [ 417.337621][T17758] sctp_connect_new_asoc+0x1a8/0x3a0 [ 417.337729][T17758] sctp_sendmsg+0xf10/0x18d0 [ 417.337855][T17758] ? selinux_socket_sendmsg+0xb1/0x1b0 [ 417.337932][T17758] ? __pfx_sctp_sendmsg+0x10/0x10 [ 417.337966][T17758] inet_sendmsg+0xc5/0xd0 [ 417.338057][T17758] __sock_sendmsg+0x102/0x180 [ 417.338094][T17758] __sys_sendto+0x268/0x330 [ 417.338158][T17758] __x64_sys_sendto+0x76/0x90 [ 417.338270][T17758] x64_sys_call+0x2d14/0x3000 [ 417.338302][T17758] do_syscall_64+0xd2/0x200 [ 417.338331][T17758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 417.338371][T17758] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 417.338471][T17758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.338501][T17758] RIP: 0033:0x7f59ad81f6c9 [ 417.338518][T17758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.338543][T17758] RSP: 002b:00007f59ac27f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 417.338633][T17758] RAX: ffffffffffffffda RBX: 00007f59ada75fa0 RCX: 00007f59ad81f6c9 [ 417.338651][T17758] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006 [ 417.338668][T17758] RBP: 00007f59ac27f090 R08: 0000200000000080 R09: 000000000000001c [ 417.338693][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.338710][T17758] R13: 00007f59ada76038 R14: 00007f59ada75fa0 R15: 00007ffd2dbe7258 [ 417.338738][T17758] [ 417.651899][T17773] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4850'. [ 417.692020][T17776] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4851'. [ 417.970511][T17798] lo speed is unknown, defaulting to 1000 [ 418.483042][T17810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4862'. [ 418.573286][T17813] tipc: Enabling of bearer rejected, failed to enable media [ 418.636077][T17815] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4864'. [ 418.952008][ T3575] Bluetooth: hci0: command 0x1003 tx timeout [ 418.952016][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 419.157626][T17852] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4877'. [ 419.303964][T17860] lo speed is unknown, defaulting to 1000 [ 419.926014][T17878] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.079378][T17884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.116078][T17884] netlink: 'syz.2.4889': attribute type 10 has an invalid length. [ 420.123983][T17884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4889'. [ 420.229917][T17889] syzkaller0: entered allmulticast mode [ 420.274189][T17872] syzkaller0 (unregistering): left allmulticast mode [ 420.284083][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4892'. [ 420.491042][T17897] FAULT_INJECTION: forcing a failure. [ 420.491042][T17897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.504266][T17897] CPU: 0 UID: 0 PID: 17897 Comm: syz.5.4895 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.504312][T17897] Tainted: [W]=WARN [ 420.504322][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.504394][T17897] Call Trace: [ 420.504402][T17897] [ 420.504412][T17897] __dump_stack+0x1d/0x30 [ 420.504566][T17897] dump_stack_lvl+0xe8/0x140 [ 420.504601][T17897] dump_stack+0x15/0x1b [ 420.504625][T17897] should_fail_ex+0x265/0x280 [ 420.504653][T17897] should_fail+0xb/0x20 [ 420.504674][T17897] should_fail_usercopy+0x1a/0x20 [ 420.504702][T17897] strncpy_from_user+0x25/0x230 [ 420.504877][T17897] ? kmem_cache_alloc_noprof+0x242/0x480 [ 420.504912][T17897] ? getname_flags+0x80/0x3b0 [ 420.505013][T17897] getname_flags+0xae/0x3b0 [ 420.505054][T17897] __x64_sys_renameat2+0x6c/0x90 [ 420.505090][T17897] x64_sys_call+0x3f9/0x3000 [ 420.505190][T17897] do_syscall_64+0xd2/0x200 [ 420.505238][T17897] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 420.505268][T17897] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 420.505302][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.505329][T17897] RIP: 0033:0x7fb13e56f6c9 [ 420.505349][T17897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.505396][T17897] RSP: 002b:00007fb13cfcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 420.505422][T17897] RAX: ffffffffffffffda RBX: 00007fb13e7c5fa0 RCX: 00007fb13e56f6c9 [ 420.505439][T17897] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 420.505456][T17897] RBP: 00007fb13cfcf090 R08: 0000000000000002 R09: 0000000000000000 [ 420.505540][T17897] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 420.505558][T17897] R13: 00007fb13e7c6038 R14: 00007fb13e7c5fa0 R15: 00007ffd94e3fed8 [ 420.505595][T17897] [ 420.719752][T17900] lo speed is unknown, defaulting to 1000 [ 420.821107][T17906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.834422][T17906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.502191][T17911] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.653884][ T29] kauditd_printk_skb: 1244 callbacks suppressed [ 421.653930][ T29] audit: type=1326 audit(1763045997.938:57261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.693947][ T29] audit: type=1326 audit(1763045997.968:57262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.717656][ T29] audit: type=1326 audit(1763045997.968:57263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.741382][ T29] audit: type=1326 audit(1763045997.968:57264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.765048][ T29] audit: type=1326 audit(1763045997.968:57265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.788791][ T29] audit: type=1326 audit(1763045997.968:57266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.812443][ T29] audit: type=1326 audit(1763045997.968:57267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.836250][ T29] audit: type=1326 audit(1763045997.968:57268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.860055][ T29] audit: type=1326 audit(1763045997.968:57269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.884325][ T29] audit: type=1326 audit(1763045997.968:57270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17923 comm="syz.4.