last executing test programs: 3.22404727s ago: executing program 0 (id=1862): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0xfb8}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/wakeup_count', 0x40001, 0x60) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r10, 0x10000000007, 0x1) 3.12715269s ago: executing program 0 (id=1863): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.066174326s ago: executing program 0 (id=1865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_dev$sg(&(0x7f00000006c0), 0x2, 0x12040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8000) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000380)=0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x15, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xa722, 0x7, 0x1, {0x22, 0x87a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x48, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xfa, 0x7, 0x8, 0x40, 0x10}, 0x18, &(0x7f0000000500)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x401, 0xf, 0x4, [0xff00]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4065}}, {0x9d, &(0x7f0000000740)=@string={0x9d, 0x3, "993462d5c1ffa4db7109e901740cd914c6eb4a7d92806aa534384b252a42def20fbc7df0eed23a87ebdcfa41dab6b5cffc0d317580bc6a71008ed582ed72421d21f09a725f993431f3e4827549e89cc91f9cfeb29b1efed7fd9f5f4326f6b57724050be65a8adf6982e280b794d0441eb81f5d47ec4963c8a710353befbfbcd33507be28193ee63172a70e8c61a4fce3f44014e26095c537a67b98"}}]}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x84}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 2.570020065s ago: executing program 0 (id=1876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_dev$sg(&(0x7f00000006c0), 0x2, 0x12040) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8000) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000380)=0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x15, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xa722, 0x7, 0x1, {0x22, 0x87a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x48, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xfa, 0x7, 0x8, 0x40, 0x10}, 0x18, &(0x7f0000000500)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x401, 0xf, 0x4, [0xff00]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4065}}, {0x9d, &(0x7f0000000740)=@string={0x9d, 0x3, "993462d5c1ffa4db7109e901740cd914c6eb4a7d92806aa534384b252a42def20fbc7df0eed23a87ebdcfa41dab6b5cffc0d317580bc6a71008ed582ed72421d21f09a725f993431f3e4827549e89cc91f9cfeb29b1efed7fd9f5f4326f6b57724050be65a8adf6982e280b794d0441eb81f5d47ec4963c8a710353befbfbcd33507be28193ee63172a70e8c61a4fce3f44014e26095c537a67b98"}}]}) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x84}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 2.52145384s ago: executing program 2 (id=1877): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34020}], 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r8, &(0x7f0000002080)=ANY=[], 0x1010) 2.487486543s ago: executing program 2 (id=1878): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) 2.293881282s ago: executing program 4 (id=1887): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) poll(&(0x7f0000000140)=[{r0, 0x110}, {r1, 0x4c0}, {r0, 0x16}, {r0, 0x40}, {r1, 0x414a}, {r0, 0xa041}, {r0, 0x101}, {r0}], 0x8, 0x9) pipe2$9p(&(0x7f0000000080), 0xc1000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x100, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x1034}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.21961605s ago: executing program 4 (id=1888): syz_open_dev$tty1(0xc, 0x4, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000005000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.147147187s ago: executing program 4 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 2.090164122s ago: executing program 4 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x18) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x800022) wait4(r4, 0x0, 0x80000000, 0x0) r5 = fcntl$getown(r0, 0x9) r6 = fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000000700)={0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/219, 0xdb, &(0x7f0000000580)=""/214, &(0x7f00000006c0)=[r4, r5, 0x0, r6], 0x4}, 0x58) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "2d1b228ddbcbeb3b", "125c2b383f5cae83637e9674608276919c8da6d9bb71d92f31fbb014711d772b", "f47262bb", "344faf4b67056082"}, 0x38) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.989811692s ago: executing program 0 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000000301010300ce21000000000006000a000000976e1a150239767e644370cd225d3568d38d22673dd148"], 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb785dd6a2e03000008000000b70400800000000085000000030000009500000000000000db7b7881529aed63a003c28b81f0cf69be07eff317134f7bddb9cd450c6f6c5f8a8fb1c4660e70061d2ce5a16a320205176a40ad902ca427d261e856030631077b138327bcc7a3699d5860210c23356a8693063500bf579db223c64c1c39219a9e9765f060d0b9b4cf5a8ff151e23dbb173f630000009f3fd08a4999ec08e6006bad641d8418603bc30f1c049b698fb5ff926b670873a79347d004c01f50943491c2a397f703f366ef1e908e671c1841ae58f96606fb0b5bb3e6f1bba65dad5f36961116a3256448fde7677770005558717124b90214c4023c92e059958c7a270a2de0db202a8c44"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000070a0102"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 1.91303689s ago: executing program 1 (id=1895): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc5f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.890634622s ago: executing program 1 (id=1897): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0xc03c0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x38619) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x8, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xa96) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) open(0x0, 0x60840, 0x0) truncate(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 1.852191086s ago: executing program 0 (id=1899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x800022) wait4(r3, 0x0, 0x80000000, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000000700)={0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/219, 0xdb, &(0x7f0000000580)=""/214, &(0x7f00000006c0)=[r3, r4, 0x0, r5], 0x4}, 0x58) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) 1.727935479s ago: executing program 2 (id=1900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 1.727586448s ago: executing program 2 (id=1902): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19) 1.650609226s ago: executing program 2 (id=1904): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) 1.033776248s ago: executing program 1 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.018669209s ago: executing program 1 (id=1906): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34020}], 0x1) 1.002389261s ago: executing program 1 (id=1907): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000001740)={0x2400c1, 0x74, 0x1}, 0x18) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000001040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c776664010000003394815f683de010ebcd964f9769a426c13401a06a8b819553d9be67c598ef778f74809b065edeb05dcf8c58b1330dd31b49e44cae7f3ab1f6a1fd264474ed15ea55c657e5be8428346acada95f706d8a598d8a7720dd185721764c2bcb3d056f5141272228aa73237e93ea4cf8e3bd8237e9c71abee1d44801ffd0bd55766a759ed7d62292f3d436b5241eb6b4e0e7570093ef6e913b452ab7a0d3fed7faf736d80d3837cafcdb88ba091fcc7530344", @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x10}}, 0x40000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000001c0)={@empty, @broadcast}, 0xc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000240)=0x4) 767.292384ms ago: executing program 2 (id=1908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd6}, 0x94) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002040)=0x0) r9 = getegid() r10 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e853a3e9cdd004f") r11 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r13, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba6e6a869a636c008a123467d4ebde947f09e3e18471413aacf"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r14 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r13, r14) quotactl_fd$Q_GETFMT(r11, 0xffffffff80000401, r13, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf8b292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd60654e019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8292e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a8644889d4f89986408f09e29cc859d6e60f3097abc84a2457f45c7eab60c4460b92ee8dadc7d929b7a54becdb722391d9ad146047873d2abc7f281f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a64cd3d528c55a4506740dd0819b06f78", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001100)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000200000001fa900005522080f0b2b5c00", @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7cf62e6474205e0fe08d13266f4569b4", 0xc4}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0xc4) getgroups(0x2, &(0x7f0000000200)=[0xee01, 0x0]) setgroups(0x5, &(0x7f0000000240)=[0x0, 0x0, r1, r9, r16]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r18, &(0x7f0000000040)=""/190, 0xbe) 767.009414ms ago: executing program 3 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc5f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 710.25757ms ago: executing program 3 (id=1910): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) sendmsg$inet(r0, 0x0, 0x4040810) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a000018000000", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6, 0x0, 0xffffffffffffffff}, 0x18) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x101042, 0x19) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 704.50794ms ago: executing program 3 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000085000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 690.667951ms ago: executing program 3 (id=1912): pipe(&(0x7f0000005880)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xe, &(0x7f0000000300)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x18000002, 0x0, {[0xffffffffffff7fff]}}, 0x0, 0x8, &(0x7f0000000280)) 153.767545ms ago: executing program 1 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104000000", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000030000000500170000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x6) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x0, 0x5}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xb, &(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRESDEC=r0, @ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) shutdown(0xffffffffffffffff, 0x1) r6 = dup3(r5, r5, 0x80000) openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) timerfd_create(0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000012009702"], 0x28}}, 0x800) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc)=0x2, 0xa, 0x1, 0x0, 0x0, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa, 0x8000001}, 0x17) 153.350395ms ago: executing program 3 (id=1914): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19) 21.536408ms ago: executing program 4 (id=1915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09"], 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b00000000000600"/32], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 21.037118ms ago: executing program 3 (id=1925): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r1, r4, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19) 0s ago: executing program 4 (id=1916): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0xc03c0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x38619) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x8, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xa96) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) open(0x0, 0x60840, 0x0) truncate(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): t allmulticast mode [ 83.084421][ T6027] syz!: rxe_newlink: already configured on team_slave_0 [ 83.137159][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.147159][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.285750][ T6038] pim6reg: entered allmulticast mode [ 83.293117][ T6038] sctp: [Deprecated]: syz.2.1043 (pid 6038) Use of int in max_burst socket option. [ 83.293117][ T6038] Use struct sctp_assoc_value instead [ 83.410559][ T6049] pimreg: entered allmulticast mode [ 83.416901][ T6049] pimreg: left allmulticast mode [ 83.454244][ T6037] pim6reg: left allmulticast mode [ 83.517610][ T6054] syz!: rxe_newlink: already configured on team_slave_0 [ 83.569985][ T31] Bluetooth: hci2: Frame reassembly failed (-84) [ 83.710417][ T296] Bluetooth: hci3: Frame reassembly failed (-84) [ 84.464080][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.472543][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.713588][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 84.713588][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.773304][ T6083] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.806725][ T6085] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.875798][ T6093] pimreg: entered allmulticast mode [ 84.882602][ T6093] pimreg: left allmulticast mode [ 85.027026][ T296] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.037232][ T4449] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 85.041874][ T6110] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.177219][ T6128] pim6reg: entered allmulticast mode [ 85.185088][ T6128] sctp: [Deprecated]: syz.2.1081 (pid 6128) Use of int in max_burst socket option. [ 85.185088][ T6128] Use struct sctp_assoc_value instead [ 85.375402][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.383976][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.593534][ T3526] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 85.593551][ T4449] Bluetooth: hci2: command 0x1003 tx timeout [ 85.753504][ T3526] Bluetooth: hci3: command 0x1003 tx timeout [ 85.753521][ T4204] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 85.811089][ T6145] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.002161][ T6127] pim6reg: left allmulticast mode [ 86.024141][ T6170] xt_check_target: 8 callbacks suppressed [ 86.024164][ T6170] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.049723][ T6159] syzkaller0: entered promiscuous mode [ 86.055284][ T6159] syzkaller0: entered allmulticast mode [ 86.077026][ T6173] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.176754][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.186032][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.230726][ T6191] pim6reg: entered allmulticast mode [ 86.239102][ T6191] sctp: [Deprecated]: syz.1.1108 (pid 6191) Use of int in max_burst socket option. [ 86.239102][ T6191] Use struct sctp_assoc_value instead [ 86.267371][ T6197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.296351][ T6199] syz!: rxe_newlink: already configured on team_slave_0 [ 86.364002][ T6211] FAULT_INJECTION: forcing a failure. [ 86.364002][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.377221][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.377255][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.377269][ T6211] Call Trace: [ 86.377277][ T6211] [ 86.377318][ T6211] __dump_stack+0x1d/0x30 [ 86.377341][ T6211] dump_stack_lvl+0xe8/0x140 [ 86.377366][ T6211] dump_stack+0x15/0x1b [ 86.377430][ T6211] should_fail_ex+0x265/0x280 [ 86.377454][ T6211] should_fail+0xb/0x20 [ 86.377473][ T6211] should_fail_usercopy+0x1a/0x20 [ 86.377555][ T6211] _copy_from_user+0x1c/0xb0 [ 86.377583][ T6211] __se_sys_io_pgetevents+0xb8/0x2c0 [ 86.377624][ T6211] __x64_sys_io_pgetevents+0x78/0x90 [ 86.377660][ T6211] x64_sys_call+0x223e/0x3000 [ 86.377772][ T6211] do_syscall_64+0xd2/0x200 [ 86.377791][ T6211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.377824][ T6211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.377877][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.377904][ T6211] RIP: 0033:0x7f430e25efc9 [ 86.377922][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.377955][ T6211] RSP: 002b:00007f430ccc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 86.378025][ T6211] RAX: ffffffffffffffda RBX: 00007f430e4b5fa0 RCX: 00007f430e25efc9 [ 86.378037][ T6211] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 86.378047][ T6211] RBP: 00007f430ccc7090 R08: 0000000000000000 R09: 0000200000000640 [ 86.378058][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.378069][ T6211] R13: 00007f430e4b6038 R14: 00007f430e4b5fa0 R15: 00007ffdbf40c488 [ 86.378088][ T6211] [ 86.584808][ T6214] loop4: detected capacity change from 0 to 256 [ 86.610363][ T6214] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.619188][ T6214] FAT-fs (loop4): Filesystem has been set read-only [ 86.766872][ T6234] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.033566][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 87.039670][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.053985][ T6190] pim6reg: left allmulticast mode [ 87.126040][ T6269] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.211512][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.228564][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.368279][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.443597][ T6304] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.450027][ T6302] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.736515][ T6328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.762427][ T6332] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.775075][ T6334] FAULT_INJECTION: forcing a failure. [ 87.775075][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.788246][ T6334] CPU: 1 UID: 0 PID: 6334 Comm: syz.4.1167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.788333][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.788348][ T6334] Call Trace: [ 87.788354][ T6334] [ 87.788361][ T6334] __dump_stack+0x1d/0x30 [ 87.788384][ T6334] dump_stack_lvl+0xe8/0x140 [ 87.788482][ T6334] dump_stack+0x15/0x1b [ 87.788499][ T6334] should_fail_ex+0x265/0x280 [ 87.788521][ T6334] should_fail+0xb/0x20 [ 87.788537][ T6334] should_fail_usercopy+0x1a/0x20 [ 87.788650][ T6334] _copy_to_user+0x20/0xa0 [ 87.788675][ T6334] simple_read_from_buffer+0xb5/0x130 [ 87.788701][ T6334] proc_fail_nth_read+0x10e/0x150 [ 87.788734][ T6334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.788849][ T6334] vfs_read+0x1a8/0x770 [ 87.788899][ T6334] ? __rcu_read_unlock+0x4f/0x70 [ 87.788926][ T6334] ? __fget_files+0x184/0x1c0 [ 87.788974][ T6334] ksys_read+0xda/0x1a0 [ 87.789108][ T6334] __x64_sys_read+0x40/0x50 [ 87.789209][ T6334] x64_sys_call+0x27c0/0x3000 [ 87.789310][ T6334] do_syscall_64+0xd2/0x200 [ 87.789329][ T6334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.789394][ T6334] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.789426][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.789447][ T6334] RIP: 0033:0x7efdb460d9dc [ 87.789489][ T6334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.789506][ T6334] RSP: 002b:00007efdb306f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.789524][ T6334] RAX: ffffffffffffffda RBX: 00007efdb4865fa0 RCX: 00007efdb460d9dc [ 87.789536][ T6334] RDX: 000000000000000f RSI: 00007efdb306f0a0 RDI: 0000000000000004 [ 87.789547][ T6334] RBP: 00007efdb306f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.789558][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.789569][ T6334] R13: 00007efdb4866038 R14: 00007efdb4865fa0 R15: 00007ffc17e219a8 [ 87.789589][ T6334] [ 88.038906][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 88.038921][ T29] audit: type=1326 audit(1761588993.197:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.068622][ T29] audit: type=1326 audit(1761588993.197:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.092534][ T29] audit: type=1326 audit(1761588993.197:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.105091][ T6349] loop3: detected capacity change from 0 to 512 [ 88.116258][ T29] audit: type=1326 audit(1761588993.197:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.123988][ T6349] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 88.145655][ T29] audit: type=1326 audit(1761588993.197:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.145687][ T29] audit: type=1326 audit(1761588993.197:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.161353][ T6349] capability: warning: `syz.3.1171' uses deprecated v2 capabilities in a way that may be insecure [ 88.177266][ T29] audit: type=1400 audit(1761588993.197:6405): avc: granted { setsecparam } for pid=6338 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 88.230498][ T29] audit: type=1326 audit(1761588993.207:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.253944][ T29] audit: type=1326 audit(1761588993.207:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.277491][ T29] audit: type=1326 audit(1761588993.207:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 88.337160][ T6360] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.368676][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.377481][ T6365] syz.0.1182 uses obsolete (PF_INET,SOCK_PACKET) [ 88.391250][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.526282][ T6381] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.596759][ T6388] FAULT_INJECTION: forcing a failure. [ 88.596759][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.610040][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.1.1191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.610073][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.610087][ T6388] Call Trace: [ 88.610094][ T6388] [ 88.610102][ T6388] __dump_stack+0x1d/0x30 [ 88.610192][ T6388] dump_stack_lvl+0xe8/0x140 [ 88.610217][ T6388] dump_stack+0x15/0x1b [ 88.610238][ T6388] should_fail_ex+0x265/0x280 [ 88.610259][ T6388] should_fail+0xb/0x20 [ 88.610274][ T6388] should_fail_usercopy+0x1a/0x20 [ 88.610298][ T6388] _copy_from_user+0x1c/0xb0 [ 88.610466][ T6388] __copy_msghdr+0x244/0x300 [ 88.610498][ T6388] ___sys_sendmsg+0x109/0x1d0 [ 88.610610][ T6388] __x64_sys_sendmsg+0xd4/0x160 [ 88.610664][ T6388] x64_sys_call+0x191e/0x3000 [ 88.610754][ T6388] do_syscall_64+0xd2/0x200 [ 88.610829][ T6388] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.610862][ T6388] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.610899][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.610921][ T6388] RIP: 0033:0x7f0cbd3aefc9 [ 88.611006][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.611028][ T6388] RSP: 002b:00007f0cbbe17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.611049][ T6388] RAX: ffffffffffffffda RBX: 00007f0cbd605fa0 RCX: 00007f0cbd3aefc9 [ 88.611064][ T6388] RDX: 0000000000000814 RSI: 0000200000000200 RDI: 0000000000000003 [ 88.611078][ T6388] RBP: 00007f0cbbe17090 R08: 0000000000000000 R09: 0000000000000000 [ 88.611090][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.611101][ T6388] R13: 00007f0cbd606038 R14: 00007f0cbd605fa0 R15: 00007ffd4dfab398 [ 88.611126][ T6388] [ 88.617820][ T6377] syzkaller0: entered promiscuous mode [ 88.662231][ T6390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.688636][ T6392] SELinux: Context @ is not valid (left unmapped). [ 88.691097][ T6377] syzkaller0: entered allmulticast mode [ 88.892314][ T6396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 88.997333][ T6408] syz!: rxe_newlink: already configured on team_slave_0 [ 89.130080][ T6410] netlink: 'syz.3.1201': attribute type 39 has an invalid length. [ 89.156616][ T6416] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.191860][ T6422] FAULT_INJECTION: forcing a failure. [ 89.191860][ T6422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.205155][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: syz.0.1206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.205186][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.205202][ T6422] Call Trace: [ 89.205210][ T6422] [ 89.205220][ T6422] __dump_stack+0x1d/0x30 [ 89.205266][ T6422] dump_stack_lvl+0xe8/0x140 [ 89.205292][ T6422] dump_stack+0x15/0x1b [ 89.205313][ T6422] should_fail_ex+0x265/0x280 [ 89.205338][ T6422] should_fail+0xb/0x20 [ 89.205357][ T6422] should_fail_usercopy+0x1a/0x20 [ 89.205412][ T6422] _copy_from_user+0x1c/0xb0 [ 89.205437][ T6422] do_sys_poll+0x149/0xbd0 [ 89.205497][ T6422] ? selinux_file_open+0x2df/0x330 [ 89.205579][ T6422] __se_sys_poll+0xdd/0x200 [ 89.205639][ T6422] __x64_sys_poll+0x43/0x50 [ 89.205746][ T6422] x64_sys_call+0x27d6/0x3000 [ 89.205774][ T6422] do_syscall_64+0xd2/0x200 [ 89.205809][ T6422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.205839][ T6422] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.205887][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.205913][ T6422] RIP: 0033:0x7fee7aa0efc9 [ 89.205932][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.205948][ T6422] RSP: 002b:00007fee7946f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 89.205969][ T6422] RAX: ffffffffffffffda RBX: 00007fee7ac65fa0 RCX: 00007fee7aa0efc9 [ 89.205992][ T6422] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 89.206007][ T6422] RBP: 00007fee7946f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.206021][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.206035][ T6422] R13: 00007fee7ac66038 R14: 00007fee7ac65fa0 R15: 00007ffcfb89b9f8 [ 89.206093][ T6422] [ 89.418139][ T6424] __nla_validate_parse: 3 callbacks suppressed [ 89.418157][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1207'. [ 89.418553][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.441805][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.448123][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 89.454418][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.573953][ T6441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1214'. [ 89.718146][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.788823][ T6461] FAULT_INJECTION: forcing a failure. [ 89.788823][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 89.801698][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.2.1221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.801801][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.801816][ T6461] Call Trace: [ 89.801823][ T6461] [ 89.801831][ T6461] __dump_stack+0x1d/0x30 [ 89.801966][ T6461] dump_stack_lvl+0xe8/0x140 [ 89.801992][ T6461] dump_stack+0x15/0x1b [ 89.802014][ T6461] should_fail_ex+0x265/0x280 [ 89.802034][ T6461] should_failslab+0x8c/0xb0 [ 89.802061][ T6461] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 89.802164][ T6461] ? __alloc_skb+0x101/0x320 [ 89.802269][ T6461] __alloc_skb+0x101/0x320 [ 89.802303][ T6461] netlink_alloc_large_skb+0xbf/0xf0 [ 89.802393][ T6461] netlink_sendmsg+0x3cf/0x6b0 [ 89.802413][ T6461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.802436][ T6461] __sock_sendmsg+0x145/0x180 [ 89.802466][ T6461] ____sys_sendmsg+0x31e/0x4e0 [ 89.802557][ T6461] ___sys_sendmsg+0x17b/0x1d0 [ 89.802626][ T6461] __x64_sys_sendmsg+0xd4/0x160 [ 89.802668][ T6461] x64_sys_call+0x191e/0x3000 [ 89.802690][ T6461] do_syscall_64+0xd2/0x200 [ 89.802712][ T6461] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.802757][ T6461] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.802854][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.802876][ T6461] RIP: 0033:0x7f308a9defc9 [ 89.802894][ T6461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.802913][ T6461] RSP: 002b:00007f3089447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.802931][ T6461] RAX: ffffffffffffffda RBX: 00007f308ac35fa0 RCX: 00007f308a9defc9 [ 89.803007][ T6461] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 89.803025][ T6461] RBP: 00007f3089447090 R08: 0000000000000000 R09: 0000000000000000 [ 89.803038][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.803052][ T6461] R13: 00007f308ac36038 R14: 00007f308ac35fa0 R15: 00007ffdffee4a48 [ 89.803076][ T6461] [ 90.082744][ T6465] 9pnet: Unknown protocol version 9p2 [ 90.090938][ T6466] netlink: 'syz.0.1223': attribute type 7 has an invalid length. [ 90.098896][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 90.138274][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1225'. [ 90.151970][ T6466] loop0: detected capacity change from 0 to 512 [ 90.161633][ T6466] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.1223: invalid fast symlink length 39 [ 90.179233][ T6466] EXT4-fs (loop0): get root inode failed [ 90.184953][ T6466] EXT4-fs (loop0): mount failed [ 90.279316][ T6482] pim6reg: entered allmulticast mode [ 90.285966][ T6482] sctp: [Deprecated]: syz.3.1230 (pid 6482) Use of int in max_burst socket option. [ 90.285966][ T6482] Use struct sctp_assoc_value instead [ 90.386783][ T6487] process 'syz.0.1232' launched './file0' with NULL argv: empty string added [ 90.524682][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.544021][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.619859][ T6502] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.645341][ T6504] loop4: detected capacity change from 0 to 512 [ 90.665790][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.667443][ T6504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.674892][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.686937][ T6504] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.759467][ T6510] 9pnet_fd: Insufficient options for proto=fd [ 91.105010][ T6481] pim6reg: left allmulticast mode [ 91.210252][ T6519] loop3: detected capacity change from 0 to 256 [ 91.217622][ T6519] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.253188][ T296] Bluetooth: hci1: Frame reassembly failed (-84) [ 91.297928][ T6533] FAULT_INJECTION: forcing a failure. [ 91.297928][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 91.300651][ T6531] syz!: rxe_newlink: already configured on team_slave_0 [ 91.310597][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.0.1251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.310651][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.310703][ T6533] Call Trace: [ 91.310711][ T6533] [ 91.310728][ T6533] __dump_stack+0x1d/0x30 [ 91.310757][ T6533] dump_stack_lvl+0xe8/0x140 [ 91.310784][ T6533] dump_stack+0x15/0x1b [ 91.310806][ T6533] should_fail_ex+0x265/0x280 [ 91.310831][ T6533] should_failslab+0x8c/0xb0 [ 91.310933][ T6533] __kvmalloc_node_noprof+0x12e/0x670 [ 91.310974][ T6533] ? vmemdup_user+0x2b/0xd0 [ 91.311007][ T6533] ? should_fail_usercopy+0x1a/0x20 [ 91.311084][ T6533] vmemdup_user+0x2b/0xd0 [ 91.311118][ T6533] path_setxattrat+0x1b6/0x310 [ 91.311225][ T6533] __x64_sys_fsetxattr+0x6b/0x80 [ 91.311262][ T6533] x64_sys_call+0x1ced/0x3000 [ 91.311307][ T6533] do_syscall_64+0xd2/0x200 [ 91.311331][ T6533] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.311368][ T6533] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.311487][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.311515][ T6533] RIP: 0033:0x7fee7aa0efc9 [ 91.311535][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.311559][ T6533] RSP: 002b:00007fee7946f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 91.311594][ T6533] RAX: ffffffffffffffda RBX: 00007fee7ac65fa0 RCX: 00007fee7aa0efc9 [ 91.311611][ T6533] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 91.311628][ T6533] RBP: 00007fee7946f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.311644][ T6533] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 91.311660][ T6533] R13: 00007fee7ac66038 R14: 00007fee7ac65fa0 R15: 00007ffcfb89b9f8 [ 91.311687][ T6533] [ 91.530231][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.654866][ T6541] pim6reg: entered allmulticast mode [ 91.661789][ T6541] sctp: [Deprecated]: syz.0.1255 (pid 6541) Use of int in max_burst socket option. [ 91.661789][ T6541] Use struct sctp_assoc_value instead [ 91.753550][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 91.753720][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.827577][ T6555] 9p: Unknown access argument 00000000000000000000Pž: -22 [ 91.886244][ T6562] FAULT_INJECTION: forcing a failure. [ 91.886244][ T6562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.899357][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.3.1261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.899388][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.899399][ T6562] Call Trace: [ 91.899405][ T6562] [ 91.899478][ T6562] __dump_stack+0x1d/0x30 [ 91.899503][ T6562] dump_stack_lvl+0xe8/0x140 [ 91.899524][ T6562] dump_stack+0x15/0x1b [ 91.899546][ T6562] should_fail_ex+0x265/0x280 [ 91.899563][ T6562] should_fail+0xb/0x20 [ 91.899579][ T6562] should_fail_usercopy+0x1a/0x20 [ 91.899597][ T6562] _copy_to_user+0x20/0xa0 [ 91.899701][ T6562] simple_read_from_buffer+0xb5/0x130 [ 91.899744][ T6562] proc_fail_nth_read+0x10e/0x150 [ 91.899778][ T6562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.899867][ T6562] vfs_read+0x1a8/0x770 [ 91.899895][ T6562] ? __rcu_read_unlock+0x4f/0x70 [ 91.899961][ T6562] ? __fget_files+0x184/0x1c0 [ 91.899998][ T6562] ksys_read+0xda/0x1a0 [ 91.900028][ T6562] __x64_sys_read+0x40/0x50 [ 91.900095][ T6562] x64_sys_call+0x27c0/0x3000 [ 91.900119][ T6562] do_syscall_64+0xd2/0x200 [ 91.900136][ T6562] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.900196][ T6562] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.900289][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.900311][ T6562] RIP: 0033:0x7f430e25d9dc [ 91.900325][ T6562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.900370][ T6562] RSP: 002b:00007f430ccc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.900388][ T6562] RAX: ffffffffffffffda RBX: 00007f430e4b5fa0 RCX: 00007f430e25d9dc [ 91.900399][ T6562] RDX: 000000000000000f RSI: 00007f430ccc70a0 RDI: 0000000000000005 [ 91.900432][ T6562] RBP: 00007f430ccc7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.900446][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.900456][ T6562] R13: 00007f430e4b6038 R14: 00007f430e4b5fa0 R15: 00007ffdbf40c488 [ 91.900476][ T6562] [ 92.311637][ T6574] FAULT_INJECTION: forcing a failure. [ 92.311637][ T6574] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.325059][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.3.1266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.325116][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.325128][ T6574] Call Trace: [ 92.325134][ T6574] [ 92.325142][ T6574] __dump_stack+0x1d/0x30 [ 92.325238][ T6574] dump_stack_lvl+0xe8/0x140 [ 92.325260][ T6574] dump_stack+0x15/0x1b [ 92.325276][ T6574] should_fail_ex+0x265/0x280 [ 92.325296][ T6574] should_fail_alloc_page+0xf2/0x100 [ 92.325423][ T6574] __alloc_frozen_pages_noprof+0xff/0x360 [ 92.325466][ T6574] alloc_pages_mpol+0xb3/0x260 [ 92.325496][ T6574] vma_alloc_folio_noprof+0x1aa/0x300 [ 92.325543][ T6574] do_wp_page+0xf60/0x2510 [ 92.325574][ T6574] ? __rcu_read_lock+0x37/0x50 [ 92.325601][ T6574] ? css_rstat_updated+0xb7/0x240 [ 92.325699][ T6574] ? __rcu_read_lock+0x37/0x50 [ 92.325726][ T6574] handle_mm_fault+0x77d/0x2be0 [ 92.325754][ T6574] ? vma_start_read+0x141/0x1f0 [ 92.325813][ T6574] do_user_addr_fault+0x630/0x1080 [ 92.325855][ T6574] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 92.325893][ T6574] exc_page_fault+0x62/0xa0 [ 92.325925][ T6574] asm_exc_page_fault+0x26/0x30 [ 92.325955][ T6574] RIP: 0033:0x7f430e120c03 [ 92.325970][ T6574] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 92.325986][ T6574] RSP: 002b:00007f430ccc64a0 EFLAGS: 00010202 [ 92.326013][ T6574] RAX: 0000000000000400 RBX: 00007f430ccc6540 RCX: 00007f43048a7000 [ 92.326024][ T6574] RDX: 00007f430ccc66e0 RSI: 0000000000000000 RDI: 00007f430ccc65e0 [ 92.326037][ T6574] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 92.326050][ T6574] R10: 00000000000000bc R11: 00007f430ccc6540 R12: 0000000000000001 [ 92.326065][ T6574] R13: 00007f430e2fdc40 R14: 0000000000000020 R15: 00007f430ccc65e0 [ 92.326089][ T6574] [ 92.326101][ T6574] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 92.525231][ T6574] loop3: detected capacity change from 0 to 512 [ 92.532182][ T6540] pim6reg: left allmulticast mode [ 92.540006][ T6574] ------------[ cut here ]------------ [ 92.545519][ T6574] EA inode 11 i_nlink=2 [ 92.545764][ T6574] WARNING: CPU: 1 PID: 6574 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 92.560206][ T6574] Modules linked in: [ 92.564227][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.3.1266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.573963][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.584024][ T6574] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 92.590690][ T6574] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 a5 c8 55 86 4c 89 ee e8 87 fb 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 c9 b5 03 0f 1f 84 00 00 00 00 00 [ 92.610373][ T6574] RSP: 0018:ffffc900011df5a0 EFLAGS: 00010246 [ 92.616479][ T6574] RAX: a8e1efce2548de00 RBX: ffff888107283a20 RCX: ffff888103e52100 [ 92.624464][ T6574] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 92.632517][ T6574] RBP: 0000000000000002 R08: 0001c900011df427 R09: 0000000000000000 [ 92.640558][ T6574] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8881072839d0 [ 92.648537][ T6574] R13: 000000000000000b R14: ffff888107283988 R15: 0000000000000001 [ 92.656555][ T6574] FS: 00007f430ccc76c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 92.665530][ T6574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.672130][ T6574] CR2: 00007f430e2422e0 CR3: 000000011aa28000 CR4: 00000000003506f0 [ 92.680157][ T6574] Call Trace: [ 92.683487][ T6574] [ 92.686435][ T6574] ext4_xattr_set_entry+0x77f/0x1020 [ 92.691792][ T6574] ext4_xattr_ibody_set+0x184/0x3c0 [ 92.697179][ T6574] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 92.703069][ T6574] __ext4_expand_extra_isize+0x246/0x280 [ 92.708779][ T6574] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 92.714444][ T6574] ext4_evict_inode+0x80e/0xd90 [ 92.719373][ T6574] ? __pfx_ext4_evict_inode+0x10/0x10 [ 92.724777][ T6574] evict+0x2e3/0x550 [ 92.728676][ T6574] ? __dquot_initialize+0x146/0x7c0 [ 92.733902][ T6574] iput+0x4ed/0x650 [ 92.737724][ T6574] ext4_process_orphan+0x1a9/0x1c0 [ 92.742847][ T6574] ext4_orphan_cleanup+0x6a8/0xa00 [ 92.748096][ T6574] ext4_fill_super+0x3483/0x3810 [ 92.753038][ T6574] ? snprintf+0x86/0xb0 [ 92.757222][ T6574] ? set_blocksize+0x1a8/0x310 [ 92.762000][ T6574] ? sb_set_blocksize+0xe3/0x100 [ 92.767022][ T6574] ? setup_bdev_super+0x30e/0x370 [ 92.772109][ T6574] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.777498][ T6574] get_tree_bdev_flags+0x291/0x300 [ 92.782634][ T6574] ? __pfx_ext4_fill_super+0x10/0x10 [ 92.788033][ T6574] get_tree_bdev+0x1f/0x30 [ 92.792452][ T6574] ext4_get_tree+0x1c/0x30 [ 92.796992][ T6574] vfs_get_tree+0x57/0x1d0 [ 92.801432][ T6574] do_new_mount+0x24d/0x660 [ 92.805953][ T6574] path_mount+0x4a5/0xb70 [ 92.810358][ T6574] ? user_path_at+0x109/0x130 [ 92.815079][ T6574] __se_sys_mount+0x28c/0x2e0 [ 92.819858][ T6574] __x64_sys_mount+0x67/0x80 [ 92.824468][ T6574] x64_sys_call+0x2b51/0x3000 [ 92.829177][ T6574] do_syscall_64+0xd2/0x200 [ 92.833714][ T6574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.839804][ T6574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.845565][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.851464][ T6574] RIP: 0033:0x7f430e26076a [ 92.855922][ T6574] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.875580][ T6574] RSP: 002b:00007f430ccc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.884093][ T6574] RAX: ffffffffffffffda RBX: 00007f430ccc6ef0 RCX: 00007f430e26076a [ 92.892067][ T6574] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f430ccc6eb0 [ 92.900130][ T6574] RBP: 0000200000000180 R08: 00007f430ccc6ef0 R09: 0000000000800718 [ 92.908137][ T6574] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 92.916116][ T6574] R13: 00007f430ccc6eb0 R14: 000000000000046f R15: 0000200000000200 [ 92.924325][ T6574] [ 92.927393][ T6574] ---[ end trace 0000000000000000 ]--- [ 92.934213][ T6574] EXT4-fs (loop3): 1 orphan inode deleted [ 92.942476][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.017594][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.064365][ T6584] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.094585][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 93.094603][ T29] audit: type=1400 audit(1761588998.277:6893): avc: denied { create } for pid=6582 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.136981][ T6585] loop1: detected capacity change from 0 to 512 [ 93.158489][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.174143][ T6585] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.202643][ T29] audit: type=1326 audit(1761588998.377:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.275329][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 93.411463][ T29] audit: type=1326 audit(1761588998.407:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.434991][ T29] audit: type=1326 audit(1761588998.407:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.458457][ T29] audit: type=1326 audit(1761588998.407:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.481906][ T29] audit: type=1326 audit(1761588998.407:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.505383][ T29] audit: type=1326 audit(1761588998.407:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.528837][ T29] audit: type=1326 audit(1761588998.407:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.552507][ T29] audit: type=1326 audit(1761588998.407:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.575889][ T29] audit: type=1326 audit(1761588998.407:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 93.603635][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.638877][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.644372][ T6604] lo speed is unknown, defaulting to 1000 [ 93.647627][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.653179][ T6604] lo speed is unknown, defaulting to 1000 [ 93.666836][ T6604] lo speed is unknown, defaulting to 1000 [ 93.673153][ T6604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.681621][ T6604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.691698][ T6604] lo speed is unknown, defaulting to 1000 [ 93.698067][ T6604] lo speed is unknown, defaulting to 1000 [ 93.706028][ T6604] lo speed is unknown, defaulting to 1000 [ 93.712303][ T6604] lo speed is unknown, defaulting to 1000 [ 93.718137][ T6613] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.718681][ T6604] lo speed is unknown, defaulting to 1000 [ 93.735146][ T6611] smc: removing ib device syz! [ 93.741131][ T6614] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 93.760447][ T6616] loop1: detected capacity change from 0 to 512 [ 93.771927][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 93.784437][ T6616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.837783][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.952373][ T6630] hsr0: entered promiscuous mode [ 93.964993][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 93.975799][ T6630] hsr_slave_0: left promiscuous mode [ 93.981748][ T6630] hsr_slave_1: left promiscuous mode [ 93.987332][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.994904][ T6630] hsr0 (unregistering): left promiscuous mode [ 94.164593][ T6647] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.283048][ T6656] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.572208][ T6664] infiniband syz!: set active [ 94.576944][ T6664] infiniband syz!: added team_slave_0 [ 94.587395][ T6664] RDS/IB: syz!: added [ 94.591533][ T6664] smc: adding ib device syz! with port count 1 [ 94.597733][ T6664] smc: ib device syz! port 1 has no pnetid [ 94.784869][ T6668] syz!: rxe_newlink: already configured on team_slave_0 [ 94.857943][ T6672] hub 9-0:1.0: USB hub found [ 94.862720][ T6672] hub 9-0:1.0: 8 ports detected [ 94.963859][ T6677] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.121501][ T6689] FAULT_INJECTION: forcing a failure. [ 95.121501][ T6689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.134653][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.4.1312 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.134735][ T6689] Tainted: [W]=WARN [ 95.134741][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.134793][ T6689] Call Trace: [ 95.134798][ T6689] [ 95.134805][ T6689] __dump_stack+0x1d/0x30 [ 95.134825][ T6689] dump_stack_lvl+0xe8/0x140 [ 95.134843][ T6689] dump_stack+0x15/0x1b [ 95.134857][ T6689] should_fail_ex+0x265/0x280 [ 95.134875][ T6689] should_fail+0xb/0x20 [ 95.134919][ T6689] should_fail_usercopy+0x1a/0x20 [ 95.134937][ T6689] _copy_from_user+0x1c/0xb0 [ 95.134958][ T6689] __copy_msghdr+0x244/0x300 [ 95.135024][ T6689] ___sys_sendmsg+0x109/0x1d0 [ 95.135069][ T6689] __x64_sys_sendmsg+0xd4/0x160 [ 95.135102][ T6689] x64_sys_call+0x191e/0x3000 [ 95.135199][ T6689] do_syscall_64+0xd2/0x200 [ 95.135215][ T6689] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.135241][ T6689] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.135269][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.135327][ T6689] RIP: 0033:0x7efdb460efc9 [ 95.135340][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.135354][ T6689] RSP: 002b:00007efdb306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.135378][ T6689] RAX: ffffffffffffffda RBX: 00007efdb4865fa0 RCX: 00007efdb460efc9 [ 95.135388][ T6689] RDX: 0000000000000814 RSI: 0000200000000200 RDI: 0000000000000003 [ 95.135399][ T6689] RBP: 00007efdb306f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.135471][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.135481][ T6689] R13: 00007efdb4866038 R14: 00007efdb4865fa0 R15: 00007ffc17e219a8 [ 95.135499][ T6689] [ 95.500284][ T6694] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.524081][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.532593][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.673154][ T6698] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.756374][ T6698] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.793328][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.801995][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.811019][ T6698] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.855018][ T6698] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.919787][ T3440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.930840][ T3440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941641][ T3440] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.952968][ T3440] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.993522][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 95.993556][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.088785][ T6708] lo speed is unknown, defaulting to 1000 [ 96.135509][ T6709] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1319'. [ 96.169210][ T6708] mmap: syz.4.1319 (6708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.200494][ T6711] FAULT_INJECTION: forcing a failure. [ 96.200494][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 96.213249][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.1.1320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.213298][ T6711] Tainted: [W]=WARN [ 96.213306][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.213318][ T6711] Call Trace: [ 96.213324][ T6711] [ 96.213332][ T6711] __dump_stack+0x1d/0x30 [ 96.213354][ T6711] dump_stack_lvl+0xe8/0x140 [ 96.213455][ T6711] dump_stack+0x15/0x1b [ 96.213476][ T6711] should_fail_ex+0x265/0x280 [ 96.213497][ T6711] ? nfnetlink_rcv+0xa28/0x16c0 [ 96.213637][ T6711] should_failslab+0x8c/0xb0 [ 96.213746][ T6711] __kmalloc_cache_noprof+0x4c/0x4a0 [ 96.213787][ T6711] nfnetlink_rcv+0xa28/0x16c0 [ 96.213872][ T6711] ? kmem_cache_free+0xe4/0x3d0 [ 96.213930][ T6711] netlink_unicast+0x5c0/0x690 [ 96.213968][ T6711] netlink_sendmsg+0x58b/0x6b0 [ 96.213996][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.214044][ T6711] __sock_sendmsg+0x145/0x180 [ 96.214072][ T6711] ____sys_sendmsg+0x31e/0x4e0 [ 96.214104][ T6711] ___sys_sendmsg+0x17b/0x1d0 [ 96.214183][ T6711] __x64_sys_sendmsg+0xd4/0x160 [ 96.214255][ T6711] x64_sys_call+0x191e/0x3000 [ 96.214274][ T6711] do_syscall_64+0xd2/0x200 [ 96.214290][ T6711] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.214315][ T6711] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.214372][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.214391][ T6711] RIP: 0033:0x7f0cbd3aefc9 [ 96.214404][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.214418][ T6711] RSP: 002b:00007f0cbbe17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.214433][ T6711] RAX: ffffffffffffffda RBX: 00007f0cbd605fa0 RCX: 00007f0cbd3aefc9 [ 96.214479][ T6711] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 96.214489][ T6711] RBP: 00007f0cbbe17090 R08: 0000000000000000 R09: 0000000000000000 [ 96.214498][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.214508][ T6711] R13: 00007f0cbd606038 R14: 00007f0cbd605fa0 R15: 00007ffd4dfab398 [ 96.214526][ T6711] [ 96.441143][ T6713] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.483538][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 96.494702][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 96.506772][ T6719] hsr0: entered promiscuous mode [ 96.512266][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 96.521378][ T6719] hsr_slave_0: left promiscuous mode [ 96.532093][ T6719] hsr_slave_1: left promiscuous mode [ 96.541737][ T6719] hsr0 (unregistering): left promiscuous mode [ 96.582033][ T6721] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.720059][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.741481][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.750120][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.309721][ T6738] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 97.333829][ T6739] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 97.344211][ T6741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1333'. [ 97.358118][ T6742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1333'. [ 97.400002][ T6746] bond0: (slave bond_slave_0): Releasing backup interface [ 97.409616][ T6746] bond0: (slave bond_slave_1): Releasing backup interface [ 97.422112][ T6746] team0: Port device team_slave_0 removed [ 97.430992][ T6746] team0: Port device team_slave_1 removed [ 97.441626][ T6746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.465834][ T6747] team0: Mode changed to "loadbalance" [ 97.594724][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 97.846638][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.855270][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.024392][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.032949][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.161019][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 98.390388][ T6773] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 98.416316][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 98.416400][ T29] audit: type=1400 audit(1761589003.597:7109): avc: denied { read write } for pid=6774 comm="syz.1.1345" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.449389][ T29] audit: type=1400 audit(1761589003.627:7110): avc: denied { ioctl } for pid=6774 comm="syz.1.1345" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.449549][ T6775] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 98.490245][ T29] audit: type=1400 audit(1761589003.667:7111): avc: denied { connect } for pid=6774 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.512060][ T29] audit: type=1400 audit(1761589003.687:7112): avc: denied { firmware_load } for pid=6774 comm="syz.1.1345" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 98.566936][ T29] audit: type=1326 audit(1761589003.747:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.570909][ T6775] syz.1.1345 (6775) used greatest stack depth: 10160 bytes left [ 98.590423][ T29] audit: type=1326 audit(1761589003.747:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.622092][ T29] audit: type=1326 audit(1761589003.747:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.645633][ T29] audit: type=1326 audit(1761589003.747:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.669216][ T29] audit: type=1326 audit(1761589003.747:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.692714][ T29] audit: type=1326 audit(1761589003.797:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.0.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 98.729541][ T23] lo speed is unknown, defaulting to 1000 [ 98.775089][ T6785] hub 9-0:1.0: USB hub found [ 98.779850][ T6785] hub 9-0:1.0: 8 ports detected [ 98.793506][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 98.799581][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.133701][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.142787][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.215891][ T6811] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 99.797222][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.955597][ T6827] SELinux: failed to load policy [ 99.964812][ T6829] FAULT_INJECTION: forcing a failure. [ 99.964812][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 99.977533][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.4.1365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.977568][ T6829] Tainted: [W]=WARN [ 99.977575][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.977587][ T6829] Call Trace: [ 99.977592][ T6829] [ 99.977599][ T6829] __dump_stack+0x1d/0x30 [ 99.977639][ T6829] dump_stack_lvl+0xe8/0x140 [ 99.977740][ T6829] dump_stack+0x15/0x1b [ 99.977763][ T6829] should_fail_ex+0x265/0x280 [ 99.977783][ T6829] should_failslab+0x8c/0xb0 [ 99.977813][ T6829] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 99.977872][ T6829] ? __alloc_skb+0x101/0x320 [ 99.977903][ T6829] __alloc_skb+0x101/0x320 [ 99.977967][ T6829] netlink_alloc_large_skb+0xbf/0xf0 [ 99.978070][ T6829] netlink_sendmsg+0x3cf/0x6b0 [ 99.978092][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.978112][ T6829] __sock_sendmsg+0x145/0x180 [ 99.978137][ T6829] ____sys_sendmsg+0x31e/0x4e0 [ 99.978188][ T6829] ___sys_sendmsg+0x17b/0x1d0 [ 99.978241][ T6829] __x64_sys_sendmsg+0xd4/0x160 [ 99.978281][ T6829] x64_sys_call+0x191e/0x3000 [ 99.978307][ T6829] do_syscall_64+0xd2/0x200 [ 99.978334][ T6829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.978362][ T6829] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.978442][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.978463][ T6829] RIP: 0033:0x7efdb460efc9 [ 99.978558][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.978575][ T6829] RSP: 002b:00007efdb306f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.978593][ T6829] RAX: ffffffffffffffda RBX: 00007efdb4865fa0 RCX: 00007efdb460efc9 [ 99.978624][ T6829] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003 [ 99.978647][ T6829] RBP: 00007efdb306f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.978658][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.978670][ T6829] R13: 00007efdb4866038 R14: 00007efdb4865fa0 R15: 00007ffc17e219a8 [ 99.978698][ T6829] [ 100.234154][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 100.258790][ T6841] hub 9-0:1.0: USB hub found [ 100.266069][ T6841] hub 9-0:1.0: 8 ports detected [ 100.404265][ T6851] lo speed is unknown, defaulting to 1000 [ 100.428288][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1376'. [ 100.438190][ T6854] IPVS: Error connecting to the multicast addr [ 100.530752][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.558280][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.123823][ T6865] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1380'. [ 101.134233][ T6866] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 101.148969][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.180455][ T6872] loop3: detected capacity change from 0 to 128 [ 101.189049][ T6872] vfat: Bad value for 'utf8' [ 101.217404][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 101.231947][ T6877] FAULT_INJECTION: forcing a failure. [ 101.231947][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 101.244767][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.0.1384 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.244802][ T6877] Tainted: [W]=WARN [ 101.244808][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.244821][ T6877] Call Trace: [ 101.244827][ T6877] [ 101.244836][ T6877] __dump_stack+0x1d/0x30 [ 101.244858][ T6877] dump_stack_lvl+0xe8/0x140 [ 101.244913][ T6877] dump_stack+0x15/0x1b [ 101.244963][ T6877] should_fail_ex+0x265/0x280 [ 101.244982][ T6877] ? tls_set_sw_offload+0x12d/0xba0 [ 101.245075][ T6877] should_failslab+0x8c/0xb0 [ 101.245180][ T6877] __kmalloc_cache_noprof+0x4c/0x4a0 [ 101.245215][ T6877] tls_set_sw_offload+0x12d/0xba0 [ 101.245246][ T6877] ? tls_set_device_offload+0x19c/0x670 [ 101.245316][ T6877] ? _copy_from_user+0x89/0xb0 [ 101.245344][ T6877] tls_setsockopt+0x9b9/0xce0 [ 101.245432][ T6877] sock_common_setsockopt+0x69/0x80 [ 101.245458][ T6877] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.245485][ T6877] __sys_setsockopt+0x184/0x200 [ 101.245525][ T6877] __x64_sys_setsockopt+0x64/0x80 [ 101.245557][ T6877] x64_sys_call+0x20ec/0x3000 [ 101.245579][ T6877] do_syscall_64+0xd2/0x200 [ 101.245598][ T6877] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.245630][ T6877] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.245703][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.245804][ T6877] RIP: 0033:0x7fee7aa0efc9 [ 101.245819][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.245836][ T6877] RSP: 002b:00007fee7946f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.245854][ T6877] RAX: ffffffffffffffda RBX: 00007fee7ac65fa0 RCX: 00007fee7aa0efc9 [ 101.245866][ T6877] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 101.245923][ T6877] RBP: 00007fee7946f090 R08: 0000000000000038 R09: 0000000000000000 [ 101.245936][ T6877] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 101.246033][ T6877] R13: 00007fee7ac66038 R14: 00007fee7ac65fa0 R15: 00007ffcfb89b9f8 [ 101.246053][ T6877] [ 101.513336][ T6887] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.547376][ T6891] loop1: detected capacity change from 0 to 1024 [ 101.554620][ T6891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.561513][ T6891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.575034][ T6891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.608216][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.642929][ T6900] sctp: [Deprecated]: syz.1.1392 (pid 6900) Use of int in maxseg socket option. [ 101.642929][ T6900] Use struct sctp_assoc_value instead [ 101.658801][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 101.668313][ T6900] IPVS: Error connecting to the multicast addr [ 101.756255][ T6906] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1395'. [ 101.821339][ T6908] hub 9-0:1.0: USB hub found [ 101.826137][ T6908] hub 9-0:1.0: 8 ports detected [ 101.833539][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 101.834055][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.879096][ T6917] FAULT_INJECTION: forcing a failure. [ 101.879096][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.892317][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.2.1400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.892348][ T6917] Tainted: [W]=WARN [ 101.892354][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.892367][ T6917] Call Trace: [ 101.892425][ T6917] [ 101.892434][ T6917] __dump_stack+0x1d/0x30 [ 101.892463][ T6917] dump_stack_lvl+0xe8/0x140 [ 101.892490][ T6917] dump_stack+0x15/0x1b [ 101.892528][ T6917] should_fail_ex+0x265/0x280 [ 101.892554][ T6917] should_fail+0xb/0x20 [ 101.892619][ T6917] should_fail_usercopy+0x1a/0x20 [ 101.892650][ T6917] _copy_from_user+0x1c/0xb0 [ 101.892682][ T6917] __ia32_sys_rt_sigreturn+0x128/0x350 [ 101.892801][ T6917] x64_sys_call+0x2d4b/0x3000 [ 101.892830][ T6917] do_syscall_64+0xd2/0x200 [ 101.892852][ T6917] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.892927][ T6917] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.892957][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.892978][ T6917] RIP: 0033:0x7f308a97b099 [ 101.892996][ T6917] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 101.893042][ T6917] RSP: 002b:00007f3089446a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 101.893066][ T6917] RAX: ffffffffffffffda RBX: 00007f308ac35fa0 RCX: 00007f308a97b099 [ 101.893080][ T6917] RDX: 00007f3089446a80 RSI: 00007f3089446bb0 RDI: 0000000000000021 [ 101.893095][ T6917] RBP: 00007f3089447090 R08: 0000000000000000 R09: 0000000000000000 [ 101.893109][ T6917] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 101.893120][ T6917] R13: 00007f308ac36038 R14: 00007f308ac35fa0 R15: 00007ffdffee4a48 [ 101.893139][ T6917] [ 102.150745][ T6925] lo speed is unknown, defaulting to 1000 [ 102.447414][ T6941] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.487425][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.711737][ T6952] hub 9-0:1.0: USB hub found [ 102.716547][ T6952] hub 9-0:1.0: 8 ports detected [ 102.740622][ T6954] loop1: detected capacity change from 0 to 1024 [ 102.747494][ T6954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.754501][ T6954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.765096][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.817559][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.866005][ T6963] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 102.874073][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1414'. [ 102.883319][ T6963] dummy0: entered promiscuous mode [ 102.889784][ T6963] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 103.005282][ T6963] dummy0: left promiscuous mode [ 103.204201][ T6982] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.211662][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.223207][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.237638][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.247015][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.333500][ T3526] Bluetooth: hci1: command 0x1003 tx timeout [ 103.362134][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 103.417324][ T6993] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.583316][ T7000] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.696623][ T7006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1422'. [ 103.722587][ T7000] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.797718][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 103.797731][ T29] audit: type=1326 audit(1761589008.977:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.2.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f308a9defc9 code=0x0 [ 103.853040][ T29] audit: type=1400 audit(1761589009.017:7607): avc: denied { audit_write } for pid=7005 comm="syz.3.1422" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.874383][ T29] audit: type=1107 audit(1761589009.017:7608): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 103.925803][ T7000] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.926025][ T29] audit: type=1326 audit(1761589009.107:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 103.940141][ T7006] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.959162][ T29] audit: type=1326 audit(1761589009.107:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 103.959249][ T29] audit: type=1326 audit(1761589009.117:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 104.016411][ T29] audit: type=1326 audit(1761589009.117:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 104.039831][ T29] audit: type=1326 audit(1761589009.117:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 104.063263][ T29] audit: type=1326 audit(1761589009.117:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 104.063504][ T29] audit: type=1326 audit(1761589009.217:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 104.146579][ T7016] hub 9-0:1.0: USB hub found [ 104.151304][ T7016] hub 9-0:1.0: 8 ports detected [ 104.166140][ T7000] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.198356][ T7022] loop1: detected capacity change from 0 to 512 [ 104.205005][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 104.215361][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.277398][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.293312][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.306196][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.321422][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.553807][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.560034][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 104.589676][ T7046] syz.3.1433 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.622658][ T7048] FAULT_INJECTION: forcing a failure. [ 104.622658][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 104.635374][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.0.1434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.635425][ T7048] Tainted: [W]=WARN [ 104.635431][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.635443][ T7048] Call Trace: [ 104.635449][ T7048] [ 104.635457][ T7048] __dump_stack+0x1d/0x30 [ 104.635483][ T7048] dump_stack_lvl+0xe8/0x140 [ 104.635510][ T7048] dump_stack+0x15/0x1b [ 104.635531][ T7048] should_fail_ex+0x265/0x280 [ 104.635567][ T7048] should_failslab+0x8c/0xb0 [ 104.635595][ T7048] __kmalloc_node_noprof+0xaa/0x580 [ 104.635629][ T7048] ? __vmalloc_node_range_noprof+0x410/0xed0 [ 104.635773][ T7048] __vmalloc_node_range_noprof+0x410/0xed0 [ 104.635905][ T7048] ? cred_has_capability+0x210/0x280 [ 104.635939][ T7048] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.635969][ T7048] __vmalloc_noprof+0x83/0xc0 [ 104.636056][ T7048] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.636116][ T7048] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.636153][ T7048] ? bpf_prog_alloc+0x2a/0x150 [ 104.636272][ T7048] bpf_prog_alloc+0x3c/0x150 [ 104.636309][ T7048] bpf_prog_load+0x506/0x1100 [ 104.636345][ T7048] ? security_bpf+0x2b/0x90 [ 104.636470][ T7048] __sys_bpf+0x469/0x7c0 [ 104.636500][ T7048] __x64_sys_bpf+0x41/0x50 [ 104.636529][ T7048] x64_sys_call+0x2aee/0x3000 [ 104.636565][ T7048] do_syscall_64+0xd2/0x200 [ 104.636584][ T7048] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.636706][ T7048] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.636741][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.636765][ T7048] RIP: 0033:0x7fee7aa0efc9 [ 104.636804][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.636882][ T7048] RSP: 002b:00007fee7946f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.636901][ T7048] RAX: ffffffffffffffda RBX: 00007fee7ac65fa0 RCX: 00007fee7aa0efc9 [ 104.636912][ T7048] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 104.636922][ T7048] RBP: 00007fee7946f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.636999][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.637014][ T7048] R13: 00007fee7ac66038 R14: 00007fee7ac65fa0 R15: 00007ffcfb89b9f8 [ 104.637038][ T7048] [ 104.637047][ T7048] syz.0.1434: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 104.882035][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.0.1434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.882128][ T7048] Tainted: [W]=WARN [ 104.882135][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.882149][ T7048] Call Trace: [ 104.882156][ T7048] [ 104.882165][ T7048] __dump_stack+0x1d/0x30 [ 104.882189][ T7048] dump_stack_lvl+0xe8/0x140 [ 104.882213][ T7048] dump_stack+0x15/0x1b [ 104.882232][ T7048] warn_alloc+0x12b/0x1a0 [ 104.882331][ T7048] __vmalloc_node_range_noprof+0x4b9/0xed0 [ 104.882382][ T7048] ? cred_has_capability+0x210/0x280 [ 104.882419][ T7048] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.882508][ T7048] __vmalloc_noprof+0x83/0xc0 [ 104.882536][ T7048] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.882647][ T7048] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 104.882675][ T7048] ? bpf_prog_alloc+0x2a/0x150 [ 104.882789][ T7048] bpf_prog_alloc+0x3c/0x150 [ 104.882823][ T7048] bpf_prog_load+0x506/0x1100 [ 104.882851][ T7048] ? security_bpf+0x2b/0x90 [ 104.882954][ T7048] __sys_bpf+0x469/0x7c0 [ 104.883060][ T7048] __x64_sys_bpf+0x41/0x50 [ 104.883089][ T7048] x64_sys_call+0x2aee/0x3000 [ 104.883110][ T7048] do_syscall_64+0xd2/0x200 [ 104.883128][ T7048] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.883185][ T7048] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.883222][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.883247][ T7048] RIP: 0033:0x7fee7aa0efc9 [ 104.883265][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.883284][ T7048] RSP: 002b:00007fee7946f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.883324][ T7048] RAX: ffffffffffffffda RBX: 00007fee7ac65fa0 RCX: 00007fee7aa0efc9 [ 104.883336][ T7048] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 104.883347][ T7048] RBP: 00007fee7946f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.883358][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.883373][ T7048] R13: 00007fee7ac66038 R14: 00007fee7ac65fa0 R15: 00007ffcfb89b9f8 [ 104.883516][ T7048] [ 105.094696][ T7048] Mem-Info: [ 105.097834][ T7048] active_anon:7107 inactive_anon:0 isolated_anon:0 [ 105.097834][ T7048] active_file:18935 inactive_file:2510 isolated_file:0 [ 105.097834][ T7048] unevictable:9 dirty:738 writeback:0 [ 105.097834][ T7048] slab_reclaimable:3268 slab_unreclaimable:20854 [ 105.097834][ T7048] mapped:33489 shmem:3101 pagetables:1072 [ 105.097834][ T7048] sec_pagetables:0 bounce:0 [ 105.097834][ T7048] kernel_misc_reclaimable:0 [ 105.097834][ T7048] free:1876076 free_pcp:11192 free_cma:0 [ 105.143480][ T7048] Node 0 active_anon:28428kB inactive_anon:0kB active_file:75740kB inactive_file:10040kB unevictable:36kB isolated(anon):0kB isolated(file):0kB mapped:133956kB dirty:2952kB writeback:0kB shmem:12404kB kernel_stack:3888kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.171174][ T7048] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.200991][ T7048] lowmem_reserve[]: 0 2881 7859 7859 [ 105.206424][ T7048] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 105.237826][ T7048] lowmem_reserve[]: 0 0 4978 4978 [ 105.242885][ T7048] Node 0 Normal free:4542200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28312kB inactive_anon:0kB active_file:75740kB inactive_file:10040kB unevictable:36kB writepending:2952kB zspages:0kB present:5242880kB managed:5098240kB mlocked:36kB bounce:0kB free_pcp:41336kB local_pcp:36520kB free_cma:0kB [ 105.276314][ T7048] lowmem_reserve[]: 0 0 0 0 [ 105.280904][ T7048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.293789][ T7048] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 105.310204][ T7048] Node 0 Normal: 324*4kB (U) 155*8kB (UME) 101*16kB (UE) 169*32kB (UME) 134*64kB (UME) 110*128kB (UM) 73*256kB (UME) 24*512kB (UME) 16*1024kB (UME) 5*2048kB (UM) 1087*4096kB (UM) = 4542168kB [ 105.329368][ T7048] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 105.338907][ T7048] 24539 total pagecache pages [ 105.343622][ T7048] 0 pages in swap cache [ 105.347773][ T7048] Free swap = 124996kB [ 105.351939][ T7048] Total swap = 124996kB [ 105.356144][ T7048] 2097051 pages RAM [ 105.359949][ T7048] 0 pages HighMem/MovableOnly [ 105.364667][ T7048] 81083 pages reserved [ 105.371661][ T7052] FAULT_INJECTION: forcing a failure. [ 105.371661][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 105.384415][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.3.1435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.384451][ T7052] Tainted: [W]=WARN [ 105.384460][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.384475][ T7052] Call Trace: [ 105.384540][ T7052] [ 105.384554][ T7052] __dump_stack+0x1d/0x30 [ 105.384616][ T7052] dump_stack_lvl+0xe8/0x140 [ 105.384637][ T7052] dump_stack+0x15/0x1b [ 105.384674][ T7052] should_fail_ex+0x265/0x280 [ 105.384698][ T7052] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 105.384723][ T7052] should_failslab+0x8c/0xb0 [ 105.384815][ T7052] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 105.384847][ T7052] ? debugfs_alloc_inode+0x34/0x40 [ 105.384949][ T7052] ? lookup_noperm+0xc9/0x180 [ 105.384969][ T7052] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 105.384990][ T7052] debugfs_alloc_inode+0x34/0x40 [ 105.385053][ T7052] alloc_inode+0x40/0x170 [ 105.385084][ T7052] new_inode+0x1d/0xe0 [ 105.385109][ T7052] __debugfs_create_file+0x109/0x330 [ 105.385133][ T7052] debugfs_create_file_full+0x3f/0x60 [ 105.385229][ T7052] ? __pfx_tun_setup+0x10/0x10 [ 105.385256][ T7052] ref_tracker_dir_debugfs+0x100/0x1e0 [ 105.385307][ T7052] alloc_netdev_mqs+0x1a7/0xa50 [ 105.385352][ T7052] tun_set_iff+0x42c/0x8a0 [ 105.385422][ T7052] __tun_chr_ioctl+0x5f0/0x14c0 [ 105.385525][ T7052] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 105.385553][ T7052] tun_chr_ioctl+0x27/0x40 [ 105.385578][ T7052] __se_sys_ioctl+0xce/0x140 [ 105.385605][ T7052] __x64_sys_ioctl+0x43/0x50 [ 105.385648][ T7052] x64_sys_call+0x1816/0x3000 [ 105.385676][ T7052] do_syscall_64+0xd2/0x200 [ 105.385699][ T7052] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.385821][ T7052] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.385860][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.385900][ T7052] RIP: 0033:0x7f430e25efc9 [ 105.385916][ T7052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.385937][ T7052] RSP: 002b:00007f430ccc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.385959][ T7052] RAX: ffffffffffffffda RBX: 00007f430e4b5fa0 RCX: 00007f430e25efc9 [ 105.385974][ T7052] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 105.385987][ T7052] RBP: 00007f430ccc7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.385998][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.386086][ T7052] R13: 00007f430e4b6038 R14: 00007f430e4b5fa0 R15: 00007ffdbf40c488 [ 105.386105][ T7052] [ 105.386114][ T7052] debugfs: out of free dentries, can not create file 'netdev@ffff88811ffb8558' [ 105.651411][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.729556][ T7062] hub 9-0:1.0: USB hub found [ 105.735867][ T7062] hub 9-0:1.0: 8 ports detected [ 105.804589][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.890749][ T7080] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 105.974178][ T7083] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 106.233548][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 106.233606][ T3526] Bluetooth: hci1: command 0x1003 tx timeout [ 106.278876][ T7087] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.478433][ T7104] hub 9-0:1.0: USB hub found [ 106.483350][ T7104] hub 9-0:1.0: 8 ports detected [ 106.642242][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 106.668452][ T7108] syzkaller0: entered promiscuous mode [ 106.673992][ T7108] syzkaller0: entered allmulticast mode [ 106.706249][ T7117] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.751237][ T7121] pimreg: entered allmulticast mode [ 106.758356][ T7121] pimreg: left allmulticast mode [ 106.767543][ T7123] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.875227][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.883819][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.405250][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.413798][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.453705][ T7144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.546910][ T7149] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 107.773959][ T7151] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.798696][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 107.808794][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 107.833572][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.833732][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 107.989074][ T7170] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.041349][ T7174] hub 9-0:1.0: USB hub found [ 108.046113][ T7174] hub 9-0:1.0: 8 ports detected [ 108.071139][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'. [ 108.090275][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.098625][ T7162] syzkaller0: entered promiscuous mode [ 108.104180][ T7162] syzkaller0: entered allmulticast mode [ 108.112275][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 108.137722][ T7183] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.503736][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.512714][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.713497][ T3526] Bluetooth: hci1: command 0x1003 tx timeout [ 108.719538][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 108.856447][ T7201] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 109.016218][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 109.026798][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 109.064743][ T7212] hub 9-0:1.0: USB hub found [ 109.073374][ T7214] pimreg: entered allmulticast mode [ 109.078799][ T7212] hub 9-0:1.0: 8 ports detected [ 109.080073][ T7214] pimreg: left allmulticast mode [ 109.271136][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'. [ 109.299726][ T7227] bond0: (slave bond_slave_0): Releasing backup interface [ 109.309883][ T7227] bond0: (slave bond_slave_1): Releasing backup interface [ 109.321982][ T7227] team0: Port device team_slave_0 removed [ 109.331636][ T7227] team0: Port device team_slave_1 removed [ 109.339222][ T7227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.346912][ T7227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.350164][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 109.350182][ T29] audit: type=1400 audit(1761589014.527:7772): avc: denied { kexec_image_load } for pid=7226 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 109.355505][ T7230] netlink: 'syz.0.1508': attribute type 10 has an invalid length. [ 109.388329][ T7230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1508'. [ 109.399225][ T7227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.406670][ T7227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.418060][ T7227] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 109.425139][ T7227] batman_adv: batadv0: Removing interface: veth1_vlan [ 109.471520][ T7228] syzkaller0: entered promiscuous mode [ 109.477158][ T7228] syzkaller0: entered allmulticast mode [ 109.484506][ T7230] batman_adv: batadv0: Adding interface: veth1_vlan [ 109.491116][ T7230] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.517857][ T7230] batman_adv: batadv0: Interface activated: veth1_vlan [ 109.654332][ T7239] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 109.699616][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 109.741163][ T29] audit: type=1326 audit(1761589014.917:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.759569][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.774890][ T29] audit: type=1326 audit(1761589014.917:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.798368][ T29] audit: type=1326 audit(1761589014.927:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.821900][ T29] audit: type=1326 audit(1761589014.927:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.822089][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.845320][ T29] audit: type=1326 audit(1761589014.927:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f430e25d810 code=0x7ffc0000 [ 109.875479][ T7252] pimreg: entered allmulticast mode [ 109.876511][ T29] audit: type=1326 audit(1761589014.927:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.882580][ T7252] pimreg: left allmulticast mode [ 109.905031][ T29] audit: type=1326 audit(1761589014.927:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.905069][ T29] audit: type=1326 audit(1761589014.927:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 109.905099][ T29] audit: type=1326 audit(1761589014.927:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430e25efc9 code=0x7ffc0000 [ 110.145392][ T7258] syzkaller0: entered promiscuous mode [ 110.151093][ T7258] syzkaller0: entered allmulticast mode [ 110.157211][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.218303][ T7273] hub 9-0:1.0: USB hub found [ 110.241183][ T7273] hub 9-0:1.0: 8 ports detected [ 110.311384][ T7278] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 110.360619][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.373125][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.428987][ T7289] serio: Serial port ptm0 [ 110.562317][ T7301] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 110.563996][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.135349][ T7307] pimreg: entered allmulticast mode [ 111.141222][ T7307] pimreg: left allmulticast mode [ 111.345502][ T7309] syzkaller0: entered promiscuous mode [ 111.351034][ T7309] syzkaller0: entered allmulticast mode [ 111.395755][ T7320] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 111.436341][ T7324] pimreg: entered allmulticast mode [ 111.444345][ T7324] pimreg: left allmulticast mode [ 111.470081][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 111.504207][ T7328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 111.645466][ T7336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.704611][ T7330] syzkaller0: entered promiscuous mode [ 111.710139][ T7330] syzkaller0: entered allmulticast mode [ 111.720618][ T7343] pimreg: entered allmulticast mode [ 111.728942][ T7336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.740943][ T7343] pimreg: left allmulticast mode [ 111.786180][ T7336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.832649][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.841196][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.866277][ T7336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.885907][ T7350] serio: Serial port ptm0 [ 111.920263][ T3440] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.931225][ T3440] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.943166][ T3440] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.954873][ T3440] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.997712][ T7354] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 112.127509][ T7353] syzkaller0: entered promiscuous mode [ 112.133021][ T7353] syzkaller0: entered allmulticast mode [ 112.570948][ T7366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 112.619237][ T7371] syz!: rxe_newlink: already configured on team_slave_0 [ 112.636198][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.642474][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 112.684021][ T7375] pimreg: entered allmulticast mode [ 112.690996][ T7375] pimreg: left allmulticast mode [ 112.780565][ T7383] pimreg: entered allmulticast mode [ 112.812441][ T7377] syzkaller0: entered promiscuous mode [ 112.818038][ T7377] syzkaller0: entered allmulticast mode [ 112.825023][ T7379] pimreg: left allmulticast mode [ 112.942352][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.950986][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.964463][ T7393] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.086972][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.481386][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.490312][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.506429][ T7412] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.695669][ T7423] pimreg: entered allmulticast mode [ 113.701709][ T7423] pimreg: left allmulticast mode [ 113.741465][ T7418] syzkaller0: entered promiscuous mode [ 113.747008][ T7418] syzkaller0: entered allmulticast mode [ 113.809993][ T7430] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.864235][ T7440] hub 9-0:1.0: USB hub found [ 113.868997][ T7440] hub 9-0:1.0: 8 ports detected [ 113.906931][ T7442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.967229][ T7442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.026361][ T7442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.094277][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 114.204873][ T7457] syzkaller0: entered promiscuous mode [ 114.210435][ T7457] syzkaller0: entered allmulticast mode [ 114.281846][ T7453] syzkaller0: entered promiscuous mode [ 114.287407][ T7453] syzkaller0: entered allmulticast mode [ 114.310212][ T7442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.361386][ T3440] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.372682][ T3440] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.384201][ T2343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.401866][ T2343] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.420384][ T7460] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.494130][ T7473] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 114.521172][ T7475] pimreg: entered allmulticast mode [ 114.545232][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 114.545250][ T29] audit: type=1326 audit(1761589019.727:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.549302][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.551505][ T29] audit: type=1326 audit(1761589019.727:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.575246][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.583560][ T29] audit: type=1326 audit(1761589019.727:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.640153][ T29] audit: type=1326 audit(1761589019.727:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee7aa0d810 code=0x7ffc0000 [ 114.663794][ T29] audit: type=1326 audit(1761589019.727:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.687626][ T29] audit: type=1326 audit(1761589019.727:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.711329][ T29] audit: type=1326 audit(1761589019.727:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.734969][ T29] audit: type=1326 audit(1761589019.727:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.758357][ T29] audit: type=1326 audit(1761589019.727:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.781753][ T29] audit: type=1326 audit(1761589019.727:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.0.