last executing test programs: 3.781931224s ago: executing program 2 (id=1268): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) setfsuid(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x43, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000700)) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 3.382679352s ago: executing program 3 (id=1271): r0 = socket(0x40000000015, 0x800, 0x0) getsockname$unix(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.181824182s ago: executing program 3 (id=1277): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.931144123s ago: executing program 2 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaac0aaaaaaaaaaaa86ddc78a37f200082c00000800bef9bbd80000000000000000000000000000aa2b000005d746f793d18aa99baf72666d0f15d48c0cb123aa2f4289bc00ef94af502cf10165b7cf6801a7720b22a0e566dd1e248e851556900813c1878c2f17364480a5370dc329109b5aa1c684403758cb33a2c42a151812e5aae88571e69d3edeb99b94d871f052ba209c4a8d7a8e500625d2d5301e1f4c64c8529f9455c6fad5e0b646f3af08266988b09412a4bc0769896a97a56fd2dcc4fb49ca9c6735", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 2.904393804s ago: executing program 2 (id=1282): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.320468472s ago: executing program 3 (id=1289): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$notify(r0, 0x402, 0xc0000030) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) close(r4) 2.298757623s ago: executing program 3 (id=1290): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x4010805}, 0x0) 2.215232597s ago: executing program 3 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaac0aaaaaaaaaaaa86ddc78a37f200082c00000800bef9bbd80000000000000000000000000000aa2b000005d746f793d18aa99baf72666d0f15d48c0cb123aa2f4289bc00ef94af502cf10165b7cf6801a7720b22a0e566dd1e248e851556900813c1878c2f17364480a5370dc329109b5aa1c684403758cb33a2c42a151812e5aae88571e69d3edeb99b94d871f052ba209c4a8d7a8e500625d2d5301e1f4c64c8529f9455c6fad5e0b646f3af08266988b09412a4bc0769896a97a56fd2dcc4fb49ca9c6735", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 2.208577597s ago: executing program 3 (id=1293): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.098732972s ago: executing program 4 (id=1295): creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 2.074558063s ago: executing program 4 (id=1296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.938834589s ago: executing program 2 (id=1300): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.174682185s ago: executing program 4 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, 0x0, 0x0) 1.154817276s ago: executing program 4 (id=1304): syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100060005000000000001000700000000002000020000000d00000000000000"], 0x24, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000500)=""/42, 0x2a, 0x0, &(0x7f00000005c0)={0x11, 0x3, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) sigaltstack(0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xecb0}, 0x18) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000280)={'U+', 0x1}, 0x16, 0x1) 1.08083649s ago: executing program 2 (id=1306): setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x24, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 1.062842731s ago: executing program 1 (id=1308): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}]}, 0xff, 0x264, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0x1000, 0x10, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 1.052963791s ago: executing program 0 (id=1309): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) close(r2) 1.039260862s ago: executing program 0 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.038673652s ago: executing program 1 (id=1311): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 918.024027ms ago: executing program 1 (id=1312): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_dest={0x17, 0x114, 0x2, {0x7f, 0x6}}], 0x18}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000d747a1fd61f1038967aacd075834b02a942d5a234d4e5e8742ce02b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a540000000600020073797a32000000002800048010000180080001006c6f670004000280140001800b0001006578746864720000040002800900010073797a3100000000140000001100010000000000000000000e00000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x74}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xf7, 0x7, 0x1, 0x0, "59b6f54d235f6f6a2cbccd9808297bfaba9c63f52c9fcaf089b73c5dc9844414fad2c6772d2bb27cf2b5e6ef429e7b27e4c42a5d2bf9c75789caffc167941fbae99dbe4b324b138a7053da334317d06304b589e348f9e00d2a96e3ab4f953ae4af998fe21867639f6b58d987798e4c23f03a79e9757b90c733f9f1d2c6c23f88d52fc2277486a69a7d7ff9fbf0fb7867213667bd4762c73449205ad247581cc80c1a83af94db77886a156b48824d35ba5fe7c74102fa52f0376df9070050fc830a844b1289455ab95d8b212389c1fcc5e9fdb8bfdfbc9736bfc63ff4b5b1b433d5454328abc6347da01d3b533e437f101a8f0d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xde, 0x7, 0x1, 0x0, "631fd70b3e158f625e51ebcc9edb9a05c458cc2f8e43e574c302177404150f52b533b41c298414acbd927f4574e693af5ba3d77d2d5c6fa9d00bfc781fcc17ba6e39983d4df320665f3dc798ead723667eaef86ec5ba25e4af18083044d90d5a225933a2a1766f15d111627aba3e11c4f8ec869437542e727717f4d12843dd6663b699731efb5b4c8c55e2c072d795902e7ca488b73acd7227347f302472aaa84241daf9850f870eb5b9f2641f0c5638c7025f7cdd7f1b1b217ec0ac152e57e0d611abc78217c14ab77fed4f1d3e95307755242760045a6e9144"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x354}}, 0x8000) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000000400)={0x0, 0x86e2, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f00000003c0)) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x7df0, 0x0, 0x1}}}, @TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="904997aae6e8771b"]}]}}]}]}]}}]}, 0x88}}, 0x0) socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x3cdd784b, 0x2271c, 0xffffffffffffffff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 856.07674ms ago: executing program 1 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd0499ec33ebac6c9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 855.51811ms ago: executing program 1 (id=1314): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 306.381906ms ago: executing program 4 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, 0x0, 0x0) 291.879137ms ago: executing program 4 (id=1316): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) unshare(0x2a020400) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x56, 0x3, 0x1, 0x0, 0x52cd, 0x20022, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x2}, 0x244, 0x5, 0x6, 0x8, 0xfffffffffffffff2, 0x2, 0x7ff, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x3, r3, 0x8) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) timerfd_create(0x6, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r8 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r8, 0x0, 0xb, 0x6) 231.934259ms ago: executing program 2 (id=1317): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 187.992971ms ago: executing program 0 (id=1318): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd4e}, 0x8500, 0x20000000, 0x4, 0x7, 0xb, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu~|0||!') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004bc0)=@delchain={0xc8, 0x65, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0xfff2}, {0x10, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_basic={{0xa}, {0x90, 0x2, [@TCA_BASIC_ACT={0x8c, 0x3, [@m_csum={0x88, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb7, 0x3, 0x1, 0x8, 0x4e5}, 0x5c}}]}, {0x3d, 0x6, "b7deaacd7957e57060e791e8dbe54417558731c7f1d33064044ad0dee6b22d3a26014037939f2c029ae69c97d4e897c9d2413bce6f5690cdaf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) 103.259745ms ago: executing program 0 (id=1319): r0 = socket(0x40000000015, 0x800, 0x0) getsockname$unix(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 47.289818ms ago: executing program 0 (id=1320): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) close(r2) 21.228979ms ago: executing program 0 (id=1321): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x6, 0xa) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000190a001c0000001458", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 1 (id=1322): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): 7] udevd[3917]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.668731][ T1917] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.862968][ T4811] lo speed is unknown, defaulting to 1000 [ 66.921539][ T4811] lo speed is unknown, defaulting to 1000 [ 66.950505][ T4812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'. [ 66.959961][ T4812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.085262][ T4822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4822 comm=syz.2.452 [ 67.097697][ T4822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4822 comm=syz.2.452 [ 67.257008][ T29] kauditd_printk_skb: 4905 callbacks suppressed [ 67.257021][ T29] audit: type=1326 audit(1765030953.209:15440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 67.287471][ T29] audit: type=1326 audit(1765030953.209:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 67.310851][ T29] audit: type=1326 audit(1765030953.209:15442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 67.334343][ T29] audit: type=1326 audit(1765030953.219:15443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 67.357665][ T29] audit: type=1326 audit(1765030953.219:15444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 67.380976][ T29] audit: type=1326 audit(1765030953.219:15445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 67.404356][ T29] audit: type=1326 audit(1765030953.219:15446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 67.427686][ T29] audit: type=1326 audit(1765030953.219:15447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 67.451084][ T29] audit: type=1326 audit(1765030953.219:15448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 67.477881][ T29] audit: type=1326 audit(1765030953.249:15449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 67.513884][ T4835] loop2: detected capacity change from 0 to 1024 [ 67.528928][ T4835] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 68.503159][ T4856] loop4: detected capacity change from 0 to 1024 [ 68.512483][ T4856] EXT4-fs: inline encryption not supported [ 68.532188][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.573501][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.582099][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.592072][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.720172][ T2220] Bluetooth: hci1: Frame reassembly failed (-84) [ 68.747657][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.747702][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 68.808596][ T4870] IPv6: Can't replace route, no match found [ 69.619108][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 69.628399][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 69.652340][ T4889] siw: device registration error -23 [ 69.787307][ T4897] tipc: Started in network mode [ 69.792307][ T4897] tipc: Node identity 364aa56b0627, cluster identity 4711 [ 69.799581][ T4897] tipc: Enabled bearer , priority 0 [ 69.807711][ T4896] tipc: Resetting bearer [ 69.818600][ T4896] tipc: Disabling bearer [ 70.201380][ T4903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4903 comm=syz.2.477 [ 70.213800][ T4903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4903 comm=syz.2.477 [ 70.278326][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'. [ 70.747583][ T3627] Bluetooth: hci1: command 0x1003 tx timeout [ 70.747589][ T3672] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 70.846419][ T4921] loop0: detected capacity change from 0 to 128 [ 70.857223][ T4921] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.483'. [ 70.867797][ T4921] netlink: zone id is out of range [ 70.872919][ T4921] netlink: zone id is out of range [ 70.878415][ T4921] netlink: zone id is out of range [ 70.883646][ T4921] netlink: zone id is out of range [ 70.888805][ T4921] netlink: zone id is out of range [ 70.893896][ T4921] netlink: zone id is out of range [ 70.899172][ T4921] netlink: zone id is out of range [ 70.904364][ T4921] netlink: zone id is out of range [ 70.909493][ T4921] netlink: zone id is out of range [ 70.914589][ T4921] netlink: zone id is out of range [ 71.205512][ T4941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 71.420301][ T4943] loop0: detected capacity change from 0 to 8192 [ 72.095451][ T4970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 72.225174][ T4984] loop2: detected capacity change from 0 to 1024 [ 72.232448][ T4984] EXT4-fs: inline encryption not supported [ 72.253024][ T4984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.265551][ T29] kauditd_printk_skb: 1147 callbacks suppressed [ 72.265564][ T29] audit: type=1326 audit(1765030958.209:16597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08908465e7 code=0x7ffc0000 [ 72.295234][ T29] audit: type=1326 audit(1765030958.209:16598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08907eb829 code=0x7ffc0000 [ 72.318545][ T29] audit: type=1326 audit(1765030958.209:16599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 72.376911][ T29] audit: type=1326 audit(1765030958.219:16600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08908465e7 