last executing test programs: 3.180371171s ago: executing program 0 (id=2339): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) 3.165534761s ago: executing program 0 (id=2340): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x40095505, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00') listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xffff, 0x5, 0x0, r0, 0x9, '\x00', 0x0, r4, 0x1, 0x3, 0x2, 0x6}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000300)={0x1d, r10, 0x3, {0x1, 0xf0, 0x3}}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 2.937270137s ago: executing program 3 (id=2342): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioprio_set$uid(0x3, 0x0, 0x4004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x7, 0x9, 0x7, 0x7, 0x7, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x400c010) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000280)=""/33) 2.665121174s ago: executing program 4 (id=2344): r0 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0x9596, 0x4000}, 0x0, 0x0) 2.643088016s ago: executing program 4 (id=2345): syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x562, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x6609, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x3, 0x4, 0xc, 0x6, 0xd2, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7}, 0x5081, 0x8, 0xfffff7f0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a000000", 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.387477713s ago: executing program 0 (id=2346): r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe"], 0xa8}}, 0x40000) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 2.225138623s ago: executing program 0 (id=2352): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x8, 0x7, 0x4, 0x2}, {0x4, 0x2, 0xec, 0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 2.073517444s ago: executing program 3 (id=2353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe6, {[@generic={0x8, 0xa, "57f04e74f13b070d"}]}}}}}}}, 0x0) 1.782604133s ago: executing program 4 (id=2358): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40095505, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00') listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xffff, 0x5, 0x0, r0, 0x9, '\x00', 0x0, r4, 0x1, 0x3, 0x2, 0x6}, 0x50) sendto$inet6(r8, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) 1.500601641s ago: executing program 2 (id=2363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioprio_set$uid(0x3, 0x0, 0x4004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x7, 0x9, 0x7, 0x7, 0x7, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x400c010) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000280)=""/33) 1.473423673s ago: executing program 2 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000069112800000000008510000002000000850000000500000095000000000000009500a50500000000fedfaa39c532217ee561d6bd41694679448c920198113100002508d893a2c3f1766976d08eadac5a2077473d2c62740c2764c439febcffa817ad8e0c75cf69c7b248c4e5a477f96d4327cac1146962485973d787bf6599a1c52e22"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x6}, 0x94) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={{}, {r1, r2/1000+60000}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000480)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'rose0\x00'}) r8 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) 1.321738333s ago: executing program 0 (id=2366): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000006c0)={[{@test_dummy_encryption}, {@i_version}, {@dioread_lock}, {@dioread_nolock}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@data_err_abort}, {@lazytime}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x9}}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ustat(0x3, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.183549372s ago: executing program 3 (id=2367): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) 972.773166ms ago: executing program 4 (id=2368): syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x562, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x6609, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x3, 0x4, 0xc, 0x6, 0xd2, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7}, 0x5081, 0x8, 0xfffff7f0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a000000", 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 882.084282ms ago: executing program 4 (id=2369): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r2, 0x8903, 0x1000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000f000000018002002d1f", 0x2e}], 0x1}, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 773.372709ms ago: executing program 2 (id=2370): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffffffffffe6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 696.942714ms ago: executing program 2 (id=2371): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000069112800000000008510000002000000850000000500000095000000000000009500a50500000000fedfaa39c532217ee561d6bd41694679448c920198113100002508d893a2c3f1766976d08eadac5a2077473d2c62740c2764c439febcffa817ad8e0c75cf69c7b248c4e5a477f96d4327cac1146962485973d787bf6599a1c52e22f5de"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2ae, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x6}, 0x70) r0 = creat(0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={{}, {r1, r2/1000+60000}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000480)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'rose0\x00'}) r8 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaa2a477b1bcb570461080045000070000000000001907864010100ac1414bb0b009078032c000045000000000000000089000000000001ac1414aa830700e000000286360000000000874b6cefc500000cdf61168c24ac88ad078c00092189ea43a2149b00070ed21667ef050d118c5572ec3ca14c0ee79a080000"], 0x0) 491.810048ms ago: executing program 2 (id=2373): r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe"], 0xa8}}, 0x40000) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 468.499039ms ago: executing program 2 (id=2375): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open$dir(&(0x7f0000000140)='./file1\x00', 0x18180, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) getrlimit(0x8, &(0x7f0000000b40)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdbf, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@broadcast, @local, 0x0}, &(0x7f0000000240)=0xc) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000280)={0x1, 0x3, 0x9, r5, 0x400}, 0xc) fspick(r1, &(0x7f0000000180)='./file1/file0\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000780)={0x1, 0x1, @start={0x0, 