last executing test programs: 51.486142114s ago: executing program 0 (id=143): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 49.326003369s ago: executing program 0 (id=160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') flistxattr(r0, &(0x7f00000000c0)=""/74, 0x4a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x2c, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="00101e5738ebf7"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x2c}], 0x1}, 0x0) 49.220421739s ago: executing program 0 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80642, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000040)={0x2004181, 0x0, 0x8, 0x2, 0x9a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x67, 0x9c, &(0x7f0000000080)="97b0fe6f746071bc7acf251efa4f618eb37d201ceff1d2eac03464da2c723899d56bb7749f133627253af5a592e71dd84b6b8baf750f2b7802cc68d034733f5ae12cc9c95b41875e65fe82968828ec8255bfe030017d147613fd1ab124838ce44b8275748f68de", &(0x7f0000000380)=""/156, 0x6, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)="095fd57edc8fb3173331d2a530a27666514e0d059905a05cafa8ac87d78bd959ce0479230bff67b7acc0e7e4d198aa3dbb104b26a67e9fd2e97d96d2af0858143e5f8fa7df2c787a7066c82ded245476db9ca1ec1616112e03cdfc34ff4ed834e3de5c", 0x5, 0x0, 0x9}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x80000000, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x38}}, 0x40000) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="410d11008502ffffde420709000000000000"], 0x18}, 0x1, 0x7}, 0x0) 49.020312351s ago: executing program 0 (id=164): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000ac0)=[{0x0, 0x0, 0x40, 0x8}, {0x1, 0x1, 0x3, 0x9}, {0x549, 0xff, 0xec, 0x2}, {0x2, 0x6, 0x7f, 0x7}, {0x8000, 0x7, 0x1, 0x8}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) write$hidraw(r2, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r2, 0x401c5820, &(0x7f00000005c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) close(r0) 48.618407383s ago: executing program 0 (id=172): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @empty, 'macvlan0\x00'}}, 0x80, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2000000000000004, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) recvfrom$packet(r6, &(0x7f00000004c0)=""/180, 0xb4, 0x10042, &(0x7f00000003c0)={0x11, 0x15, r7, 0x1, 0x9, 0x6, @random="1a986452d4e0"}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000020c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0xfff) accept4(0xffffffffffffffff, &(0x7f0000000240)=@x25, 0x0, 0x800) 48.239862936s ago: executing program 0 (id=179): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000019c40)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x486, &(0x7f0000019d00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xa96) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000c412000075f150c1537804cd18291f653ddfcf22d60aef806c4f1c91785f10859f21f33ff12f1c39f69136e3c738f371f8a3e354315b2e14c1b0496acdc285a945e910b4ee5751d4ab73583efac7b6bae5a85d816459fe4289e8a90859c7b4289713b9fa5b3cd4fbe5de46c34c7840ab56d8140a08", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) fcntl$lock(r7, 0x7, &(0x7f00000003c0)={0x1, 0x2, 0x6, 0x100005}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x10001, 0xf09}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="02", @ANYRES64=r7, @ANYRES16=r4, @ANYRES32=r4, @ANYRES64=r9, @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffbe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) r13 = open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) preadv2(r13, &(0x7f0000000040), 0x0, 0x2200, 0x0, 0x19) 48.197656636s ago: executing program 32 (id=179): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000019c40)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x486, &(0x7f0000019d00)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xa96) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000c412000075f150c1537804cd18291f653ddfcf22d60aef806c4f1c91785f10859f21f33ff12f1c39f69136e3c738f371f8a3e354315b2e14c1b0496acdc285a945e910b4ee5751d4ab73583efac7b6bae5a85d816459fe4289e8a90859c7b4289713b9fa5b3cd4fbe5de46c34c7840ab56d8140a08", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) fcntl$lock(r7, 0x7, &(0x7f00000003c0)={0x1, 0x2, 0x6, 0x100005}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x10001, 0xf09}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="02", @ANYRES64=r7, @ANYRES16=r4, @ANYRES32=r4, @ANYRES64=r9, @ANYRES8=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffbe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) r13 = open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) preadv2(r13, &(0x7f0000000040), 0x0, 0x2200, 0x0, 0x19) 2.291015875s ago: executing program 4 (id=885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 1.714355168s ago: executing program 4 (id=894): socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeef"], 0xc8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2000000000000004, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) recvfrom$packet(r5, &(0x7f00000004c0)=""/180, 0xb4, 0x10042, &(0x7f00000003c0)={0x11, 0x15, r6, 0x1, 0x9, 0x6, @random="1a986452d4e0"}, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3, 0x4000}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000020c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0xfff) accept4(0xffffffffffffffff, &(0x7f0000000240)=@x25, 0x0, 0x800) 1.707960219s ago: executing program 2 (id=895): socket$inet6_sctp(0xa, 0x5, 0x84) syz_read_part_table(0x1053, &(0x7f0000003500)="$eJzsz8ENAVEYBOB5i7WCGvTgqA4OutlqHDTh6qgDTShAdi2JAkQ2+b7Lm2QmL/nDn92TklRJmaSLZXf76qfJPMkjy251XX+K7bF5hSppknJZpU1y2rwHs+GtsxhSmzr70s/7nw/nn58HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPwDAAA///92gh8") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000300)="b03ef9880b815229ff28eac1d4f49bca", 0x10}], 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0475fd239c11c5a45b329bf29eea7e8fce0000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) unshare(0x24040000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40e3, 0x10, 0xfffffffd, 0xfffffffd, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600100001000130726bd7000000000006400000000000000ac1414130000000000000000000000004e2100004e2300030200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.626305099s ago: executing program 4 (id=897): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8003, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 1.591419069s ago: executing program 4 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 1.401448461s ago: executing program 2 (id=899): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20781, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) pread64(r0, 0x0, 0x0, 0x10000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000003c0)='cachefiles_trunc\x00', r1, 0x0, 0xff}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT], 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r4}, 0x18) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)="e5f1fda2d6055bef6ad67f4806ff6ac3a93555c1b5b84294c61117bf224f91df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e74e3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683b80752467b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a61433756d3a97b9280000000000000", 0xad}, {&(0x7f0000000580)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d91ee50a70b76402fd5b36315f13964475d1953ce3c7c4178122dfb890ac80c3ad3c2802d61182905919f20e10ca67ff319f82746d00e168db24e34b4144732751624194da1265ad4fd903e635ab33e44ded3966fe33f6930086afd503972b4b9ac7135bba0fe34179ac8a75df5722abb2987fb698b7fcc0bed4af753", 0xb1}, {&(0x7f0000000840)="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", 0x4bc}], 0x3}, 0x20000044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0xdffffff9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x8842) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 1.37624637s ago: executing program 2 (id=900): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) 1.339102401s ago: executing program 2 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x20, 0x0, 0x1, 0x0, 0xfffffffd, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4) 1.338487331s ago: executing program 2 (id=902): r0 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r2, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './control\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7, 0x0, 0x3}, 0x18) mlock(&(0x7f00003a1000/0x2000)=nil, 0x2000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) 1.045410763s ago: executing program 3 (id=904): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a02700"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)='>N', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getpeername$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x6d6, &(0x7f0000002000/0x8000)=nil, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x4}, 0x18) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) mlock2(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) 974.872204ms ago: executing program 3 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x9d8, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3e0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x378, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x7}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0xa}, {0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0xa}, {0x2, 0x3}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x7}, {0x0, 0x6}, {0x5}, {0x4, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x5, 0x1d2, 0x3ff, 0x6, 0x2, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x1b, 0x30, 0x48, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0xb, 0x6, 0x3f, 0x6, 0xb, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x36, 0xb, 0x1, 0x3, 0x24, 0x464d011640650031, 0x2, 0x4, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x2}, {0x6, 0x9}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x1a}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x16, 0x4, 0x6c, 0x18, 0xb, 0x1, 0x3, 0x48, 0x4, 0x7b, 0x30, 0x5, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb7, 0x80, 0x3ff, 0x8, 0x68d, 0xab1, 0x5f45, 0x9]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x60, 0x60, 0x30, 0x60, 0x0, 0x18, 0x24, 0x60, 0x1b, 0xb, 0x24, 0x60, 0x60, 0x9, 0xb, 0xb, 0x3, 0x12, 0x36, 0x6c, 0x4, 0x18, 0x48, 0x24, 0xc, 0x6, 0x4, 0x36, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x20, 0x81, 0x5, 0x61ad, 0xac4a, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x10, 0x7, 0x2, 0x7, 0x3, 0x2, 0x101]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x18, 0x36, 0x24, 0x4, 0x0, 0x3, 0xb, 0x48, 0x16, 0x5, 0x2, 0x1b, 0x6, 0x33, 0xc, 0x60, 0x1b, 0x24, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff3e, 0x7fff, 0x6, 0x4fa7, 0x9, 0x77, 0xf, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffd, 0x0, 0x7, 0x3, 0xd, 0xd4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x18, 0x1b, 0x5, 0xb, 0x6c, 0x6c, 0x2, 0x1b, 0x30, 0x9, 0x6c, 0x36, 0x4, 0x24, 0x48, 0x5, 0xc, 0x2, 0x12, 0x48, 0x6, 0x30, 0x3, 0x24, 0xb, 0x4, 0x9, 0x4, 0x1, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x9}, {0x4, 0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0xb, 0x18, 0x1b, 0x18, 0xc, 0xb, 0x30, 0x36, 0x5, 0x6c, 0x12, 0x6, 0x18, 0x24, 0x3, 0x16, 0x7, 0x2, 0x6c, 0x18, 0x5, 0x48, 0x60, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0xb, 0x12, 0x72a2e358e0db19c6, 0x6c, 0x6c, 0x60, 0x60, 0x30, 0x4, 0xc, 0x0, 0x30, 0x5, 0x1, 0x12, 0x5]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x7}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x7}, {}, {}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x4}, {0x4, 0x5}, {0x6, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x1d}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {}, {0x0, 0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x12, 0x3, 0x24, 0x2, 0x24, 0x36, 0x5, 0xc, 0x1, 0x30, 0x12, 0x6, 0x6c, 0x4, 0x6, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x5bc, 0x11d, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xd3b6, 0xa1, 0x9c4, 0x6, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x6}, {0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x2, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x1}, {0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0xa}, {0x4, 0x5}, {0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x8, 0x5, 0x4, 0x1, 0x10, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x0, 0x3, 0x6, 0x5, 0x3, 0x40]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x6c, 0x1, 0x5a, 0x16, 0x30, 0x1, 0x24, 0xb, 0x6c, 0x48, 0x12, 0x60, 0x6, 0x9]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x3, 0xb1, 0x7, 0x3, 0x80, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0xd, 0x1, 0x0, 0x0, 0x5, 0x2]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x6036, 0x0, 0x9, 0x0, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x7}, {0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x8}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x8}, {0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x6}, {}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x2}, {0x2, 0x4}, {0x2, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x100, 0xa03, 0x9, 0x7, 0x6, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x6, 0x30, 0x12, 0x4, 0x16, 0x19, 0x48, 0xc, 0x1, 0x1, 0x2, 0x30, 0x24, 0x3, 0x24, 0x3, 0x2, 0x12, 0x48, 0x1, 0xc, 0x1b, 0x30, 0x5, 0xc, 0x5, 0x3, 0x0, 0x48, 0x0, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xc, 0x1, 0x4, 0xc2, 0x1, 0xceb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x3}, {0x0, 0x2}, {0x5, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x274, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5}, {0x5, 0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x15}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x3}, {0x3, 0x2}, {0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1a, 0x7ff, 0xcdf, 0x9, 0x8, 0x4, 0x2, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0x4, 0xb4d, 0x2, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xf, 0xb1b, 0xff, 0x3, 0x1f45, 0x1ec]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x6c, 0x5, 0x30, 0xb, 0xd, 0x30, 0xb, 0xb, 0x36, 0x5, 0x2, 0x16, 0x0, 0x16, 0x30, 0x3, 0x60, 0x6, 0x2, 0x30, 0x2, 0x9, 0x4]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0xb, 0x48, 0x18, 0x26, 0x3, 0x36, 0x1, 0x60, 0x3, 0x0, 0x6, 0x16, 0x48, 0x16, 0x24, 0x30, 0x3, 0x24, 0x3, 0x3, 0x0, 0x18, 0x5, 0x0, 0x0, 0x0, 0x9, 0x6, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x36, 0x0, 0xbcc7, 0x9, 0xfffe, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x8, 0x1, 0x7, 0x4, 0x400, 0x8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x6, 0x4, 0x6c, 0x30, 0x36, 0xc, 0x24, 0xb, 0x4, 0x36, 0xb, 0x24, 0x24, 