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 421.911698][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 421.922651][T17931] lo speed is unknown, defaulting to 1000 [ 421.947389][T17933] __nla_validate_parse: 2 callbacks suppressed [ 421.947407][T17933] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4907'. [ 421.970478][ T4852] Bluetooth: hci0: Frame reassembly failed (-84) [ 422.151781][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 422.894304][T17956] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4915'. [ 423.005895][T17966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4920'. [ 423.169967][T17973] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4923'. [ 423.304504][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4926'. [ 423.478781][T17988] lo speed is unknown, defaulting to 1000 [ 423.627267][T17992] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4929'. [ 423.699515][T17998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4932'. [ 423.955609][T18006] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4935'. [ 423.991410][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 424.101842][ T5403] usb usb6-port1: attempt power cycle [ 424.129006][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4938'. [ 424.229049][T18022] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4941'. [ 424.271607][T18025] FAULT_INJECTION: forcing a failure. [ 424.271607][T18025] name failslab, interval 1, probability 0, space 0, times 0 [ 424.284453][T18025] CPU: 1 UID: 0 PID: 18025 Comm: syz.2.4943 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 424.284538][T18025] Tainted: [W]=WARN [ 424.284547][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.284565][T18025] Call Trace: [ 424.284573][T18025] [ 424.284584][T18025] __dump_stack+0x1d/0x30 [ 424.284615][T18025] dump_stack_lvl+0xe8/0x140 [ 424.284644][T18025] dump_stack+0x15/0x1b [ 424.284735][T18025] should_fail_ex+0x265/0x280 [ 424.284765][T18025] should_failslab+0x8c/0xb0 [ 424.284807][T18025] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 424.284857][T18025] ? __alloc_skb+0x101/0x320 [ 424.284889][T18025] __alloc_skb+0x101/0x320 [ 424.284975][T18025] ? audit_log_start+0x342/0x720 [ 424.285006][T18025] audit_log_start+0x3a0/0x720 [ 424.285038][T18025] audit_seccomp+0x48/0x100 [ 424.285105][T18025] ? __seccomp_filter+0x82d/0x1250 [ 424.285137][T18025] __seccomp_filter+0x83e/0x1250 [ 424.285167][T18025] ? kmem_cache_free+0xe4/0x3d0 [ 424.285263][T18025] __secure_computing+0x82/0x150 [ 424.285322][T18025] syscall_trace_enter+0xcf/0x1e0 [ 424.285447][T18025] do_syscall_64+0xac/0x200 [ 424.285480][T18025] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 424.285509][T18025] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 424.285554][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.285590][T18025] RIP: 0033:0x7f2a7534e0dc [ 424.285611][T18025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 424.285637][T18025] RSP: 002b:00007f2a73daf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.285663][T18025] RAX: ffffffffffffffda RBX: 00007f2a755a5fa0 RCX: 00007f2a7534e0dc [ 424.285677][T18025] RDX: 000000000000000f RSI: 00007f2a73daf0a0 RDI: 0000000000000004 [ 424.285691][T18025] RBP: 00007f2a73daf090 R08: 0000000000000000 R09: 0000000000000000 [ 424.285709][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.285785][T18025] R13: 00007f2a755a6038 R14: 00007f2a755a5fa0 R15: 00007ffe4138e478 [ 424.285812][T18025] [ 424.684414][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.000716][T18049] lo speed is unknown, defaulting to 1000 [ 425.178616][T18054] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.931419][ T5403] usb usb6-port1: unable to enumerate USB device [ 425.938064][T17948] vhci_hcd: default hub control req: c003 v0000 i0000 l0 [ 426.247571][ T4829] Bluetooth: hci1: Frame reassembly failed (-84) [ 426.466148][T18097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1968 sclass=netlink_route_socket pid=18097 comm=syz.1.4968 [ 426.569599][T18101] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.605459][T18104] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.711117][ T3509] Bluetooth: hci0: command 0x1003 tx timeout [ 426.711106][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.749643][ T29] kauditd_printk_skb: 1046 callbacks suppressed [ 426.749663][ T29] audit: type=1326 audit(1763046003.028:58315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.774586][T18110] bond1: entered promiscuous mode [ 426.779603][ T29] audit: type=1326 audit(1763046003.028:58316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.784739][T18110] bond1: entered allmulticast mode [ 426.785562][T18110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.808543][ T29] audit: type=1326 audit(1763046003.028:58317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.843897][ T29] audit: type=1326 audit(1763046003.028:58318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.867661][ T29] audit: type=1326 audit(1763046003.028:58319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.891329][ T29] audit: type=1326 audit(1763046003.028:58320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.914993][ T29] audit: type=1326 audit(1763046003.028:58321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.938668][ T29] audit: type=1326 audit(1763046003.028:58322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.962499][ T29] audit: type=1326 audit(1763046003.028:58323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 426.986140][ T29] audit: type=1326 audit(1763046003.028:58324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.5.