code=0x7ffc0000 [ 72.400324][ T29] audit: type=1326 audit(1765030958.219:16601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08907eb829 code=0x7ffc0000 [ 72.423639][ T29] audit: type=1326 audit(1765030958.219:16602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 72.446984][ T29] audit: type=1326 audit(1765030958.229:16603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08908465e7 code=0x7ffc0000 [ 72.470316][ T29] audit: type=1326 audit(1765030958.229:16604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08907eb829 code=0x7ffc0000 [ 72.493666][ T29] audit: type=1326 audit(1765030958.229:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 72.516992][ T29] audit: type=1326 audit(1765030958.229:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08908465e7 code=0x7ffc0000 [ 72.578283][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.612323][ T5000] loop3: detected capacity change from 0 to 4096 [ 72.678987][ T5000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.713893][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.787265][ T5010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5010 comm=syz.0.518 [ 72.799736][ T5010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5010 comm=syz.0.518 [ 72.910980][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 72.920801][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 72.956341][ T5030] siw: device registration error -23 [ 73.703590][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 73.855968][ T5061] FAULT_INJECTION: forcing a failure. [ 73.855968][ T5061] name failslab, interval 1, probability 0, space 0, times 0 [ 73.868403][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 73.868784][ T5061] CPU: 0 UID: 0 PID: 5061 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.868811][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.868903][ T5061] Call Trace: [ 73.868909][ T5061] [ 73.868916][ T5061] __dump_stack+0x1d/0x30 [ 73.868941][ T5061] dump_stack_lvl+0xe8/0x140 [ 73.868969][ T5061] dump_stack+0x15/0x1b [ 73.868990][ T5061] should_fail_ex+0x265/0x280 [ 73.869082][ T5061] should_failslab+0x8c/0xb0 [ 73.869105][ T5061] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 73.869128][ T5061] ? __d_alloc+0x37/0x340 [ 73.869156][ T5061] __d_alloc+0x37/0x340 [ 73.869180][ T5061] ? selinux_inode_permission+0x6be/0x7c0 [ 73.869330][ T5061] d_alloc_parallel+0x54/0xcd0 [ 73.869367][ T5061] ? security_inode_permission+0x4a/0xb0 [ 73.869391][ T5061] ? lockref_get_not_dead+0x120/0x1c0 [ 73.869475][ T5061] ? __rcu_read_unlock+0x4f/0x70 [ 73.869498][ T5061] __lookup_slow+0x8c/0x250 [ 73.869527][ T5061] lookup_slow+0x3c/0x60 [ 73.869632][ T5061] path_lookupat+0x2f7/0x500 [ 73.869660][ T5061] filename_lookup+0x147/0x340 [ 73.869700][ T5061] user_path_at+0x3e/0x130 [ 73.869733][ T5061] __se_sys_quotactl+0xb6/0x670 [ 73.869757][ T5061] __x64_sys_quotactl+0x55/0x70 [ 73.869788][ T5061] x64_sys_call+0x19a4/0x3000 [ 73.869813][ T5061] do_syscall_64+0xd8/0x2a0 [ 73.869861][ T5061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.869884][ T5061] RIP: 0033:0x7f0eab25f749 [ 73.869900][ T5061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.869918][ T5061] RSP: 002b:00007f0ea9cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 73.869943][ T5061] RAX: ffffffffffffffda RBX: 00007f0eab4b5fa0 RCX: 00007f0eab25f749 [ 73.870016][ T5061] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000202 [ 73.870030][ T5061] RBP: 00007f0ea9cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.870043][ T5061] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 73.870056][ T5061] R13: 00007f0eab4b6038 R14: 00007f0eab4b5fa0 R15: 00007fffc1e1b6d8 [ 73.870075][ T5061] [ 73.935701][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 74.089486][ T5060] siw: device registration error -23 [ 74.122280][ T5071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.540'. [ 74.170920][ T5076] loop3: detected capacity change from 0 to 512 [ 74.183261][ T5076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.200315][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.213370][ T5076] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.254919][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.310821][ T5081] FAULT_INJECTION: forcing a failure. [ 74.310821][ T5081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.323951][ T5081] CPU: 1 UID: 0 PID: 5081 Comm: syz.3.542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.323982][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.324040][ T5081] Call Trace: [ 74.324045][ T5081] [ 74.324053][ T5081] __dump_stack+0x1d/0x30 [ 74.324080][ T5081] dump_stack_lvl+0xe8/0x140 [ 74.324106][ T5081] dump_stack+0x15/0x1b [ 74.324162][ T5081] should_fail_ex+0x265/0x280 [ 74.324186][ T5081] should_fail+0xb/0x20 [ 74.324207][ T5081] should_fail_usercopy+0x1a/0x20 [ 74.324231][ T5081] _copy_from_iter+0xcf/0xe70 [ 74.324263][ T5081] ? __alloc_skb+0x3bb/0x4d0 [ 74.324284][ T5081] ? __alloc_skb+0x24d/0x4d0 [ 74.324355][ T5081] netlink_sendmsg+0x471/0x6b0 [ 74.324391][ T5081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.324421][ T5081] __sock_sendmsg+0x145/0x180 [ 74.324510][ T5081] ____sys_sendmsg+0x31e/0x4a0 [ 74.324682][ T5081] ___sys_sendmsg+0x17b/0x1d0 [ 74.324731][ T5081] __x64_sys_sendmsg+0xd4/0x160 [ 74.324767][ T5081] x64_sys_call+0x17ba/0x3000 [ 74.324790][ T5081] do_syscall_64+0xd8/0x2a0 [ 74.324853][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.324878][ T5081] RIP: 0033:0x7f8ca80ff749 [ 74.324895][ T5081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.324912][ T5081] RSP: 002b:00007f8ca6b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.324966][ T5081] RAX: ffffffffffffffda RBX: 00007f8ca8355fa0 RCX: 00007f8ca80ff749 [ 74.324980][ T5081] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006 [ 74.324993][ T5081] RBP: 00007f8ca6b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.325007][ T5081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.325020][ T5081] R13: 00007f8ca8356038 R14: 00007f8ca8355fa0 R15: 00007fff0ab085b8 [ 74.325041][ T5081] [ 74.574066][ T5087] loop3: detected capacity change from 0 to 1024 [ 74.654848][ T5087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.986073][ T5107] loop0: detected capacity change from 0 to 1024 [ 74.993867][ T5107] EXT4-fs: inline encryption not supported [ 75.010076][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.049375][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.084553][ T5113] loop0: detected capacity change from 0 to 1024 [ 75.092237][ T5113] EXT4-fs: inline encryption not supported [ 75.109504][ T5113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.151710][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.222651][ T5117] loop0: detected capacity change from 0 to 2048 [ 75.278858][ T3306] Alternate GPT is invalid, using primary GPT. [ 75.285238][ T3306] loop0: p1 p2 p3 [ 75.288985][ T3306] loop0: partition table partially beyond EOD, truncated [ 75.301112][ T5117] Alternate GPT is invalid, using primary GPT. [ 75.307409][ T5117] loop0: p1 p2 p3 [ 75.311157][ T5117] loop0: partition table partially beyond EOD, truncated [ 75.344719][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.401372][ T5119] __nla_validate_parse: 2 callbacks suppressed [ 75.401395][ T5119] netlink: 64 bytes leftover after parsing attributes in process `syz.3.556'. [ 75.434060][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 75.435060][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 75.445107][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 75.472683][ T5119] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.499488][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 75.512355][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 75.523207][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 76.690949][ T2220] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.112692][ T5146] xt_CT: No such helper "pptp" [ 77.481765][ T5149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.493935][ T5149] loop3: detected capacity change from 0 to 1024 [ 77.501114][ T5149] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 77.679929][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 77.679945][ T29] audit: type=1400 audit(1765030963.639:16898): avc: denied { ioctl } for pid=5156 comm="syz.0.572" path="socket:[10353]" dev="sockfs" ino=10353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.711520][ T29] audit: type=1400 audit(1765030963.639:16899): avc: denied { write } for pid=5156 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.732777][ T29] audit: type=1326 audit(1765030963.689:16900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.756546][ T29] audit: type=1326 audit(1765030963.689:16901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.780061][ T29] audit: type=1326 audit(1765030963.689:16902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.803538][ T29] audit: type=1326 audit(1765030963.689:16903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.827133][ T29] audit: type=1326 audit(1765030963.689:16904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.850552][ T29] audit: type=1326 audit(1765030963.689:16905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.874031][ T29] audit: type=1326 audit(1765030963.689:16906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 77.897510][ T29] audit: type=1326 audit(1765030963.689:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 78.747574][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.747629][ T3628] Bluetooth: hci0: command 0x1003 tx timeout [ 79.101511][ T5186] loop0: detected capacity change from 0 to 2048 [ 79.168831][ T3306] Alternate GPT is invalid, using primary GPT. [ 79.175197][ T3306] loop0: p1 p2 p3 [ 79.178973][ T3306] loop0: partition table partially beyond EOD, truncated [ 79.193330][ T5186] Alternate GPT is invalid, using primary GPT. [ 79.199580][ T5186] loop0: p1 p2 p3 [ 79.203433][ T5186] loop0: partition table partially beyond EOD, truncated [ 79.283652][ T5194] loop1: detected capacity change from 0 to 1024 [ 79.298372][ T5194] EXT4-fs: inline encryption not supported [ 79.324221][ T5198] all: renamed from team_slave_0 (while UP) [ 79.332796][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.365603][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.407231][ T5198] loop0: detected capacity change from 0 to 8192 [ 79.427955][ T3306] loop0: p1 p2 < > p3 p4 < p5 > [ 79.432929][ T3306] loop0: partition table partially beyond EOD, truncated [ 79.440707][ T3306] loop0: p1 size 100663296 extends beyond EOD, truncated [ 79.453466][ T3306] loop0: p2 start 591104 is beyond EOD, truncated [ 79.460009][ T3306] loop0: p3 start 33572980 is beyond EOD, truncated [ 79.471844][ T3306] loop0: p5 size 100663296 extends beyond EOD, truncated [ 79.547388][ T5198] loop0: p1 p2 < > p3 p4 < p5 > [ 79.552420][ T5198] loop0: partition table partially beyond EOD, truncated [ 79.559629][ T5198] loop0: p1 size 100663296 extends beyond EOD, truncated [ 79.567712][ T5198] loop0: p2 start 591104 is beyond EOD, truncated [ 79.574201][ T5198] loop0: p3 start 33572980 is beyond EOD, truncated [ 79.581945][ T5198] loop0: p5 size 100663296 extends beyond EOD, truncated [ 79.871534][ T5217] loop0: detected capacity change from 0 to 2048 [ 79.878073][ T3672] Bluetooth: hci1: command 0x1003 tx timeout [ 79.878707][ T3627] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 79.939490][ T3306] Alternate GPT is invalid, using primary GPT. [ 79.945847][ T3306] loop0: p1 p2 p3 [ 79.949614][ T3306] loop0: partition table partially beyond EOD, truncated [ 79.971650][ T5217] Alternate GPT is invalid, using primary GPT. [ 79.977968][ T5217] loop0: p1 p2 p3 [ 79.981697][ T5217] loop0: partition table partially beyond EOD, truncated [ 80.093086][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.117901][ T3627] Bluetooth: hci2: command 0x1003 tx timeout [ 80.124065][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 80.158771][ T5221] loop0: detected capacity change from 0 to 1024 [ 80.169297][ T5221] EXT4-fs: inline encryption not supported [ 80.192468][ T5221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.409831][ T5231] loop2: detected capacity change from 0 to 1024 [ 80.416807][ T5231] EXT4-fs: inline encryption not supported [ 80.450435][ T5231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.485241][ T5237] loop4: detected capacity change from 0 to 512 [ 80.496782][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.510103][ T5237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.532996][ T5237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.548102][ T5237] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.593318][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.625765][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 80.635676][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 80.666632][ T5243] siw: device registration error -23 [ 80.708257][ T5249] loop2: detected capacity change from 0 to 256 [ 80.717242][ T5249] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.771028][ T5250] loop3: detected capacity change from 0 to 764 [ 80.792898][ T5250] iso9660: Unknown parameter 'uxd' [ 80.818300][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.916299][ T5260] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.953151][ T5260] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.997299][ T5268] netlink: 112 bytes leftover after parsing attributes in process `syz.3.618'. [ 81.007117][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.043970][ T2220] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.058563][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 81.088432][ T5283] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 81.104400][ T2220] Bluetooth: hci1: Frame reassembly failed (-84) [ 81.114868][ T5283] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.129565][ T5283] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.619: iget: special inode unallocated [ 81.142703][ T5283] EXT4-fs (loop3): Remounting filesystem read-only [ 81.149536][ T5283] EXT4-fs (loop3): no journal found [ 81.154745][ T5283] EXT4-fs (loop3): can't get journal size [ 81.161748][ T5283] EXT4-fs (loop3): filesystem is read-only [ 81.168350][ T5283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.285620][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.322142][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 81.932466][ T5305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.626'. [ 82.137513][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 82.159267][ T5316] IPv6: Can't replace route, no match found [ 82.170603][ T5316] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 82.181685][ T5316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 82.221451][ T5316] team0: Port device geneve1 added [ 82.827580][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 82.834163][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.999730][ T5316] syz.0.630 (5316) used greatest stack depth: 10056 bytes left [ 83.147573][ T3627] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 83.151113][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 83.269936][ T5333] netlink: 240 bytes leftover after parsing attributes in process `syz.3.636'. [ 83.280530][ T5331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 83.517140][ T29] kauditd_printk_skb: 2033 callbacks suppressed [ 83.517156][ T29] audit: type=1400 audit(1765030969.469:18941): avc: denied { bind } for pid=5334 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.542958][ T29] audit: type=1400 audit(1765030969.479:18942): avc: denied { listen } for pid=5334 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.562616][ T29] audit: type=1400 audit(1765030969.479:18943): avc: denied { read } for pid=5334 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.582001][ T29] audit: type=1400 audit(1765030969.479:18944): avc: denied { write } for pid=5334 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.785632][ T5350] all: renamed from team_slave_0 (while UP) [ 83.821721][ T5352] set_capacity_and_notify: 2 callbacks suppressed [ 83.821734][ T5352] loop1: detected capacity change from 0 to 1024 [ 83.841569][ T5352] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 83.862601][ T5354] loop3: detected capacity change from 0 to 1024 [ 83.865049][ T5352] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.881184][ T5352] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.643: iget: special inode unallocated [ 83.894026][ T5352] EXT4-fs (loop1): Remounting filesystem read-only [ 83.901048][ T5354] EXT4-fs: Ignoring removed orlov option [ 83.917352][ T5354] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 83.936126][ T5352] EXT4-fs (loop1): no journal found [ 83.941445][ T5352] EXT4-fs (loop1): can't get journal size [ 83.952067][ T5352] EXT4-fs (loop1): filesystem is read-only [ 83.959092][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.977587][ T5354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.018526][ T5354] process 'syz.3.644' launched './file0/file0' with NULL argv: empty string added [ 84.033822][ T29] audit: type=1326 audit(1765030969.989:18945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.057318][ T29] audit: type=1326 audit(1765030969.989:18946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.080852][ T29] audit: type=1326 audit(1765030969.989:18947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.104238][ T29] audit: type=1326 audit(1765030969.989:18948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.128061][ T29] audit: type=1326 audit(1765030969.989:18949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.151443][ T29] audit: type=1326 audit(1765030969.989:18950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089084f749 code=0x7ffc0000 [ 84.181344][ T5367] FAULT_INJECTION: forcing a failure. [ 84.181344][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.194535][ T5367] CPU: 1 UID: 0 PID: 5367 Comm: syz.3.644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.194597][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.194606][ T5367] Call Trace: [ 84.194609][ T5367] [ 84.194623][ T5367] __dump_stack+0x1d/0x30 [ 84.194639][ T5367] dump_stack_lvl+0xe8/0x140 [ 84.194651][ T5367] dump_stack+0x15/0x1b [ 84.194678][ T5367] should_fail_ex+0x265/0x280 [ 84.194691][ T5367] should_fail+0xb/0x20 [ 84.194701][ T5367] should_fail_usercopy+0x1a/0x20 [ 84.194715][ T5367] strncpy_from_user+0x27/0x260 [ 84.194733][ T5367] getname_flags+0xae/0x3b0 [ 84.194768][ T5367] path_setxattrat+0x223/0x310 [ 84.194790][ T5367] __x64_sys_setxattr+0x6e/0x90 [ 84.194803][ T5367] x64_sys_call+0xf1e/0x3000 [ 84.194885][ T5367] do_syscall_64+0xd8/0x2a0 [ 84.194956][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.194968][ T5367] RIP: 0033:0x7f8ca80ff749 [ 84.195024][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.195034][ T5367] RSP: 002b:00007f8ca6b3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 84.195046][ T5367] RAX: ffffffffffffffda RBX: 00007f8ca8356090 RCX: 00007f8ca80ff749 [ 84.195053][ T5367] RDX: 0000200000001400 RSI: 0000200000000080 RDI: 00002000000000c0 [ 84.195061][ T5367] RBP: 00007f8ca6b3e090 R08: 0000000000000002 R09: 0000000000000000 [ 84.195068][ T5367] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 84.195075][ T5367] R13: 00007f8ca8356128 R14: 00007f8ca8356090 R15: 00007fff0ab085b8 [ 84.195089][ T5367] [ 84.365587][ T5366] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 84.374406][ T5366] bond0: option packets_per_slave: allowed values 0 - 65535 [ 84.393501][ T5369] loop4: detected capacity change from 0 to 1024 [ 84.405130][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.420228][ T5369] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.460377][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.529162][ T5377] loop4: detected capacity change from 0 to 512 [ 84.538538][ T5375] Process accounting resumed [ 84.548826][ T2220] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.573281][ T5377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.594711][ T5377] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.658953][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.668465][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 84.732396][ T5397] FAULT_INJECTION: forcing a failure. [ 84.732396][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.745543][ T5397] CPU: 0 UID: 0 PID: 5397 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.745572][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.745583][ T5397] Call Trace: [ 84.745589][ T5397] [ 84.745596][ T5397] __dump_stack+0x1d/0x30 [ 84.745618][ T5397] dump_stack_lvl+0xe8/0x140 [ 84.745790][ T5397] dump_stack+0x15/0x1b [ 84.745854][ T5397] should_fail_ex+0x265/0x280 [ 84.745875][ T5397] should_fail+0xb/0x20 [ 84.745892][ T5397] should_fail_usercopy+0x1a/0x20 [ 84.745913][ T5397] _copy_from_user+0x1c/0xb0 [ 84.746000][ T5397] ___sys_sendmsg+0xc1/0x1d0 [ 84.746036][ T5397] __x64_sys_sendmsg+0xd4/0x160 [ 84.746064][ T5397] x64_sys_call+0x17ba/0x3000 [ 84.746092][ T5397] do_syscall_64+0xd8/0x2a0 [ 84.746235][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.746254][ T5397] RIP: 0033:0x7f4617e3f749 [ 84.746268][ T5397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.746288][ T5397] RSP: 002b:00007f46168a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.746310][ T5397] RAX: ffffffffffffffda RBX: 00007f4618095fa0 RCX: 00007f4617e3f749 [ 84.746324][ T5397] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 84.746335][ T5397] RBP: 00007f46168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.746346][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.746358][ T5397] R13: 00007f4618096038 R14: 00007f4618095fa0 R15: 00007ffcf53acbd8 [ 84.746375][ T5397] [ 86.103091][ T5443] FAULT_INJECTION: forcing a failure. [ 86.103091][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.116350][ T5443] CPU: 1 UID: 0 PID: 5443 Comm: syz.2.679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.116375][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.116386][ T5443] Call Trace: [ 86.116391][ T5443] [ 86.116405][ T5443] __dump_stack+0x1d/0x30 [ 86.116445][ T5443] dump_stack_lvl+0xe8/0x140 [ 86.116470][ T5443] dump_stack+0x15/0x1b [ 86.116493][ T5443] should_fail_ex+0x265/0x280 [ 86.116518][ T5443] should_fail+0xb/0x20 [ 86.116539][ T5443] should_fail_usercopy+0x1a/0x20 [ 86.116598][ T5443] _copy_from_user+0x1c/0xb0 [ 86.116628][ T5443] do_ipv6_setsockopt+0x124/0x2160 [ 86.116751][ T5443] ? kstrtoull+0x111/0x140 [ 86.116783][ T5443] ? __rcu_read_unlock+0x4f/0x70 [ 86.116803][ T5443] ? avc_has_perm_noaudit+0xab/0x130 [ 86.116901][ T5443] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 86.116932][ T5443] ipv6_setsockopt+0x59/0x130 [ 86.116960][ T5443] tcp_setsockopt+0x98/0xb0 [ 86.116990][ T5443] sock_common_setsockopt+0x69/0x80 [ 86.117013][ T5443] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 86.117059][ T5443] __sys_setsockopt+0x184/0x200 [ 86.117215][ T5443] __x64_sys_setsockopt+0x64/0x80 [ 86.117243][ T5443] x64_sys_call+0x21d5/0x3000 [ 86.117339][ T5443] do_syscall_64+0xd8/0x2a0 [ 86.117374][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.117404][ T5443] RIP: 0033:0x7f0eab25f749 [ 86.117421][ T5443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.117485][ T5443] RSP: 002b:00007f0ea9cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.117504][ T5443] RAX: ffffffffffffffda RBX: 00007f0eab4b5fa0 RCX: 00007f0eab25f749 [ 86.117516][ T5443] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 86.117531][ T5443] RBP: 00007f0ea9cc7090 R08: 0000000000000068 R09: 0000000000000000 [ 86.117542][ T5443] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 86.117591][ T5443] R13: 00007f0eab4b6038 R14: 00007f0eab4b5fa0 R15: 00007fffc1e1b6d8 [ 86.117611][ T5443] [ 86.352099][ T5445] __nla_validate_parse: 3 callbacks suppressed [ 86.352113][ T5445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.680'. [ 86.587570][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.587720][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 86.747590][ T3627] Bluetooth: hci1: command 0x1003 tx timeout [ 86.747594][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 86.884604][ T5460] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.118703][ T5462] loop1: detected capacity change from 0 to 1024 [ 87.125405][ T5462] EXT4-fs: inline encryption not supported [ 87.141738][ T5462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.169927][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.203298][ T5469] FAULT_INJECTION: forcing a failure. [ 87.203298][ T5469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.216475][ T5469] CPU: 0 UID: 0 PID: 5469 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.216526][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.216534][ T5469] Call Trace: [ 87.216539][ T5469] [ 87.216544][ T5469] __dump_stack+0x1d/0x30 [ 87.216639][ T5469] dump_stack_lvl+0xe8/0x140 [ 87.216682][ T5469] dump_stack+0x15/0x1b [ 87.216694][ T5469] should_fail_ex+0x265/0x280 [ 87.216707][ T5469] should_fail+0xb/0x20 [ 87.216717][ T5469] should_fail_usercopy+0x1a/0x20 [ 87.216791][ T5469] _copy_from_user+0x1c/0xb0 [ 87.216807][ T5469] ucma_write+0xd9/0x250 [ 87.216898][ T5469] ? __pfx_ucma_write+0x10/0x10 [ 87.216914][ T5469] vfs_write+0x269/0x960 [ 87.216925][ T5469] ? __rcu_read_unlock+0x4f/0x70 [ 87.216977][ T5469] ? __fget_files+0x184/0x1c0 [ 87.216992][ T5469] ksys_write+0xda/0x1a0 [ 87.217004][ T5469] __x64_sys_write+0x40/0x50 [ 87.217015][ T5469] x64_sys_call+0x2847/0x3000 [ 87.217028][ T5469] do_syscall_64+0xd8/0x2a0 [ 87.217090][ T5469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.217103][ T5469] RIP: 0033:0x7f2ed493f749 [ 87.217112][ T5469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.217123][ T5469] RSP: 002b:00007f2ed339f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.217137][ T5469] RAX: ffffffffffffffda RBX: 00007f2ed4b95fa0 RCX: 00007f2ed493f749 [ 87.217144][ T5469] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.217151][ T5469] RBP: 00007f2ed339f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.217159][ T5469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.217166][ T5469] R13: 00007f2ed4b96038 R14: 00007f2ed4b95fa0 R15: 00007ffcd34b99a8 [ 87.217288][ T5469] [ 87.436526][ T5475] loop3: detected capacity change from 0 to 512 [ 87.459858][ T5475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.472476][ T5475] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.493716][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.505243][ T5483] netlink: 'syz.2.694': attribute type 13 has an invalid length. [ 87.544408][ T5488] loop3: detected capacity change from 0 to 1024 [ 87.560938][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.568138][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.578650][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.620220][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.630450][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.641153][ T5494] loop1: detected capacity change from 0 to 512 [ 87.650400][ T5494] msdos: Unknown parameter 'ߢŒ!