0x0, "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", "7f2111db52782bb21fe9474570d7bf6b9cb717d411b4cd5fb1aaca87c540d42e04d2358776d87251fe24d889ac75cabed9004688628166802058ab9ee8a7332697612813f3df266550ee33274ad65f03fca1bcea7be7429df99d8063380fe349ab018a41e38aad037f644f8f26f874646c94860840272d1e1bb48e82b726badca5ecd6626493a0999810bbea8cf0cebc0b85efe1e34ddbe97364e44a3c26a5b5aa03169d9c18113d21f73e4f34864a9a291dc7be643414e35d54c385e88b683c0ce551813f04492f41b2dbd5ea198540966584c80cc8c5a008429cc0467e426ef52c8a9bce30aa601731ca22c18afa8380ee40d2486425b223a2a5ed14e7e10de4d41365a4ac1fc4cc6f46ce8745fc3c6963783143a9333b05a95f3129f95c6fe565111201d8c0ece44ebbd5aa01d85c6afbed79c03d21d3ab1575243a616789108e34cba5a430cdf57cb545f3620e4d8956eb12040d897eeb4b84edb9ea5d3b3e1fc019cc7a95937e3d6571ea308ae5bcde8c6e070eeda807500e71c6cfc6a897d64075131d9ab8de2caa7585bb2780bbe8beefcff838642914eb6abe9da4ff40ce5d250835aaeb4dac8f528f0fda4eb665e64183b95b97dbd09bb47f5b4ce84975b15ccefbb569d85874e8479d2f4aedd5a120dff28066930150452cc26a4296d6ecf4699a0941a274f47640b0bff35ab226d6d2fe7bcc861e96fa9358585e0001e8448748c22ccadb0397181265ea5462b5409db9b49e0fb11ed34783d44e700e89b2c4e6e8021f6c71e53c4b4cb80fa1429e8367bbc6ffd5ad3d15e0e7a574a9cd7aac9bcd150d89591a1d25b6931717857e80f735a49a690805c444048e6e9b313e8b2fc0a8683291f4c57856faf356f4d1ce9ad9463d48c52ab1be5e8fb8f16502467a60eccddfdabbe6908e9fa8dd5fa2f6799eba118aca931db9e2bfe2e3fbb1cff65e89525d3c36401ea0a1a1fcb9d80d4bd3a488ce0fc7617258855040a6cacb31bddafb2a5fc2adf4bfb97dcf7df284fc19d11e67db2b0f0179d537c33705b47f8c18764febdd35fb7f76c886b7cf4245837da586bf309de56669f6714fc3efe43c9cc3c56dcb80def2817cc8bf4d789b2b20808d60eb23804f71cfa6e4f544e7e8f651ea8709edcdc36bb3f5d7957a8987f145bb2db8647eb941e59a3c11cf2ec7d2f8c9f86fc80f636893b57c16ded14df1b8b2766e01fe339b682a7d2a2ba0bc0213e0378f4ac0806ef2e7cc74e8be6ac552c763bbed21e83b5f0469f5a98e86bd95f91e6f2b8a1bc98aa56b2540674d0b014204151d4e1a9e2ddca9054726479437c6d0bef52b066b15cef6ffbf587549d5d64af6209e59dfc061168553a2de51e2ee3ff9f8ec581564dcaeaed9b8dac42b0a9c2691739c5790bd44910f1fb4f8fdc9dd60e6378235bdf6b307feede4b52d62b9aa7bdafbbf45"}, [0x9, 0x7fff, 0x2, 0xc, 0xb, 0x3, 0x800, 0x500, 0x6, 0xffff, 0x6, 0x3ff, 0x2, 0x9f4, 0x10, 0xfffffffffffffffb, 0x3, 0x9, 0x5, 0x8001, 0x10, 0x3, 0x6, 0x7fff, 0x9, 0x200, 0x7, 0x9, 0x6, 0x3, 0x1, 0x9, 0xa64, 0x80000000000008, 0xd, 0x0, 0x1, 0x7ff, 0xfff, 0xffffffff, 0x5, 0x5f, 0x5, 0x2, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x3, 0x81, 0x0, 0x6, 0x5, 0x4, 0x295, 0x5, 0x9b, 0x7, 0x7b, 0x40000000000005, 0x99, 0x4000004b, 0x9, 0xfffffffffffffffc]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x8, 0xb, 0x101, 0x0, 0x1, 0xcb02}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000001800), 0x1ff, r8}, 0x38) 432.624322ms ago: executing program 3 (id=2376): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x80000003, @empty, 0x4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x8, @local, 0x80}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') 378.566175ms ago: executing program 1 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x32, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 277.055882ms ago: executing program 0 (id=2378): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x40095505, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00') listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xffff, 0x5, 0x0, r0, 0x9, '\x00', 0x0, r4, 0x1, 0x3, 0x2, 0x6}, 0x50) sendto$inet6(r9, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) bind$can_j1939(r6, &(0x7f0000000300)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x3}}, 0x18) 276.650152ms ago: executing program 1 (id=2379): syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x562, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x6609, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x3, 0x4, 0xc, 0x6, 0xd2, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7}, 0x5081, 0x8, 0xfffff7f0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a000000", 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 202.346437ms ago: executing program 1 (id=2380): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000006c0)={[{@test_dummy_encryption}, {@i_version}, {@dioread_lock}, {@dioread_nolock}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@data_err_abort}, {@lazytime}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x9}}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 153.57754ms ago: executing program 3 (id=2381): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffffffffffe6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 90.229044ms ago: executing program 3 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2(&(0x7f0000001040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)='6', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="12", 0x1}], 0x1}}], 0x3, 0xc011) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback={0x30}, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 39.790677ms ago: executing program 1 (id=2383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 35.765377ms ago: executing program 4 (id=2384): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000069112800000000008510000002000000850000000500000095000000000000009500a50500000000fedfaa39c532217ee561d6bd41694679448c920198113100002508d893a2c3f1766976d08eadac5a2077473d2c62740c2764c439febcffa817ad8e0c75cf69c7b248c4e5a477f96d4327cac1146962485973d787bf6599a1c52e22f5de"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2ae, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x6}, 0x70) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={{}, {r1, r2/1000+60000}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x83, "00000000000000000000ffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000480)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'rose0\x00'}) r8 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaa2a477b1bcb570461080045000070000000000001907864010100ac1414bb0b009078032c000045000000000000000089000000000001ac1414aa830700e000000286360000000000874b6cefc500000cdf61168c24ac88ad078c00092189ea43a2149b00070ed21667ef050d118c5572ec3ca14c0ee79a080000"], 0x0) 22.963829ms ago: executing program 1 (id=2385): r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000"], 0xa8}}, 0x40000) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 0s ago: executing program 1 (id=2386): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setpgid(0xffffffffffffffff, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 29][ T6038] EXT4-fs (loop2): Remounting filesystem read-only [ 89.534965][ T6038] EXT4-fs (loop2): 1 truncate cleaned up [ 89.541683][ T3802] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.552268][ T3802] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.568218][ T3802] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 89.578777][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.610697][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.714028][ T6052] geneve0: entered allmulticast mode [ 89.822389][ T6065] FAULT_INJECTION: forcing a failure. [ 89.822389][ T6065] name failslab, interval 1, probability 0, space 0, times 0 [ 89.835307][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.835342][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.835358][ T6065] Call Trace: [ 89.835365][ T6065] [ 89.835375][ T6065] __dump_stack+0x1d/0x30 [ 89.835396][ T6065] dump_stack_lvl+0xe8/0x140 [ 89.835415][ T6065] dump_stack+0x15/0x1b [ 89.835458][ T6065] should_fail_ex+0x265/0x280 [ 89.835497][ T6065] ? do_epoll_create+0x57/0x260 [ 89.835582][ T6065] should_failslab+0x8c/0xb0 [ 89.835609][ T6065] __kmalloc_cache_noprof+0x4c/0x4a0 [ 89.835649][ T6065] do_epoll_create+0x57/0x260 [ 89.835684][ T6065] __x64_sys_epoll_create1+0x1e/0x30 [ 89.835758][ T6065] x64_sys_call+0x13b4/0x3000 [ 89.835782][ T6065] do_syscall_64+0xd2/0x200 [ 89.835810][ T6065] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.835906][ T6065] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.836000][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.836028][ T6065] RIP: 0033:0x7f09c64ceec9 [ 89.836047][ T6065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.836092][ T6065] RSP: 