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 427.012858][T18110] bond1 (unregistering): Released all slaves [ 427.237567][T18126] __nla_validate_parse: 5 callbacks suppressed [ 427.237582][T18126] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4979'. [ 427.299467][T18131] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.350128][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 427.448200][T18146] 9pnet_fd: Insufficient options for proto=fd [ 427.908474][T18158] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 427.954636][T18161] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4994'. [ 428.162832][T18168] Falling back ldisc for ptm0. [ 428.273309][T18174] FAULT_INJECTION: forcing a failure. [ 428.273309][T18174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.286543][T18174] CPU: 0 UID: 0 PID: 18174 Comm: syz.4.5000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.286594][T18174] Tainted: [W]=WARN [ 428.286601][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.286691][T18174] Call Trace: [ 428.286697][T18174] [ 428.286705][T18174] __dump_stack+0x1d/0x30 [ 428.286727][T18174] dump_stack_lvl+0xe8/0x140 [ 428.286746][T18174] dump_stack+0x15/0x1b [ 428.286762][T18174] should_fail_ex+0x265/0x280 [ 428.286780][T18174] should_fail+0xb/0x20 [ 428.286807][T18174] should_fail_usercopy+0x1a/0x20 [ 428.286827][T18174] _copy_from_user+0x1c/0xb0 [ 428.286851][T18174] set_user_sigmask+0x61/0x190 [ 428.286942][T18174] __se_sys_pselect6+0x1e0/0x280 [ 428.286978][T18174] __x64_sys_pselect6+0x78/0x90 [ 428.287003][T18174] x64_sys_call+0x28bd/0x3000 [ 428.287024][T18174] do_syscall_64+0xd2/0x200 [ 428.287082][T18174] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 428.287109][T18174] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 428.287142][T18174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.287231][T18174] RIP: 0033:0x7f7bd1c1f6c9 [ 428.287246][T18174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.287264][T18174] RSP: 002b:00007f7bd067f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 428.287282][T18174] RAX: ffffffffffffffda RBX: 00007f7bd1e75fa0 RCX: 00007f7bd1c1f6c9 [ 428.287294][T18174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.287305][T18174] RBP: 00007f7bd067f090 R08: 0000200000000400 R09: 00002000000004c0 [ 428.287335][T18174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.287346][T18174] R13: 00007f7bd1e76038 R14: 00007f7bd1e75fa0 R15: 00007fffa693d848 [ 428.287365][T18174] [ 428.472286][ T3575] Bluetooth: hci1: command 0x1003 tx timeout [ 428.472383][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 428.613142][T18190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5006'. [ 428.817499][T18199] lo speed is unknown, defaulting to 1000 [ 429.041194][T18205] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5010'. [ 429.146479][T18211] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5013'. [ 429.156362][T18211] FAULT_INJECTION: forcing a failure. [ 429.156362][T18211] name failslab, interval 1, probability 0, space 0, times 0 [ 429.169172][T18211] CPU: 0 UID: 0 PID: 18211 Comm: syz.5.5013 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 429.169206][T18211] Tainted: [W]=WARN [ 429.169214][T18211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.169230][T18211] Call Trace: [ 429.169239][T18211] [ 429.169249][T18211] __dump_stack+0x1d/0x30 [ 429.169280][T18211] dump_stack_lvl+0xe8/0x140 [ 429.169303][T18211] dump_stack+0x15/0x1b [ 429.169322][T18211] should_fail_ex+0x265/0x280 [ 429.169344][T18211] should_failslab+0x8c/0xb0 [ 429.169376][T18211] __kmalloc_noprof+0xa5/0x570 [ 429.169409][T18211] ? bitmap_zalloc+0x29/0x40 [ 429.169445][T18211] bitmap_zalloc+0x29/0x40 [ 429.169478][T18211] dev_prep_valid_name+0x13a/0x550 [ 429.169504][T18211] ? trace_event_buffer_commit+0x196/0x5c0 [ 429.169542][T18211] netif_change_name+0x10e/0x6b0 [ 429.169567][T18211] ? bpf_bprintf_cleanup+0x50/0x80 [ 429.169587][T18211] ? bpf_trace_printk+0xcf/0x1c0 [ 429.169614][T18211] ? nla_strscpy+0xec/0x120 [ 429.169639][T18211] do_setlink+0x80b/0x2810 [ 429.169669][T18211] ? save_fpregs_to_fpstate+0x100/0x160 [ 429.169704][T18211] ? _raw_spin_unlock+0x26/0x50 [ 429.169732][T18211] ? finish_task_switch+0xad/0x2b0 [ 429.169759][T18211] ? __schedule+0x6b9/0xb30 [ 429.169793][T18211] rtnl_setlink+0x311/0x420 [ 429.169853][T18211] ? selinux_capable+0x31/0x40 [ 429.169879][T18211] ? security_capable+0x83/0x90 [ 429.169916][T18211] ? ns_capable+0x7d/0xb0 [ 429.169942][T18211] ? __pfx_rtnl_setlink+0x10/0x10 [ 429.169967][T18211] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 429.169998][T18211] netlink_rcv_skb+0x123/0x220 [ 429.170033][T18211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.170066][T18211] rtnetlink_rcv+0x1c/0x30 [ 429.170090][T18211] netlink_unicast+0x5c0/0x690 [ 429.170127][T18211] netlink_sendmsg+0x58b/0x6b0 [ 429.170150][T18211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.170171][T18211] __sock_sendmsg+0x145/0x180 [ 429.170199][T18211] sock_write_iter+0x1a7/0x1f0 [ 429.170230][T18211] do_iter_readv_writev+0x4a1/0x540 [ 429.170266][T18211] vfs_writev+0x2df/0x8b0 [ 429.170315][T18211] do_writev+0xe7/0x210 [ 429.170352][T18211] __x64_sys_writev+0x45/0x50 [ 429.170382][T18211] x64_sys_call+0x1e9a/0x3000 [ 429.170408][T18211] do_syscall_64+0xd2/0x200 [ 429.170430][T18211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 429.170461][T18211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 429.170498][T18211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.170522][T18211] RIP: 0033:0x7fb13e56f6c9 [ 429.170538][T18211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.170559][T18211] RSP: 002b:00007fb13cfcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 429.170579][T18211] RAX: ffffffffffffffda RBX: 00007fb13e7c5fa0 RCX: 00007fb13e56f6c9 [ 429.170593][T18211] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 429.170606][T18211] RBP: 00007fb13cfcf090 R08: 0000000000000000 R09: 0000000000000000 [ 429.170620][T18211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.170632][T18211] R13: 00007fb13e7c6038 R14: 00007fb13e7c5fa0 R15: 00007ffd94e3fed8 [ 429.170654][T18211] [ 429.505443][T18213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5014'. [ 429.544865][T18217] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 429.657071][T18228] FAULT_INJECTION: forcing a failure. [ 429.657071][T18228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.670396][T18228] CPU: 0 UID: 0 PID: 18228 Comm: syz.1.5020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 429.670428][T18228] Tainted: [W]=WARN [ 429.670435][T18228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.670512][T18228] Call Trace: [ 429.670522][T18228] [ 429.670533][T18228] __dump_stack+0x1d/0x30 [ 429.670563][T18228] dump_stack_lvl+0xe8/0x140 [ 429.670592][T18228] dump_stack+0x15/0x1b [ 429.670611][T18228] should_fail_ex+0x265/0x280 [ 429.670753][T18228] should_fail+0xb/0x20 [ 429.670776][T18228] should_fail_usercopy+0x1a/0x20 [ 429.670801][T18228] _copy_from_user+0x1c/0xb0 [ 429.670837][T18228] snd_seq_ioctl+0x125/0x300 [ 429.670876][T18228] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 429.670905][T18228] __se_sys_ioctl+0xce/0x140 [ 429.670968][T18228] __x64_sys_ioctl+0x43/0x50 [ 429.670996][T18228] x64_sys_call+0x1816/0x3000 [ 429.671075][T18228] do_syscall_64+0xd2/0x200 [ 429.671103][T18228] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 429.671141][T18228] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 429.671218][T18228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.671245][T18228] RIP: 0033:0x7f59ad81f6c9 [ 429.671265][T18228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.671291][T18228] RSP: 002b:00007f59ac27f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.671327][T18228] RAX: ffffffffffffffda RBX: 00007f59ada75fa0 RCX: 00007f59ad81f6c9 [ 429.671340][T18228] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000006 [ 429.671354][T18228] RBP: 00007f59ac27f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.671370][T18228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.671387][T18228] R13: 00007f59ada76038 R14: 00007f59ada75fa0 R15: 00007ffd2dbe7258 [ 429.671414][T18228] [ 429.916090][T18236] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5022'. [ 430.429724][T18259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5029'. [ 430.639820][T18265] lo speed is unknown, defaulting to 1000 [ 430.915373][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5033'. [ 431.054050][T18280] 9pnet_fd: Insufficient options for proto=fd [ 431.059891][T18281] lo speed is unknown, defaulting to 1000 [ 431.155186][T18284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.179407][T18284] netlink: 'syz.1.5038': attribute type 10 has an invalid length. [ 431.205147][T18286] 9pnet_fd: p9_fd_create_tcp (18286): problem connecting socket to 127.0.0.1 [ 431.619221][T18308] FAULT_INJECTION: forcing a failure. [ 431.619221][T18308] name failslab, interval 1, probability 0, space 0, times 0 [ 431.631966][T18308] CPU: 0 UID: 0 PID: 18308 Comm: syz.3.5046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.632053][T18308] Tainted: [W]=WARN [ 431.632062][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.632075][T18308] Call Trace: [ 431.632101][T18308] [ 431.632112][T18308] __dump_stack+0x1d/0x30 [ 431.632143][T18308] dump_stack_lvl+0xe8/0x140 [ 431.632172][T18308] dump_stack+0x15/0x1b [ 431.632219][T18308] should_fail_ex+0x265/0x280 [ 431.632246][T18308] ? __se_sys_mount+0xef/0x2e0 [ 431.632359][T18308] should_failslab+0x8c/0xb0 [ 431.632390][T18308] __kmalloc_cache_noprof+0x4c/0x4a0 [ 431.632430][T18308] ? memdup_user+0x99/0xd0 [ 431.632499][T18308] __se_sys_mount+0xef/0x2e0 [ 431.632539][T18308] ? fput+0x8f/0xc0 [ 431.632564][T18308] ? ksys_write+0x192/0x1a0 [ 431.632592][T18308] __x64_sys_mount+0x67/0x80 [ 431.632636][T18308] x64_sys_call+0x2b51/0x3000 [ 431.632708][T18308] do_syscall_64+0xd2/0x200 [ 431.632733][T18308] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.632828][T18308] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.632873][T18308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.632961][T18308] RIP: 0033:0x7f3bd0d6f6c9 [ 431.632978][T18308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.633050][T18308] RSP: 002b:00007f3bcf7d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.633071][T18308] RAX: ffffffffffffffda RBX: 00007f3bd0fc5fa0 RCX: 00007f3bd0d6f6c9 [ 431.633091][T18308] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 431.633107][T18308] RBP: 00007f3bcf7d7090 R08: 0000200000000600 R09: 0000000000000000 [ 431.633120][T18308] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001 [ 431.633132][T18308] R13: 00007f3bd0fc6038 R14: 00007f3bd0fc5fa0 R15: 00007ffc4d8ff588 [ 431.633152][T18308] [ 431.840929][ T29] kauditd_printk_skb: 1516 callbacks suppressed [ 431.840948][ T29] audit: type=1326 audit(1763046008.119:59841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 431.888097][ T29] audit: type=1326 audit(1763046008.119:59842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 431.911840][ T29] audit: type=1326 audit(1763046008.119:59843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 431.935942][ T29] audit: type=1326 audit(1763046008.119:59844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 431.959711][ T29] audit: type=1326 audit(1763046008.119:59845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 431.983322][ T29] audit: type=1326 audit(1763046008.119:59846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 432.007059][ T29] audit: type=1326 audit(1763046008.129:59847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 432.031197][ T29] audit: type=1326 audit(1763046008.129:59848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 432.054876][ T29] audit: type=1326 audit(1763046008.149:59849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 432.078702][ T29] audit: type=1326 audit(1763046008.149:59850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.5.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb13e5a1f85 code=0x7ffc0000 [ 432.222016][T18319] serio: Serial port ptm0 [ 432.326872][T18333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.357274][T18333] netlink: 'syz.4.5057': attribute type 10 has an invalid length. [ 432.365281][T18333] __nla_validate_parse: 4 callbacks suppressed [ 432.365301][T18333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5057'. [ 433.419127][T18361] lo speed is unknown, defaulting to 1000 [ 433.696972][T18366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5069'. [ 433.775969][T18374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.793029][T18374] netlink: 'syz.4.5072': attribute type 10 has an invalid length. [ 433.800910][T18374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5072'. [ 433.829897][T18375] lo speed is unknown, defaulting to 1000 [ 434.093240][ T4823] Bluetooth: hci0: Frame reassembly failed (-84) [ 434.116543][T18389] Bluetooth: hci0: Frame reassembly failed (-90) [ 434.323945][T18404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5084'. [ 434.456498][ T4823] Bluetooth: hci1: Frame reassembly failed (-84) [ 434.731100][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5088'. [ 435.536506][T18435] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5095'. [ 435.895272][T18438] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5096'. [ 436.142284][T18448] lo speed is unknown, defaulting to 1000 [ 436.150132][ T3509] Bluetooth: hci0: command 0x1003 tx timeout [ 436.150414][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 436.470029][ T3630] Bluetooth: hci1: command 0x1003 tx timeout [ 436.480147][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 436.801493][T18472] can0: slcan on ptm0. [ 436.859995][T18472] can0 (unregistered): slcan off ptm0. [ 436.865608][T18472] Falling back ldisc for ptm0. [ 436.900994][T18475] netlink: 'syz.5.5108': attribute type 2 has an invalid length. [ 436.908836][T18475] netlink: 'syz.5.5108': attribute type 3 has an invalid length. [ 436.916646][T18475] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5108'. [ 436.958547][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 436.958589][ T29] audit: type=1326 audit(1763046013.230:59995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.5.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 437.029032][ T29] audit: type=1326 audit(1763046013.270:59996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.5.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 437.052728][ T29] audit: type=1326 audit(1763046013.270:59997): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.5.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 437.076683][ T29] audit: type=1326 audit(1763046013.270:59998): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.5.5108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13e56f6c9 code=0x7ffc0000 [ 437.100633][ T29] audit: type=1326 audit(1763046013.280:59999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.124223][ T29] audit: type=1326 audit(1763046013.280:60000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.147843][ T29] audit: type=1326 audit(1763046013.280:60001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.171522][ T29] audit: type=1326 audit(1763046013.280:60002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.195132][ T29] audit: type=1326 audit(1763046013.280:60003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.218764][ T29] audit: type=1326 audit(1763046013.280:60004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.2.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7534f6c9 code=0x7ffc0000 [ 437.334589][T18489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5113'. [ 437.358523][ T4857] Bluetooth: hci0: Frame reassembly failed (-84) [ 437.371801][T18485] serio: Serial port ptm1 [ 437.590010][T18513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.598544][T18511] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5122'. [ 437.598584][T18513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.693072][T18517] netlink: '': attribute type 13 has an invalid length. [ 437.876654][T18517] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 437.940941][ T5403] syz1: Port: 1 Link DOWN [ 437.948163][ T4857] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.957990][ T4857] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.969963][ T4857] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.978989][ T4857] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.234782][T18542] lo speed is unknown, defaulting to 1000 [ 438.430844][T18548] Falling back ldisc for ptm1. [ 439.184422][T18559] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 439.195746][T18559] tipc: Enabling of bearer rejected, failed to enable media [ 439.429532][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 439.429566][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 440.047274][T18582] can0: slcan on ptm1. [ 440.109995][T18582] can0 (unregistered): slcan off ptm1. [ 440.115588][T18582] Falling back ldisc for ptm1. [ 440.142066][T18584] lo speed is unknown, defaulting to 1000 [ 440.331147][T18591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5148'. [ 440.879911][T18613] serio: Serial port ptm1 [ 441.257022][ T4823] Bluetooth: hci1: Frame reassembly failed (-90) [ 441.326075][ T4823] Bluetooth: hci2: Frame reassembly failed (-90) [ 441.509291][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.510173][ T3613] Bluetooth: hci0: command 0x1003 tx timeout [ 441.770102][T18641] lo speed is unknown, defaulting to 1000 [ 442.001550][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 442.001570][ T29] audit: type=1326 audit(1763046018.240:60553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 442.031473][ T29] audit: type=1326 audit(1763046018.250:60554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.3.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0d6f6c9 code=0x7ffc0000 [ 442.230500][T18649] serio: Serial port ptm0 [ 442.249565][T18644] Falling back ldisc for ttyS3. [ 442.510571][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 442.546589][ T29] audit: type=1400 audit(1763046018.820:60555): avc: denied { firmware_load } for pid=18658 comm="+}[@" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 443.106882][ T29] audit: type=1326 audit(1763046019.380:60556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.133606][ T29] audit: type=1326 audit(1763046019.380:60557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.157924][ T29] audit: type=1326 audit(1763046019.380:60558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.181547][ T29] audit: type=1326 audit(1763046019.380:60559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.205338][ T29] audit: type=1326 audit(1763046019.380:60560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.229020][ T29] audit: type=1326 audit(1763046019.380:60561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.252673][ T29] audit: type=1326 audit(1763046019.380:60562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18683 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 443.276554][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 443.314114][T18688] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5181'. [ 