¾Í‡á?ÁÔ½LNo×m†x3ȵòœ³JsÉfé‡OTaD1C' [ 87.714606][ T5485] 8021q: VLANs not supported on ip6gre0 [ 87.721278][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.738997][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.748238][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.749814][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.757290][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.779338][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.795528][ T5498] loop3: detected capacity change from 0 to 128 [ 87.986725][ T5501] loop4: detected capacity change from 0 to 1024 [ 87.993662][ T5501] EXT4-fs: inline encryption not supported [ 88.009499][ T5501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.037104][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.345679][ T5518] all: renamed from team_slave_0 (while UP) [ 88.418964][ T5518] loop1: p1 p2 < > p3 p4 < p5 > [ 88.423915][ T5518] loop1: partition table partially beyond EOD, truncated [ 88.431127][ T5518] loop1: p1 size 100663296 extends beyond EOD, truncated [ 88.438826][ T5518] loop1: p2 start 591104 is beyond EOD, truncated [ 88.445265][ T5518] loop1: p3 start 33572980 is beyond EOD, truncated [ 88.452857][ T5518] loop1: p5 size 100663296 extends beyond EOD, truncated [ 88.455365][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 88.469229][ T5523] netlink: 52 bytes leftover after parsing attributes in process `syz.0.708'. [ 88.695319][ T5529] EXT4-fs: inline encryption not supported [ 88.710292][ T5529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.724711][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 88.724726][ T29] audit: type=1326 audit(1765030974.679:19280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.754448][ T29] audit: type=1326 audit(1765030974.679:19281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.777982][ T29] audit: type=1326 audit(1765030974.679:19282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.801387][ T29] audit: type=1326 audit(1765030974.679:19284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.824816][ T29] audit: type=1326 audit(1765030974.679:19285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.848246][ T29] audit: type=1326 audit(1765030974.679:19286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.871621][ T29] audit: type=1326 audit(1765030974.679:19283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.895071][ T29] audit: type=1326 audit(1765030974.679:19287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.918447][ T29] audit: type=1326 audit(1765030974.679:19288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.941888][ T29] audit: type=1326 audit(1765030974.679:19289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5528 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 88.966242][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.122279][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 89.129068][ T5550] set_capacity_and_notify: 3 callbacks suppressed [ 89.129080][ T5550] loop4: detected capacity change from 0 to 2048 [ 89.168764][ T3306] Alternate GPT is invalid, using primary GPT. [ 89.175077][ T3306] loop4: p1 p2 p3 [ 89.178815][ T3306] loop4: partition table partially beyond EOD, truncated [ 89.190726][ T5550] Alternate GPT is invalid, using primary GPT. [ 89.197032][ T5550] loop4: p1 p2 p3 [ 89.200861][ T5550] loop4: partition table partially beyond EOD, truncated [ 89.274031][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 89.283752][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 89.348554][ T5560] loop4: detected capacity change from 0 to 128 [ 89.455506][ T5573] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.489367][ T5573] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.509389][ T5574] tipc: Started in network mode [ 89.514267][ T5574] tipc: Node identity 1a87366a5b56, cluster identity 4711 [ 89.521465][ T5574] tipc: Enabled bearer , priority 0 [ 89.529815][ T5574] tipc: Disabling bearer [ 89.539795][ T5573] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.609596][ T5573] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.675732][ T2220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.687081][ T2220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.698660][ T2220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.710184][ T2220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742080][ T5576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.732'. [ 89.787592][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 89.787678][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.824082][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 89.833520][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 89.849780][ T5580] siw: device registration error -23 [ 89.944908][ T5584] loop1: detected capacity change from 0 to 8192 [ 89.976455][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.129178][ T5592] FAULT_INJECTION: forcing a failure. [ 90.129178][ T5592] name failslab, interval 1, probability 0, space 0, times 0 [ 90.141850][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.0.740 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.141952][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.141966][ T5592] Call Trace: [ 90.141973][ T5592] [ 90.142030][ T5592] __dump_stack+0x1d/0x30 [ 90.142045][ T5592] dump_stack_lvl+0xe8/0x140 [ 90.142065][ T5592] dump_stack+0x15/0x1b [ 90.142077][ T5592] should_fail_ex+0x265/0x280 [ 90.142153][ T5592] should_failslab+0x8c/0xb0 [ 90.142166][ T5592] __kmalloc_noprof+0xb9/0x5a0 [ 90.142246][ T5592] ? inotify_handle_inode_event+0x125/0x3d0 [ 90.142261][ T5592] ? refcount_dec_and_lock+0x111/0x170 [ 90.142351][ T5592] inotify_handle_inode_event+0x125/0x3d0 [ 90.142446][ T5592] inotify_ignored_and_remove_idr+0x29/0x60 [ 90.142460][ T5592] inotify_freeing_mark+0x1d/0x30 [ 90.142473][ T5592] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 90.142556][ T5592] fsnotify_clear_marks_by_group+0x3b6/0x4b0 [ 90.142570][ T5592] ? __pfx_inotify_release+0x10/0x10 [ 90.142585][ T5592] fsnotify_destroy_group+0x53/0x180 [ 90.142596][ T5592] ? __rcu_read_unlock+0x4f/0x70 [ 90.142671][ T5592] inotify_release+0x1f/0x30 [ 90.142702][ T5592] __fput+0x29b/0x650 [ 90.142732][ T5592] fput_close_sync+0xad/0x190 [ 90.142763][ T5592] __x64_sys_close+0x56/0xf0 [ 90.142819][ T5592] x64_sys_call+0x2c25/0x3000 [ 90.142878][ T5592] do_syscall_64+0xd8/0x2a0 [ 90.142897][ T5592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.142961][ T5592] RIP: 0033:0x7f089084f749 [ 90.142970][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.143006][ T5592] RSP: 002b:00007f088f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 90.143018][ T5592] RAX: ffffffffffffffda RBX: 00007f0890aa5fa0 RCX: 00007f089084f749 [ 90.143025][ T5592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 90.143032][ T5592] RBP: 00007f088f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.143103][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.143110][ T5592] R13: 00007f0890aa6038 R14: 00007f0890aa5fa0 R15: 00007fff9babec28 [ 90.143126][ T5592] [ 90.418363][ T5602] all: renamed from team_slave_0 (while UP) [ 90.467349][ T5598] loop4: detected capacity change from 0 to 8192 [ 90.545037][ T5616] loop4: detected capacity change from 0 to 128 [ 90.572577][ T5618] ip6gre1: entered allmulticast mode [ 90.585299][ T5618] bridge0: port 3(batadv1) entered blocking state [ 90.592050][ T5618] bridge0: port 3(batadv1) entered disabled state [ 90.599527][ T5618] batadv1: entered allmulticast mode [ 90.605468][ T5618] batadv1: entered promiscuous mode [ 90.642874][ T5618] veth0_to_bridge: entered promiscuous mode [ 90.649317][ T5617] veth0_to_bridge: left promiscuous mode [ 91.087580][ T2220] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 91.096942][ T2220] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 91.158322][ T3672] Bluetooth: hci1: command 0x1003 tx timeout [ 91.164389][ T3627] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 91.501864][ T2220] Bluetooth: hci1: Frame reassembly failed (-84) [ 91.531405][ T5633] tipc: Enabled bearer , priority 0 [ 91.538850][ T5632] tipc: Resetting bearer [ 91.558229][ T5632] tipc: Disabling bearer [ 91.692413][ T5652] all: renamed from team_slave_0 (while UP) [ 91.789521][ T5657] tipc: Started in network mode [ 91.794428][ T5657] tipc: Node identity 96f190498c42, cluster identity 4711 [ 91.801597][ T5657] tipc: Enabled bearer , priority 0 [ 91.824874][ T5656] tipc: Disabling bearer [ 91.983128][ T5666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 91.992048][ T5666] netlink: 108 bytes leftover after parsing attributes in process `syz.3.766'. [ 92.001799][ T5666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 92.011331][ T5666] netlink: 108 bytes leftover after parsing attributes in process `syz.3.766'. [ 92.020371][ T5666] netlink: 84 bytes leftover after parsing attributes in process `syz.3.766'. [ 92.029286][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.152482][ T5673] loop3: detected capacity change from 0 to 128 [ 92.520105][ T5680] FAULT_INJECTION: forcing a failure. [ 92.520105][ T5680] name failslab, interval 1, probability 0, space 0, times 0 [ 92.532748][ T5680] CPU: 0 UID: 0 PID: 5680 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.532812][ T5680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.532824][ T5680] Call Trace: [ 92.532830][ T5680] [ 92.532838][ T5680] __dump_stack+0x1d/0x30 [ 92.532864][ T5680] dump_stack_lvl+0xe8/0x140 [ 92.532961][ T5680] dump_stack+0x15/0x1b [ 92.533013][ T5680] should_fail_ex+0x265/0x280 [ 92.533038][ T5680] should_failslab+0x8c/0xb0 [ 92.533062][ T5680] __kvmalloc_node_noprof+0x149/0x6b0 [ 92.533145][ T5680] ? alloc_fdtable+0x115/0x1d0 [ 92.533222][ T5680] alloc_fdtable+0x115/0x1d0 [ 92.533243][ T5680] dup_fd+0x492/0x510 [ 92.533263][ T5680] ? _raw_spin_unlock+0x26/0x50 [ 92.533287][ T5680] ksys_unshare+0x346/0x6d0 [ 92.533363][ T5680] ? trace_sys_enter+0xd0/0xf0 [ 92.533388][ T5680] __x64_sys_unshare+0x1f/0x30 [ 92.533412][ T5680] x64_sys_call+0x2ae6/0x3000 [ 92.533478][ T5680] do_syscall_64+0xd8/0x2a0 [ 92.533547][ T5680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.533572][ T5680] RIP: 0033:0x7f8ca80ff749 [ 92.533587][ T5680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.533604][ T5680] RSP: 002b:00007f8ca6b3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.533629][ T5680] RAX: ffffffffffffffda RBX: 00007f8ca8356090 RCX: 00007f8ca80ff749 [ 92.533642][ T5680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020480 [ 92.533653][ T5680] RBP: 00007f8ca6b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 92.533665][ T5680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.533678][ T5680] R13: 00007f8ca8356128 R14: 00007f8ca8356090 R15: 00007fff0ab085b8 [ 92.533697][ T5680] [ 92.732499][ T5686] loop1: detected capacity change from 0 to 1024 [ 92.739410][ T5686] EXT4-fs: inline encryption not supported [ 92.759125][ T5686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.251876][ T5703] all: renamed from team_slave_0 [ 93.580349][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.597630][ T3672] Bluetooth: hci1: command 0x1003 tx timeout [ 93.627656][ T3627] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 93.962629][ T29] kauditd_printk_skb: 1795 callbacks suppressed [ 93.962642][ T29] audit: type=1326 audit(1765030979.919:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.0.