002b:00007f09c4f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 89.836111][ T6065] RAX: ffffffffffffffda RBX: 00007f09c6725fa0 RCX: 00007f09c64ceec9 [ 89.836125][ T6065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.836140][ T6065] RBP: 00007f09c4f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.836152][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.836163][ T6065] R13: 00007f09c6726038 R14: 00007f09c6725fa0 R15: 00007ffe8b2d72b8 [ 89.836233][ T6065] [ 90.226263][ T6072] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 90.450571][ T6089] syz_tun: entered allmulticast mode [ 90.456932][ T6088] syz_tun: left allmulticast mode [ 90.588660][ T6097] netlink: 'syz.3.919': attribute type 29 has an invalid length. [ 90.597029][ T6097] netlink: 'syz.3.919': attribute type 29 has an invalid length. [ 90.605517][ T6097] __nla_validate_parse: 14 callbacks suppressed [ 90.605530][ T6097] netlink: 500 bytes leftover after parsing attributes in process `syz.3.919'. [ 90.674028][ T6099] netlink: 96 bytes leftover after parsing attributes in process `syz.3.919'. [ 90.708270][ T6101] can0: slcan on ttyS3. [ 90.768112][ T6101] can0 (unregistered): slcan off ttyS3. [ 90.774131][ T6101] Falling back ldisc for ttyS3. [ 91.065299][ T6119] loop2: detected capacity change from 0 to 512 [ 91.090979][ T6119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.103320][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 91.103335][ T29] audit: type=1326 audit(1759863143.104:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.133067][ T29] audit: type=1326 audit(1759863143.104:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.156405][ T29] audit: type=1326 audit(1759863143.104:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.198241][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.208190][ T29] audit: type=1326 audit(1759863143.104:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.219037][ T6119] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.234150][ T29] audit: type=1326 audit(1759863143.104:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.268111][ T29] audit: type=1326 audit(1759863143.104:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.268151][ T29] audit: type=1326 audit(1759863143.104:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.268242][ T29] audit: type=1326 audit(1759863143.104:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.268268][ T29] audit: type=1326 audit(1759863143.104:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.268293][ T29] audit: type=1326 audit(1759863143.104:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 91.348043][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.383006][ T6134] syz_tun: entered allmulticast mode [ 91.625055][ T6139] netlink: 'syz.3.931': attribute type 29 has an invalid length. [ 91.633406][ T6139] netlink: 'syz.3.931': attribute type 29 has an invalid length. [ 91.641754][ T6139] netlink: 500 bytes leftover after parsing attributes in process `syz.3.931'. [ 91.708021][ T6140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.931'. [ 91.776561][ T6144] syz_tun: entered allmulticast mode [ 91.785095][ T6143] syz_tun: left allmulticast mode [ 91.877253][ T6151] Unsupported ieee802154 address type: 0 [ 91.929720][ T6153] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 92.239121][ T6136] syz_tun: left allmulticast mode [ 92.258767][ T6167] can0: slcan on ttyS3. [ 92.304029][ T6171] netlink: 'syz.2.944': attribute type 29 has an invalid length. [ 92.321712][ T6171] netlink: 500 bytes leftover after parsing attributes in process `syz.2.944'. [ 92.345634][ T6173] syz_tun: entered allmulticast mode [ 92.362035][ T6172] syz_tun: left allmulticast mode [ 92.368202][ T6167] can0 (unregistered): slcan off ttyS3. [ 92.382144][ T6167] Falling back ldisc for ttyS3. [ 92.412459][ T6175] netlink: 96 bytes leftover after parsing attributes in process `syz.2.944'. [ 93.240919][ T6206] syz_tun: entered allmulticast mode [ 93.251564][ T6205] syz_tun: left allmulticast mode [ 93.582553][ T6212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.586160][ T6218] syz_tun: entered allmulticast mode [ 93.678888][ T6155] syz.4.938 (6155) used greatest stack depth: 7224 bytes left [ 93.725785][ T6231] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 94.161787][ T6250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.269036][ T6258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.975'. [ 94.427703][ T6219] syz_tun: left allmulticast mode [ 95.016137][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 95.051299][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.052006][ T6280] Unsupported ieee802154 address type: 0 [ 95.075874][ T6272] macvlan2: entered promiscuous mode [ 95.095987][ T6272] bond0: entered promiscuous mode [ 95.104662][ T6272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.114877][ T6272] bond0: left promiscuous mode [ 95.116791][ T6280] siw: device registration error -23 [ 95.265171][ T6289] syz_tun: entered allmulticast mode [ 95.281318][ T6288] syz_tun: left allmulticast mode [ 95.297594][ T6293] can0: slcan on ttyS3. [ 95.328178][ T6293] can0 (unregistered): slcan off ttyS3. [ 95.334929][ T6293] Falling back ldisc for ttyS3. [ 95.372872][ T6301] can0: slcan on ttyS3. [ 95.401920][ T6303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.993'. [ 95.419699][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 95.428810][ T6301] can0 (unregistered): slcan off ttyS3. [ 95.434426][ T6301] Falling back ldisc for ttyS3. [ 95.442002][ T6307] Unsupported ieee802154 address type: 0 [ 95.480691][ T6307] siw: device registration error -23 [ 95.512360][ T6303] $Hÿ: (slave macvlan1): Releasing backup interface [ 95.553533][ T6315] Unsupported ieee802154 address type: 0 [ 95.649702][ T6315] siw: device registration error -23 [ 96.024122][ T6331] can0: slcan on ttyS3. [ 96.079053][ T6331] can0 (unregistered): slcan off ttyS3. [ 96.087596][ T6331] Falling back ldisc for ttyS3. [ 96.196953][ T6336] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.227087][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.236206][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.287039][ T6340] Unsupported ieee802154 address type: 0 [ 96.292176][ T6336] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.314227][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.323265][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.365559][ T6340] siw: device registration error -23 [ 96.398771][ T6336] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.426985][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.436069][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1005'. [ 96.463731][ T6347] syz_tun: entered allmulticast mode [ 96.554178][ T6356] can0: slcan on ttyS3. [ 96.577359][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 96.577374][ T29] audit: type=1326 audit(1759863148.574:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.610498][ T29] audit: type=1326 audit(1759863148.574:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.634273][ T29] audit: type=1326 audit(1759863148.584:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.657774][ T29] audit: type=1326 audit(1759863148.584:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.681265][ T29] audit: type=1326 audit(1759863148.584:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.704756][ T29] audit: type=1326 