0x6, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x137a, 0x3, 0x2, 0xd, 0x4, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x60, 0x12, 0x2, 0x6, 0x6c, 0x60, 0x30, 0x48, 0x48, 0x2, 0x2, 0x9, 0x36, 0x19, 0xb, 0x13, 0x9, 0x16, 0x1, 0x4, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x46, 0x1000, 0xf78, 0x1, 0xfff7, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x39, 0x8000, 0x2b6, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x5}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {}, {0x6}, {0x6}, {0x1, 0x1}, {0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x2}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x3}, {0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x5}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x4}]}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc0}]}]}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x4010}, 0x20004881) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x40810, 0x403}, [@IFLA_CARRIER={0x5, 0x21, 0xca}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 876.270284ms ago: executing program 3 (id=908): socket$inet6_sctp(0xa, 0x5, 0x84) syz_read_part_table(0x1053, &(0x7f0000003500)="$eJzsz8ENAVEYBOB5i7WCGvTgqA4OutlqHDTh6qgDTShAdi2JAkQ2+b7Lm2QmL/nDn92TklRJmaSLZXf76qfJPMkjy251XX+K7bF5hSppknJZpU1y2rwHs+GtsxhSmzr70s/7nw/nn58HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPwDAAA///92gh8") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000300)="b03ef9880b815229ff28eac1d4f49bca", 0x10}], 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0475fd239c11c5a45b329bf29eea7e8fce0000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24040000) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40e3, 0x10, 0xfffffffd, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 771.308235ms ago: executing program 2 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xf1c38fa000000000}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 631.607776ms ago: executing program 4 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x40) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x40) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) inotify_init() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xae, 0x10000}, 0x28) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x38) 588.652757ms ago: executing program 3 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bffa603fe50584128c9a5749a200000000000007020000f8ffffffb703000008000000b75bec04000000000000096af7cfb2"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x7ffffffe) unshare(0x6a040000) syz_io_uring_setup(0x1b68, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r6, 0x8, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 468.334567ms ago: executing program 4 (id=921): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10003, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 422.860677ms ago: executing program 5 (id=923): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x41) 385.773948ms ago: executing program 5 (id=924): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) 354.326548ms ago: executing program 3 (id=925): r0 = mq_open(0x0, 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 323.398598ms ago: executing program 3 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 323.103168ms ago: executing program 5 (id=927): fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', 'bond\x00'}, &(0x7f0000000080)=""/236, 0xec) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) 174.925869ms ago: executing program 1 (id=928): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0xffffffff, 0x8000, 0xe1dd, 0x10fd, 0xff}) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 122.48868ms ago: executing program 5 (id=929): socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefff"], 0xc8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2000000000000004, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) recvfrom$packet(r5, &(0x7f00000004c0)=""/180, 0xb4, 0x10042, &(0x7f00000003c0)={0x11, 0x15, r6, 0x1, 0x9, 0x6, @random="1a986452d4e0"}, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3, 0x4000}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000020c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0xfff) accept4(0xffffffffffffffff, &(0x7f0000000240)=@x25, 0x0, 0x800) 121.69366ms ago: executing program 1 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3e8, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 81.71124ms ago: executing program 5 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 52.78754ms ago: executing program 1 (id=932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0xd800, 0x0, 0x80, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 52.28042ms ago: executing program 1 (id=933): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r1, &(0x7f0000002540)=[{0x0}], 0x1, 0x47fff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}, @generic={0x8, 0x2, 0xa, 0xa8d, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.13473ms ago: executing program 1 (id=934): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x41) 479.571µs ago: executing program 1 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bffa603fe50584128c9a5749a200000000000007020000f8ffffffb703000008000000b75bec04000000000000096af7cfb2"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x7ffffffe) unshare(0x6a040000) syz_io_uring_setup(0x1b68, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r6, 0x8, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 0s ago: executing program 5 (id=936): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="25797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e7420"], 0x41) kernel console output (not intermixed with test programs): [ T3793] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.119268][ T3796] loop4: detected capacity change from 0 to 128 [ 42.125901][ T3796] EXT4-fs: Ignoring removed nobh option [ 42.224381][ T3796] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.241766][ T3796] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.382274][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.605753][ T3833] netlink: 'syz.1.107': attribute type 27 has an invalid length. [ 42.712906][ T3833] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.720298][ T3833] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.753798][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.820330][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.830361][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.844447][ T3839] loop0: detected capacity change from 0 to 512 [ 42.855648][ T3839] EXT4-fs (loop0): inodes count not valid: 27 vs 32 [ 42.921889][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.940553][ T3840] veth0_to_team: entered promiscuous mode [ 42.950509][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.965273][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.001294][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.086720][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 43.086737][ T29] audit: type=1326 audit(1762409763.936:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41250f6c9 code=0x7ffc0000 [ 43.138446][ T29] audit: type=1400 audit(1762409763.976:13481): avc: denied { write } for pid=3846 comm="syz.4.114" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.161797][ T29] audit: type=1400 audit(1762409763.976:13482): avc: denied { ioctl } for pid=3846 comm="syz.4.114" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.288651][ T3859] loop4: detected capacity change from 0 to 128 [ 43.309594][ T3859] ext4: Unknown parameter 'subj_role' [ 43.329438][ T3861] loop2: detected capacity change from 0 to 512 [ 43.344841][ T3861] ext2: Unknown parameter 'fowner<00000000000000000000' [ 43.391456][ T29] audit: type=1400 audit(1762409764.226:13483): avc: denied { connect } for pid=3860 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.550531][ T3882] ipvlan2: entered promiscuous mode [ 43.608167][ T3886] wg1 speed is unknown, defaulting to 1000 [ 43.677087][ T29] audit: type=1400 audit(1762409764.526:13484): avc: denied { read } for pid=3864 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.859556][ T3903] __nla_validate_parse: 37 callbacks suppressed [ 43.859575][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 43.878438][ T3901] wg1 speed is unknown, defaulting to 1000 [ 43.880865][ T3879] Cannot find add_set index 0 as target [ 43.889614][ T29] audit: type=1326 audit(1762409764.726:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 43.893989][ T3896] loop2: detected capacity change from 0 to 8192 [ 43.913358][ T29] audit: type=1326 audit(1762409764.726:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 43.943049][ T29] audit: type=1326 audit(1762409764.726:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 43.966526][ T29] audit: type=1326 audit(1762409764.726:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 43.989916][ T29] audit: type=1326 audit(1762409764.726:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 44.059029][ T3904] netlink: 664 bytes leftover after parsing attributes in process `syz.2.123'. [ 44.059562][ T3896] loop2: p1 p2 p4[DM] [ 44.138769][ T3896] loop2: p1 size 835329 extends beyond EOD, truncated [ 44.173816][ T3896] loop2: p2 size 327680 extends beyond EOD, truncated [ 44.190525][ T3896] loop2: p4 size 262144 extends beyond EOD, truncated [ 44.362857][ T3926] loop0: detected capacity change from 0 to 256 [ 44.382651][ T3926] syz.0.129 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.427656][ T3930] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 44.435791][ T3930] netlink: 224 bytes leftover after parsing attributes in process `syz.2.130'. [ 44.464775][ T3935] loop1: detected capacity change from 0 to 512 [ 44.496514][ T3935] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 44.506840][ T3935] EXT4-fs (loop1): group descriptors corrupted! [ 44.937610][ T3952] loop0: detected capacity change from 0 to 8192 [ 44.964246][ T3956] FAULT_INJECTION: forcing a failure. [ 44.964246][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.977481][ T3956] CPU: 0 UID: 0 PID: 3956 Comm: syz.2.138 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.977532][ T3956] Tainted: [W]=WARN [ 44.977541][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.977557][ T3956] Call Trace: [ 44.977564][ T3956] [ 44.977572][ T3956] __dump_stack+0x1d/0x30 [ 44.977602][ T3956] dump_stack_lvl+0xe8/0x140 [ 44.977696][ T3956] dump_stack+0x15/0x1b [ 44.977720][ T3956] should_fail_ex+0x265/0x280 [ 44.977741][ T3956] should_fail+0xb/0x20 [ 44.977763][ T3956] should_fail_usercopy+0x1a/0x20 [ 44.977824][ T3956] _copy_from_user+0x1c/0xb0 [ 44.977873][ T3956] __io_register_rsrc_update+0x268/0xac0 [ 44.977915][ T3956] ? get_pid_task+0x96/0xd0 [ 44.977945][ T3956] ? should_fail_ex+0xdb/0x280 [ 44.977974][ T3956] io_register_rsrc_update+0x10a/0x120 [ 44.978086][ T3956] __se_sys_io_uring_register+0x9bf/0xf30 [ 44.978121][ T3956] ? fput+0x8f/0xc0 [ 44.978145][ T3956] ? ksys_write+0x192/0x1a0 [ 44.978183][ T3956] __x64_sys_io_uring_register+0x55/0x70 [ 44.978265][ T3956] x64_sys_call+0x18a3/0x3000 [ 44.978297][ T3956] do_syscall_64+0xd2/0x200 [ 44.978323][ T3956] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.978416][ T3956] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.978461][ T3956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.978491][ T3956] RIP: 0033:0x7faba38ef6c9 [ 44.978512][ T3956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.978572][ T3956] RSP: 002b:00007faba2357038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 44.978598][ T3956] RAX: ffffffffffffffda RBX: 00007faba3b45fa0 RCX: 00007faba38ef6c9 [ 44.978613][ T3956] RDX: 0000200000000600 RSI: 0000000000000010 RDI: 0000000000000006 [ 44.978625][ T3956] RBP: 00007faba2357090 R08: 0000000000000000 R09: 0000000000000000 [ 44.978690][ T3956] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 44.978786][ T3956] R13: 00007faba3b46038 R14: 00007faba3b45fa0 R15: 00007ffd31936c88 [ 44.978815][ T3956] [ 45.222210][ T3952] loop0: p1 p2 p4[DM] [ 45.226381][ T3952] loop0: p1 size 835329 extends beyond EOD, truncated [ 45.249656][ T3958] netlink: 664 bytes leftover after parsing attributes in process `syz.0.137'. [ 45.273253][ T3952] loop0: p2 size 327680 extends beyond EOD, truncated [ 45.454428][ T3952] loop0: p4 size 262144 extends beyond EOD, truncated [ 45.509290][ T3963] loop2: detected capacity change from 0 to 128 [ 45.601334][ T3963] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.615420][ T3963] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.469116][ T3974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.144'. [ 46.612373][ T3982] C: renamed from team_slave_0 (while UP) [ 46.637792][ T3982] netlink: 152 bytes leftover after parsing attributes in process `syz.3.146'. [ 46.669723][ T3984] netlink: 'syz.3.146': attribute type 13 has an invalid length. [ 46.728070][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.735331][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.898235][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.927003][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.054709][ T36] wg1 speed is unknown, defaulting to 1000 [ 47.060802][ T36] syz: Port: 1 Link DOWN [ 47.065846][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.084800][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.125320][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.160085][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.332784][ T3990] xt_nat: multiple ranges no longer supported [ 47.599933][ T3995] loop4: detected capacity change from 0 to 8192 [ 47.659369][ T3995] loop4: p1 p2 p4[DM] [ 47.667927][ T3995] loop4: p1 size 835329 extends beyond EOD, truncated [ 47.691480][ T3995] loop4: p2 size 327680 extends beyond EOD, truncated [ 47.716909][ T3995] loop4: p4 size 262144 extends beyond EOD, truncated [ 47.755282][ T3998] netlink: 664 bytes leftover after parsing attributes in process `syz.4.150'. [ 47.886225][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.950138][ T4008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.024994][ T4018] wg1 speed is unknown, defaulting to 1000 [ 48.039788][ T4016] loop2: detected capacity change from 0 to 4096 [ 48.067765][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.092402][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 48.092419][ T29] audit: type=1326 audit(1762409768.946:13564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.170028][ T29] audit: type=1326 audit(1762409768.976:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.193752][ T29] audit: type=1326 audit(1762409768.976:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.217234][ T29] audit: type=1326 