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f089084f749 code=0x0 [ 94.087050][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.785'. [ 94.100418][ T5726] loop1: detected capacity change from 0 to 128 [ 94.112491][ T29] audit: type=1400 audit(1765030980.069:21086): avc: denied { create } for pid=5725 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.144939][ T29] audit: type=1400 audit(1765030980.089:21087): avc: denied { ioctl } for pid=5725 comm="syz.1.786" path="socket:[12329]" dev="sockfs" ino=12329 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.184136][ T29] audit: type=1326 audit(1765030980.109:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.207605][ T29] audit: type=1326 audit(1765030980.109:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.231073][ T29] audit: type=1326 audit(1765030980.109:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.254544][ T29] audit: type=1326 audit(1765030980.129:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.277950][ T29] audit: type=1326 audit(1765030980.129:21092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.301376][ T29] audit: type=1326 audit(1765030980.129:21093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.324820][ T29] audit: type=1326 audit(1765030980.129:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 94.369850][ T5735] all: renamed from team_slave_0 (while UP) [ 94.452138][ T5735] loop4: detected capacity change from 0 to 8192 [ 94.498341][ T3306] loop4: p1 p2 < > p3 p4 < p5 > [ 94.503303][ T3306] loop4: partition table partially beyond EOD, truncated [ 94.511414][ T3306] loop4: p1 size 100663296 extends beyond EOD, truncated [ 94.520070][ T3306] loop4: p2 start 591104 is beyond EOD, truncated [ 94.526583][ T3306] loop4: p3 start 33572980 is beyond EOD, truncated [ 94.534708][ T3306] loop4: p5 size 100663296 extends beyond EOD, truncated [ 94.547235][ T5735] loop4: p1 p2 < > p3 p4 < p5 > [ 94.552223][ T5735] loop4: partition table partially beyond EOD, truncated [ 94.560016][ T5735] loop4: p1 size 100663296 extends beyond EOD, truncated [ 94.567993][ T5735] loop4: p2 start 591104 is beyond EOD, truncated [ 94.574438][ T5735] loop4: p3 start 33572980 is beyond EOD, truncated [ 94.582004][ T5735] loop4: p5 size 100663296 extends beyond EOD, truncated [ 94.660478][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.664047][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.668123][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.679019][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 94.708790][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 94.709575][ T5756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5756 comm=syz.4.801 [ 94.719609][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.730901][ T5756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5756 comm=syz.4.801 [ 94.753703][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.829793][ T5764] loop4: detected capacity change from 0 to 1024 [ 94.836601][ T5764] EXT4-fs: inline encryption not supported [ 94.849272][ T5764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.875706][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.322848][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 95.350429][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 95.364721][ T5783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.398954][ T5791] loop1: detected capacity change from 0 to 1024 [ 95.405595][ T5791] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 95.706956][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 95.716451][ T5799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.816'. [ 96.316366][ T5807] loop1: detected capacity change from 0 to 2048 [ 96.358558][ T3306] Alternate GPT is invalid, using primary GPT. [ 96.364901][ T3306] loop1: p1 p2 p3 [ 96.368654][ T3306] loop1: partition table partially beyond EOD, truncated [ 96.380821][ T5807] Alternate GPT is invalid, using primary GPT. [ 96.387076][ T5807] loop1: p1 p2 p3 [ 96.390900][ T5807] loop1: partition table partially beyond EOD, truncated [ 96.478607][ T5815] all: renamed from team_slave_0 (while UP) [ 96.491047][ T400] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.530392][ T5815] loop1: detected capacity change from 0 to 8192 [ 96.588294][ T3306] loop1: p1 p2 < > p3 p4 < p5 > [ 96.593299][ T3306] loop1: partition table partially beyond EOD, truncated [ 96.600897][ T5822] tipc: Started in network mode [ 96.605822][ T5822] tipc: Node identity 8ad924c082b, cluster identity 4711 [ 96.606365][ T3306] loop1: p1 size 100663296 extends beyond EOD, truncated [ 96.613005][ T5822] tipc: Enabled bearer , priority 0 [ 96.620648][ T3306] loop1: p2 start 591104 is beyond EOD, truncated [ 96.632983][ T3306] loop1: p3 start 33572980 is beyond EOD, truncated [ 96.640866][ T5821] tipc: Disabling bearer [ 96.640993][ T3306] loop1: p5 size 100663296 extends beyond EOD, truncated [ 96.657375][ T5815] loop1: p1 p2 < > p3 p4 < p5 > [ 96.662344][ T5815] loop1: partition table partially beyond EOD, truncated [ 96.669449][ T3627] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.669717][ T5815] loop1: p1 size 100663296 extends beyond EOD, truncated [ 96.685065][ T5815] loop1: p2 start 591104 is beyond EOD, truncated [ 96.691605][ T5815] loop1: p3 start 33572980 is beyond EOD, truncated [ 96.698782][ T5815] loop1: p5 size 100663296 extends beyond EOD, truncated [ 96.762428][ T5826] FAULT_INJECTION: forcing a failure. [ 96.762428][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 96.775068][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.1.829 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.775096][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.775117][ T5826] Call Trace: [ 96.775124][ T5826] [ 96.775133][ T5826] __dump_stack+0x1d/0x30 [ 96.775159][ T5826] dump_stack_lvl+0xe8/0x140 [ 96.775182][ T5826] dump_stack+0x15/0x1b [ 96.775200][ T5826] should_fail_ex+0x265/0x280 [ 96.775234][ T5826] should_failslab+0x8c/0xb0 [ 96.775332][ T5826] kmem_cache_alloc_noprof+0x69/0x4b0 [ 96.775355][ T5826] ? skb_clone+0x151/0x1f0 [ 96.775466][ T5826] skb_clone+0x151/0x1f0 [ 96.775489][ T5826] pfkey_sendmsg+0x2cc/0x900 [ 96.775517][ T5826] ? avc_has_perm+0xf7/0x180 [ 96.775595][ T5826] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 96.775719][ T5826] __sock_sendmsg+0x145/0x180 [ 96.775756][ T5826] ____sys_sendmsg+0x31e/0x4a0 [ 96.775797][ T5826] ___sys_sendmsg+0x17b/0x1d0 [ 96.775832][ T5826] __x64_sys_sendmsg+0xd4/0x160 [ 96.775927][ T5826] x64_sys_call+0x17ba/0x3000 [ 96.775949][ T5826] do_syscall_64+0xd8/0x2a0 [ 96.775982][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.776003][ T5826] RIP: 0033:0x7f2ed493f749 [ 96.776058][ T5826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.776090][ T5826] RSP: 002b:00007f2ed339f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.776108][ T5826] RAX: ffffffffffffffda RBX: 00007f2ed4b95fa0 RCX: 00007f2ed493f749 [ 96.776119][ T5826] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 96.776131][ T5826] RBP: 00007f2ed339f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.776142][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.776155][ T5826] R13: 00007f2ed4b96038 R14: 00007f2ed4b95fa0 R15: 00007ffcd34b99a8 [ 96.776174][ T5826] [ 96.992445][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 97.002809][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 97.013645][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 97.053213][ T5837] FAULT_INJECTION: forcing a failure. [ 97.053213][ T5837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.066353][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.4.833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.066385][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.066399][ T5837] Call Trace: [ 97.066407][ T5837] [ 97.066415][ T5837] __dump_stack+0x1d/0x30 [ 97.066514][ T5837] dump_stack_lvl+0xe8/0x140 [ 97.066539][ T5837] dump_stack+0x15/0x1b [ 97.066561][ T5837] should_fail_ex+0x265/0x280 [ 97.066586][ T5837] should_fail+0xb/0x20 [ 97.066603][ T5837] should_fail_usercopy+0x1a/0x20 [ 97.066708][ T5837] strncpy_from_user+0x27/0x260 [ 97.066744][ T5837] getname_flags+0xae/0x3b0 [ 97.066772][ T5837] do_sys_openat2+0x60/0x150 [ 97.066841][ T5837] __x64_sys_openat+0xf2/0x120 [ 97.066871][ T5837] x64_sys_call+0x2b07/0x3000 [ 97.066900][ T5837] do_syscall_64+0xd8/0x2a0 [ 97.066938][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.067040][ T5837] RIP: 0033:0x7f4617e3f749 [ 97.067057][ T5837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.067076][ T5837] RSP: 002b:00007f46168a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.067099][ T5837] RAX: ffffffffffffffda RBX: 00007f4618095fa0 RCX: 00007f4617e3f749 [ 97.067114][ T5837] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c [ 97.067128][ T5837] RBP: 00007f46168a7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.067185][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.067256][ T5837] R13: 00007f4618096038 R14: 00007f4618095fa0 R15: 00007ffcf53acbd8 [ 97.067276][ T5837] [ 97.089298][ T5835] loop1: detected capacity change from 0 to 2048 [ 97.199212][ T5843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.836'. [ 97.248729][ T3489] Alternate GPT is invalid, using primary GPT. [ 97.255018][ T3489] loop1: p1 p2 p3 [ 97.258767][ T3489] loop1: partition table partially beyond EOD, truncated [ 97.271364][ T5835] Alternate GPT is invalid, using primary GPT. [ 97.277752][ T5835] loop1: p1 p2 p3 [ 97.281517][ T5835] loop1: partition table partially beyond EOD, truncated [ 97.336293][ T3006] Alternate GPT is invalid, using primary GPT. [ 97.342687][ T3006] loop1: p1 p2 p3 [ 97.346463][ T3006] loop1: partition table partially beyond EOD, truncated [ 97.390581][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 97.415293][ T5856] tipc: Enabled bearer , priority 0 [ 97.423524][ T5854] tipc: Disabling bearer [ 97.473017][ T5845] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.487277][ T5845] loop4: detected capacity change from 0 to 1024 [ 97.494754][ T5845] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 98.116265][ T5869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.848'. [ 98.151591][ T5871] loop4: detected capacity change from 0 to 512 [ 98.172649][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.206165][ T5871] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.255923][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.519154][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 98.526102][ T3672] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 98.773081][ T5889] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.775638][ T5895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5895 comm=syz.4.858 [ 98.792097][ T5895] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5895 comm=syz.4.858 [ 98.823758][ T5889] loop1: detected capacity change from 0 to 1024 [ 98.839872][ T5889] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 98.882089][ T5905] syz.2.863 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.915614][ T5899] loop4: detected capacity change from 0 to 8192 [ 98.933123][ T5907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'. [ 98.969308][ T29] kauditd_printk_skb: 1228 callbacks suppressed [ 98.969322][ T29] audit: type=1326 audit(1765030984.929:22323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.005498][ T29] audit: type=1326 audit(1765030984.929:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.029050][ T29] audit: type=1326 audit(1765030984.929:22325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.052431][ T29] audit: type=1326 audit(1765030984.929:22326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.075960][ T29] audit: type=1326 audit(1765030984.939:22327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.099417][ T29] audit: type=1326 audit(1765030984.939:22328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.122854][ T29] audit: type=1326 audit(1765030984.939:22329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.146236][ T29] audit: type=1326 audit(1765030984.939:22330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.169652][ T29] audit: type=1326 audit(1765030984.939:22331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.193203][ T29] audit: type=1326 audit(1765030984.949:22332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0890882005 code=0x7ffc0000 [ 99.227632][ T5918] random: crng reseeded on system resumption [ 99.262042][ T5921] all: renamed from team_slave_0 (while UP) [ 99.329736][ T5924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5924 comm=syz.0.871 [ 99.342386][ T5924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5924 comm=syz.0.871 [ 99.408674][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.418011][ T3306] loop3: p1 p2 < > p3 p4 < p5 > [ 99.422946][ T3306] loop3: partition table partially beyond EOD, truncated [ 99.443841][ T3306] loop3: p1 size 100663296 extends beyond EOD, truncated [ 99.451936][ T3306] loop3: p2 start 591104 is beyond EOD, truncated [ 99.458383][ T3306] loop3: p3 start 33572980 is beyond EOD, truncated [ 99.472043][ T3306] loop3: p5 size 100663296 extends beyond EOD, truncated [ 99.583559][ T5921] loop3: p1 p2 < > p3 p4 < p5 > [ 99.588536][ T5921] loop3: partition table partially beyond EOD, truncated [ 99.600160][ T5921] loop3: p1 size 100663296 extends beyond EOD, truncated [ 99.608812][ T5921] loop3: p2 start 591104 is beyond EOD, truncated [ 99.615247][ T5921] loop3: p3 start 33572980 is beyond EOD, truncated [ 99.622666][ T5921] loop3: p5 size 100663296 extends beyond EOD, truncated [ 99.855543][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.233697][ T5959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5959 comm=syz.4.886 [ 100.346614][ T5963] set_capacity_and_notify: 1 callbacks suppressed [ 100.346627][ T5963] loop4: detected capacity change from 0 to 128 [ 100.413322][ T5967] loop4: detected capacity change from 0 to 1024 [ 100.428951][ T5967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.474841][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.550019][ T5975] loop1: detected capacity change from 0 to 1024 [ 100.558198][ T5975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 100.568140][ T5975] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.578633][ T5975] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.892: iget: special inode unallocated [ 100.592726][ T5975] EXT4-fs (loop1): Remounting filesystem read-only [ 100.602580][ T5975] EXT4-fs (loop1): no journal found [ 100.607842][ T5975] EXT4-fs (loop1): can't get journal size [ 100.613980][ T5975] EXT4-fs (loop1): filesystem is read-only [ 100.620402][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.687728][ T5980] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 100.697073][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 100.709417][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 100.718722][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 100.727936][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 100.782813][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.844477][ T5990] loop1: detected capacity change from 0 to 2048 [ 100.888740][ T3306] Alternate GPT is invalid, using primary GPT. [ 100.894986][ T3306] loop1: p1 p2 p3 [ 100.898732][ T3306] loop1: partition table partially beyond EOD, truncated [ 100.910691][ T5990] Alternate GPT is invalid, using primary GPT. [ 100.916913][ T5990] loop1: p1 p2 p3 [ 100.920689][ T5990] loop1: partition table partially beyond EOD, truncated [ 100.966058][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.967930][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 100.986113][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 101.002431][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 101.002449][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 101.015594][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 101.467645][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 101.473700][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.611326][ T6015] all: renamed from team_slave_0 (while UP) [ 101.874213][ T6041] loop4: detected capacity change from 0 to 1024 [ 101.901784][ T6041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.955780][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.074319][ T6060] loop1: detected capacity change from 0 to 1024 [ 102.076709][ T6058] all: renamed from team_slave_0 (while UP) [ 102.082471][ T6060] EXT4-fs: inline encryption not supported [ 102.111100][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.713246][ T6073] random: crng reseeded on system resumption [ 102.874439][ T6085] unsupported nla_type 52263 [ 102.940899][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.984441][ T6089] all: renamed from team_slave_0 [ 103.549486][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 103.934332][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 103.977824][ T29] kauditd_printk_skb: 3855 callbacks suppressed [ 103.977840][ T29] audit: type=1326 audit(1765030989.929:26188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 104.007781][ T29] audit: type=1326 audit(1765030989.939:26189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ed49365e7 code=0x7ffc0000 [ 104.031236][ T29] audit: type=1326 audit(1765030989.939:26190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ed48db829 code=0x7ffc0000 [ 104.054580][ T29] audit: type=1326 audit(1765030989.939:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 104.078099][ T29] audit: type=1326 audit(1765030989.949:26192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 104.101583][ T29] audit: type=1326 audit(1765030989.969:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ed49365e7 code=0x7ffc0000 [ 104.124962][ T29] audit: type=1326 audit(1765030989.969:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ed48db829 code=0x7ffc0000 [ 104.148310][ T29] audit: type=1326 audit(1765030989.969:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ed493f749 code=0x7ffc0000 [ 104.187463][ T6128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.244102][ T6140] loop4: detected capacity change from 0 to 1024 [ 104.256398][ T29] audit: type=1326 audit(1765030989.989:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ed49365e7 code=0x7ffc0000 [ 104.279852][ T29] audit: type=1326 audit(1765030989.989:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6112 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ed48db829 code=0x7ffc0000 [ 104.303957][ T6140] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 104.332781][ T6143] loop1: detected capacity change from 0 to 1024 [ 104.392346][ T6145] random: crng reseeded on system resumption [ 104.542754][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.065185][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.186576][ T6168] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.279759][ T6170] netlink: 3 bytes leftover after parsing attributes in process `syz.4.967'. [ 105.288645][ T6170] 0ªX¹¦À: renamed from caif0 [ 105.317836][ T6170] 0ªX¹¦À: entered allmulticast mode [ 105.323094][ T6170] net_ratelimit: 43 callbacks suppressed [ 105.323166][ T6170] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 105.374125][ T6177] FAULT_INJECTION: forcing a failure. [ 105.374125][ T6177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.387235][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.3.970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.387327][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.387335][ T6177] Call Trace: [ 105.387340][ T6177] [ 105.387345][ T6177] __dump_stack+0x1d/0x30 [ 105.387361][ T6177] dump_stack_lvl+0xe8/0x140 [ 105.387373][ T6177] dump_stack+0x15/0x1b [ 105.387495][ T6177] should_fail_ex+0x265/0x280 [ 105.387508][ T6177] should_fail+0xb/0x20 [ 105.387519][ T6177] should_fail_usercopy+0x1a/0x20 [ 105.387544][ T6177] _copy_to_user+0x20/0xa0 [ 105.387649][ T6177] simple_read_from_buffer+0xb5/0x130 [ 105.387686][ T6177] proc_fail_nth_read+0x10e/0x150 [ 105.387756][ T6177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.387775][ T6177] vfs_read+0x1a8/0x770 [ 105.387834][ T6177] ? __rcu_read_unlock+0x4f/0x70 [ 105.387846][ T6177] ? __fget_files+0x184/0x1c0 [ 105.387865][ T6177] ? mutex_lock+0x58/0x90 [ 105.387900][ T6177] ksys_read+0xda/0x1a0 [ 105.387912][ T6177] __x64_sys_read+0x40/0x50 [ 105.387922][ T6177] x64_sys_call+0x2889/0x3000 [ 105.387936][ T6177] do_syscall_64+0xd8/0x2a0 [ 105.388069][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.388082][ T6177] RIP: 0033:0x7f8ca80fe15c [ 105.388091][ T6177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.388149][ T6177] RSP: 002b:00007f8ca6b5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.388242][ T6177] RAX: ffffffffffffffda RBX: 00007f8ca8355fa0 RCX: 00007f8ca80fe15c [ 105.388250][ T6177] RDX: 000000000000000f RSI: 00007f8ca6b5f0a0 RDI: 0000000000000007 [ 105.388257][ T6177] RBP: 00007f8ca6b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.388264][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.388272][ T6177] R13: 00007f8ca8356038 R14: 00007f8ca8355fa0 R15: 00007fff0ab085b8 [ 105.388283][ T6177] [ 105.672323][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 105.688508][ T6181] siw: device registration error -23 [ 105.975336][ T6190] loop1: detected capacity change from 0 to 1024 [ 105.986626][ T6190] EXT4-fs: inline encryption not supported [ 106.013531][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.061945][ T6199] random: crng reseeded on system resumption [ 106.108795][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.117887][ T6197] tipc: Enabled bearer , priority 0 [ 106.129902][ T6201] vlan2: entered promiscuous mode [ 106.135089][ T6201] vlan2: entered allmulticast mode [ 106.140306][ T6201] hsr_slave_1: entered allmulticast mode [ 106.149457][ T6196] tipc: Resetting bearer [ 106.171156][ T6196] tipc: Disabling bearer [ 106.187391][ T6211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.981'. [ 106.204253][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 106.279898][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.987'. [ 106.411282][ T6233] loop4: detected capacity change from 0 to 1024 [ 106.420272][ T6233] EXT4-fs: inline encryption not supported [ 106.478386][ T6235] FAULT_INJECTION: forcing a failure. [ 106.478386][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 106.491081][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.1.988 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.491155][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.491169][ T6235] Call Trace: [ 106.491176][ T6235] [ 106.491205][ T6235] __dump_stack+0x1d/0x30 [ 106.491232][ T6235] dump_stack_lvl+0xe8/0x140 [ 106.491253][ T6235] dump_stack+0x15/0x1b [ 106.491271][ T6235] should_fail_ex+0x265/0x280 [ 106.491436][ T6235] should_failslab+0x8c/0xb0 [ 106.491456][ T6235] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 106.491477][ T6235] ? __d_alloc+0x37/0x340 [ 106.491501][ T6235] __d_alloc+0x37/0x340 [ 106.491578][ T6235] ? security_inode_permission+0x4a/0xb0 [ 106.491601][ T6235] d_alloc_parallel+0x54/0xcd0 [ 106.491633][ T6235] ? __rcu_read_unlock+0x4f/0x70 [ 106.491657][ T6235] ? __d_lookup+0x316/0x340 [ 106.491766][ T6235] ? try_to_unlazy+0x283/0x3d0 [ 106.491792][ T6235] path_openat+0x8c6/0x23b0 [ 106.491854][ T6235] do_filp_open+0x109/0x230 [ 106.491967][ T6235] do_sys_openat2+0xa6/0x150 [ 106.492006][ T6235] __x64_sys_creat+0x65/0x90 [ 106.492040][ T6235] x64_sys_call+0x2f1c/0x3000 [ 106.492065][ T6235] do_syscall_64+0xd8/0x2a0 [ 106.492172][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.492244][ T6235] RIP: 0033:0x7f2ed493f749 [ 106.492262][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.492351][ T6235] RSP: 002b:00007f2ed335d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 106.492369][ T6235] RAX: ffffffffffffffda RBX: 00007f2ed4b96180 RCX: 00007f2ed493f749 [ 106.492381][ T6235] RDX: 0000000000000000 RSI: 00000000000001a0 RDI: 0000200000000300 [ 106.492393][ T6235] RBP: 00007f2ed335d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.492405][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.492496][ T6235] R13: 00007f2ed4b96218 R14: 00007f2ed4b96180 R15: 00007ffcd34b99a8 [ 106.492512][ T6235] [ 106.812302][ T6233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.900177][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.198244][ T6251] all: renamed from team_slave_0 (while UP) [ 107.282411][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.306937][ T6247] loop4: detected capacity change from 0 to 2048 [ 107.358946][ T6247] Alternate GPT is invalid, using primary GPT. [ 107.365238][ T6247] loop4: p1 p2 p3 [ 107.369012][ T6247] loop4: partition table partially beyond EOD, truncated [ 107.507469][ T6270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1008'. [ 107.516646][ T6270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1008'. [ 107.535151][ T6271] tipc: Enabled bearer , priority 0 [ 107.552230][ T6265] tipc: Resetting bearer [ 107.564681][ T6265] tipc: Disabling bearer [ 107.951169][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 108.003425][ T6281] all: renamed from team_slave_0 (while UP) [ 108.025497][ T6283] random: crng reseeded on system resumption [ 108.243005][ T6305] lo speed is unknown, defaulting to 1000 [ 108.997032][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 108.997048][ T29] audit: type=1326 audit(1765030994.949:27146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 109.060330][ T29] audit: type=1326 audit(1765030994.949:27147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 109.083851][ T29] audit: type=1326 audit(1765030994.949:27148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 109.107405][ T29] audit: type=1326 audit(1765030994.959:27149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 109.113432][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 109.130847][ T29] audit: type=1326 audit(1765030994.959:27150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 109.130884][ T29] audit: type=1326 audit(1765030994.959:27151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 109.186415][ T29] audit: type=1326 audit(1765030994.969:27152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 109.209809][ T29] audit: type=1326 audit(1765030994.969:27153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 109.233177][ T29] audit: type=1326 audit(1765030994.969:27154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 109.256540][ T29] audit: type=1326 audit(1765030994.979:27155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.4.