audit(1759863148.584:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.728320][ T29] audit: type=1326 audit(1759863148.584:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.751870][ T29] audit: type=1326 audit(1759863148.584:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 96.775445][ T29] audit: type=1326 audit(1759863148.714:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x0 [ 96.828236][ T6356] can0 (unregistered): slcan off ttyS3. [ 96.834098][ T6356] Falling back ldisc for ttyS3. [ 97.196633][ T6386] loop2: detected capacity change from 0 to 1024 [ 97.220855][ T6386] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 97.295324][ T6354] syz_tun: left allmulticast mode [ 97.598442][ T6394] Unsupported ieee802154 address type: 0 [ 97.965360][ T6401] validate_nla: 1 callbacks suppressed [ 97.965378][ T6401] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 98.003862][ T6405] can0: slcan on ttyS3. [ 98.054054][ T6410] loop2: detected capacity change from 0 to 512 [ 98.063409][ T6405] can0 (unregistered): slcan off ttyS3. [ 98.071847][ T6405] Falling back ldisc for ttyS3. [ 98.141996][ T6423] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1037'. [ 98.301495][ T6432] wg2: left promiscuous mode [ 98.301517][ T6432] wg2: left allmulticast mode [ 98.306758][ T29] audit: type=1326 audit(1759863150.304:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 98.525000][ T6449] netlink: 'syz.2.1043': attribute type 29 has an invalid length. [ 98.533616][ T6449] netlink: 'syz.2.1043': attribute type 29 has an invalid length. [ 99.105941][ T6461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.705642][ T6495] Unsupported ieee802154 address type: 0 [ 99.772795][ T6495] siw: device registration error -23 [ 99.819253][ T6504] syz_tun: entered allmulticast mode [ 99.831074][ T6501] syz_tun: left allmulticast mode [ 99.995356][ T6510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.130076][ T6520] Unsupported ieee802154 address type: 0 [ 100.198843][ T6520] siw: device registration error -23 [ 100.322915][ T6527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.377346][ T6538] Unsupported ieee802154 address type: 0 [ 100.395832][ T6540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.430418][ T6538] siw: device registration error -23 [ 100.818353][ T6563] Unsupported ieee802154 address type: 0 [ 100.955136][ T6563] siw: device registration error -23 [ 101.031006][ T6581] can0: slcan on ttyS3. [ 101.107313][ T6592] Unsupported ieee802154 address type: 0 [ 101.118206][ T6580] can0 (unregistered): slcan off ttyS3. [ 101.248259][ T6592] siw: device registration error -23 [ 101.426137][ T6624] loop2: detected capacity change from 0 to 1024 [ 101.472121][ T6624] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 102.328419][ T6642] __nla_validate_parse: 46 callbacks suppressed [ 102.328441][ T6642] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.345377][ T6644] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1113'. [ 102.369159][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.378296][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.400212][ T6646] FAULT_INJECTION: forcing a failure. [ 102.400212][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 102.413021][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.413077][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.413092][ T6646] Call Trace: [ 102.413100][ T6646] [ 102.413108][ T6646] __dump_stack+0x1d/0x30 [ 102.413169][ T6646] dump_stack_lvl+0xe8/0x140 [ 102.413193][ T6646] dump_stack+0x15/0x1b [ 102.413212][ T6646] should_fail_ex+0x265/0x280 [ 102.413381][ T6646] should_failslab+0x8c/0xb0 [ 102.413407][ T6646] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 102.413434][ T6646] ? __alloc_skb+0x101/0x320 [ 102.413457][ T6646] __alloc_skb+0x101/0x320 [ 102.413513][ T6646] netlink_alloc_large_skb+0xbf/0xf0 [ 102.413654][ T6646] netlink_sendmsg+0x3cf/0x6b0 [ 102.413687][ T6646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.413739][ T6646] __sock_sendmsg+0x142/0x180 [ 102.413778][ T6646] sock_write_iter+0x1a7/0x1f0 [ 102.413940][ T6646] ? __pfx_sock_write_iter+0x10/0x10 [ 102.414035][ T6646] vfs_write+0x527/0x960 [ 102.414062][ T6646] ksys_write+0xda/0x1a0 [ 102.414134][ T6646] __x64_sys_write+0x40/0x50 [ 102.414156][ T6646] x64_sys_call+0x2802/0x3000 [ 102.414176][ T6646] do_syscall_64+0xd2/0x200 [ 102.414227][ T6646] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.414253][ T6646] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.414327][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.414349][ T6646] RIP: 0033:0x7f09c64ceec9 [ 102.414364][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.414387][ T6646] RSP: 002b:00007f09c4f2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.414405][ T6646] RAX: ffffffffffffffda RBX: 00007f09c6725fa0 RCX: 00007f09c64ceec9 [ 102.414439][ T6646] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 102.414455][ T6646] RBP: 00007f09c4f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.414470][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.414486][ T6646] R13: 00007f09c6726038 R14: 00007f09c6725fa0 R15: 00007ffe8b2d72b8 [ 102.414509][ T6646] [ 102.508110][ T6642] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.638081][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.647131][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.656778][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 102.656795][ T29] audit: type=1400 audit(1759863154.554:5982): avc: denied { setopt } for pid=6651 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.684742][ T6652] netlink: 'syz.3.1118': attribute type 12 has an invalid length. [ 102.725783][ T6642] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.744990][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.754080][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 102.787743][ T29] audit: type=1326 audit(1759863154.784:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.811378][ T29] audit: type=1326 audit(1759863154.784:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.834779][ T29] audit: type=1326 audit(1759863154.784:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.858214][ T29] audit: type=1326 audit(1759863154.784:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.867587][ T6670] can0: slcan on ttyS3. [ 102.882064][ T29] audit: type=1326 audit(1759863154.784:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.909813][ T29] audit: type=1326 audit(1759863154.784:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.933321][ T29] audit: type=1326 audit(1759863154.784:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.956983][ T29] audit: type=1326 audit(1759863154.784:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 102.980464][ T29] audit: type=1326 audit(1759863154.784:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6659 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 103.068803][ T6670] can0 (unregistered): slcan off ttyS3. [ 103.189041][ T6685] lo speed is unknown, defaulting to 1000 [ 104.516303][ T6704] can0: slcan on ttyS3. [ 104.628130][ T6704] can0 (unregistered): slcan off ttyS3. [ 104.635986][ T6716] netlink: 'syz.1.1139': attribute type 29 has an invalid length. [ 104.646818][ T6704] Falling back ldisc for ttyS3. [ 104.648565][ T6716] netlink: 'syz.1.1139': attribute type 29 has an invalid length. [ 105.190790][ T6754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.468690][ T6780] syz_tun: entered allmulticast mode [ 105.506722][ T6779] syz_tun: left allmulticast mode [ 105.916527][ T6801] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 106.019515][ T6809] wg2: entered promiscuous mode [ 106.024425][ T6809] wg2: entered allmulticast mode [ 106.075059][ T6811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.123337][ T6814] syz_tun: entered allmulticast mode [ 106.130313][ T6813] syz_tun: left allmulticast mode [ 106.236043][ T6824] Unsupported ieee802154 address type: 0 [ 106.853508][ T6858] Unsupported ieee802154 address type: 0 [ 106.883566][ T6860] can0: slcan on ttyS3. [ 106.988372][ T6860] can0 (unregistered): slcan off ttyS3. [ 107.045694][ T6860] Falling back ldisc for ttyS3. [ 107.066001][ T6858] siw: device registration error -23 [ 107.263599][ T6883] 9pnet: Could not find request transport: 0xffffffffffffffff [ 107.524057][ T6899] Unsupported ieee802154 address type: 0 [ 107.551615][ T6899] siw: device registration error -23 [ 107.601306][ T6904] Unsupported ieee802154 address type: 0 [ 107.632173][ T6904] siw: device registration error -23 [ 107.682984][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 107.683001][ T29] audit: type=1326 audit(1759863159.684:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.712734][ T29] audit: type=1326 audit(1759863159.684:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.736212][ T29] audit: type=1326 audit(1759863159.684:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759639][ T29] audit: type=1326 audit(1759863159.684:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759737][ T29] audit: type=1326 audit(1759863159.684:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759765][ T29] audit: type=1326 audit(1759863159.684:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759795][ T29] audit: type=1326 audit(1759863159.684:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759884][ T29] audit: type=1326 audit(1759863159.684:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.759983][ T29] audit: type=1326 audit(1759863159.684:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 107.760080][ T29] audit: type=1326 audit(1759863159.684:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.0.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b7d8cef03 code=0x7ffc0000 [ 107.880771][ T6915] syz_tun: entered allmulticast mode [ 107.969571][ T6914] syz_tun: left allmulticast mode [ 108.073080][ T6931] Unsupported ieee802154 address type: 0 [ 108.079422][ T6928] Unsupported ieee802154 address type: 0 [ 108.126817][ T6931] siw: device registration error -23 [ 108.134629][ T6928] siw: device registration error -23 [ 108.250553][ T6941] can0: slcan on ttyS3. [ 108.279598][ T6943] loop2: detected capacity change from 0 to 1024 [ 108.287305][ T6943] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 108.308068][ T6941] can0 (unregistered): slcan off ttyS3. [ 108.332584][ T6941] Falling back ldisc for ttyS3. [ 108.470199][ T6951] syz.0.1230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.580374][ T6960] syz_tun: entered allmulticast mode [ 108.715426][ T6968] FAULT_INJECTION: forcing a failure. [ 108.715426][ T6968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.715453][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.3.1234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.715481][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.715568][ T6968] Call Trace: [ 108.715576][ T6968] [ 108.715586][ T6968] __dump_stack+0x1d/0x30 [ 108.715605][ T6968] dump_stack_lvl+0xe8/0x140 [ 108.715624][ T6968] dump_stack+0x15/0x1b [ 108.715639][ T6968] should_fail_ex+0x265/0x280 [ 108.715679][ T6968] should_fail_alloc_page+0xf2/0x100 [ 108.715792][ T6968] __alloc_frozen_pages_noprof+0xff/0x360 [ 108.715855][ T6968] alloc_pages_mpol+0xb3/0x260 [ 108.715892][ T6968] folio_alloc_mpol_noprof+0x39/0x80 [ 108.715930][ T6968] shmem_get_folio_gfp+0x3cf/0xd60 [ 108.716009][ T6968] ? simple_xattr_get+0xb9/0x120 [ 108.716052][ T6968] shmem_write_begin+0xa8/0x190 [ 108.716128][ T6968] generic_perform_write+0x181/0x490 [ 108.716194][ T6968] ? _raw_spin_unlock+0x26/0x50 [ 108.716227][ T6968] shmem_file_write_iter+0xc5/0xf0 [ 108.716256][ T6968] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 108.716283][ T6968] vfs_write+0x527/0x960 [ 108.716367][ T6968] __x64_sys_pwrite64+0xfd/0x150 [ 108.716427][ T6968] x64_sys_call+0xc4d/0x3000 [ 108.716454][ T6968] do_syscall_64+0xd2/0x200 [ 108.716478][ T6968] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.716538][ T6968] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.716647][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.716667][ T6968] RIP: 0033:0x7f09c64ceec9 [ 108.716681][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.716862][ T6968] RSP: 002b:00007f09c4eed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 108.716891][ T6968] RAX: ffffffffffffffda RBX: 00007f09c6726180 RCX: 00007f09c64ceec9 [ 108.716908][ T6968] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 108.716926][ T6968] RBP: 00007f09c4eed090 R08: 0000000000000000 R09: 0000000000000000 [ 108.716943][ T6968] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 108.716960][ T6968] R13: 00007f09c6726218 R14: 00007f09c6726180 R15: 00007ffe8b2d72b8 [ 108.716988][ T6968] [ 109.350564][ T6980] __nla_validate_parse: 21 callbacks suppressed [ 109.350581][ T6980] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.366411][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.375479][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.399493][ T6965] syz_tun: left allmulticast mode [ 109.426302][ T6980] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.432991][ T6982] can0: slcan on ttyS3. [ 109.460022][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.469180][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.502588][ T6980] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.511880][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.520903][ T6980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 109.538399][ T6988] can0 (unregistered): slcan off ttyS3. [ 109.544214][ T6988] Falling back ldisc for ttyS3. [ 109.625305][ T6999] wg2: left promiscuous mode [ 109.630066][ T6999] wg2: left allmulticast mode [ 109.650383][ T7001] loop2: detected capacity change from 0 to 1024 [ 109.667797][ T7001] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 109.774216][ T7011] syz_tun: entered allmulticast mode [ 110.132704][ T7025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.178294][ T7027] can0: slcan on ttyS3. [ 110.228343][ T7027] can0 (unregistered): slcan off ttyS3. [ 110.234770][ T7027] Falling back ldisc for ttyS3. [ 110.297658][ T7032] wg2: left promiscuous mode [ 110.302356][ T7032] wg2: left allmulticast mode [ 110.334900][ T7034] syz_tun: entered allmulticast mode [ 110.598890][ T7019] syz_tun: left allmulticast mode [ 110.744779][ T7051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.785262][ T7054] can0: slcan on ttyS3. [ 110.858149][ T7054] can0 (unregistered): slcan off ttyS3. [ 110.864003][ T7054] Falling back ldisc for ttyS3. [ 110.888201][ T7063] syz_tun: entered allmulticast mode [ 110.937313][ T7067] loop2: detected capacity change from 0 to 512 [ 111.150999][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 111.222814][ T7079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.409371][ T7091] SELinux: Context Ü is not valid (left unmapped). [ 112.232209][ T7114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.371422][ T7119] lo speed is unknown, defaulting to 1000 [ 112.523918][ T7119] Illegal XDP return value 4294967274 on prog (id 733) dev N/A, expect packet loss! [ 112.609659][ T7130] tipc: Failed to remove unknown binding: 66,1,1/0:3289795294/3289795296 [ 112.652575][ T7130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.709897][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 112.709918][ T29] audit: type=1400 audit(1759863164.714:6763): avc: denied { create } for pid=7129 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.808798][ T7130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.942574][ T7130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.012651][ T7130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.184591][ T3449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.184674][ T3449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.184713][ T3449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.212982][ T3826] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.442071][ T29] audit: type=1326 audit(1759863165.444:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.465642][ T29] audit: type=1326 audit(1759863165.444:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.512511][ T7169] Unsupported ieee802154 address type: 0 [ 113.597727][ T29] audit: type=1326 audit(1759863165.504:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.621294][ T29] audit: type=1326 audit(1759863165.504:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.644870][ T29] audit: type=1326 audit(1759863165.504:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.668393][ T29] audit: type=1326 audit(1759863165.514:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.691973][ T29] audit: type=1326 audit(1759863165.514:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.715493][ T29] audit: type=1326 audit(1759863165.514:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 113.738952][ T29] audit: type=1326 audit(1759863165.514:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 114.179987][ T7200] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 114.197475][ T7200] netlink: 'syz.3.1323': attribute type 29 has an invalid length. [ 114.394978][ T7210] __nla_validate_parse: 2 callbacks suppressed [ 114.394999][ T7210] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1323'. [ 114.565008][ T7219] FAULT_INJECTION: forcing a failure. [ 114.565008][ T7219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.565044][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.1.1330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.565076][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.565092][ T7219] Call Trace: [ 114.565101][ T7219] [ 114.565111][ T7219] __dump_stack+0x1d/0x30 [ 114.565138][ T7219] dump_stack_lvl+0xe8/0x140 [ 114.565176][ T7219] dump_stack+0x15/0x1b [ 114.565198][ T7219] should_fail_ex+0x265/0x280 [ 114.565316][ T7219] should_fail+0xb/0x20 [ 114.565400][ T7219] should_fail_usercopy+0x1a/0x20 [ 114.565437][ T7219] _copy_to_user+0x20/0xa0 [ 114.565477][ T7219] simple_read_from_buffer+0xb5/0x130 [ 114.565502][ T7219] proc_fail_nth_read+0x10e/0x150 [ 114.565539][ T7219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.565599][ T7219] vfs_read+0x1a5/0x770 [ 114.565625][ T7219] ? __rcu_read_unlock+0x4f/0x70 [ 114.565664][ T7219] ? __fget_files+0x184/0x1c0 [ 114.565694][ T7219] ? __sys_bind+0xc3/0x2a0 [ 114.565763][ T7219] ksys_read+0xda/0x1a0 [ 114.565794][ T7219] __x64_sys_read+0x40/0x50 [ 114.565822][ T7219] x64_sys_call+0x27c0/0x3000 [ 114.565870][ T7219] do_syscall_64+0xd2/0x200 [ 114.565894][ T7219] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.565971][ T7219] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.566017][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.566093][ T7219] RIP: 0033:0x7f754d8ad8dc [ 114.566111][ T7219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.566135][ T7219] RSP: 002b:00007f754c30f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.566174][ T7219] RAX: ffffffffffffffda RBX: 00007f754db05fa0 RCX: 00007f754d8ad8dc [ 114.566191][ T7219] RDX: 000000000000000f RSI: 00007f754c30f0a0 RDI: 0000000000000003 [ 114.566205][ T7219] RBP: 00007f754c30f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.566265][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.566278][ T7219] R13: 00007f754db06038 R14: 00007f754db05fa0 R15: 00007ffcc1ea7e78 [ 114.566299][ T7219] [ 114.867798][ T7230] Unsupported ieee802154 address type: 0 [ 114.961187][ T7230] siw: device registration error -23 [ 115.147264][ T7241] syz_tun: entered allmulticast mode [ 115.179220][ T7240] syz_tun: left allmulticast mode [ 115.767127][ T7272] syz_tun: entered allmulticast mode [ 115.768073][ T7271] syz_tun: left allmulticast mode [ 116.420696][ T7302] syz_tun: entered allmulticast mode [ 116.436462][ T7301] syz_tun: left allmulticast mode [ 116.643129][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1366'. [ 116.726818][ T7317] Unsupported ieee802154 address type: 0 [ 117.035506][ T7341] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1380'. [ 117.157160][ T7350] can0: slcan on ttyS3. [ 117.198238][ T7350] can0 (unregistered): slcan off ttyS3. [ 117.204093][ T7350] Falling back ldisc for ttyS3. [ 117.384200][ T7359] syz_tun: entered allmulticast mode [ 117.390134][ T7358] syz_tun: left allmulticast mode [ 117.450270][ T7369] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1392'. [ 117.771035][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 117.771052][ T29] audit: type=1326 audit(1759863169.774:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 117.800773][ T29] audit: type=1326 audit(1759863169.774:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 117.877342][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'. [ 117.914278][ T29] audit: type=1400 audit(1759863169.914:7187): avc: denied { create } for pid=7376 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.943933][ T29] audit: type=1400 audit(1759863169.934:7188): avc: denied { getopt } for pid=7376 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.964473][ T29] audit: type=1326 audit(1759863169.934:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 117.987959][ T29] audit: type=1326 audit(1759863169.934:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 118.011819][ T29] audit: type=1326 audit(1759863169.944:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 118.035382][ T29] audit: type=1326 audit(1759863169.944:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 118.058826][ T29] audit: type=1326 audit(1759863169.944:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 118.082374][ T29] audit: type=1326 audit(1759863169.944:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 118.230601][ T7395] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1403'. [ 119.156193][ T7423] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1414'. [ 119.285106][ T7439] syz_tun: entered allmulticast mode [ 119.295266][ T7438] syz_tun: left allmulticast mode [ 119.327847][ T7435] lo speed is unknown, defaulting to 1000 [ 119.448293][ T7449] loop2: detected capacity change from 0 to 1024 [ 119.455914][ T7449] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 119.474170][ T7453] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1427'. [ 119.964934][ T7463] can0: slcan on ttyS3. [ 120.031484][ T7463] can0 (unregistered): slcan off ttyS3. [ 120.031543][ T7463] Falling back ldisc for ttyS3. [ 120.441174][ T7487] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1438'. [ 120.507700][ T7490] netlink: 'syz.2.1439': attribute type 29 has an invalid length. [ 120.518630][ T7490] netlink: 'syz.2.1439': attribute type 29 has an invalid length. [ 120.527039][ T7490] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1439'. [ 120.542215][ T7490] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1439'. [ 120.657511][ T7499] Unsupported ieee802154 address type: 0 [ 120.693447][ T7499] siw: device registration error -23 [ 120.748687][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1446'. [ 120.806240][ T7513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1449'. [ 120.835386][ T7515] netlink: 'syz.2.1450': attribute type 29 has an invalid length. [ 120.844220][ T7515] netlink: 'syz.2.1450': attribute type 29 has an invalid length. [ 120.852771][ T7515] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1450'. [ 120.918956][ T7519] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1450'. [ 120.962771][ T7523] can0: slcan on ttyS3. [ 121.008282][ T7523] can0 (unregistered): slcan off ttyS3. [ 121.015571][ T7523] Falling back ldisc for ttyS3. [ 121.024385][ T7529] Unsupported ieee802154 address type: 0 [ 121.056726][ T7529] siw: device registration error -23 [ 121.082742][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'. [ 121.217775][ T7551] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 121.244319][ T7551] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 121.253399][ T7551] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1466'. [ 121.353881][ T7563] wg2: entered promiscuous mode [ 121.358882][ T7563] wg2: entered allmulticast mode [ 121.369845][ T7565] Unsupported ieee802154 address type: 0 [ 121.413101][ T7565] siw: device registration error -23 [ 121.687490][ T7594] netlink: 'syz.2.1484': attribute type 29 has an invalid length. [ 121.696327][ T7594] netlink: 'syz.2.1484': attribute type 29 has an invalid length. [ 121.862365][ T7606] can0: slcan on ttyS3. [ 121.908049][ T7606] can0 (unregistered): slcan off ttyS3. [ 121.913923][ T7606] Falling back ldisc for ttyS3. [ 122.068477][ T7631] netlink: 'syz.4.1500': attribute type 29 has an invalid length. [ 122.077119][ T7631] netlink: 'syz.4.1500': attribute type 29 has an invalid length. [ 122.252065][ T7639] Unsupported ieee802154 address type: 0 [ 122.538594][ T7643] lo speed is unknown, defaulting to 1000 [ 122.839970][ T29] kauditd_printk_skb: 991 callbacks suppressed [ 122.839989][ T29] audit: type=1326 audit(1759863174.844:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.874418][ T29] audit: type=1326 audit(1759863174.844:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.897951][ T29] audit: type=1326 audit(1759863174.844:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.921458][ T29] audit: type=1326 audit(1759863174.844:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.944982][ T29] audit: type=1326 audit(1759863174.844:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.968445][ T29] audit: type=1326 audit(1759863174.844:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 122.991969][ T29] audit: type=1326 audit(1759863174.844:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 123.015408][ T29] audit: type=1326 audit(1759863174.844:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 123.038826][ T29] audit: type=1326 audit(1759863174.844:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 123.062316][ T29] audit: type=1326 audit(1759863174.844:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 123.142810][ T7670] can0: slcan on ttyS3. [ 123.164010][ T7672] Unsupported ieee802154 address type: 0 [ 123.196103][ T7672] siw: device registration error -23 [ 123.202369][ T7670] can0 (unregistered): slcan off ttyS3. [ 123.221852][ T7670] Falling back ldisc for ttyS3. [ 123.278171][ T7683] wg2: left promiscuous mode [ 123.282868][ T7683] wg2: left allmulticast mode [ 124.340912][ T7721] wg2: entered promiscuous mode [ 124.346402][ T7721] wg2: entered allmulticast mode [ 124.574372][ T7753] syz_tun: entered allmulticast mode [ 124.622076][ T7759] __nla_validate_parse: 9 callbacks suppressed [ 124.622098][ T7759] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1550'. [ 125.213889][ T7788] Unsupported ieee802154 address type: 0 [ 125.242346][ T7788] siw: device registration error -23 [ 125.327292][ T7796] Unsupported ieee802154 address type: 0 [ 125.399231][ T7796] siw: device registration error -23 [ 125.728160][ T7816] Unsupported ieee802154 address type: 0 [ 125.754449][ T7816] siw: device registration error -23 [ 125.908702][ T7829] Unsupported ieee802154 address type: 0 [ 125.935945][ T7829] siw: device registration error -23 [ 125.989095][ T7833] Unsupported ieee802154 address type: 0 [ 126.028912][ T7833] siw: device registration error -23 [ 126.061864][ T7839] can0: slcan on ttyS3. [ 126.100653][ T7839] can0 (unregistered): slcan off ttyS3. [ 126.106569][ T7839] Falling back ldisc for ttyS3. [ 126.142083][ T7843] Unsupported ieee802154 address type: 0 [ 126.192387][ T7843] siw: device registration error -23 [ 126.250617][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 126.395758][ T7858] Unsupported ieee802154 address type: 0 [ 126.999515][ T7875] lo speed is unknown, defaulting to 1000 [ 127.157275][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 127.641063][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'. [ 127.851616][ T29] kauditd_printk_skb: 1124 callbacks suppressed [ 127.851633][ T29] audit: type=1326 audit(1759863179.854:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 127.881691][ T29] audit: type=1326 audit(1759863179.884:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 127.907873][ T29] audit: type=1326 audit(1759863179.914:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 127.931420][ T29] audit: type=1326 audit(1759863179.914:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 127.954945][ T29] audit: type=1326 audit(1759863179.914:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 127.978448][ T29] audit: type=1326 audit(1759863179.914:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 128.001907][ T29] audit: type=1326 audit(1759863179.914:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 128.025494][ T29] audit: type=1326 audit(1759863179.914:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 128.048999][ T29] audit: type=1326 audit(1759863179.914:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 128.072419][ T29] audit: type=1326 audit(1759863179.914:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 128.181050][ T7929] Unsupported ieee802154 address type: 0 [ 128.203919][ T7932] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1623'. [ 128.230066][ T7933] loop2: detected capacity change from 0 to 256 [ 128.237989][ T7932] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1623'. [ 128.245915][ T7933] FAT-fs (loop2): Directory bread(block 64) failed [ 128.262295][ T7933] FAT-fs (loop2): Directory bread(block 65) failed [ 128.281404][ T7933] FAT-fs (loop2): Directory bread(block 66) failed [ 128.292848][ T7929] siw: device registration error -23 [ 128.302456][ T7933] FAT-fs (loop2): Directory bread(block 