audit(1762409768.976:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.240787][ T29] audit: type=1326 audit(1762409768.976:13568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.264332][ T29] audit: type=1326 audit(1762409768.976:13569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.287769][ T29] audit: type=1326 audit(1762409768.976:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.311223][ T29] audit: type=1326 audit(1762409768.976:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.334767][ T29] audit: type=1326 audit(1762409768.976:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.358134][ T29] audit: type=1326 audit(1762409768.976:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 48.525997][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 48.644664][ T4024] loop3: detected capacity change from 0 to 1024 [ 48.651273][ T4024] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 48.680561][ T4037] loop0: detected capacity change from 0 to 512 [ 48.689001][ T4037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.742811][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.812161][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 48.834594][ T4046] loop3: detected capacity change from 0 to 512 [ 48.843054][ T4046] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.873525][ T4046] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 48.990065][ T4058] wg1 speed is unknown, defaulting to 1000 [ 49.010132][ T4059] x_tables: duplicate underflow at hook 2 [ 49.018200][ T4059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.083657][ T3311] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 49.125512][ T3311] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 49.163110][ T3311] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 49.328822][ T4064] loop3: detected capacity change from 0 to 8192 [ 49.389472][ T4064] loop3: p1 p2 p4[DM] [ 49.393813][ T4064] loop3: p1 size 835329 extends beyond EOD, truncated [ 49.401378][ T4064] loop3: p2 size 327680 extends beyond EOD, truncated [ 49.412091][ T4064] loop3: p4 size 262144 extends beyond EOD, truncated [ 49.432458][ T4039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.454976][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.475864][ T4064] __nla_validate_parse: 1 callbacks suppressed [ 49.475884][ T4064] netlink: 664 bytes leftover after parsing attributes in process `syz.3.174'. [ 49.522370][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.549252][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 49.621137][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.689393][ T4092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4092 comm=syz.3.185 [ 49.706175][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.837412][ T4078] wg1 speed is unknown, defaulting to 1000 [ 49.843532][ T68] bridge_slave_1: left allmulticast mode [ 49.849342][ T68] bridge_slave_1: left promiscuous mode [ 49.855109][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.863175][ T68] bridge_slave_0: left allmulticast mode [ 49.868854][ T68] bridge_slave_0: left promiscuous mode [ 49.874726][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.975607][ T4096] Cannot find add_set index 0 as target [ 49.999187][ T4103] 9pnet_fd: Insufficient options for proto=fd [ 50.007614][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.017521][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.027336][ T68] bond0 (unregistering): Released all slaves [ 50.083946][ T68] hsr_slave_0: left promiscuous mode [ 50.090379][ T68] hsr_slave_1: left promiscuous mode [ 50.096195][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.103640][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.111444][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.118865][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.130138][ T68] veth1_macvtap: left promiscuous mode [ 50.135685][ T68] veth0_macvtap: left promiscuous mode [ 50.141983][ T68] veth1_vlan: left promiscuous mode [ 50.147370][ T68] veth0_vlan: left promiscuous mode [ 50.218597][ T68] team0 (unregistering): Port device team_slave_1 removed [ 50.229262][ T68] team0 (unregistering): Port device team_slave_0 removed [ 50.290087][ T4113] wg1 speed is unknown, defaulting to 1000 [ 50.313416][ T4078] chnl_net:caif_netlink_parms(): no params data found [ 50.379439][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.386615][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.407065][ T4078] bridge_slave_0: entered allmulticast mode [ 50.422488][ T4078] bridge_slave_0: entered promiscuous mode [ 50.440137][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.447312][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.462150][ T4078] bridge_slave_1: entered allmulticast mode [ 50.468782][ T4078] bridge_slave_1: entered promiscuous mode [ 50.494505][ T4078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.505184][ T4078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.532003][ T4078] team0: Port device team_slave_0 added [ 50.555408][ T4078] team0: Port device team_slave_1 added [ 50.580593][ T4131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 50.591638][ T4078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.591653][ T4078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.591680][ T4078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.593579][ T4078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.642428][ T4078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.642497][ T4078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.723939][ T4078] hsr_slave_0: entered promiscuous mode [ 50.733479][ T4078] hsr_slave_1: entered promiscuous mode [ 50.740286][ T4078] debugfs: 'hsr0' already exists in 'hsr' [ 50.746051][ T4078] Cannot create hsr debugfs directory [ 50.860225][ T4078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.875187][ T4078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.891872][ T4078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.905067][ T4078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.922667][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.929873][ T4078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.937240][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.944317][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.993317][ T4153] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 50.993317][ T4153] program syz.3.198 not setting count and/or reply_len properly [ 51.006754][ T4078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.043542][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.059545][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.075800][ T4159] loop2: detected capacity change from 0 to 8192 [ 51.087423][ T4078] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.096936][ T4161] wg1 speed is unknown, defaulting to 1000 [ 51.110406][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.117588][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.119554][ T4159] loop2: p1 p2 p4[DM] [ 51.139608][ T4159] loop2: p1 size 835329 extends beyond EOD, truncated [ 51.143342][ T4078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.156956][ T4078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.178918][ T4159] loop2: p2 size 327680 extends beyond EOD, truncated [ 51.179105][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.192840][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.201122][ T4159] loop2: p4 size 262144 extends beyond EOD, truncated [ 51.242438][ T4159] netlink: 664 bytes leftover after parsing attributes in process `syz.2.200'. [ 51.279822][ T4078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.472069][ T4078] veth0_vlan: entered promiscuous mode [ 51.480201][ T4078] veth1_vlan: entered promiscuous mode [ 51.515561][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 51.551723][ T4078] veth0_macvtap: entered promiscuous mode [ 51.561769][ T4078] veth1_macvtap: entered promiscuous mode [ 51.584492][ T4078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.598706][ T4078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.621078][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.642343][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653821][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.674826][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.695681][ T4193] Process accounting resumed [ 51.761812][ T4203] loop3: detected capacity change from 0 to 2048 [ 51.783292][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.958314][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.426679][ T4223] netlink: 'syz.5.214': attribute type 16 has an invalid length. [ 52.434645][ T4223] netlink: 'syz.5.214': attribute type 17 has an invalid length. [ 52.473381][ T4223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.651841][ T4250] loop5: detected capacity change from 0 to 512 [ 52.658779][ T4250] ext4: Unknown parameter 'mask' [ 52.728960][ T4253] loop2: detected capacity change from 0 to 8192 [ 52.773817][ T4253] loop2: p1 p2 p4[DM] [ 52.779557][ T4253] loop2: p1 size 835329 extends beyond EOD, truncated [ 52.787116][ T4253] loop2: p2 size 327680 extends beyond EOD, truncated [ 52.796797][ T4253] loop2: p4 size 262144 extends beyond EOD, truncated [ 52.830651][ T4253] netlink: 664 bytes leftover after parsing attributes in process `syz.2.224'. [ 52.953850][ T4274] netlink: 116 bytes leftover after parsing attributes in process `syz.4.230'. [ 52.954660][ T4273] netlink: 116 bytes leftover after parsing attributes in process `syz.3.229'. [ 53.170729][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 53.170747][ T29] audit: type=1326 audit(1762409774.026:13962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.206391][ T29] audit: type=1326 audit(1762409774.026:13963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.229945][ T29] audit: type=1326 audit(1762409774.026:13964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.253468][ T29] audit: type=1326 audit(1762409774.026:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.277012][ T29] audit: type=1326 audit(1762409774.026:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.300608][ T29] audit: type=1326 audit(1762409774.026:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.324251][ T29] audit: type=1326 audit(1762409774.026:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.325381][ T4300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4300 comm=syz.3.238 [ 53.347782][ T29] audit: type=1326 audit(1762409774.026:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.383409][ T29] audit: type=1326 audit(1762409774.026:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.406901][ T29] audit: type=1326 audit(1762409774.056:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 53.414435][ T4303] loop1: detected capacity change from 0 to 512 [ 53.458074][ T4307] program syz.4.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.462428][ T4303] EXT4-fs (loop1): too many log groups per flexible block group [ 53.475452][ T4303] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 53.482592][ T4303] EXT4-fs (loop1): mount failed [ 53.656933][ T4338] loop1: detected capacity change from 0 to 128 [ 53.667316][ T4338] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.679865][ T4338] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.692088][ T4345] program syz.5.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.732142][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.820120][ T4360] 9pnet_fd: Insufficient options for proto=fd [ 53.913304][ T4374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.074170][ T4382] loop2: detected capacity change from 0 to 128 [ 54.082918][ T4382] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.095343][ T4382] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.153644][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.174000][ T4387] program syz.2.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.286123][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 54.492709][ T4399] wg1 speed is unknown, defaulting to 1000 [ 54.714273][ T4413] program syz.1.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.762459][ T4416] loop2: detected capacity change from 0 to 128 [ 54.776332][ T4416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.800839][ T4416] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.872549][ T4422] loop1: detected capacity change from 0 to 4096 [ 54.882198][ T4420] wg1 speed is unknown, defaulting to 1000 [ 54.911111][ T4422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.918759][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.938791][ T4422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.018166][ T4422] netlink: '': attribute type 30 has an invalid length. [ 55.033841][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 55.283699][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.709448][ T4457] veth0_to_team: entered promiscuous mode [ 55.822876][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 55.857461][ T4465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.293'. [ 55.931712][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 55.960865][ T4480] loop4: detected capacity change from 0 to 512 [ 55.973261][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.003840][ T4472] loop2: detected capacity change from 0 to 8192 [ 56.019962][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.052727][ T4488] veth0_to_team: entered promiscuous mode [ 56.073553][ T4472] loop2: p1 p2 p4[DM] [ 56.078947][ T4472] loop2: p1 size 835329 extends beyond EOD, truncated [ 56.086677][ T4472] loop2: p2 size 327680 extends beyond EOD, truncated [ 56.093940][ T4492] program syz.1.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.103477][ T4472] loop2: p4 size 262144 extends beyond EOD, truncated [ 56.135568][ T4472] netlink: 664 bytes leftover after parsing attributes in process `syz.2.296'. [ 56.157783][ T4495] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.305'. [ 56.355094][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 56.364115][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 56.434375][ T4509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4509 comm=syz.3.308 [ 56.500417][ T4518] loop1: detected capacity change from 0 to 128 [ 56.511948][ T4518] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.526434][ T4518] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.560859][ T4522] program syz.5.