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 109.307584][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.376428][ T6336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6336 comm=syz.2.1033 [ 109.619780][ T6348] __nla_validate_parse: 1 callbacks suppressed [ 109.619817][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 109.845725][ T6350] tipc: Enabling of bearer rejected, failed to enable media [ 110.089499][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 110.098797][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 110.117259][ T6361] siw: device registration error -23 [ 110.191090][ T6365] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 110.191090][ T6365] [ 110.517230][ T6373] loop4: detected capacity change from 0 to 8192 [ 110.529064][ T6379] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 110.749561][ T6385] loop4: detected capacity change from 0 to 8192 [ 111.375900][ T6404] FAULT_INJECTION: forcing a failure. [ 111.375900][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.389112][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.2.1060 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.389140][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.389153][ T6404] Call Trace: [ 111.389160][ T6404] [ 111.389168][ T6404] __dump_stack+0x1d/0x30 [ 111.389254][ T6404] dump_stack_lvl+0xe8/0x140 [ 111.389333][ T6404] dump_stack+0x15/0x1b [ 111.389354][ T6404] should_fail_ex+0x265/0x280 [ 111.389385][ T6404] should_fail+0xb/0x20 [ 111.389407][ T6404] should_fail_usercopy+0x1a/0x20 [ 111.389459][ T6404] _copy_from_user+0x1c/0xb0 [ 111.389484][ T6404] ___sys_sendmsg+0xc1/0x1d0 [ 111.389529][ T6404] __x64_sys_sendmsg+0xd4/0x160 [ 111.389630][ T6404] x64_sys_call+0x17ba/0x3000 [ 111.389738][ T6404] do_syscall_64+0xd8/0x2a0 [ 111.389774][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.389797][ T6404] RIP: 0033:0x7f0eab25f749 [ 111.389814][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.389862][ T6404] RSP: 002b:00007f0ea9cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.389892][ T6404] RAX: ffffffffffffffda RBX: 00007f0eab4b5fa0 RCX: 00007f0eab25f749 [ 111.389904][ T6404] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 111.389915][ T6404] RBP: 00007f0ea9cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.389987][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.389998][ T6404] R13: 00007f0eab4b6038 R14: 00007f0eab4b5fa0 R15: 00007fffc1e1b6d8 [ 111.390016][ T6404] [ 111.573974][ T6408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6408 comm=syz.1.1062 [ 111.608003][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 111.647296][ T6418] all: renamed from team_slave_0 (while UP) [ 111.653689][ T6419] netlink: 'syz.0.1063': attribute type 13 has an invalid length. [ 111.693533][ T6422] random: crng reseeded on system resumption [ 111.758280][ T124] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.772464][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.779705][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.872304][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.883402][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.972894][ T6423] all: renamed from team_slave_0 [ 112.049842][ T124] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.068844][ T124] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.077940][ T124] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.090458][ T124] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.269552][ T6440] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.292908][ T6442] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.305521][ T6442] loop4: detected capacity change from 0 to 1024 [ 112.312530][ T6442] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 112.443314][ T6444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6444 comm=syz.0.1076 [ 112.853704][ T6455] random: crng reseeded on system resumption [ 113.787672][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 113.787871][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.963355][ T6480] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.007011][ T29] kauditd_printk_skb: 1096 callbacks suppressed [ 114.007025][ T29] audit: type=1326 audit(1765030999.959:28252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 114.036848][ T29] audit: type=1326 audit(1765030999.959:28253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 114.060294][ T29] audit: type=1326 audit(1765030999.959:28254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 114.083711][ T29] audit: type=1326 audit(1765030999.969:28255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 114.107131][ T29] audit: type=1326 audit(1765030999.969:28256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 114.130507][ T29] audit: type=1326 audit(1765030999.969:28257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 114.153880][ T29] audit: type=1326 audit(1765030999.979:28258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 114.177262][ T29] audit: type=1326 audit(1765030999.979:28259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4617ddb829 code=0x7ffc0000 [ 114.200714][ T29] audit: type=1326 audit(1765030999.979:28260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4617e3f749 code=0x7ffc0000 [ 114.224123][ T29] audit: type=1326 audit(1765030999.999:28261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4617e365e7 code=0x7ffc0000 [ 115.138951][ T6512] all: renamed from team_slave_0 (while UP) [ 115.302685][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 115.445160][ T6527] loop4: detected capacity change from 0 to 1024 [ 115.451878][ T6527] EXT4-fs: Ignoring removed orlov option [ 115.461401][ T6527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.475967][ T6527] SELinux: failed to load policy [ 115.489879][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.510004][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.182923][ T6544] all: renamed from team_slave_0 (while UP) [ 116.325553][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 116.334746][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 116.363183][ T6548] siw: device registration error -23 [ 116.386928][ T6551] tipc: Started in network mode [ 116.391952][ T6551] tipc: Node identity ae1dc305b736, cluster identity 4711 [ 116.399175][ T6551] tipc: Enabled bearer , priority 0 [ 116.406909][ T6550] tipc: Disabling bearer [ 116.433535][ T6553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6553 comm=syz.0.1120 [ 116.469916][ T6555] tipc: Enabled bearer , priority 0 [ 116.479299][ T6554] tipc: Disabling bearer [ 116.540893][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1125'. [ 116.619186][ T6573] all: renamed from team_slave_0 [ 116.640205][ T6575] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.649551][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.658687][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.669400][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.684986][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.693999][ T6575] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 116.701783][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1129'. [ 116.737586][ T6580] random: crng reseeded on system resumption [ 116.998427][ T6586] SELinux: Context @ is not valid (left unmapped). [ 117.100702][ T6591] random: crng reseeded on system resumption [ 117.444414][ T6613] netlink: 'syz.2.1145': attribute type 13 has an invalid length. [ 117.547575][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.293112][ T6633] siw: device registration error -23 [ 118.385568][ T6637] all: renamed from team_slave_0 [ 118.516580][ T6643] syzkaller0: entered promiscuous mode [ 118.522185][ T6643] syzkaller0: entered allmulticast mode [ 118.611567][ T6651] 0ªX¹¦À: renamed from caif0 [ 118.619751][ T6651] 0ªX¹¦À: entered allmulticast mode [ 118.624986][ T6651] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 118.726000][ T6659] netlink: 'syz.1.1165': attribute type 13 has an invalid length. [ 118.770842][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.778037][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.815381][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.824836][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.860622][ T2220] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.870099][ T2220] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.880898][ T2220] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.889745][ T2220] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.014974][ T29] kauditd_printk_skb: 2569 callbacks suppressed [ 119.014991][ T29] audit: type=1400 audit(1765031004.969:30831): avc: denied { module_request } for pid=6663 comm="syz.3.1167" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.043242][ T29] audit: type=1326 audit(1765031004.999:30832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 119.066657][ T29] audit: type=1326 audit(1765031004.999:30833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 119.066683][ T29] audit: type=1326 audit(1765031004.999:30834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 119.067300][ T29] audit: type=1326 audit(1765031004.999:30835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 119.136998][ T29] audit: type=1326 audit(1765031004.999:30836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 119.137026][ T29] audit: type=1326 audit(1765031004.999:30837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 119.137069][ T29] audit: type=1326 audit(1765031005.009:30838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 119.137168][ T29] audit: type=1326 audit(1765031005.009:30839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 119.137183][ T29] audit: type=1326 audit(1765031005.009:30840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 119.213012][ T6664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.273098][ T6664] loop4: detected capacity change from 0 to 1024 [ 119.281373][ T6664] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 120.317730][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.668607][ T6693] netlink: 'syz.4.1178': attribute type 10 has an invalid length. [ 120.676464][ T6693] __nla_validate_parse: 4 callbacks suppressed [ 120.676478][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1178'. [ 120.706556][ T6693] dummy0: entered promiscuous mode [ 120.712576][ T6693] bridge0: port 3(dummy0) entered blocking state [ 120.719113][ T6693] bridge0: port 3(dummy0) entered disabled state [ 120.726169][ T6693] dummy0: entered allmulticast mode [ 120.732291][ T6693] bridge0: port 3(dummy0) entered blocking state [ 120.738679][ T6693] bridge0: port 3(dummy0) entered forwarding state [ 120.747698][ T6695] @0Ù: renamed from bond_slave_1 (while UP) [ 120.768151][ T6693] vhci_hcd: invalid port number 96 [ 120.773287][ T6693] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 120.813614][ T6693] loop4: detected capacity change from 0 to 8192 [ 120.861184][ T3324] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 120.869186][ T3324] FAT-fs (loop4): Filesystem has been set read-only [ 120.878144][ T124] Bluetooth: hci1: Frame reassembly failed (-84) [ 120.902472][ T6707] all: renamed from team_slave_0 (while UP) [ 121.308859][ T6714] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1186'. [ 121.318439][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1186'. [ 121.962881][ T6733] loop4: detected capacity change from 0 to 512 [ 121.980719][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.993547][ T6733] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.014734][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.106676][ T6740] bond1: entered promiscuous mode [ 122.111813][ T6740] bond1: entered allmulticast mode [ 122.117312][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.168496][ T6747] loop4: detected capacity change from 0 to 1024 [ 122.193496][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.239036][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.347567][ T3627] Bluetooth: hci0: command 0x1003 tx timeout [ 122.353759][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.480524][ T6763] loop4: detected capacity change from 0 to 8192 [ 122.556045][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 122.565335][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 122.705465][ T6778] tipc: Enabled bearer , priority 0 [ 122.712652][ T6778] syzkaller0: entered promiscuous mode [ 122.718236][ T6778] syzkaller0: entered allmulticast mode [ 122.808862][ T6775] tipc: Resetting bearer [ 122.816740][ T6775] tipc: Disabling bearer [ 122.907989][ T3672] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 122.908100][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 123.102965][ T400] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.455147][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 123.464775][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 123.490296][ T6804] siw: device registration error -23 [ 123.514079][ T6806] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 123.760459][ T400] Bluetooth: hci1: Frame reassembly failed (-84) [ 123.831696][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 124.022099][ T29] kauditd_printk_skb: 2721 callbacks suppressed [ 124.022110][ T29] audit: type=1326 audit(1765031009.979:33562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.052202][ T29] audit: type=1326 audit(1765031009.989:33563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.075730][ T29] audit: type=1326 audit(1765031009.989:33564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.106291][ T29] audit: type=1326 audit(1765031010.059:33565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.130383][ T29] audit: type=1326 audit(1765031010.089:33566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.154178][ T29] audit: type=1326 audit(1765031010.109:33567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.177942][ T29] audit: type=1326 audit(1765031010.139:33568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.201907][ T29] audit: type=1326 audit(1765031010.159:33569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.226545][ T29] audit: type=1326 audit(1765031010.179:33570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.250566][ T29] audit: type=1326 audit(1765031010.209:33571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f8ca80ff749 code=0x7ffc0000 [ 124.419620][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 124.659632][ T6831] loop4: detected capacity change from 0 to 8192 [ 124.800760][ T6841] loop4: detected capacity change from 0 to 8192 [ 124.818273][ T3306] loop4: p1 p2 < > p3 p4 < p5 > [ 124.823234][ T3306] loop4: partition table partially beyond EOD, truncated [ 124.830603][ T3306] loop4: p1 size 100663296 extends