443.352394][T18692] serio: Serial port ptm0 [ 443.354622][ T3575] Bluetooth: hci2: command 0x1003 tx timeout [ 443.365312][ T3509] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 443.399812][T18700] can0: slcan on ptm1. [ 443.412393][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5187'. [ 443.414000][ T4826] Bluetooth: hci0: Frame reassembly failed (-84) [ 443.455935][T18708] 9pnet_fd: Insufficient options for proto=fd [ 443.459212][T18700] can0 (unregistered): slcan off ptm1. [ 443.468522][T18700] Falling back ldisc for ptm1. [ 443.651139][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5191'. [ 443.724766][T18721] Falling back ldisc for ptm0. [ 443.958959][T18727] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5195'. [ 443.990609][ T4823] Bluetooth: hci1: Frame reassembly failed (-84) [ 444.427042][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5198'. [ 444.438798][T18737] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5199'. [ 444.464698][T18739] can0: slcan on ptm0. [ 444.474129][T18741] serio: Serial port ptm3 [ 444.521442][T18745] 9pnet_fd: Insufficient options for proto=fd [ 444.538999][T18739] can0 (unregistered): slcan off ptm0. [ 444.544762][T18739] Falling back ldisc for ptm0. [ 444.608553][T18754] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5206'. [ 444.666542][T18764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5210'. [ 444.692064][T18767] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5211'. [ 444.709388][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5208'. [ 444.887241][T18784] can0: slcan on ptm0. [ 444.929333][T18784] can0 (unregistered): slcan off ptm0. [ 444.935036][T18784] Falling back ldisc for ptm0. [ 444.940523][T18784] 9pnet_fd: Insufficient options for proto=fd [ 445.428800][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 445.434979][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 445.526503][T18796] serio: Serial port ptm2 [ 445.811903][T18786] syz.3.5219 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 445.826198][T18786] CPU: 0 UID: 0 PID: 18786 Comm: syz.3.5219 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 445.826233][T18786] Tainted: [W]=WARN [ 445.826241][T18786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.826283][T18786] Call Trace: [ 445.826294][T18786] [ 445.826305][T18786] __dump_stack+0x1d/0x30 [ 445.826331][T18786] dump_stack_lvl+0xe8/0x140 [ 445.826352][T18786] dump_stack+0x15/0x1b [ 445.826370][T18786] dump_header+0x81/0x220 [ 445.826453][T18786] oom_kill_process+0x342/0x400 [ 445.826500][T18786] out_of_memory+0x979/0xb80 [ 445.826539][T18786] try_charge_memcg+0x610/0xa10 [ 445.826573][T18786] obj_cgroup_charge_pages+0xa6/0x150 [ 445.826666][T18786] __memcg_kmem_charge_page+0x9f/0x170 [ 445.826689][T18786] __alloc_frozen_pages_noprof+0x188/0x360 [ 445.826712][T18786] alloc_pages_mpol+0xb3/0x260 [ 445.826790][T18786] ? alloc_pages_noprof+0x61/0x130 [ 445.826812][T18786] alloc_pages_noprof+0x90/0x130 [ 445.826833][T18786] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 445.826908][T18786] ? mas_max_gap+0x2b4/0x390 [ 445.827013][T18786] __kvmalloc_node_noprof+0x483/0x670 [ 445.827044][T18786] ? ip_set_alloc+0x24/0x30 [ 445.827164][T18786] ? ip_set_alloc+0x24/0x30 [ 445.827192][T18786] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 445.827223][T18786] ip_set_alloc+0x24/0x30 [ 445.827252][T18786] hash_netiface_create+0x282/0x740 [ 445.827295][T18786] ? __pfx_hash_netiface_create+0x10/0x10 [ 445.827400][T18786] ip_set_create+0x3cc/0x970 [ 445.827488][T18786] ? __nla_parse+0x40/0x60 [ 445.827510][T18786] nfnetlink_rcv_msg+0x4c6/0x590 [ 445.827626][T18786] netlink_rcv_skb+0x123/0x220 [ 445.827656][T18786] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 445.827692][T18786] nfnetlink_rcv+0x167/0x16c0 [ 445.827786][T18786] ? kmem_cache_free+0xe4/0x3d0 [ 445.827817][T18786] ? __kfree_skb+0x109/0x150 [ 445.827893][T18786] ? nlmon_xmit+0x4f/0x60 [ 445.827917][T18786] ? consume_skb+0x49/0x150 [ 445.827959][T18786] ? nlmon_xmit+0x4f/0x60 [ 445.827982][T18786] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 445.828017][T18786] ? __dev_queue_xmit+0x1200/0x2000 [ 445.828078][T18786] ? __dev_queue_xmit+0x182/0x2000 [ 445.828152][T18786] ? mod_zone_page_state+0x19/0x80 [ 445.828174][T18786] ? ref_tracker_free+0x37d/0x3e0 [ 445.828355][T18786] ? __netlink_deliver_tap+0x4dc/0x500 [ 445.828460][T18786] netlink_unicast+0x5c0/0x690 [ 445.828492][T18786] netlink_sendmsg+0x58b/0x6b0 [ 445.828512][T18786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.828565][T18786] __sock_sendmsg+0x145/0x180 [ 445.828606][T18786] ____sys_sendmsg+0x31e/0x4e0 [ 445.828656][T18786] ___sys_sendmsg+0x17b/0x1d0 [ 445.828780][T18786] __x64_sys_sendmsg+0xd4/0x160 [ 445.828804][T18786] x64_sys_call+0x191e/0x3000 [ 445.828830][T18786] do_syscall_64+0xd2/0x200 [ 445.828883][T18786] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 445.828951][T18786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.829024][T18786] RIP: 0033:0x7f3bd0d6f6c9 [ 445.829039][T18786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.829057][T18786] RSP: 002b:00007f3bcf7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.829076][T18786] RAX: ffffffffffffffda RBX: 00007f3bd0fc5fa0 RCX: 00007f3bd0d6f6c9 [ 445.829088][T18786] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 445.829118][T18786] RBP: 00007f3bd0df1f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.829130][T18786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.829142][T18786] R13: 00007f3bd0fc6038 R14: 00007f3bd0fc5fa0 R15: 00007ffc4d8ff588 [ 445.829160][T18786] [ 445.836840][T18813] tipc: Started in network mode [ 445.840651][T18786] memory: usage 307200kB, limit 307200kB, failcnt 378 [ 445.844483][T18813] tipc: Node identity ac14140f, cluster identity 4711 [ 445.854648][T18786] memory+swap: usage 308084kB, limit 9007199254740988kB, failcnt 0 [ 445.883469][T18813] tipc: New replicast peer: 255.255.255.83 [ 445.887903][T18786] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 445.887933][T18786] Memory cgroup stats for [ 445.892878][T18813] tipc: Enabled bearer , priority 10 [ 445.898193][T18786] /syz3: [ 