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 114.955271][ T7480] syzkaller0: entered promiscuous mode [ 114.960771][ T7480] syzkaller0: entered allmulticast mode [ 115.040719][ T7483] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.113536][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.113541][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 115.127777][ T7486] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 115.147693][ T7488] pim6reg: entered allmulticast mode [ 115.155454][ T7488] sctp: [Deprecated]: syz.0.1605 (pid 7488) Use of int in max_burst socket option. [ 115.155454][ T7488] Use struct sctp_assoc_value instead [ 115.175184][ T7490] hub 9-0:1.0: USB hub found [ 115.179934][ T7490] hub 9-0:1.0: 8 ports detected [ 115.209353][ T7492] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.265247][ T7492] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.297328][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.305893][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.325039][ T7492] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.374993][ T7492] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.409949][ T2343] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.421173][ T2343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.431780][ T2343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.443049][ T2343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.469236][ T7499] FAULT_INJECTION: forcing a failure. [ 115.469236][ T7499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.482416][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.2.1610 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.482453][ T7499] Tainted: [W]=WARN [ 115.482460][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.482475][ T7499] Call Trace: [ 115.482483][ T7499] [ 115.482545][ T7499] __dump_stack+0x1d/0x30 [ 115.482567][ T7499] dump_stack_lvl+0xe8/0x140 [ 115.482621][ T7499] dump_stack+0x15/0x1b [ 115.482648][ T7499] should_fail_ex+0x265/0x280 [ 115.482734][ T7499] should_fail+0xb/0x20 [ 115.482747][ T7499] should_fail_usercopy+0x1a/0x20 [ 115.482765][ T7499] _copy_from_user+0x1c/0xb0 [ 115.482788][ T7499] ___sys_sendmsg+0xc1/0x1d0 [ 115.482834][ T7499] __x64_sys_sendmsg+0xd4/0x160 [ 115.482931][ T7499] x64_sys_call+0x191e/0x3000 [ 115.482951][ T7499] do_syscall_64+0xd2/0x200 [ 115.482974][ T7499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.483018][ T7499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.483046][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.483065][ T7499] RIP: 0033:0x7f308a9defc9 [ 115.483078][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.483135][ T7499] RSP: 002b:00007f3089447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.483151][ T7499] RAX: ffffffffffffffda RBX: 00007f308ac35fa0 RCX: 00007f308a9defc9 [ 115.483162][ T7499] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 115.483172][ T7499] RBP: 00007f3089447090 R08: 0000000000000000 R09: 0000000000000000 [ 115.483183][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.483193][ T7499] R13: 00007f308ac36038 R14: 00007f308ac35fa0 R15: 00007ffdffee4a48 [ 115.483219][ T7499] [ 115.693222][ T7503] pimreg: entered allmulticast mode [ 115.858047][ T7507] syzkaller0: entered promiscuous mode [ 115.863781][ T7507] syzkaller0: entered allmulticast mode [ 116.037151][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.050665][ T7487] pim6reg: left allmulticast mode [ 116.081367][ T7514] syzkaller0: entered promiscuous mode [ 116.086945][ T7514] syzkaller0: entered allmulticast mode [ 116.128433][ T7521] loop0: detected capacity change from 0 to 256 [ 116.140179][ T7521] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 116.149080][ T7521] FAT-fs (loop0): Filesystem has been set read-only [ 116.182742][ T7525] hub 9-0:1.0: USB hub found [ 116.187631][ T7525] hub 9-0:1.0: 8 ports detected [ 116.211148][ T7527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.225432][ T7529] pim6reg: entered allmulticast mode [ 116.232955][ T7529] sctp: [Deprecated]: syz.3.1622 (pid 7529) Use of int in max_burst socket option. [ 116.232955][ T7529] Use struct sctp_assoc_value instead [ 116.265091][ T7530] loop0: detected capacity change from 0 to 512 [ 116.274221][ T7530] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.1621: corrupted in-inode xattr: invalid ea_ino [ 116.288755][ T7527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.299718][ T7530] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1621: couldn't read orphan inode 15 (err -117) [ 116.312465][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.345425][ T7527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.415048][ T7527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.626215][ T7535] syzkaller0: entered promiscuous mode [ 116.631749][ T7535] syzkaller0: entered allmulticast mode [ 116.714488][ T7538] pimreg: entered allmulticast mode [ 116.788037][ T7541] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 117.044652][ T7528] pim6reg: left allmulticast mode [ 117.247437][ T7552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1629'. [ 117.257916][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 117.405335][ T7554] syzkaller0: entered promiscuous mode [ 117.410857][ T7554] syzkaller0: entered allmulticast mode [ 117.500256][ T7559] loop3: detected capacity change from 0 to 256 [ 117.510981][ T7559] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 117.519765][ T7559] FAT-fs (loop3): Filesystem has been set read-only [ 118.073479][ T4204] Bluetooth: hci0: command 0x1003 tx timeout [ 118.079662][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.464601][ T3440] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.493528][ T3440] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.506366][ T2343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.519266][ C0] hrtimer: interrupt took 35516 ns [ 118.551777][ T7575] wireguard0: entered promiscuous mode [ 118.558001][ T7575] wireguard0: entered allmulticast mode [ 118.617612][ T3440] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.630515][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.685245][ T7580] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 118.740543][ T7582] pim6reg: entered allmulticast mode [ 118.762300][ T7582] sctp: [Deprecated]: syz.0.1639 (pid 7582) Use of int in max_burst socket option. [ 118.762300][ T7582] Use struct sctp_assoc_value instead [ 118.780315][ T7584] hsr0: entered promiscuous mode [ 118.789693][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.798863][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.811811][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 118.821376][ T7584] hsr_slave_0: left promiscuous mode [ 118.828390][ T7584] hsr_slave_1: left promiscuous mode [ 118.841468][ T7584] hsr0 (unregistering): left promiscuous mode [ 119.012149][ T7591] syzkaller0: entered promiscuous mode [ 119.017699][ T7591] syzkaller0: entered allmulticast mode [ 119.073709][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.184511][ T7607] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.355434][ T7620] hub 9-0:1.0: USB hub found [ 119.360156][ T7620] hub 9-0:1.0: 8 ports detected [ 119.557867][ T7629] syzkaller0: entered promiscuous mode [ 119.563512][ T7629] syzkaller0: entered allmulticast mode [ 119.570260][ T7581] pim6reg: left allmulticast mode [ 119.656595][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 119.695268][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 119.695285][ T29] audit: type=1326 audit(1761589024.877:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.699895][ T7636] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 119.701587][ T29] audit: type=1326 audit(1761589024.877:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.756503][ T29] audit: type=1326 audit(1761589024.877:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.779977][ T29] audit: type=1326 audit(1761589024.877:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.803586][ T29] audit: type=1326 audit(1761589024.877:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.803648][ T7642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.827044][ T29] audit: type=1326 audit(1761589024.937:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.861030][ T29] audit: type=1326 audit(1761589024.937:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.884542][ T29] audit: type=1326 audit(1761589024.937:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.908275][ T29] audit: type=1326 audit(1761589024.937:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 119.932205][ T29] audit: type=1326 audit(1761589024.937:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 120.025860][ T7657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1671'. [ 120.033016][ T7658] pim6reg: entered allmulticast mode [ 120.041551][ T7658] sctp: [Deprecated]: syz.0.1670 (pid 7658) Use of int in max_burst socket option. [ 120.041551][ T7658] Use struct sctp_assoc_value instead [ 120.072907][ T7660] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.427218][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 120.643061][ T7690] syz!: rxe_newlink: already configured on team_slave_0 [ 120.744656][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1684'. [ 120.928965][ T7655] pim6reg: left allmulticast mode [ 120.966122][ T7702] syzkaller0: entered promiscuous mode [ 120.971736][ T7702] syzkaller0: entered allmulticast mode [ 120.999163][ T37] Bluetooth: hci2: Frame reassembly failed (-84) [ 121.113825][ T4449] Bluetooth: hci0: command 0x1003 tx timeout [ 121.119901][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.182308][ T7718] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.211158][ T7720] pimreg: entered allmulticast mode [ 121.217795][ T7719] pimreg: left allmulticast mode [ 121.237168][ T7721] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 121.987472][ T7738] pim6reg: entered allmulticast mode [ 121.997216][ T7738] sctp: [Deprecated]: syz.0.1701 (pid 7738) Use of int in max_burst socket option. [ 121.997216][ T7738] Use struct sctp_assoc_value instead [ 122.113890][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.473554][ T4204] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 122.656615][ T7762] lo speed is unknown, defaulting to 1000 [ 122.782517][ T7766] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1711'. [ 122.792664][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 122.807354][ T7737] pim6reg: left allmulticast mode [ 123.043538][ T4449] Bluetooth: hci2: command 0x1003 tx timeout [ 123.049645][ T3526] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 123.821410][ T7775] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 123.992264][ T7789] hub 9-0:1.0: USB hub found [ 123.999177][ T7789] hub 9-0:1.0: 8 ports detected [ 124.191872][ T3526] Bluetooth: hci0: command 0x1003 tx timeout [ 124.203530][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.211809][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1721'. [ 124.252564][ T7800] syzkaller0: entered promiscuous mode [ 124.258269][ T7800] syzkaller0: entered allmulticast mode [ 124.271845][ T7803] pim6reg: entered allmulticast mode [ 124.294132][ T7803] sctp: [Deprecated]: syz.4.1725 (pid 7803) Use of int in max_burst socket option. [ 124.294132][ T7803] Use struct sctp_assoc_value instead [ 124.357421][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1730'. [ 124.369349][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 124.481569][ T2343] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.732741][ T7832] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 125.069623][ T7802] pim6reg: left allmulticast mode [ 125.139472][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1738'. [ 125.214504][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 125.214531][ T29] audit: type=1326 audit(1761589030.377:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.244261][ T29] audit: type=1326 audit(1761589030.377:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.267787][ T29] audit: type=1326 audit(1761589030.377:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.291380][ T29] audit: type=1326 audit(1761589030.377:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.314793][ T29] audit: type=1326 audit(1761589030.377:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.315709][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.338232][ T29] audit: type=1326 audit(1761589030.377:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.370046][ T29] audit: type=1326 audit(1761589030.377:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.370383][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.393565][ T29] audit: type=1326 audit(1761589030.377:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.421268][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 125.424668][ T29] audit: type=1326 audit(1761589030.377:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.435443][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 125.456990][ T29] audit: type=1326 audit(1761589030.377:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb460efc9 code=0x7ffc0000 [ 125.654458][ T7859] syzkaller0: entered promiscuous mode [ 125.659995][ T7859] syzkaller0: entered allmulticast mode [ 125.717890][ T7869] pim6reg: entered allmulticast mode [ 125.724434][ T7869] sctp: [Deprecated]: syz.0.1748 (pid 7869) Use of int in max_burst socket option. [ 125.724434][ T7869] Use struct sctp_assoc_value instead [ 125.765346][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1750'. [ 126.307890][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 126.358683][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 126.544517][ T7868] pim6reg: left allmulticast mode [ 126.548349][ T3483] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.591145][ T7893] siw: device registration error -23 [ 126.598946][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 126.721353][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1763'. [ 126.776101][ T296] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.916155][ T7901] syzkaller0: entered promiscuous mode [ 126.921693][ T7901] syzkaller0: entered allmulticast mode [ 126.952745][ T7919] pim6reg: entered allmulticast mode [ 126.972589][ T7919] sctp: [Deprecated]: syz.3.1769 (pid 7919) Use of int in max_burst socket option. [ 126.972589][ T7919] Use struct sctp_assoc_value instead [ 127.106010][ T7915] syzkaller0: entered promiscuous mode [ 127.111648][ T7915] syzkaller0: entered allmulticast mode [ 127.446375][ T7939] netlink: 'syz.0.1776': attribute type 7 has an invalid length. [ 127.454300][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 127.511563][ T7939] loop0: detected capacity change from 0 to 512 [ 127.520794][ T7939] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.1776: invalid fast symlink length 39 [ 127.534215][ T7939] EXT4-fs (loop0): get root inode failed [ 127.539904][ T7939] EXT4-fs (loop0): mount failed [ 127.566069][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1777'. [ 127.712699][ T7916] pim6reg: left allmulticast mode [ 127.756712][ T7949] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 127.870255][ T7961] hub 9-0:1.0: USB hub found [ 127.875390][ T7961] hub 9-0:1.0: 8 ports detected [ 128.060057][ T7963] syzkaller0: entered promiscuous mode [ 128.066140][ T7963] syzkaller0: entered allmulticast mode [ 128.143620][ T7976] pim6reg: entered allmulticast mode [ 128.149919][ T7976] sctp: [Deprecated]: syz.1.1791 (pid 7976) Use of int in max_burst socket option. [ 128.149919][ T7976] Use struct sctp_assoc_value instead [ 128.793498][ T3483] Bluetooth: hci0: command 0x1003 tx timeout [ 128.800463][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.829744][ T7995] netlink: 'syz.2.1797': attribute type 7 has an invalid length. [ 128.871967][ T7995] loop2: detected capacity change from 0 to 512 [ 128.883493][ T7995] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1797: invalid fast symlink length 39 [ 128.898210][ T7995] EXT4-fs (loop2): get root inode failed [ 128.904252][ T7995] EXT4-fs (loop2): mount failed [ 128.959889][ T7974] pim6reg: left allmulticast mode [ 129.449297][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.642493][ T8028] syzkaller0: entered promiscuous mode [ 129.649325][ T8028] syzkaller0: entered allmulticast mode [ 129.843090][ T8042] pim6reg: entered allmulticast mode [ 129.874111][ T8042] sctp: [Deprecated]: syz.0.1815 (pid 8042) Use of int in max_burst socket option. [ 129.874111][ T8042] Use struct sctp_assoc_value instead [ 129.901414][ T8046] netlink: 'syz.2.1816': attribute type 7 has an invalid length. [ 130.044597][ T8046] loop2: detected capacity change from 0 to 512 [ 130.091578][ T8046] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1816: invalid fast symlink length 39 [ 130.244855][ T8046] EXT4-fs (loop2): get root inode failed [ 130.250555][ T8046] EXT4-fs (loop2): mount failed [ 130.260332][ T8048] syzkaller0: entered promiscuous mode [ 130.265874][ T8048] syzkaller0: entered allmulticast mode [ 130.357259][ T8056] netlink: 'syz.3.1820': attribute type 7 has an invalid length. [ 130.365202][ T8056] __nla_validate_parse: 11 callbacks suppressed [ 130.365295][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 130.384682][ T8057] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 130.398154][ T8056] loop3: detected capacity change from 0 to 512 [ 130.405812][ T8056] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.1820: invalid fast symlink length 39 [ 130.420789][ T8056] EXT4-fs (loop3): get root inode failed [ 130.426636][ T8056] EXT4-fs (loop3): mount failed [ 130.465446][ T8066] loop1: detected capacity change from 0 to 512 [ 130.475528][ T8066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.488327][ T8066] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.540163][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1824'. [ 130.555184][ T8072] 9pnet_fd: Insufficient options for proto=fd [ 130.570910][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 130.580997][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 130.705272][ T8041] pim6reg: left allmulticast mode [ 130.739973][ T8076] syzkaller0: entered promiscuous mode [ 130.745621][ T8076] syzkaller0: entered allmulticast mode [ 130.855108][ T8083] netlink: 'syz.3.1829': attribute type 7 has an invalid length. [ 130.862905][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 131.242099][ T8089] hsr0: entered promiscuous mode [ 131.250160][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 131.259814][ T8089] hsr_slave_0: left promiscuous mode [ 131.265966][ T8089] hsr_slave_1: left promiscuous mode [ 131.276507][ T8089] hsr0 (unregistering): left promiscuous mode [ 131.315340][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.326989][ T8087] syzkaller0: entered promiscuous mode [ 131.332508][ T8087] syzkaller0: entered allmulticast mode [ 131.375007][ T8092] bond0: (slave bond_slave_0): Releasing backup interface [ 131.385668][ T8092] bond0: (slave bond_slave_1): Releasing backup interface [ 131.399119][ T8092] team0: Port device team_slave_0 removed [ 131.408953][ T8092] team0: Port device team_slave_1 removed [ 131.417272][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.424809][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.440156][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.448005][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.475693][ T6984] syz!: Port: 1 Link DOWN [ 131.479811][ T8097] team0: Mode changed to "loadbalance" [ 131.487718][ T8101] netlink: 'syz.3.1835': attribute type 7 has an invalid length. [ 131.495591][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 131.513338][ T8101] loop3: detected capacity change from 0 to 512 [ 131.513570][ T3483] Bluetooth: hci0: command 0x1003 tx timeout [ 131.525841][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.539136][ T8101] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.1835: invalid fast symlink length 39 [ 131.569863][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 131.580390][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 131.591105][ T8101] EXT4-fs (loop3): get root inode failed [ 131.596890][ T8101] EXT4-fs (loop3): mount failed [ 131.673914][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 131.673931][ T29] audit: type=1326 audit(1761589036.857:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.679088][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.681799][ T29] audit: type=1326 audit(1761589036.857:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.704413][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.712083][ T29] audit: type=1326 audit(1761589036.857:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.766989][ T29] audit: type=1326 audit(1761589036.857:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.790520][ T29] audit: type=1326 audit(1761589036.857:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee7aa0d810 code=0x7ffc0000 [ 131.814022][ T29] audit: type=1326 audit(1761589036.857:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.837461][ T29] audit: type=1326 audit(1761589036.857:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.860968][ T29] audit: type=1326 audit(1761589036.857:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.884410][ T29] audit: type=1326 audit(1761589036.857:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 131.907816][ T29] audit: type=1326 audit(1761589036.857:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7aa0efc9 code=0x7ffc0000 [ 132.167714][ T8117] syzkaller0: entered promiscuous mode [ 132.173241][ T8117] syzkaller0: entered allmulticast mode [ 132.314686][ T8126] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 132.329414][ T8128] hub 9-0:1.0: USB hub found [ 132.334296][ T8128] hub 9-0:1.0: 8 ports detected [ 132.386761][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.455784][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 133.004607][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.033119][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.101391][ T8156] netlink: 'syz.2.1855': attribute type 7 has an invalid length. [ 133.228719][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.237806][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.388060][ T8171] netlink: 'syz.0.1862': attribute type 7 has an invalid length. [ 133.501132][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.509795][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.781342][ T8180] hub 9-0:1.0: USB hub found [ 133.786320][ T8180] hub 9-0:1.0: 8 ports detected [ 133.837345][ T8184] loop1: detected capacity change from 0 to 512 [ 133.858212][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.871143][ T8184] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.935253][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 134.048211][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.062299][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.122313][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.131565][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.152680][ T8211] hub 9-0:1.0: USB hub found [ 134.157516][ T8211] hub 9-0:1.0: 8 ports detected [ 134.393487][ T3483] Bluetooth: hci0: command 0x1003 tx timeout [ 134.393498][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.439680][ T8232] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 134.480161][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.547878][ T8239] syzkaller0: entered promiscuous mode [ 134.553397][ T8239] syzkaller0: entered allmulticast mode [ 134.654628][ T8243] syzkaller0: entered promiscuous mode [ 134.660307][ T8243] syzkaller0: entered allmulticast mode [ 134.680290][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.729982][ T8256] pim6reg: entered allmulticast mode [ 134.736797][ T8256] sctp: [Deprecated]: syz.3.1898 (pid 8256) Use of int in max_burst socket option. [ 134.736797][ T8256] Use struct sctp_assoc_value instead [ 134.760728][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 134.774986][ T8260] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 135.555876][ T8255] pim6reg: left allmulticast mode [ 135.610877][ T8278] loop1: detected capacity change from 0 to 512 [ 135.625110][ T8278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.637789][ T8278] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.701043][ T8281] 9pnet_fd: Insufficient options for proto=fd [ 135.863921][ T8288] __nla_validate_parse: 11 callbacks suppressed [ 135.863939][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 135.880783][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 135.943100][ T8293] lo speed is unknown, defaulting to 1000 [ 136.451830][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.470579][ T8299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1913'. [ 136.548880][ T8299] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.559359][ T4449] Bluetooth: hci0: command 0x1003 tx timeout [ 136.564936][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.613515][ C1] ================================================================== [ 136.621653][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 136.628876][ C1] [ 136.631215][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 0: [ 136.639299][ C1] wq_worker_tick+0x60/0x230 [ 136.643913][ C1] sched_tick+0x11a/0x270 [ 136.648271][ C1] update_process_times+0x15f/0x190 [ 136.653483][ C1] tick_nohz_handler+0x249/0x2d0 [ 136.658459][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 136.663669][ C1] hrtimer_interrupt+0x21a/0x460 [ 136.668617][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 136.674520][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 136.680169][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.686214][ C1] __sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 136.692211][ C1] n_tty_receive_buf_standard+0x1fd/0x2f10 [ 136.698033][ C1] n_tty_receive_buf_common+0x805/0xbe0 [ 136.703608][ C1] n_tty_receive_buf2+0x33/0x40 [ 136.708487][ C1] tty_ldisc_receive_buf+0x66/0xf0 [ 136.713613][ C1] tty_port_default_receive_buf+0x59/0x90 [ 136.719359][ C1] flush_to_ldisc+0x148/0x340 [ 136.724098][ C1] process_scheduled_works+0x4ce/0x9d0 [ 136.729588][ C1] worker_thread+0x582/0x770 [ 136.734183][ C1] kthread+0x489/0x510 [ 136.738255][ C1] ret_from_fork+0x122/0x1b0 [ 136.742844][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.747620][ C1] [ 136.749946][ C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 1: [ 136.758008][ C1] wq_worker_tick+0x60/0x230 [ 136.762609][ C1] sched_tick+0x11a/0x270 [ 136.766944][ C1] update_process_times+0x15f/0x190 [ 136.772139][ C1] tick_nohz_handler+0x249/0x2d0 [ 136.777082][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 136.782282][ C1] hrtimer_interrupt+0x21a/0x460 [ 136.787221][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 136.793123][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 136.793500][ T3483] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 136.798763][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.810822][ C1] _raw_spin_unlock_irq+0x2f/0x50 [ 136.815884][ C1] process_scheduled_works+0x486/0x9d0 [ 136.821360][ C1] worker_thread+0x582/0x770 [ 136.825952][ C1] kthread+0x489/0x510 [ 136.830030][ C1] ret_from_fork+0x122/0x1b0 [ 136.834637][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.839403][ C1] [ 136.841722][ C1] value changed: 0x0000000000195460 -> 0x0000000000197b70 [ 136.848831][ C1] [ 136.851154][ C1] Reported by Kernel Concurrency Sanitizer on: [ 136.857322][ C1] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.868615][ C1] Tainted: [W]=WARN [ 136.872421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.882487][ C1] Workqueue: events_unbound flush_to_ldisc [ 136.888308][ C1] ================================================================== [ 136.898062][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 136.898079][ T29] audit: type=1326 audit(1761589042.077:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f308a9d5e67 code=0x7fc00000 [ 136.927727][ T29] audit: type=1326 audit(1761589042.077:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f308a97b099 code=0x7fc00000 [ 136.951111][ T29] audit: type=1326 audit(1761589042.077:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f308a97b15f code=0x7fc00000 [ 136.962864][ T8308] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 136.974818][ T29] audit: type=1326 audit(1761589042.077:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 136.974851][ T29] audit: type=1326 audit(1761589042.077:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 136.976674][ T29] audit: type=1326 audit(1761589042.077:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 137.053759][ T29] audit: type=1326 audit(1761589042.087:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 137.077192][ T29] audit: type=1326 audit(1761589042.087:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 137.100665][ T29] audit: type=1326 audit(1761589042.087:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000 [ 137.124084][ T29] audit: type=1326 audit(1761589042.087:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a9defc9 code=0x7fc00000