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.616468][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.677094][ T4533] loop5: detected capacity change from 0 to 128 [ 56.720794][ T4529] loop1: detected capacity change from 0 to 8192 [ 56.837784][ T4533] syz.5.319: attempt to access beyond end of device [ 56.837784][ T4533] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 56.854535][ T4533] syz.5.319: attempt to access beyond end of device [ 56.854535][ T4533] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 56.872654][ T4529] loop1: p1 p2 p4[DM] [ 56.876902][ T4529] loop1: p1 size 835329 extends beyond EOD, truncated [ 56.901453][ T4533] syz.5.319: attempt to access beyond end of device [ 56.901453][ T4533] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 56.920052][ T4541] netlink: 664 bytes leftover after parsing attributes in process `syz.1.318'. [ 56.952652][ T4529] loop1: p2 size 327680 extends beyond EOD, truncated [ 56.967913][ T4533] syz.5.319: attempt to access beyond end of device [ 56.967913][ T4533] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 56.986994][ T4529] loop1: p4 size 262144 extends beyond EOD, truncated [ 57.021237][ T4533] syz.5.319: attempt to access beyond end of device [ 57.021237][ T4533] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 57.064018][ T4533] syz.5.319: attempt to access beyond end of device [ 57.064018][ T4533] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 57.172172][ T4533] syz.5.319: attempt to access beyond end of device [ 57.172172][ T4533] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 57.202250][ T4533] syz.5.319: attempt to access beyond end of device [ 57.202250][ T4533] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 57.222716][ T4533] syz.5.319: attempt to access beyond end of device [ 57.222716][ T4533] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 57.238393][ T4533] syz.5.319: attempt to access beyond end of device [ 57.238393][ T4533] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 57.269488][ T4546] wg1 speed is unknown, defaulting to 1000 [ 57.318974][ T4548] loop4: detected capacity change from 0 to 256 [ 57.351823][ T4549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 57.586339][ T4560] loop5: detected capacity change from 0 to 128 [ 57.595262][ T4560] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.607633][ T4560] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.635193][ T4563] FAULT_INJECTION: forcing a failure. [ 57.635193][ T4563] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.648557][ T4563] CPU: 0 UID: 0 PID: 4563 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.648588][ T4563] Tainted: [W]=WARN [ 57.648595][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.648610][ T4563] Call Trace: [ 57.648617][ T4563] [ 57.648626][ T4563] __dump_stack+0x1d/0x30 [ 57.648718][ T4563] dump_stack_lvl+0xe8/0x140 [ 57.648797][ T4563] dump_stack+0x15/0x1b [ 57.648816][ T4563] should_fail_ex+0x265/0x280 [ 57.648838][ T4563] should_fail_alloc_page+0xf2/0x100 [ 57.648887][ T4563] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.648964][ T4563] alloc_pages_mpol+0xb3/0x260 [ 57.648995][ T4563] vma_alloc_folio_noprof+0x1aa/0x300 [ 57.649018][ T4563] handle_mm_fault+0xec2/0x2be0 [ 57.649049][ T4563] ? mt_find+0x208/0x320 [ 57.649125][ T4563] do_user_addr_fault+0x3fe/0x1080 [ 57.649169][ T4563] exc_page_fault+0x62/0xa0 [ 57.649211][ T4563] asm_exc_page_fault+0x26/0x30 [ 57.649238][ T4563] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 57.649317][ T4563] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 57.649403][ T4563] RSP: 0018:ffffc90010a9bcb8 EFLAGS: 00050246 [ 57.649421][ T4563] RAX: ffff88811aea6da0 RBX: 0000000000000040 RCX: 0000000000000040 [ 57.649438][ T4563] RDX: 0000000000000000 RSI: ffffc90010a9bd10 RDI: 0000200000033a80 [ 57.649454][ T4563] RBP: ffffc90010a9bd90 R08: 0000000000000bfd R09: 0000000000000000 [ 57.649523][ T4563] R10: 0001c90010a9bd10 R11: 0001c90010a9bd4f R12: 0000200000033ac0 [ 57.649540][ T4563] R13: 00007ffffffff000 R14: 0000200000033a80 R15: ffffc90010a9bd10 [ 57.649566][ T4563] _copy_to_user+0x7c/0xa0 [ 57.649602][ T4563] rng_dev_read+0x3ef/0x740 [ 57.649643][ T4563] ? __pfx_rng_dev_read+0x10/0x10 [ 57.649686][ T4563] vfs_readv+0x3fb/0x690 [ 57.649787][ T4563] __x64_sys_preadv+0xfd/0x1c0 [ 57.649825][ T4563] x64_sys_call+0x282e/0x3000 [ 57.649858][ T4563] do_syscall_64+0xd2/0x200 [ 57.649880][ T4563] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.649938][ T4563] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.649977][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.650000][ T4563] RIP: 0033:0x7faba38ef6c9 [ 57.650013][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.650090][ T4563] RSP: 002b:00007faba2336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 57.650107][ T4563] RAX: ffffffffffffffda RBX: 00007faba3b46090 RCX: 00007faba38ef6c9 [ 57.650118][ T4563] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 57.650129][ T4563] RBP: 00007faba2336090 R08: 0000000000000000 R09: 0000000000000000 [ 57.650139][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.650208][ T4563] R13: 00007faba3b46128 R14: 00007faba3b46090 R15: 00007ffd31936c88 [ 57.650266][ T4563] [ 58.337088][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 58.337105][ T29] audit: type=1400 audit(1762409779.186:14586): avc: denied { read } for pid=4573 comm="syz.3.331" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.367928][ T29] audit: type=1400 audit(1762409779.186:14587): avc: denied { open } for pid=4573 comm="syz.3.331" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.392609][ T29] audit: type=1400 audit(1762409779.196:14588): avc: denied { ioctl } for pid=4573 comm="syz.3.331" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.431398][ T4078] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.454774][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.467965][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.540552][ T29] audit: type=1400 audit(1762409779.336:14589): avc: denied { lock } for pid=4581 comm="syz.5.332" path="socket:[9264]" dev="sockfs" ino=9264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.651470][ T4590] loop2: detected capacity change from 0 to 128 [ 58.660062][ T4590] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.673525][ T4590] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.718697][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.205083][ T29] audit: type=1326 audit(1762409780.056:14590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.228582][ T29] audit: type=1326 audit(1762409780.056:14591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.255081][ T4611] loop5: detected capacity change from 0 to 512 [ 59.256145][ T29] audit: type=1326 audit(1762409780.106:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.261898][ T4611] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.284983][ T29] audit: type=1326 audit(1762409780.106:14593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.316846][ T29] audit: type=1326 audit(1762409780.106:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.340435][ T29] audit: type=1326 audit(1762409780.106:14595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 59.424011][ T4619] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.493941][ T4619] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.525176][ T4622] loop4: detected capacity change from 0 to 4096 [ 59.534833][ T4622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.562296][ T4619] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.613133][ T4619] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.678816][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.692694][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.708675][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.720735][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.763086][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.832922][ T4638] netlink: 'syz.4.349': attribute type 3 has an invalid length. [ 59.868800][ T4645] program syz.4.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.878345][ T4636] veth0_to_team: entered promiscuous mode [ 59.910399][ T4643] loop2: detected capacity change from 0 to 8192 [ 59.923672][ T4649] FAULT_INJECTION: forcing a failure. [ 59.923672][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 59.936604][ T4649] CPU: 0 UID: 0 PID: 4649 Comm: syz.4.355 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.936647][ T4649] Tainted: [W]=WARN [ 59.936656][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.936672][ T4649] Call Trace: [ 59.936679][ T4649] [ 59.936689][ T4649] __dump_stack+0x1d/0x30 [ 59.936747][ T4649] dump_stack_lvl+0xe8/0x140 [ 59.936775][ T4649] dump_stack+0x15/0x1b [ 59.936799][ T4649] should_fail_ex+0x265/0x280 [ 59.936848][ T4649] should_failslab+0x8c/0xb0 [ 59.936909][ T4649] __kmalloc_noprof+0xa5/0x570 [ 59.936947][ T4649] ? unix_bind+0x1a0/0x920 [ 59.937037][ T4649] unix_bind+0x1a0/0x920 [ 59.937076][ T4649] __sys_bind+0x1d1/0x2a0 [ 59.937117][ T4649] __x64_sys_bind+0x3f/0x50 [ 59.937162][ T4649] x64_sys_call+0x2b72/0x3000 [ 59.937191][ T4649] do_syscall_64+0xd2/0x200 [ 59.937217][ T4649] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.937299][ T4649] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.937337][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.937368][ T4649] RIP: 0033:0x7fa41250f6c9 [ 59.937383][ T4649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.937403][ T4649] RSP: 002b:00007fa410f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 59.937428][ T4649] RAX: ffffffffffffffda RBX: 00007fa412765fa0 RCX: 00007fa41250f6c9 [ 59.937445][ T4649] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000007 [ 59.937461][ T4649] RBP: 00007fa410f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.937477][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.937606][ T4649] R13: 00007fa412766038 R14: 00007fa412765fa0 R15: 00007fff4d587068 [ 59.937626][ T4649] [ 60.139425][ T4643] loop2: p1 p2 p4[DM] [ 60.143584][ T4643] loop2: p1 size 835329 extends beyond EOD, truncated [ 60.154150][ T4652] __nla_validate_parse: 2 callbacks suppressed [ 60.154169][ T4652] netlink: 664 bytes leftover after parsing attributes in process `syz.2.353'. [ 60.163136][ T4643] loop2: p2 size 327680 extends beyond EOD, truncated [ 60.178201][ T4643] loop2: p4 size 262144 extends beyond EOD, truncated [ 60.297689][ T4658] netlink: '': attribute type 30 has an invalid length. [ 60.325506][ T4661] loop2: detected capacity change from 0 to 4096 [ 60.336774][ T4661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.445218][ T4664] wg1 speed is unknown, defaulting to 1000 [ 60.559122][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.685021][ T4675] program syz.2.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.907145][ T4685] netlink: 664 bytes leftover after parsing attributes in process `syz.1.369'. [ 60.944191][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.372'. [ 60.953168][ T4695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.960693][ T4695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.968774][ T4695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.976416][ T4695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.127050][ T4707] program syz.1.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.234564][ T4714] FAULT_INJECTION: forcing a failure. [ 61.234564][ T4714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.247885][ T4714] CPU: 1 UID: 0 PID: 4714 Comm: syz.4.380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.247938][ T4714] Tainted: [W]=WARN [ 61.247944][ T4714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.247956][ T4714] Call Trace: [ 61.247964][ T4714] [ 61.247973][ T4714] __dump_stack+0x1d/0x30 [ 61.248003][ T4714] dump_stack_lvl+0xe8/0x140 [ 61.248025][ T4714] dump_stack+0x15/0x1b [ 61.248042][ T4714] should_fail_ex+0x265/0x280 [ 61.248145][ T4714] should_fail+0xb/0x20 [ 61.248167][ T4714] should_fail_usercopy+0x1a/0x20 [ 61.248271][ T4714] _copy_from_user+0x1c/0xb0 [ 61.248315][ T4714] ___sys_sendmsg+0xc1/0x1d0 [ 61.248425][ T4714] __x64_sys_sendmsg+0xd4/0x160 [ 61.248507][ T4714] x64_sys_call+0x191e/0x3000 [ 61.248537][ T4714] do_syscall_64+0xd2/0x200 [ 61.248679][ T4714] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.248724][ T4714] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.248796][ T4714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.248825][ T4714] RIP: 0033:0x7fa41250f6c9 [ 61.248844][ T4714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.248863][ T4714] RSP: 002b:00007fa410f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.248884][ T4714] RAX: ffffffffffffffda RBX: 00007fa412765fa0 RCX: 00007fa41250f6c9 [ 61.248913][ T4714] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000004 [ 61.248925][ T4714] RBP: 00007fa410f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.248937][ T4714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.248958][ T4714] R13: 00007fa412766038 R14: 00007fa412765fa0 R15: 00007fff4d587068 [ 61.248980][ T4714] [ 61.483539][ T4721] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 61.835294][ T4731] loop2: detected capacity change from 0 to 128 [ 61.842094][ T4731] EXT4-fs: Ignoring removed nobh option [ 61.849338][ T4731] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.861858][ T4731] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.071166][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 62.138213][ T4742] netlink: 23768 bytes leftover after parsing attributes in process `+}[@'. [ 62.226136][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.871539][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 62.958508][ T4796] lo speed is unknown, defaulting to 1000 [ 62.964381][ T4796] lo speed is unknown, defaulting to 1000 [ 62.970593][ T4796] lo speed is unknown, defaulting to 1000 [ 62.977868][ T4796] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.013421][ T4796] lo speed is unknown, defaulting to 1000 [ 63.019804][ T4796] lo speed is unknown, defaulting to 1000 [ 63.026279][ T4796] lo speed is unknown, defaulting to 1000 [ 63.032954][ T4796] lo speed is unknown, defaulting to 1000 [ 63.039540][ T4796] lo speed is unknown, defaulting to 1000 [ 63.580924][ T4807] wg1 speed is unknown, defaulting to 1000 [ 63.587176][ T4807] lo speed is unknown, defaulting to 1000 [ 63.872862][ T4825] loop9: detected capacity change from 0 to 7 [ 63.968736][ T4829] Invalid logical block size (1) [ 64.019833][ T4834] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.041170][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 64.041210][ T29] audit: type=1400 audit(1762409784.896:14949): avc: denied { append } for pid=4836 comm="syz.1.418" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.085755][ T4838] wg1 speed is unknown, defaulting to 1000 [ 64.092112][ T4838] lo speed is unknown, defaulting to 1000 [ 64.172344][ T4844] wg1 speed is unknown, defaulting to 1000 [ 64.178491][ T4844] lo speed is unknown, defaulting to 1000 [ 64.292086][ T4847] program syz.1.