446.233776][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 446.241000][ T3509] Bluetooth: hci1: command 0x1003 tx timeout [ 446.274841][T18786] cache 0 [ 446.277843][T18786] rss 0 [ 446.280664][T18786] shmem 0 [ 446.283717][T18786] mapped_file 0 [ 446.287221][T18786] dirty 0 [ 446.290228][T18786] writeback 0 [ 446.293533][T18786] workingset_refault_anon 31798 [ 446.298397][T18786] workingset_refault_file 609 [ 446.303129][T18786] swap 905216 [ 446.306457][T18786] swapcached 0 [ 446.309887][T18786] pgpgin 594463 [ 446.313363][T18786] pgpgout 594463 [ 446.316928][T18786] pgfault 516702 [ 446.320512][T18786] pgmajfault 4621 [ 446.324159][T18786] inactive_anon 0 [ 446.327808][T18786] active_anon 0 [ 446.331368][T18786] inactive_file 0 [ 446.335021][T18786] active_file 0 [ 446.338498][T18786] unevictable 0 [ 446.342036][T18786] hierarchical_memory_limit 314572800 [ 446.347422][T18786] hierarchical_memsw_limit 9223372036854771712 [ 446.353601][T18786] total_cache 0 [ 446.357057][T18786] total_rss 0 [ 446.360378][T18786] total_shmem 0 [ 446.363832][T18786] total_mapped_file 0 [ 446.367809][T18786] total_dirty 0 [ 446.371286][T18786] total_writeback 0 [ 446.375091][T18786] total_workingset_refault_anon 31798 [ 446.380471][T18786] total_workingset_refault_file 609 [ 446.385672][T18786] total_swap 905216 [ 446.389523][T18786] total_swapcached 0 [ 446.393429][T18786] total_pgpgin 594463 [ 446.397406][T18786] total_pgpgout 594463 [ 446.401491][T18786] total_pgfault 516702 [ 446.405552][T18786] total_pgmajfault 4621 [ 446.409722][T18786] total_inactive_anon 0 [ 446.413899][T18786] total_active_anon 0 [ 446.417876][T18786] total_inactive_file 0 [ 446.422157][T18786] total_active_file 0 [ 446.426171][T18786] total_unevictable 0 [ 446.430164][T18786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5219,pid=18785,uid=0 [ 446.444970][T18786] Memory cgroup out of memory: Killed process 18785 (syz.3.5219) total-vm:96136kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 446.479036][T18818] binfmt_misc: register: failed to install interpreter file ./file2 [ 446.550109][ T4823] Bluetooth: hci0: Frame reassembly failed (-90) [ 446.615883][T18834] serio: Serial port ptm1 [ 446.682253][T18786] syz.3.5219 (18786) used greatest stack depth: 6328 bytes left [ 446.918651][ T23] tipc: Node number set to 2886997007 [ 447.278617][T18872] can0: slcan on ptm2. [ 447.318674][T18872] can0 (unregistered): slcan off ptm2. [ 447.324270][T18872] Falling back ldisc for ptm2. [ 447.329788][T18872] 9pnet_fd: Insufficient options for proto=fd [ 447.356946][T18874] serio: Serial port ptm2 [ 447.584380][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 447.584400][ T29] audit: type=1326 audit(1763046023.861:61255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.614839][ T29] audit: type=1326 audit(1763046023.861:61256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.638521][ T29] audit: type=1326 audit(1763046023.861:61257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.662252][ T29] audit: type=1326 audit(1763046023.861:61258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.685983][ T29] audit: type=1326 audit(1763046023.861:61259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.709845][ T29] audit: type=1326 audit(1763046023.861:61260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.733509][ T29] audit: type=1326 audit(1763046023.861:61261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.757126][ T29] audit: type=1326 audit(1763046023.861:61262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.780906][ T29] audit: type=1326 audit(1763046023.861:61263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 447.804579][ T29] audit: type=1326 audit(1763046023.861:61264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.1.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 448.030383][T18908] can0: slcan on ptm1. [ 448.068583][T18908] can0 (unregistered): slcan off ptm1. [ 448.074509][T18908] Falling back ldisc for ptm1. [ 448.088874][T18908] 9pnet_fd: Insufficient options for proto=fd [ 448.425777][T18917] serio: Serial port ptm2 [ 448.601596][ T4826] Bluetooth: hci1: Frame reassembly failed (-84) [ 448.628416][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 448.628426][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 449.264361][T18948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.285980][T18948] netlink: 'syz.2.5277': attribute type 10 has an invalid length. [ 449.293939][T18948] __nla_validate_parse: 8 callbacks suppressed [ 449.293989][T18948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5277'. [ 449.346217][ T4826] Bluetooth: hci0: Frame reassembly failed (-84) [ 449.353727][T18950] serio: Serial port ptm3 [ 449.589497][T18957] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5281'. [ 449.598536][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'. [ 449.725553][T18968] FAULT_INJECTION: forcing a failure. [ 449.725553][T18968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.738647][T18968] CPU: 0 UID: 0 PID: 18968 Comm: syz.4.5286 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 449.738745][T18968] Tainted: [W]=WARN [ 449.738752][T18968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.738764][T18968] Call Trace: [ 449.738772][T18968] [ 449.738779][T18968] __dump_stack+0x1d/0x30 [ 449.738876][T18968] dump_stack_lvl+0xe8/0x140 [ 449.738895][T18968] dump_stack+0x15/0x1b [ 449.738986][T18968] should_fail_ex+0x265/0x280 [ 449.739029][T18968] should_fail+0xb/0x20 [ 449.739101][T18968] should_fail_usercopy+0x1a/0x20 [ 449.739127][T18968] _copy_to_user+0x20/0xa0 [ 449.739153][T18968] simple_read_from_buffer+0xb5/0x130 [ 449.739254][T18968] proc_fail_nth_read+0x10e/0x150 [ 449.739296][T18968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.739376][T18968] vfs_read+0x1a8/0x770 [ 449.739404][T18968] ? __rcu_read_unlock+0x4f/0x70 [ 449.739429][T18968] ? __fget_files+0x184/0x1c0 [ 449.739538][T18968] ksys_read+0xda/0x1a0 [ 449.739574][T18968] __x64_sys_read+0x40/0x50 [ 449.739602][T18968] x64_sys_call+0x27c0/0x3000 [ 449.739638][T18968] do_syscall_64+0xd2/0x200 [ 449.739658][T18968] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 