beyond EOD, truncated [ 124.838809][ T3306] loop4: p2 start 591104 is beyond EOD, truncated [ 124.845342][ T3306] loop4: p3 start 33572980 is beyond EOD, truncated [ 124.852552][ T3306] loop4: p5 size 100663296 extends beyond EOD, truncated [ 124.862842][ T6841] loop4: p1 p2 < > p3 p4 < p5 > [ 124.867822][ T6841] loop4: partition table partially beyond EOD, truncated [ 124.875012][ T6841] loop4: p1 size 100663296 extends beyond EOD, truncated [ 124.882789][ T6841] loop4: p2 start 591104 is beyond EOD, truncated [ 124.889290][ T6841] loop4: p3 start 33572980 is beyond EOD, truncated [ 124.896706][ T6841] loop4: p5 size 100663296 extends beyond EOD, truncated [ 124.947245][ T3006] loop4: p1 p2 < > p3 p4 < p5 > [ 124.952237][ T3006] loop4: partition table partially beyond EOD, truncated [ 124.959509][ T3006] loop4: p1 size 100663296 extends beyond EOD, truncated [ 124.966852][ T3006] loop4: p2 start 591104 is beyond EOD, truncated [ 124.973286][ T3006] loop4: p3 start 33572980 is beyond EOD, truncated [ 124.980905][ T3006] loop4: p5 size 100663296 extends beyond EOD, truncated [ 125.009422][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 125.009549][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 125.019294][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.034961][ T6847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.045375][ T3489] udevd[3489]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 125.060262][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 125.061917][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 125.107769][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 125.147678][ T3627] Bluetooth: hci0: command 0x1003 tx timeout [ 125.147689][ T3672] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.595278][ T6857] random: crng reseeded on system resumption [ 125.787588][ T3672] Bluetooth: hci1: command 0x1003 tx timeout [ 125.787601][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 126.337640][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.093365][ T6906] loop4: detected capacity change from 0 to 128 [ 127.110017][ T6906] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.147797][ T6906] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.423913][ T6905] syz.4.1263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 127.438089][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.4.1263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.438122][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.438136][ T6905] Call Trace: [ 127.438145][ T6905] [ 127.438153][ T6905] __dump_stack+0x1d/0x30 [ 127.438177][ T6905] dump_stack_lvl+0xe8/0x140 [ 127.438276][ T6905] dump_stack+0x15/0x1b [ 127.438297][ T6905] dump_header+0x81/0x240 [ 127.438389][ T6905] oom_kill_process+0x295/0x350 [ 127.438413][ T6905] out_of_memory+0x979/0xb80 [ 127.438477][ T6905] try_charge_memcg+0x610/0xa10 [ 127.438584][ T6905] obj_cgroup_charge_pages+0xa6/0x150 [ 127.438613][ T6905] __memcg_kmem_charge_page+0x9f/0x170 [ 127.438652][ T6905] __alloc_frozen_pages_noprof+0x18f/0x360 [ 127.438689][ T6905] alloc_pages_mpol+0xb3/0x260 [ 127.438734][ T6905] alloc_pages_noprof+0x90/0x130 [ 127.438796][ T6905] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 127.438834][ T6905] __kvmalloc_node_noprof+0x492/0x6b0 [ 127.438864][ T6905] ? ip_set_alloc+0x24/0x30 [ 127.438894][ T6905] ? ip_set_alloc+0x24/0x30 [ 127.438983][ T6905] ip_set_alloc+0x24/0x30 [ 127.439015][ T6905] hash_netiface_create+0x282/0x740 [ 127.439049][ T6905] ? __pfx_hash_netiface_create+0x10/0x10 [ 127.439114][ T6905] ip_set_create+0x3cc/0x970 [ 127.439161][ T6905] ? __nla_parse+0x40/0x60 [ 127.439191][ T6905] nfnetlink_rcv_msg+0x4c6/0x590 [ 127.439240][ T6905] netlink_rcv_skb+0x123/0x220 [ 127.439320][ T6905] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 127.439354][ T6905] nfnetlink_rcv+0x167/0x16c0 [ 127.439377][ T6905] ? kmem_cache_free+0xe3/0x3a0 [ 127.439401][ T6905] ? __kfree_skb+0x109/0x150 [ 127.439491][ T6905] ? nlmon_xmit+0x4f/0x60 [ 127.439520][ T6905] ? consume_skb+0x49/0x150 [ 127.439550][ T6905] ? nlmon_xmit+0x4f/0x60 [ 127.439580][ T6905] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 127.439617][ T6905] ? __dev_queue_xmit+0x138d/0x1ec0 [ 127.439644][ T6905] ? __dev_queue_xmit+0x148/0x1ec0 [ 127.439733][ T6905] ? ref_tracker_free+0x37d/0x3e0 [ 127.439763][ T6905] ? __netlink_deliver_tap+0x4dc/0x500 [ 127.439797][ T6905] netlink_unicast+0x5c0/0x690 [ 127.439827][ T6905] netlink_sendmsg+0x58b/0x6b0 [ 127.439933][ T6905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.439977][ T6905] __sock_sendmsg+0x145/0x180 [ 127.440012][ T6905] ____sys_sendmsg+0x31e/0x4a0 [ 127.440098][ T6905] ___sys_sendmsg+0x17b/0x1d0 [ 127.440140][ T6905] __x64_sys_sendmsg+0xd4/0x160 [ 127.440176][ T6905] x64_sys_call+0x17ba/0x3000 [ 127.440227][ T6905] do_syscall_64+0xd8/0x2a0 [ 127.440262][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.440318][ T6905] RIP: 0033:0x7f4617e3f749 [ 127.440344][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.440365][ T6905] RSP: 002b:00007f46168a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.440384][ T6905] RAX: ffffffffffffffda RBX: 00007f4618095fa0 RCX: 00007f4617e3f749 [ 127.440467][ T6905] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 127.440523][ T6905] RBP: 00007f4617ec3f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.440542][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.440556][ T6905] R13: 00007f4618096038 R14: 00007f4618095fa0 R15: 00007ffcf53acbd8 [ 127.440578][ T6905] [ 127.440587][ T6905] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 127.496824][ T6919] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 127.498747][ T6905] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 127.498762][ T6905] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 127.792340][ T6905] Memory cgroup stats for /syz4: [ 127.792697][ T6905] cache 8192 [ 127.800860][ T6905] rss 0 [ 127.803615][ T6905] shmem 0 [ 127.806592][ T6905] mapped_file 0 [ 127.810140][ T6905] dirty 0 [ 127.813065][ T6905] writeback 0 [ 127.816361][ T6905] workingset_refault_anon 123 [ 127.821090][ T6905] workingset_refault_file 1148 [ 127.825842][ T6905] swap 765952 [ 127.829144][ T6905] swapcached 8192 [ 127.832808][ T6905] pgpgin 56988 [ 127.836221][ T6905] pgpgout 56984 [ 127.839777][ T6905] pgfault 99688 [ 127.843218][ T6905] pgmajfault 79 [ 127.846652][ T6905] inactive_anon 8192 [ 127.850570][ T6905] active_anon 0 [ 127.854019][ T6905] inactive_file 8192 [ 127.857961][ T6905] active_file 0 [ 127.861442][ T6905] unevictable 0 [ 127.864896][ T6905] hierarchical_memory_limit 314572800 [ 127.870316][ T6905] hierarchical_memsw_limit 9223372036854771712 [ 127.876459][ T6905] total_cache 8192 [ 127.880324][ T6905] total_rss 0 [ 127.883597][ T6905] total_shmem 0 [ 127.887044][ T6905] total_mapped_file 0 [ 127.891073][ T6905] total_dirty 0 [ 127.894524][ T6905] total_writeback 0 [ 127.898343][ T6905] total_workingset_refault_anon 123 [ 127.903600][ T6905] total_workingset_refault_file 1148 [ 127.908900][ T6905] total_swap 765952 [ 127.912768][ T6905] total_swapcached 8192 [ 127.916908][ T6905] total_pgpgin 56988 [ 127.920830][ T6905] total_pgpgout 56984 [ 127.924792][ T6905] total_pgfault 99688 [ 127.928785][ T6905] total_pgmajfault 79 [ 127.932759][ T6905] total_inactive_anon 8192 [ 127.937172][ T6905] total_active_anon 0 [ 127.940262][ T6928] random: crng reseeded on system resumption [ 127.941213][ T6905] total_inactive_file 8192 [ 127.951566][ T6905] total_active_file 0 [ 127.955535][ T6905] total_unevictable 0 [ 127.959528][ T6905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1263,pid=6904,uid=0 [ 127.974228][ T6905] Memory cgroup out of memory: Killed process 6904 (syz.4.1263) total-vm:94100kB, anon-rss:1268kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 127.976176][ T6906] syz.4.1263 (6906) used greatest stack depth: 10032 bytes left [ 128.048957][ T6905] syz.4.1263 (6905) used greatest stack depth: 7216 bytes left [ 128.080485][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.348146][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 128.348430][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.983111][ T6967] __nla_validate_parse: 1 callbacks suppressed [ 128.983149][ T6967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1290'. [ 129.036956][ T29] kauditd_printk_skb: 1719 callbacks suppressed [ 129.037032][ T29] audit: type=1326 audit(1765031014.989:35291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 129.082838][ T29] audit: type=1326 audit(1765031015.019:35292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 129.106346][ T29] audit: type=1326 audit(1765031015.019:35293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 129.129820][ T29] audit: type=1326 audit(1765031015.019:35294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 129.153525][ T29] audit: type=1326 audit(1765031015.019:35295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 129.177154][ T29] audit: type=1326 audit(1765031015.029:35296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 129.200890][ T29] audit: type=1326 audit(1765031015.029:35297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 129.224490][ T29] audit: type=1326 audit(1765031015.029:35298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eab25f749 code=0x7ffc0000 [ 129.264566][ T29] audit: type=1326 audit(1765031015.039:35299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eab2565e7 code=0x7ffc0000 [ 129.288098][ T29] audit: type=1326 audit(1765031015.039:35300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eab1fb829 code=0x7ffc0000 [ 130.366603][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 130.375861][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 130.993169][ T7031] loop4: detected capacity change from 0 to 1024 [ 131.000455][ T7031] EXT4-fs: Ignoring removed orlov option [ 131.009161][ T7031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.147601][ T3672] Bluetooth: hci0: command 0x1003 tx timeout [ 131.147601][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.368371][ T7035] ================================================================== [ 131.376464][ T7035] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 131.383588][ T7035] [ 131.385895][ T7035] write to 0xffff88811b516a34 of 4 bytes by task 7031 on cpu 1: [ 131.393509][ T7035] xas_set_mark+0x12b/0x140 [ 131.398008][ T7035] __folio_start_writeback+0x155/0x340 [ 131.403461][ T7035] ext4_bio_write_folio+0x5ad/0x9f0 [ 131.408654][ T7035] mpage_process_page_bufs+0x4a1/0x620 [ 131.414104][ T7035] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 131.419898][ T7035] ext4_do_writepages+0x9f6/0x27e0 [ 131.425010][ T7035] ext4_writepages+0x179/0x300 [ 131.429761][ T7035] do_writepages+0x1c6/0x310 [ 131.434345][ T7035] file_write_and_wait_range+0x156/0x2c0 [ 131.439964][ T7035] generic_buffers_fsync_noflush+0x45/0x130 [ 131.445844][ T7035] ext4_sync_file+0x1ab/0x690 [ 131.450502][ T7035] vfs_fsync_range+0x10d/0x130 [ 131.455253][ T7035] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.460795][ T7035] ext4_file_write_iter+0x387/0xf60 [ 131.465986][ T7035] iter_file_splice_write+0x66b/0xa20 [ 131.471345][ T7035] direct_splice_actor+0x156/0x2a0 [ 131.476454][ T7035] splice_direct_to_actor+0x312/0x680 [ 131.481810][ T7035] do_splice_direct+0xda/0x150 [ 131.486560][ T7035] do_sendfile+0x380/0x650 [ 131.490969][ T7035] __x64_sys_sendfile64+0x105/0x150 [ 131.496157][ T7035] x64_sys_call+0x2db1/0x3000 [ 131.500825][ T7035] do_syscall_64+0xd8/0x2a0 [ 131.505326][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.511206][ T7035] [ 131.513514][ T7035] read to 0xffff88811b516a34 of 4 bytes by task 7035 on cpu 0: [ 131.521056][ T7035] xas_find_marked+0x5dc/0x620 [ 131.525818][ T7035] find_get_entry+0x5d/0x380 [ 131.530397][ T7035] filemap_get_folios_tag+0x92/0x210 [ 131.535669][ T7035] filemap_fdatawait_range+0x88/0x1d0 [ 131.541054][ T7035] __writeback_single_inode+0xdb/0x7c0 [ 131.546511][ T7035] writeback_single_inode+0x16d/0x3f0 [ 131.551876][ T7035] sync_inode_metadata+0x5b/0x90 [ 131.556809][ T7035] generic_buffers_fsync_noflush+0xee/0x130 [ 131.562693][ T7035] ext4_sync_file+0x1ab/0x690 [ 131.567355][ T7035] vfs_fsync_range+0x10d/0x130 [ 131.572106][ T7035] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.577651][ T7035] ext4_file_write_iter+0x387/0xf60 [ 131.582845][ T7035] iter_file_splice_write+0x66b/0xa20 [ 131.588201][ T7035] direct_splice_actor+0x156/0x2a0 [ 131.593297][ T7035] splice_direct_to_actor+0x312/0x680 [ 131.598656][ T7035] do_splice_direct+0xda/0x150 [ 131.603405][ T7035] do_sendfile+0x380/0x650 [ 131.607810][ T7035] __x64_sys_sendfile64+0x105/0x150 [ 131.613017][ T7035] x64_sys_call+0x2db1/0x3000 [ 131.617688][ T7035] do_syscall_64+0xd8/0x2a0 [ 131.622188][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.628067][ T7035] [ 131.630371][ T7035] value changed: 0x0a000021 -> 0x00000021 [ 131.636070][ T7035] [ 131.638376][ T7035] Reported by Kernel Concurrency Sanitizer on: [ 131.644508][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.4.1316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.654211][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.664251][ T7035] ================================================================== [ 131.847836][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.