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.466747][ T29] audit: type=1326 audit(1762409785.316:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.490231][ T29] audit: type=1326 audit(1762409785.316:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.606285][ T4863] FAULT_INJECTION: forcing a failure. [ 64.606285][ T4863] name failslab, interval 1, probability 0, space 0, times 0 [ 64.612496][ T29] audit: type=1326 audit(1762409785.366:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.619211][ T4863] CPU: 0 UID: 0 PID: 4863 Comm: syz.5.425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.619248][ T4863] Tainted: [W]=WARN [ 64.619254][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.619343][ T4863] Call Trace: [ 64.619352][ T4863] [ 64.619364][ T4863] __dump_stack+0x1d/0x30 [ 64.619396][ T4863] dump_stack_lvl+0xe8/0x140 [ 64.619481][ T4863] dump_stack+0x15/0x1b [ 64.619506][ T4863] should_fail_ex+0x265/0x280 [ 64.619534][ T4863] should_failslab+0x8c/0xb0 [ 64.619575][ T4863] __kvmalloc_node_noprof+0x12e/0x670 [ 64.619725][ T4863] ? traverse+0xa2/0x3a0 [ 64.619753][ T4863] traverse+0xa2/0x3a0 [ 64.619778][ T4863] ? kstrtouint+0x76/0xc0 [ 64.619824][ T4863] seq_read_iter+0x85f/0x950 [ 64.619914][ T4863] ? 0xffffffff81000000 [ 64.619932][ T4863] ? __rcu_read_unlock+0x4f/0x70 [ 64.619969][ T4863] ? get_pid_task+0x96/0xd0 [ 64.620063][ T4863] ? avc_policy_seqno+0x15/0x30 [ 64.620093][ T4863] kernfs_fop_read_iter+0xc1/0x330 [ 64.620123][ T4863] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 64.620209][ T4863] vfs_read+0x64c/0x770 [ 64.620251][ T4863] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 64.620288][ T4863] __x64_sys_pread64+0xfd/0x150 [ 64.620401][ T4863] x64_sys_call+0x29e6/0x3000 [ 64.620431][ T4863] do_syscall_64+0xd2/0x200 [ 64.620458][ T4863] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.620506][ T4863] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.620621][ T4863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.620669][ T4863] RIP: 0033:0x7f4eee5ef6c9 [ 64.620702][ T4863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.620728][ T4863] RSP: 002b:00007f4eed057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 64.620756][ T4863] RAX: ffffffffffffffda RBX: 00007f4eee845fa0 RCX: 00007f4eee5ef6c9 [ 64.620808][ T4863] RDX: 00000000000000be RSI: 00002000000002c0 RDI: 0000000000000006 [ 64.620826][ T4863] RBP: 00007f4eed057090 R08: 0000000000000000 R09: 0000000000000000 [ 64.620844][ T4863] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 64.620861][ T4863] R13: 00007f4eee846038 R14: 00007f4eee845fa0 R15: 00007ffc8e940f18 [ 64.620889][ T4863] [ 64.868655][ T29] audit: type=1326 audit(1762409785.366:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.892170][ T29] audit: type=1326 audit(1762409785.366:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.915582][ T29] audit: type=1326 audit(1762409785.366:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.939163][ T29] audit: type=1326 audit(1762409785.366:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.944875][ T4861] Cannot find add_set index 0 as target [ 64.962729][ T29] audit: type=1326 audit(1762409785.366:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 64.991769][ T29] audit: type=1326 audit(1762409785.366:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 65.133803][ T4882] loop3: detected capacity change from 0 to 512 [ 65.186551][ T4882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.216776][ T4882] netlink: 96 bytes leftover after parsing attributes in process `syz.3.431'. [ 65.320487][ T4891] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 65.350379][ T4878] loop2: detected capacity change from 0 to 2048 [ 65.357171][ T4878] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.363773][ T4878] EXT4-fs: Ignoring removed i_version option [ 65.381497][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.442571][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.604355][ T4906] Cannot find add_set index 0 as target [ 65.966485][ T4917] xt_bpf: check failed: parse error [ 66.062049][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.195127][ T4921] loop5: detected capacity change from 0 to 512 [ 66.202197][ T4921] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.213797][ T4921] EXT4-fs (loop5): 1 truncate cleaned up [ 66.219973][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.235020][ T4921] FAULT_INJECTION: forcing a failure. [ 66.235020][ T4921] name failslab, interval 1, probability 0, space 0, times 0 [ 66.247759][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.5.440 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.247800][ T4921] Tainted: [W]=WARN [ 66.247809][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.247824][ T4921] Call Trace: [ 66.247833][ T4921] [ 66.247843][ T4921] __dump_stack+0x1d/0x30 [ 66.247929][ T4921] dump_stack_lvl+0xe8/0x140 [ 66.247957][ T4921] dump_stack+0x15/0x1b [ 66.248054][ T4921] should_fail_ex+0x265/0x280 [ 66.248078][ T4921] should_failslab+0x8c/0xb0 [ 66.248107][ T4921] kmem_cache_alloc_noprof+0x50/0x480 [ 66.248140][ T4921] ? getname_flags+0x80/0x3b0 [ 66.248264][ T4921] getname_flags+0x80/0x3b0 [ 66.248298][ T4921] __x64_sys_rename+0x33/0x70 [ 66.248387][ T4921] x64_sys_call+0x1f9/0x3000 [ 66.248418][ T4921] do_syscall_64+0xd2/0x200 [ 66.248572][ T4921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.248650][ T4921] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.248693][ T4921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.248721][ T4921] RIP: 0033:0x7f4eee5ef6c9 [ 66.248800][ T4921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.248823][ T4921] RSP: 002b:00007f4eed057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 66.248847][ T4921] RAX: ffffffffffffffda RBX: 00007f4eee845fa0 RCX: 00007f4eee5ef6c9 [ 66.248864][ T4921] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 66.248936][ T4921] RBP: 00007f4eed057090 R08: 0000000000000000 R09: 0000000000000000 [ 66.248948][ T4921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.248961][ T4921] R13: 00007f4eee846038 R14: 00007f4eee845fa0 R15: 00007ffc8e940f18 [ 66.248986][ T4921] [ 66.426559][ T4923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 66.455357][ T4924] loop3: detected capacity change from 0 to 512 [ 66.532981][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 66.592166][ T4924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.603428][ T4078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.616031][ T4924] EXT4-fs (loop3): 1 truncate cleaned up [ 66.634948][ T4924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.668418][ T4930] wg1 speed is unknown, defaulting to 1000 [ 66.674665][ T4930] lo speed is unknown, defaulting to 1000 [ 66.724028][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.760576][ T4933] program syz.2.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.974840][ T4963] veth0_to_team: entered promiscuous mode [ 66.985553][ T4967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 66.994605][ T4967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 67.012601][ T4965] loop5: detected capacity change from 0 to 4096 [ 67.026502][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.074085][ T4967] process 'syz.4.450' launched '/dev/fd/16' with NULL argv: empty string added [ 67.108222][ T4965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.123845][ T5012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 67.132841][ T5012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 67.175490][ T4965] netlink: '': attribute type 30 has an invalid length. [ 67.217933][ T5030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.226983][ T5030] xt_connbytes: Forcing CT accounting to be enabled [ 67.236607][ T5030] Cannot find set identified by id 0 to match [ 67.496887][ T4078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.621640][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.461'. [ 67.630677][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.461'. [ 67.657645][ T5047] program syz.1.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.667187][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.461'. [ 67.855856][ T5054] loop5: detected capacity change from 0 to 8192 [ 67.881773][ T3420] kernel read not supported for file /vcs (pid: 3420 comm: kworker/1:4) [ 67.891614][ T5061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.899558][ T5054] loop5: p1 p2 p4[DM] [ 67.903906][ T5054] loop5: p1 size 835329 extends beyond EOD, truncated [ 67.911460][ T5054] loop5: p2 size 327680 extends beyond EOD, truncated [ 67.929373][ T5054] loop5: p4 size 262144 extends beyond EOD, truncated [ 68.192625][ T5082] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.280060][ T5090] loop2: detected capacity change from 0 to 4096 [ 68.289452][ T5090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.310756][ T5090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.333836][ T3394] IPVS: starting estimator thread 0... [ 68.346014][ T5090] netlink: '': attribute type 30 has an invalid length. [ 68.374143][ T5096] wg1 speed is unknown, defaulting to 1000 [ 68.380450][ T5096] lo speed is unknown, defaulting to 1000 [ 68.429366][ T5098] IPVS: using max 2352 ests per chain, 117600 per kthread [ 68.438854][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.470599][ T5113] FAULT_INJECTION: forcing a failure. [ 68.470599][ T5113] name failslab, interval 1, probability 0, space 0, times 0 [ 68.483289][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: syz.1.486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.483339][ T5113] Tainted: [W]=WARN [ 68.483347][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.483361][ T5113] Call Trace: [ 68.483441][ T5113] [ 68.483450][ T5113] __dump_stack+0x1d/0x30 [ 68.483479][ T5113] dump_stack_lvl+0xe8/0x140 [ 68.483504][ T5113] dump_stack+0x15/0x1b [ 68.483527][ T5113] should_fail_ex+0x265/0x280 [ 68.483552][ T5113] should_failslab+0x8c/0xb0 [ 68.483603][ T5113] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 68.483641][ T5113] ? __alloc_skb+0x101/0x320 [ 68.483732][ T5113] __alloc_skb+0x101/0x320 [ 68.483771][ T5113] pfkey_sendmsg+0xd7/0x900 [ 68.483804][ T5113] ? avc_has_perm+0xf7/0x180 [ 68.483873][ T5113] ? selinux_socket_sendmsg+0x175/0x1b0 [ 68.483968][ T5113] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 68.484003][ T5113] __sock_sendmsg+0x145/0x180 [ 68.484071][ T5113] ____sys_sendmsg+0x31e/0x4e0 [ 68.484116][ T5113] ___sys_sendmsg+0x17b/0x1d0 [ 68.484186][ T5113] __x64_sys_sendmsg+0xd4/0x160 [ 68.484279][ T5113] x64_sys_call+0x191e/0x3000 [ 68.484303][ T5113] do_syscall_64+0xd2/0x200 [ 68.484322][ T5113] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.484363][ T5113] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.484445][ T5113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.484473][ T5113] RIP: 0033:0x7f05dae9f6c9 [ 68.484493][ T5113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.484516][ T5113] RSP: 002b:00007f05d9907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.484539][ T5113] RAX: ffffffffffffffda RBX: 00007f05db0f5fa0 RCX: 00007f05dae9f6c9 [ 68.484556][ T5113] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000007 [ 68.484632][ T5113] RBP: 00007f05d9907090 R08: 0000000000000000 R09: 0000000000000000 [ 68.484648][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.484660][ T5113] R13: 00007f05db0f6038 R14: 00007f05db0f5fa0 R15: 00007ffda7210f18 [ 68.484681][ T5113] [ 68.706629][ T5119] program syz.1.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.922250][ T5132] siw: device registration error -23 [ 69.170510][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 69.170527][ T29] audit: type=1326 audit(1762409790.026:15515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 69.317964][ T29] audit: type=1326 audit(1762409790.056:15516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 69.341695][ T29] audit: type=1326 audit(1762409790.056:15517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 69.365281][ T29] audit: type=1326 audit(1762409790.056:15518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 69.473916][ T5139] Cannot find add_set index 0 as target [ 69.480901][ T29] audit: type=1326 audit(1762409790.326:15519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.504552][ T29] audit: type=1326 audit(1762409790.326:15520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.528321][ T29] audit: type=1326 audit(1762409790.326:15521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.551934][ T29] audit: type=1326 audit(1762409790.326:15522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.575333][ T29] audit: type=1326 audit(1762409790.326:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.598870][ T29] audit: type=1326 audit(1762409790.326:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 69.835429][ T5138] loop2: detected capacity change from 0 to 8192 [ 69.865018][ T5151] netlink: 'syz.4.497': attribute type 13 has an invalid length. [ 69.890156][ T5138] loop2: p1 p2 p4[DM] [ 69.894416][ T5138] loop2: p1 size 835329 extends beyond EOD, truncated [ 69.902030][ T5138] loop2: p2 size 327680 extends beyond EOD, truncated [ 69.909747][ T5138] loop2: p4 size 262144 extends beyond EOD, truncated [ 69.921799][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.929094][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.997003][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.007581][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.064570][ T3393] lo speed is unknown, defaulting to 1000 [ 70.070587][ T3393] syz2: Port: 1 Link DOWN [ 70.086274][ T5156] geneve2: entered promiscuous mode [ 70.091639][ T5156] geneve2: entered allmulticast mode [ 70.102083][ T4980] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.109711][ T5159] loop5: detected capacity change from 0 to 1024 [ 70.117638][ T4980] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.143880][ T4980] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.150699][ T5159] EXT4-fs: Ignoring removed orlov option [ 70.168195][ T5159] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.178493][ T4980] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.209077][ T5159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.223845][ T5166] __nla_validate_parse: 10 callbacks suppressed [ 70.223859][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.239043][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.274195][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.283367][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.314215][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.323184][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 70.371269][ T5178] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 70.381003][ T5178] loop2: detected capacity change from 0 to 128 [ 70.390225][ T5178] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.398190][ T5178] FAT-fs (loop2): Filesystem has been set read-only [ 70.404879][ T5178] bio_check_eod: 101 callbacks suppressed [ 70.404895][ T5178] +\{]: attempt to access beyond end of device [ 70.404895][ T5178] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 70.423948][ T5178] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.431961][ T5178] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.440097][ T5178] +\{]: attempt to access beyond end of device [ 70.440097][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.452987][ T5178] +\{]: attempt to access beyond end of device [ 70.452987][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.465869][ T5178] +\{]: attempt to access beyond end of device [ 70.465869][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.478726][ T5178] +\{]: attempt to access beyond end of device [ 70.478726][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.499232][ T5178] +\{]: attempt to access beyond end of device [ 70.499232][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.512874][ T5178] +\{]: attempt to access beyond end of device [ 70.512874][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.527630][ T5178] +\{]: attempt to access beyond end of device [ 70.527630][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.540686][ T5178] +\{]: attempt to access beyond end of device [ 70.540686][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.553984][ T5178] +\{]: attempt to access beyond end of device [ 70.553984][ T5178] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.585573][ T4078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.651060][ T5190] program syz.1.