449.739793][T18968] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 449.739825][T18968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.739845][T18968] RIP: 0033:0x7f7bd1c1e0dc [ 449.739860][T18968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 449.739877][T18968] RSP: 002b:00007f7bd067f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.739902][T18968] RAX: ffffffffffffffda RBX: 00007f7bd1e75fa0 RCX: 00007f7bd1c1e0dc [ 449.739914][T18968] RDX: 000000000000000f RSI: 00007f7bd067f0a0 RDI: 0000000000000003 [ 449.739926][T18968] RBP: 00007f7bd067f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.739937][T18968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.739949][T18968] R13: 00007f7bd1e76038 R14: 00007f7bd1e75fa0 R15: 00007fffa693d848 [ 449.739967][T18968] [ 450.039458][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5288'. [ 450.098052][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5291'. [ 450.123301][ T4826] Bluetooth: hci2: Frame reassembly failed (-84) [ 450.495296][ T4826] Bluetooth: hci3: Frame reassembly failed (-90) [ 450.628271][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 450.629399][ T3558] Bluetooth: hci1: command 0x1003 tx timeout [ 450.866515][T18990] lo speed is unknown, defaulting to 1000 [ 451.348215][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 451.669625][T19008] can0: slcan on ptm1. [ 451.675198][T19008] 9pnet_fd: Insufficient options for proto=fd [ 451.778060][T19007] can0 (unregistered): slcan off ptm1. [ 451.800913][ T4826] Bluetooth: hci0: Frame reassembly failed (-84) [ 451.958104][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5305'. [ 452.158033][ T3630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 452.158062][ T3558] Bluetooth: hci2: command 0x1003 tx timeout [ 452.548807][ T3613] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 452.593890][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 452.593910][ T29] audit: type=1326 audit(1763046028.872:61784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 452.623885][ T29] audit: type=1326 audit(1763046028.872:61785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.4.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd1c1f6c9 code=0x7ffc0000 [ 452.755398][ T4826] Bluetooth: hci1: Frame reassembly failed (-84) [ 452.785220][T19044] serio: Serial port ptm2 [ 453.056471][ T29] audit: type=1400 audit(1763046029.332:61786): avc: denied { read } for pid=19058 comm="syz.4.5323" dev="sockfs" ino=66856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 453.234323][ T29] audit: type=1326 audit(1763046029.512:61787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.4.5325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bd1c1f6c9 code=0x0 [ 453.447442][T19068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5326'. [ 453.474729][ T29] audit: type=1326 audit(1763046029.752:61788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.498476][ T29] audit: type=1326 audit(1763046029.752:61789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.522189][ T29] audit: type=1326 audit(1763046029.752:61790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.545886][ T29] audit: type=1326 audit(1763046029.752:61791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.569482][ T29] audit: type=1326 audit(1763046029.752:61792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.593137][ T29] audit: type=1326 audit(1763046029.752:61793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19069 comm="syz.1.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ad81f6c9 code=0x7ffc0000 [ 453.827829][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 453.827829][ T3613] Bluetooth: hci0: command 0x1003 tx timeout [ 453.827975][ T3509] ================================================================== [ 453.828009][ T3509] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 453.828041][ T3509] [ 453.828049][ T3509] write to 0xffffffff88e63440 of 13 bytes by task 3613 on cpu 0: [ 453.828067][ T3509] vsnprintf+0x2ce/0x890 [ 453.828100][ T3509] vscnprintf+0x41/0x90 [ 453.828132][ T3509] printk_sprint+0x30/0x2d0 [ 453.828155][ T3509] vprintk_store+0x599/0x860 [ 453.828181][ T3509] vprintk_emit+0x10d/0x580 [ 453.828210][ T3509] vprintk_default+0x26/0x30 [ 453.828239][ T3509] vprintk+0x1d/0x30 [ 453.828275][ T3509] _printk+0x79/0xa0 [ 453.828309][ T3509] bt_err+0x9d/0xd0 [ 453.828348][ T3509] hci_cmd_timeout+0x97/0x140 [ 453.828393][ T3509] process_scheduled_works+0x4ce/0x9d0 [ 453.828439][ T3509] worker_thread+0x582/0x770 [ 453.828462][ T3509] kthread+0x489/0x510 [ 453.828485][ T3509] ret_from_fork+0x122/0x1b0 [ 453.828506][ T3509] ret_from_fork_asm+0x1a/0x30 [ 453.828528][ T3509] [ 453.828534][ T3509] read to 0xffffffff88e63448 of 8 bytes by task 3509 on cpu 1: [ 453.828550][ T3509] data_push_tail+0xfd/0x420 [ 453.828569][ T3509] data_alloc+0xfb/0x2e0 [ 453.828586][ T3509] prb_reserve+0x807/0xaf0 [ 453.828603][ T3509] vprintk_store+0x56d/0x860 [ 453.828623][ T3509] vprintk_emit+0x10d/0x580 [ 453.828644][ T3509] vprintk_default+0x26/0x30 [ 453.828665][ T3509] vprintk+0x1d/0x30 [ 453.828691][ T3509] _printk+0x79/0xa0 [ 453.828717][ T3509] bt_err+0x9d/0xd0 [ 453.828743][ T3509] hci_dev_open_sync+0xfa4/0x2290 [ 453.828774][ T3509] hci_power_on+0xef/0x390 [ 453.828810][ T3509] process_scheduled_works+0x4ce/0x9d0 [ 453.828841][ T3509] worker_thread+0x582/0x770 [ 453.828859][ T3509] kthread+0x489/0x510 [ 453.828880][ T3509] ret_from_fork+0x122/0x1b0 [ 453.828900][ T3509] ret_from_fork_asm+0x1a/0x30 [ 453.828922][ T3509] [ 453.828927][ T3509] value changed: 0x00000000ffffff4b -> 0x3a30696368203a68 [ 453.828938][ T3509] [ 453.828943][ T3509] Reported by Kernel Concurrency Sanitizer on: [ 453.828957][ T3509] CPU: 1 UID: 0 PID: 3509 Comm: kworker/u9:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.828985][ T3509] Tainted: [W]=WARN [ 453.828993][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.829007][ T3509] Workqueue: hci0 hci_power_on [ 453.829039][ T3509] ================================================================== [ 454.787751][ T3509] Bluetooth: hci1: command 0x1003 tx timeout [ 454.787749][ T3630] Bluetooth: hci1: Opcode 0x1003 failed: -110