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.677069][ T5192] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.820907][ T5195] loop4: detected capacity change from 0 to 8192 [ 70.963565][ T5203] netlink: 664 bytes leftover after parsing attributes in process `syz.4.512'. [ 71.017597][ T5195] loop4: p1 p2 p4[DM] [ 71.021904][ T5195] loop4: p1 size 835329 extends beyond EOD, truncated [ 71.030903][ T5195] loop4: p2 size 327680 extends beyond EOD, truncated [ 71.078882][ T5195] loop4: p4 size 262144 extends beyond EOD, truncated [ 71.276172][ T5224] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 71.301645][ T5224] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 71.329582][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=5224 comm=syz.3.519 [ 71.359302][ T5227] program syz.2.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.476510][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.528'. [ 71.485495][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.528'. [ 71.662333][ T5251] loop2: detected capacity change from 0 to 512 [ 71.695134][ T5251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 71.730115][ T5251] System zones: 1-12 [ 71.742130][ T5251] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.532: Directory hole found for htree index block 0 [ 71.759175][ T5251] EXT4-fs (loop2): Remounting filesystem read-only [ 71.769265][ T5251] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 71.777504][ T5251] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 71.780652][ T5254] FAULT_INJECTION: forcing a failure. [ 71.780652][ T5254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.787872][ T5251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.798894][ T5254] CPU: 0 UID: 0 PID: 5254 Comm: syz.1.533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.798934][ T5254] Tainted: [W]=WARN [ 71.798943][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.798962][ T5254] Call Trace: [ 71.798971][ T5254] [ 71.798982][ T5254] __dump_stack+0x1d/0x30 [ 71.799050][ T5254] dump_stack_lvl+0xe8/0x140 [ 71.799082][ T5254] dump_stack+0x15/0x1b [ 71.799107][ T5254] should_fail_ex+0x265/0x280 [ 71.799141][ T5254] should_fail+0xb/0x20 [ 71.799164][ T5254] should_fail_usercopy+0x1a/0x20 [ 71.799193][ T5254] _copy_to_user+0x20/0xa0 [ 71.799289][ T5254] simple_read_from_buffer+0xb5/0x130 [ 71.799327][ T5254] proc_fail_nth_read+0x10e/0x150 [ 71.799373][ T5254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.799464][ T5254] vfs_read+0x1a8/0x770 [ 71.799497][ T5254] ? __rcu_read_unlock+0x4f/0x70 [ 71.799534][ T5254] ? __fget_files+0x184/0x1c0 [ 71.799628][ T5254] ksys_read+0xda/0x1a0 [ 71.799665][ T5254] __x64_sys_read+0x40/0x50 [ 71.799792][ T5254] x64_sys_call+0x27c0/0x3000 [ 71.799824][ T5254] do_syscall_64+0xd2/0x200 [ 71.799852][ T5254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.799893][ T5254] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.800012][ T5254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.800042][ T5254] RIP: 0033:0x7f05dae9e0dc [ 71.800063][ T5254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.800088][ T5254] RSP: 002b:00007f05d9907030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.800127][ T5254] RAX: ffffffffffffffda RBX: 00007f05db0f5fa0 RCX: 00007f05dae9e0dc [ 71.800145][ T5254] RDX: 000000000000000f RSI: 00007f05d99070a0 RDI: 0000000000000006 [ 71.800163][ T5254] RBP: 00007f05d9907090 R08: 0000000000000000 R09: 0000000000000000 [ 71.800180][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.800197][ T5254] R13: 00007f05db0f6038 R14: 00007f05db0f5fa0 R15: 00007ffda7210f18 [ 71.800222][ T5254] [ 72.060179][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.094031][ T5273] program syz.2.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.221634][ T5277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.540'. [ 72.269532][ T5255] Cannot find add_set index 0 as target [ 73.020902][ T5304] FAULT_INJECTION: forcing a failure. [ 73.020902][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 73.033669][ T5304] CPU: 1 UID: 0 PID: 5304 Comm: syz.2.546 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.033706][ T5304] Tainted: [W]=WARN [ 73.033715][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.033731][ T5304] Call Trace: [ 73.033740][ T5304] [ 73.033830][ T5304] __dump_stack+0x1d/0x30 [ 73.033853][ T5304] dump_stack_lvl+0xe8/0x140 [ 73.033873][ T5304] dump_stack+0x15/0x1b [ 73.033894][ T5304] should_fail_ex+0x265/0x280 [ 73.033914][ T5304] ? __pfx_proc_alloc_inode+0x10/0x10 [ 73.034009][ T5304] should_failslab+0x8c/0xb0 [ 73.034040][ T5304] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 73.034079][ T5304] ? proc_alloc_inode+0x34/0x90 [ 73.034099][ T5304] ? __pfx_proc_alloc_inode+0x10/0x10 [ 73.034180][ T5304] proc_alloc_inode+0x34/0x90 [ 73.034202][ T5304] alloc_inode+0x40/0x170 [ 73.034234][ T5304] new_inode+0x1d/0xe0 [ 73.034268][ T5304] proc_pid_make_inode+0x1f/0xd0 [ 73.034290][ T5304] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 73.034324][ T5304] proc_fd_instantiate+0x36/0x190 [ 73.034378][ T5304] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 73.034436][ T5304] proc_lookupfd_common+0xc5/0x180 [ 73.034471][ T5304] proc_lookupfd+0x24/0x30 [ 73.034494][ T5304] ? __pfx_proc_lookupfd+0x10/0x10 [ 73.034518][ T5304] path_openat+0xcf3/0x2170 [ 73.034559][ T5304] do_filp_open+0x109/0x230 [ 73.034584][ T5304] ? __pfx_kfree_link+0x10/0x10 [ 73.034672][ T5304] do_sys_openat2+0xa6/0x110 [ 73.034694][ T5304] __x64_sys_openat+0xf2/0x120 [ 73.034715][ T5304] x64_sys_call+0x2eab/0x3000 [ 73.034738][ T5304] do_syscall_64+0xd2/0x200 [ 73.034758][ T5304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.034856][ T5304] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.034889][ T5304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.034972][ T5304] RIP: 0033:0x7faba38edf10 [ 73.034988][ T5304] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 73.035020][ T5304] RSP: 002b:00007faba2356f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 73.035069][ T5304] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faba38edf10 [ 73.035086][ T5304] RDX: 0000000000000002 RSI: 00007faba2356fa0 RDI: 00000000ffffff9c [ 73.035100][ T5304] RBP: 00007faba2356fa0 R08: 0000000000000000 R09: 0000000000000000 [ 73.035112][ T5304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 73.035123][ T5304] R13: 00007faba3b46038 R14: 00007faba3b45fa0 R15: 00007ffd31936c88 [ 73.035170][ T5304] [ 73.357950][ T5311] loop9: detected capacity change from 0 to 7 [ 73.364453][ T5311] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.372545][ T5311] Buffer I/O error on dev loop9, logical block 0, async page read [ 73.380404][ T5311] loop9: unable to read partition table [ 73.389358][ T5311] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 73.389358][ T5311] ) failed (rc=-5) [ 73.467121][ T5311] 9pnet_fd: Insufficient options for proto=fd [ 73.516770][ T5313] loop4: detected capacity change from 0 to 4096 [ 73.545586][ T5313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.565323][ T5313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.633902][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.737390][ T5324] loop4: detected capacity change from 0 to 2048 [ 73.754704][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.179308][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 74.179326][ T29] audit: type=1326 audit(1762409794.956:15802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.209109][ T29] audit: type=1326 audit(1762409794.956:15803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.232896][ T29] audit: type=1326 audit(1762409794.956:15804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.256389][ T29] audit: type=1326 audit(1762409794.956:15805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.291851][ T5336] Cannot find add_set index 0 as target [ 74.299463][ T29] audit: type=1326 audit(1762409795.036:15806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.322941][ T29] audit: type=1326 audit(1762409795.036:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.346453][ T29] audit: type=1326 audit(1762409795.136:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.369821][ T29] audit: type=1326 audit(1762409795.136:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.393378][ T29] audit: type=1326 audit(1762409795.136:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.416932][ T29] audit: type=1326 audit(1762409795.136:15811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faba38ef6c9 code=0x7ffc0000 [ 74.563307][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.625145][ T5349] wg1 speed is unknown, defaulting to 1000 [ 74.633964][ T5349] lo speed is unknown, defaulting to 1000 [ 74.719387][ T5349] program syz.4.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.772852][ T5365] program syz.1.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.108008][ T5390] program syz.5.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.381408][ T5394] Cannot find add_set index 0 as target [ 75.783994][ T5410] wg1 speed is unknown, defaulting to 1000 [ 75.790326][ T5410] lo speed is unknown, defaulting to 1000 [ 75.995993][ T5410] program syz.5.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.342010][ T5438] loop3: detected capacity change from 0 to 4096 [ 76.359265][ T5438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.384630][ T5438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.473999][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.552265][ T5446] program syz.2.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.575970][ T5448] loop3: detected capacity change from 0 to 512 [ 76.587921][ T5448] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.820062][ T5472] loop4: detected capacity change from 0 to 512 [ 76.827497][ T5472] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=,fsuuid=2e07,errors=continue) failed with errno=-22 [ 76.858070][ T5472] loop4: detected capacity change from 0 to 128 [ 76.869865][ T5472] bio_check_eod: 16916 callbacks suppressed [ 76.869879][ T5472] syz.4.602: attempt to access beyond end of device [ 76.869879][ T5472] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 76.889759][ T5472] syz.4.602: attempt to access beyond end of device [ 76.889759][ T5472] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 76.904335][ T5472] syz.4.602: attempt to access beyond end of device [ 76.904335][ T5472] loop4: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 76.917733][ T5472] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 76.928605][ T5472] syz.4.602: attempt to access beyond end of device [ 76.928605][ T5472] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 76.942258][ T5472] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 77.014873][ T5477] siw: device registration error -23 [ 77.278564][ T5472] syz.4.602: attempt to access beyond end of device [ 77.278564][ T5472] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 77.978271][ T3394] IPVS: starting estimator thread 0... [ 78.037245][ T5499] loop4: detected capacity change from 0 to 128 [ 78.052285][ T5499] FAT-fs (loop4): Directory bread(block 162) failed [ 78.069421][ T5499] FAT-fs (loop4): Directory bread(block 163) failed [ 78.076085][ T5499] FAT-fs (loop4): Directory bread(block 164) failed [ 78.089271][ T5495] IPVS: using max 1728 ests per chain, 86400 per kthread [ 78.097454][ T5499] FAT-fs (loop4): Directory bread(block 165) failed [ 78.115009][ T5493] __nla_validate_parse: 5 callbacks suppressed [ 78.115024][ T5493] netlink: 664 bytes leftover after parsing attributes in process `syz.1.607'. [ 78.137756][ T5499] FAT-fs (loop4): Directory bread(block 166) failed [ 78.144530][ T5499] FAT-fs (loop4): Directory bread(block 167) failed [ 78.151240][ T5499] FAT-fs (loop4): Directory bread(block 168) failed [ 78.157946][ T5499] FAT-fs (loop4): Directory bread(block 169) failed [ 78.166693][ T5499] FAT-fs (loop4): Directory bread(block 162) failed [ 78.173864][ T5499] FAT-fs (loop4): Directory bread(block 163) failed [ 78.181600][ T5499] syz.4.608: attempt to access beyond end of device [ 78.181600][ T5499] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 78.200684][ T5499] syz.4.608: attempt to access beyond end of device [ 78.200684][ T5499] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 78.308339][ T5513] SELinux: security_context_str_to_sid () failed with errno=-22 [ 78.534022][ T5523] loop4: detected capacity change from 0 to 512 [ 78.570239][ T5523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.586569][ T5523] Driver unsupported XDP return value 0 on prog (id 548) dev N/A, expect packet loss! [ 78.627582][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 78.636548][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 78.677478][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.683574][ T5531] netlink: 664 bytes leftover after parsing attributes in process `syz.2.620'. [ 78.732824][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 78.741796][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 78.763112][ T5538] wg1 speed is unknown, defaulting to 1000 [ 78.772113][ T5538] lo speed is unknown, defaulting to 1000 [ 78.825037][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 78.834084][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.616'. [ 79.030686][ T5564] loop5: detected capacity change from 0 to 4096 [ 79.039538][ T5564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.199725][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 79.199744][ T29] audit: type=1326 audit(1762409800.056:16374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.229795][ T29] audit: type=1326 audit(1762409800.056:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.253412][ T29] audit: type=1326 audit(1762409800.056:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.268473][ T5570] tipc: Can't bind to reserved service type 2 [ 79.277365][ T29] audit: type=1326 audit(1762409800.056:16377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.306854][ T29] audit: type=1326 audit(1762409800.056:16378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.330377][ T29] audit: type=1326 audit(1762409800.056:16379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.353836][ T29] audit: type=1326 audit(1762409800.056:16380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.377267][ T29] audit: type=1326 audit(1762409800.056:16382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.400736][ T29] audit: type=1326 audit(1762409800.056:16383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.424202][ T29] audit: type=1326 audit(1762409800.056:16384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 79.624734][ T5572] loop3: detected capacity change from 0 to 128 [ 79.631485][ T5572] EXT4-fs: Ignoring removed nobh option [ 79.637951][ T5574] loop4: detected capacity change from 0 to 8192 [ 79.638813][ T5572] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.656626][ T5572] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.719445][ T5574] loop4: p1 p2 p4[DM] [ 79.727862][ T5574] loop4: p1 size 835329 extends beyond EOD, truncated [ 79.735831][ T5574] loop4: p2 size 327680 extends beyond EOD, truncated [ 79.743314][ T5574] loop4: p4 size 262144 extends beyond EOD, truncated [ 79.757171][ T5574] netlink: 664 bytes leftover after parsing attributes in process `syz.4.632'. [ 79.863123][ T4078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.073003][ T5583] loop5: detected capacity change from 0 to 128 [ 80.082346][ T5591] wg1 speed is unknown, defaulting to 1000 [ 80.097235][ T5583] EXT4-fs: Ignoring removed nobh option [ 80.103703][ T5593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.637'. [ 80.170423][ T5583] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.171350][ T5591] lo speed is unknown, defaulting to 1000 [ 80.219081][ T5583] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.847509][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.963453][ T5603] ipip0: entered promiscuous mode [ 81.185652][ T5616] wg1 speed is unknown, defaulting to 1000 [ 81.195661][ T5616] lo speed is unknown, defaulting to 1000 [ 81.276270][ T4078] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.444086][ T5611] Cannot find add_set index 0 as target [ 81.575936][ T5631] FAULT_INJECTION: forcing a failure. [ 81.575936][ T5631] name failslab, interval 1, probability 0, space 0, times 0 [ 81.588967][ T5631] CPU: 1 UID: 60929 PID: 5631 Comm: syz.3.649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.589037][ T5631] Tainted: [W]=WARN [ 81.589044][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.589057][ T5631] Call Trace: [ 81.589063][ T5631] [ 81.589070][ T5631] __dump_stack+0x1d/0x30 [ 81.589101][ T5631] dump_stack_lvl+0xe8/0x140 [ 81.589134][ T5631] dump_stack+0x15/0x1b [ 81.589212][ T5631] should_fail_ex+0x265/0x280 [ 81.589245][ T5631] should_failslab+0x8c/0xb0 [ 81.589282][ T5631] kmem_cache_alloc_noprof+0x50/0x480 [ 81.589319][ T5631] ? audit_log_start+0x342/0x720 [ 81.589345][ T5631] audit_log_start+0x342/0x720 [ 81.589439][ T5631] ? should_fail_ex+0xdb/0x280 [ 81.589465][ T5631] audit_seccomp+0x48/0x100 [ 81.589572][ T5631] ? __seccomp_filter+0x82d/0x1250 [ 81.589608][ T5631] __seccomp_filter+0x83e/0x1250 [ 81.589644][ T5631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.589689][ T5631] ? vfs_read+0x4e6/0x770 [ 81.589721][ T5631] ? __rcu_read_unlock+0x4f/0x70 [ 81.589751][ T5631] ? __fget_files+0x184/0x1c0 [ 81.589813][ T5631] __secure_computing+0x82/0x150 [ 81.589879][ T5631] syscall_trace_enter+0xcf/0x1e0 [ 81.589918][ T5631] do_syscall_64+0xac/0x200 [ 81.589949][ T5631] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.589976][ T5631] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.590007][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.590069][ T5631] RIP: 0033:0x7f073884e17f [ 81.590083][ T5631] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 81.590099][ T5631] RSP: 002b:00007f07372af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 81.590115][ T5631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f073884e17f [ 81.590127][ T5631] RDX: 0000000000000001 RSI: 00007f07372af0a0 RDI: 0000000000000005 [ 81.590138][ T5631] RBP: 00007f07372af090 R08: 0000000000000000 R09: 0000000000000000 [ 81.590149][ T5631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 81.590217][ T5631] R13: 00007f0738aa6038 R14: 00007f0738aa5fa0 R15: 00007ffde3cc7228 [ 81.590235][ T5631] [ 81.830728][ T5633] wg1 speed is unknown, defaulting to 1000 [ 81.839460][ T5633] lo speed is unknown, defaulting to 1000 [ 82.074563][ T5637] siw: device registration error -23 [ 82.858165][ T5681] ipip0: entered promiscuous mode [ 82.885442][ T5683] loop3: detected capacity change from 0 to 4096 [ 82.892308][ T5683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.903886][ T5683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.939307][ T5683] netlink: 'syz.3.668': attribute type 30 has an invalid length. [ 82.961522][ T4984] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.979299][ T4984] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.988046][ T4984] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.025138][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.036788][ T4984] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.172596][ T5693] loop3: detected capacity change from 0 to 8192 [ 83.180719][ T5701] wg1 speed is unknown, defaulting to 1000 [ 83.187125][ T5701] lo speed is unknown, defaulting to 1000 [ 83.229748][ T5693] loop3: p1 p2 p4[DM] [ 83.237239][ T5693] loop3: p1 size 835329 extends beyond EOD, truncated [ 83.263033][ T5693] loop3: p2 size 327680 extends beyond EOD, truncated [ 83.278654][ T5693] loop3: p4 size 262144 extends beyond EOD, truncated [ 83.299606][ T5693] __nla_validate_parse: 6 callbacks suppressed [ 83.299621][ T5693] netlink: 664 bytes leftover after parsing attributes in process `syz.3.672'. [ 83.316504][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.325573][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.354471][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.363464][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.437933][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.446906][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 83.705121][ T5707] SET target dimension over the limit! [ 83.994187][ T5747] program syz.5.689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.050428][ T5749] loop5: detected capacity change from 0 to 8192 [ 84.089576][ T5749] loop5: p1 p2 p4[DM] [ 84.093748][ T5749] loop5: p1 size 835329 extends beyond EOD, truncated [ 84.101089][ T5749] loop5: p2 size 327680 extends beyond EOD, truncated [ 84.108540][ T5749] loop5: p4 size 262144 extends beyond EOD, truncated [ 84.122099][ T5749] netlink: 664 bytes leftover after parsing attributes in process `syz.5.690'. [ 84.238624][ T5751] wg1 speed is unknown, defaulting to 1000 [ 84.244976][ T5751] lo speed is unknown, defaulting to 1000 [ 84.462641][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 84.462660][ T29] audit: type=1400 audit(1762409805.316:16642): avc: denied { write } for pid=5761 comm="syz.3.697" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.462794][ T5764] random: crng reseeded on system resumption [ 84.492087][ T29] audit: type=1400 audit(1762409805.316:16643): avc: denied { open } for pid=5761 comm="syz.3.697" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.527519][ T29] audit: type=1400 audit(1762409805.376:16644): avc: denied { ioctl } for pid=5761 comm="syz.3.697" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.530307][ T5764] Restarting kernel threads ... [ 84.558316][ T5764] Done restarting kernel threads. [ 84.579261][ T29] audit: type=1326 audit(1762409805.426:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.603068][ T29] audit: type=1326 audit(1762409805.436:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.626793][ T29] audit: type=1326 audit(1762409805.436:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.650363][ T29] audit: type=1326 audit(1762409805.436:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.674095][ T29] audit: type=1326 audit(1762409805.436:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.697837][ T29] audit: type=1326 audit(1762409805.436:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.721407][ T29] audit: type=1326 audit(1762409805.436:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.3.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 84.834228][ T5774] program syz.2.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.438489][ T5792] x_tables: ip_tables: osf match: only valid for protocol 6 [ 85.468962][ T5792] wg1 speed is unknown, defaulting to 1000 [ 85.476188][ T5792] lo speed is unknown, defaulting to 1000 [ 85.504418][ T5793] netlink: 'syz.3.708': attribute type 13 has an invalid length. [ 85.532474][ T5793] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.548420][ T5031] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.599483][ T5031] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.617255][ T5000] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.630492][ T5000] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.761797][ T5804] netlink: 60 bytes leftover after parsing attributes in process `syz.5.709'. [ 85.770777][ T5804] netlink: 60 bytes leftover after parsing attributes in process `syz.5.709'. [ 85.819322][ T5806] program syz.1.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.888157][ T5817] macvtap0: entered promiscuous mode [ 85.894278][ T5817] macvtap0: left promiscuous mode [ 85.983630][ T5829] qrtr: Invalid version 0 [ 86.116743][ T5839] program syz.4.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.306599][ T5854] loop3: detected capacity change from 0 to 8192 [ 86.359422][ T5854] loop3: p1 p2 p4[DM] [ 86.363605][ T5854] loop3: p1 size 835329 extends beyond EOD, truncated [ 86.371202][ T5854] loop3: p2 size 327680 extends beyond EOD, truncated [ 86.378436][ T5854] loop3: p4 size 262144 extends beyond EOD, truncated [ 86.517947][ T5863] qrtr: Invalid version 0 [ 86.585059][ T5865] loop3: detected capacity change from 0 to 8192 [ 86.619453][ T5865] loop3: p1 p2 p4[DM] [ 86.623768][ T5865] loop3: p1 size 835329 extends beyond EOD, truncated [ 86.631399][ T5865] loop3: p2 size 327680 extends beyond EOD, truncated [ 86.638726][ T5865] loop3: p4 size 262144 extends beyond EOD, truncated [ 86.741532][ T5867] loop3: detected capacity change from 0 to 128 [ 86.750117][ T5867] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.757967][ T5867] FAT-fs (loop3): Filesystem has been set read-only [ 86.764713][ T5867] syz.3.735: attempt to access beyond end of device [ 86.764713][ T5867] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 86.778787][ T5867] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.786681][ T5867] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.795310][ T5867] syz.3.735: attempt to access beyond end of device [ 86.795310][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.808521][ T5867] syz.3.735: attempt to access beyond end of device [ 86.808521][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.821810][ T5867] syz.3.735: attempt to access beyond end of device [ 86.821810][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.835032][ T5867] syz.3.735: attempt to access beyond end of device [ 86.835032][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.848265][ T5867] syz.3.735: attempt to access beyond end of device [ 86.848265][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.861523][ T5867] syz.3.735: attempt to access beyond end of device [ 86.861523][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.874945][ T5867] syz.3.735: attempt to access beyond end of device [ 86.874945][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.883910][ T5869] program syz.1.736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.888264][ T5867] syz.3.735: attempt to access beyond end of device [ 86.888264][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 86.926143][ T5867] syz.3.735: attempt to access beyond end of device [ 86.926143][ T5867] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 87.043346][ T5877] wg1 speed is unknown, defaulting to 1000 [ 87.050052][ T5877] lo speed is unknown, defaulting to 1000 [ 87.283550][ T5894] qrtr: Invalid version 0 [ 87.388468][ T5901] program syz.4.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.682920][ T5899] netlink: 'syz.1.745': attribute type 30 has an invalid length. [ 87.766756][ T5897] Cannot find add_set index 0 as target [ 87.873068][ T5924] wg1 speed is unknown, defaulting to 1000 [ 87.879668][ T5924] lo speed is unknown, defaulting to 1000 [ 87.958798][ T5931] program syz.1.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.051393][ T5926] loop3: detected capacity change from 0 to 128 [ 88.077501][ T5926] EXT4-fs: Ignoring removed nobh option [ 88.088319][ T5926] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.100866][ T5926] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.554311][ T5961] loop4: detected capacity change from 0 to 128 [ 88.563921][ T5961] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.571958][ T5961] FAT-fs (loop4): Filesystem has been set read-only [ 88.578956][ T5961] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.586846][ T5961] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.669670][ T5958] SET target dimension over the limit! [ 88.860974][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.103068][ T5977] program syz.5.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.182121][ T5980] wg1 speed is unknown, defaulting to 1000 [ 89.192444][ T5980] lo speed is unknown, defaulting to 1000 [ 89.718402][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 89.724822][ T29] audit: type=1326 audit(1762409810.566:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05dae9f6c9 code=0x7ffc0000 [ 89.891547][ T6004] wg1 speed is unknown, defaulting to 1000 [ 89.897931][ T6004] lo speed is unknown, defaulting to 1000 [ 89.990187][ T6013] loop4: detected capacity change from 0 to 128 [ 89.999432][ T6013] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.007312][ T6013] FAT-fs (loop4): Filesystem has been set read-only [ 90.017907][ T6013] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.025830][ T6013] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 90.457293][ T6023] __nla_validate_parse: 20 callbacks suppressed [ 90.457342][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 90.472659][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 90.599257][ T29] audit: type=1326 audit(1762409811.296:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.622905][ T29] audit: type=1326 audit(1762409811.296:17187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.646537][ T29] audit: type=1326 audit(1762409811.296:17188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.670047][ T29] audit: type=1326 audit(1762409811.296:17189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.693502][ T29] audit: type=1326 audit(1762409811.296:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.717022][ T29] audit: type=1326 audit(1762409811.296:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.720124][ T6027] wg1 speed is unknown, defaulting to 1000 [ 90.740661][ T29] audit: type=1326 audit(1762409811.296:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.747242][ T6027] lo speed is unknown, defaulting to 1000 [ 90.769897][ T29] audit: type=1326 audit(1762409811.296:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.799167][ T29] audit: type=1326 audit(1762409811.296:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.5.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eee5ef6c9 code=0x7ffc0000 [ 90.975972][ T6031] program syz.3.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.006688][ T6041] wg1 speed is unknown, defaulting to 1000 [ 91.015296][ T6041] lo speed is unknown, defaulting to 1000 [ 91.082989][ T6052] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 91.265017][ T6060] loop3: detected capacity change from 0 to 4096 [ 91.272143][ T6060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.315393][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.343169][ T6060] netlink: 'syz.3.804': attribute type 30 has an invalid length. [ 91.358370][ T6070] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.452641][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.527704][ T6089] wg1 speed is unknown, defaulting to 1000 [ 91.543613][ T6089] lo speed is unknown, defaulting to 1000 [ 92.010053][ T6115] loop5: detected capacity change from 0 to 4096 [ 92.019262][ T6115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.350382][ T6125] loop4: detected capacity change from 0 to 128 [ 92.364914][ T6125] FAT-fs (loop4): Directory bread(block 162) failed [ 92.395303][ T6125] FAT-fs (loop4): Directory bread(block 163) failed [ 92.409716][ T6125] FAT-fs (loop4): Directory bread(block 164) failed [ 92.418078][ T4078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.424884][ T6125] FAT-fs (loop4): Directory bread(block 165) failed [ 92.443569][ T6125] FAT-fs (loop4): Directory bread(block 166) failed [ 92.450410][ T6125] FAT-fs (loop4): Directory bread(block 167) failed [ 92.457123][ T6125] FAT-fs (loop4): Directory bread(block 168) failed [ 92.463986][ T6125] FAT-fs (loop4): Directory bread(block 169) failed [ 92.492201][ T6125] FAT-fs (loop4): Directory bread(block 162) failed [ 92.514308][ T6125] FAT-fs (loop4): Directory bread(block 163) failed [ 92.522298][ T6125] bio_check_eod: 39719 callbacks suppressed [ 92.522319][ T6125] syz.4.830: attempt to access beyond end of device [ 92.522319][ T6125] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 92.543835][ T6125] syz.4.830: attempt to access beyond end of device [ 92.543835][ T6125] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 92.560657][ T6136] program syz.2.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.586041][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.836'. [ 92.595022][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.836'. [ 92.604878][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 92.622726][ T6138] loop3: detected capacity change from 0 to 512 [ 92.638436][ T6138] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.835: EA inode hash validation failed [ 92.654766][ T6138] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.835: corrupted inode contents [ 92.666959][ T6138] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.835: mark_inode_dirty error [ 92.678595][ T6138] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.835: corrupted inode contents [ 92.690850][ T6138] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.835: mark_inode_dirty error [ 92.703096][ T6138] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.835: mark inode dirty (error -117) [ 92.715934][ T6138] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 92.725888][ T6138] EXT4-fs (loop3): 1 orphan inode deleted [ 92.732193][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.745615][ T6138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.939841][ T6156] wg1 speed is unknown, defaulting to 1000 [ 92.948502][ T6159] loop3: detected capacity change from 0 to 128 [ 92.957605][ T6156] lo speed is unknown, defaulting to 1000 [ 92.969367][ T6159] FAT-fs (loop3): Directory bread(block 162) failed [ 92.986259][ T6159] FAT-fs (loop3): Directory bread(block 163) failed [ 92.992953][ T6159] FAT-fs (loop3): Directory bread(block 164) failed [ 93.009292][ T6159] FAT-fs (loop3): Directory bread(block 165) failed [ 93.019212][ T6159] FAT-fs (loop3): Directory bread(block 166) failed [ 93.029260][ T6159] FAT-fs (loop3): Directory bread(block 167) failed [ 93.036004][ T6159] FAT-fs (loop3): Directory bread(block 168) failed [ 93.059230][ T6159] FAT-fs (loop3): Directory bread(block 169) failed [ 93.077952][ T6159] FAT-fs (loop3): Directory bread(block 162) failed [ 93.084694][ T6159] FAT-fs (loop3): Directory bread(block 163) failed [ 93.099597][ T6159] syz.3.843: attempt to access beyond end of device [ 93.099597][ T6159] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 93.127972][ T6159] syz.3.843: attempt to access beyond end of device [ 93.127972][ T6159] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 93.249736][ T6156] program syz.4.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.291631][ T6167] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 93.349019][ T6169] FAULT_INJECTION: forcing a failure. [ 93.349019][ T6169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.362301][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.3.847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.362401][ T6169] Tainted: [W]=WARN [ 93.362409][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.362424][ T6169] Call Trace: [ 93.362433][ T6169] [ 93.362442][ T6169] __dump_stack+0x1d/0x30 [ 93.362472][ T6169] dump_stack_lvl+0xe8/0x140 [ 93.362494][ T6169] dump_stack+0x15/0x1b [ 93.362542][ T6169] should_fail_ex+0x265/0x280 [ 93.362569][ T6169] should_fail+0xb/0x20 [ 93.362590][ T6169] should_fail_usercopy+0x1a/0x20 [ 93.362615][ T6169] _copy_from_user+0x1c/0xb0 [ 93.362647][ T6169] ___sys_sendmsg+0xc1/0x1d0 [ 93.362759][ T6169] __sys_sendmmsg+0x178/0x300 [ 93.362789][ T6169] __x64_sys_sendmmsg+0x57/0x70 [ 93.362808][ T6169] x64_sys_call+0x1c4a/0x3000 [ 93.362846][ T6169] do_syscall_64+0xd2/0x200 [ 93.362871][ T6169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.362908][ T6169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.363034][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.363061][ T6169] RIP: 0033:0x7f073884f6c9 [ 93.363083][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.363150][ T6169] RSP: 002b:00007f07372af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.363175][ T6169] RAX: ffffffffffffffda RBX: 00007f0738aa5fa0 RCX: 00007f073884f6c9 [ 93.363191][ T6169] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 93.363285][ T6169] RBP: 00007f07372af090 R08: 0000000000000000 R09: 0000000000000000 [ 93.363329][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.363340][ T6169] R13: 00007f0738aa6038 R14: 00007f0738aa5fa0 R15: 00007ffde3cc7228 [ 93.363366][ T6169] [ 93.586806][ T3394] kernel write not supported for file /snd/seq (pid: 3394 comm: kworker/1:3) [ 94.118077][ T6210] netlink: 'syz.1.860': attribute type 30 has an invalid length. [ 94.361283][ T6218] wg1 speed is unknown, defaulting to 1000 [ 94.367773][ T6218] lo speed is unknown, defaulting to 1000 [ 94.500456][ T6220] program syz.1.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.713894][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 94.812711][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 94.813469][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 94.821728][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 94.830715][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 94.912508][ T6257] wg1 speed is unknown, defaulting to 1000 [ 94.918785][ T6257] lo speed is unknown, defaulting to 1000 [ 95.072012][ T6257] program syz.1.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.150825][ T6272] program syz.3.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.177339][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 95.177358][ T29] audit: type=1326 audit(1762409816.026:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.214975][ T29] audit: type=1326 audit(1762409816.026:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.238525][ T29] audit: type=1326 audit(1762409816.026:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.262064][ T29] audit: type=1326 audit(1762409816.026:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.285485][ T29] audit: type=1326 audit(1762409816.026:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.308983][ T29] audit: type=1326 audit(1762409816.026:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.332567][ T29] audit: type=1326 audit(1762409816.026:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.356080][ T29] audit: type=1326 audit(1762409816.026:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.379534][ T29] audit: type=1326 audit(1762409816.026:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.403069][ T29] audit: type=1326 audit(1762409816.026:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073884f6c9 code=0x7ffc0000 [ 95.618289][ T6301] __nla_validate_parse: 5 callbacks suppressed [ 95.618344][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 95.720615][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 95.729668][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 95.805249][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 95.805319][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 95.992849][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 96.001847][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.886'. [ 96.262552][ T6318] netlink: 664 bytes leftover after parsing attributes in process `syz.2.895'. [ 96.746908][ T6335] SET target dimension over the limit! [ 96.906904][ T6351] loop5: detected capacity change from 0 to 8192 [ 96.969441][ T6353] loop3: detected capacity change from 0 to 8192 [ 96.979650][ T6351] loop5: p1 p2 p4[DM] [ 96.983927][ T6351] loop5: p1 size 835329 extends beyond EOD, truncated [ 96.992010][ T6351] loop5: p2 size 327680 extends beyond EOD, truncated [ 96.999513][ T6353] loop3: p1 p2 p4[DM] [ 97.003843][ T6351] loop5: p4 size 262144 extends beyond EOD, truncated [ 97.003891][ T6353] loop3: p1 size 835329 extends beyond EOD, truncated [ 97.018651][ T6353] loop3: p2 size 327680 extends beyond EOD, truncated [ 97.027065][ T6353] loop3: p4 size 262144 extends beyond EOD, truncated [ 97.040502][ T6351] netlink: 664 bytes leftover after parsing attributes in process `syz.5.909'. [ 97.106781][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'. [ 97.119332][ T6370] veth4: entered promiscuous mode [ 97.124446][ T6370] veth4: entered allmulticast mode [ 97.152235][ T6369] veth6: entered promiscuous mode [ 97.157321][ T6369] veth6: entered allmulticast mode [ 97.249830][ T6376] wg1 speed is unknown, defaulting to 1000 [ 97.264899][ T6376] lo speed is unknown, defaulting to 1000 [ 97.277802][ T6385] program syz.3.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.287085][ T6380] loop4: detected capacity change from 0 to 4096 [ 97.309950][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.546119][ T6398] bond1: entered promiscuous mode [ 97.555994][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.737849][ T6417] ================================================================== [ 97.745997][ T6417] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach [ 97.753661][ T6417] [ 97.755992][ T6417] read-write to 0xffff88810e0d2638 of 8 bytes by task 6419 on cpu 0: [ 97.764057][ T6417] dequeue_signal+0x309/0x3b0 [ 97.768784][ T6417] get_signal+0x376/0xf70 [ 97.773134][ T6417] arch_do_signal_or_restart+0x96/0x440 [ 97.778693][ T6417] exit_to_user_mode_loop+0x77/0x110 [ 97.783989][ T6417] do_syscall_64+0x1d6/0x200 [ 97.788592][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.794504][ T6417] [ 97.796845][ T6417] read to 0xffff88810e0d2638 of 8 bytes by task 6417 on cpu 1: [ 97.804400][ T6417] ptrace_check_attach+0xaa/0x290 [ 97.809466][ T6417] __se_sys_ptrace+0xd3/0x2c0 [ 97.814167][ T6417] __x64_sys_ptrace+0x55/0x70 [ 97.818956][ T6417] x64_sys_call+0x2870/0x3000 [ 97.823684][ T6417] do_syscall_64+0xd2/0x200 [ 97.828218][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.834145][ T6417] [ 97.836562][ T6417] value changed: 0x0000000000000000 -> 0x0000000008010000 [ 97.843691][ T6417] [ 97.846019][ T6417] Reported by Kernel Concurrency Sanitizer on: [ 97.852179][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.1.935 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.863390][ T6417] Tainted: [W]=WARN [ 97.867199][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.877259][ T6417] ================================================================== [ 97.916573][ T6417] wg1 speed is unknown, defaulting to 1000 [ 97.923135][ T6417] lo speed is unknown, defaulting to 1000 [ 97.924530][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.953146][ T6417] program syz.1.935 is using a deprecated SCSI ioctl, please convert it to SG_IO