67) failed [ 128.323840][ T7933] FAT-fs (loop2): Directory bread(block 68) failed [ 128.348098][ T7933] FAT-fs (loop2): Directory bread(block 69) failed [ 128.361363][ T7933] FAT-fs (loop2): Directory bread(block 70) failed [ 128.377041][ T7933] FAT-fs (loop2): Directory bread(block 71) failed [ 128.392852][ T7933] FAT-fs (loop2): Directory bread(block 72) failed [ 128.417413][ T7933] FAT-fs (loop2): Directory bread(block 73) failed [ 128.756058][ T7964] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1634'. [ 128.765235][ T7964] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1634'. [ 129.309402][ T7987] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1645'. [ 129.319005][ T7987] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1645'. [ 129.374561][ T7991] loop2: detected capacity change from 0 to 1024 [ 129.382723][ T7991] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 129.712255][ T8008] Unsupported ieee802154 address type: 0 [ 129.766858][ T8008] siw: device registration error -23 [ 129.868932][ T8012] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1656'. [ 129.868979][ T8012] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1656'. [ 130.240881][ T8022] validate_nla: 3 callbacks suppressed [ 130.240896][ T8022] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 130.255317][ T8022] netlink: 'syz.2.1661': attribute type 29 has an invalid length. [ 130.264052][ T8022] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1661'. [ 130.338451][ T8025] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1661'. [ 130.448222][ T8031] Unsupported ieee802154 address type: 0 [ 130.481947][ T8031] siw: device registration error -23 [ 130.522615][ T8034] loop2: detected capacity change from 0 to 1024 [ 130.533152][ T8036] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1667'. [ 130.545718][ T8034] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 130.554509][ T8036] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1667'. [ 131.036030][ T8062] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1678'. [ 131.036073][ T8062] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1678'. [ 131.359364][ T8070] can0: slcan on ttyS3. [ 131.382251][ T8076] loop2: detected capacity change from 0 to 512 [ 131.418713][ T8070] can0 (unregistered): slcan off ttyS3. [ 131.433982][ T8070] Falling back ldisc for ttyS3. [ 131.486484][ T8086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.500746][ T8090] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1689'. [ 131.524425][ T8090] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1689'. [ 132.425766][ T8114] Unsupported ieee802154 address type: 0 [ 132.514590][ T8119] loop2: detected capacity change from 0 to 1024 [ 132.540434][ T8119] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 132.694768][ T8138] can0: slcan on ttyS3. [ 132.798623][ T8138] can0 (unregistered): slcan off ttyS3. [ 132.824260][ T8138] Falling back ldisc for ttyS3. [ 133.764914][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 133.764934][ T29] audit: type=1326 audit(1759863185.764:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.767863][ T29] audit: type=1326 audit(1759863185.764:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.768050][ T29] audit: type=1326 audit(1759863185.774:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.768461][ T29] audit: type=1326 audit(1759863185.774:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.768493][ T29] audit: type=1326 audit(1759863185.774:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.768721][ T29] audit: type=1326 audit(1759863185.774:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.768869][ T29] audit: type=1326 audit(1759863185.774:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.772045][ T29] audit: type=1326 audit(1759863185.774:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.772080][ T29] audit: type=1326 audit(1759863185.774:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.772192][ T29] audit: type=1326 audit(1759863185.774:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.2.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 133.777493][ T8172] can0: slcan on ttyS3. [ 133.828279][ T8172] can0 (unregistered): slcan off ttyS3. [ 133.828333][ T8172] Falling back ldisc for ttyS3. [ 134.143570][ T8182] Unsupported ieee802154 address type: 0 [ 134.145551][ T8182] siw: device registration error -23 [ 134.193958][ T8185] netlink: 'syz.0.1728': attribute type 10 has an invalid length. [ 134.203389][ T8185] macvlan1: entered promiscuous mode [ 134.297079][ T8185] $Hÿ: (slave macvlan1): Enslaving as an active interface with an up link [ 134.340720][ T8185] wg2: entered promiscuous mode [ 134.346179][ T8185] wg2: entered allmulticast mode [ 134.876654][ T8201] Unsupported ieee802154 address type: 0 [ 135.036555][ T8212] Unsupported ieee802154 address type: 0 [ 135.046076][ T8212] siw: device registration error -23 [ 135.074114][ T8215] __nla_validate_parse: 6 callbacks suppressed [ 135.074134][ T8215] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1739'. [ 135.581061][ T8232] Unsupported ieee802154 address type: 0 [ 135.607109][ T8232] siw: device registration error -23 [ 135.892752][ T8238] wg2: left promiscuous mode [ 135.897440][ T8238] wg2: left allmulticast mode [ 136.031898][ T8245] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1751'. [ 136.264302][ T8258] netlink: 'syz.1.1756': attribute type 29 has an invalid length. [ 136.277271][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'. [ 136.296955][ T8258] netlink: 'syz.1.1756': attribute type 29 has an invalid length. [ 136.319676][ T8258] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1756'. [ 136.343594][ T8261] Unsupported ieee802154 address type: 0 [ 136.373188][ T8261] siw: device registration error -23 [ 136.391946][ T8258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1756'. [ 136.704747][ T8288] netlink: 'syz.0.1769': attribute type 29 has an invalid length. [ 136.705962][ T8288] netlink: 'syz.0.1769': attribute type 29 has an invalid length. [ 136.707095][ T8288] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1769'. [ 136.809588][ T8297] can0: slcan on ttyS3. [ 136.815002][ T8295] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1769'. [ 136.921999][ T8297] can0 (unregistered): slcan off ttyS3. [ 136.922264][ T8297] Falling back ldisc for ttyS3. [ 137.007235][ T8311] Unsupported ieee802154 address type: 0 [ 137.215255][ T8326] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 137.216156][ T8326] netlink: 'syz.2.1786': attribute type 29 has an invalid length. [ 137.245287][ T8326] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1786'. [ 137.313430][ T8332] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1786'. [ 137.326962][ T8333] can0: slcan on ttyS3. [ 137.398112][ T8333] can0 (unregistered): slcan off ttyS3. [ 137.403923][ T8333] Falling back ldisc for ttyS3. [ 137.492972][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 137.793580][ T8365] wg2: entered promiscuous mode [ 137.798567][ T8365] wg2: entered allmulticast mode [ 137.874549][ T8367] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 137.906902][ T8367] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 138.871556][ T8412] Unsupported ieee802154 address type: 0 [ 138.882851][ T8412] siw: device registration error -23 [ 139.136714][ T8442] FAULT_INJECTION: forcing a failure. [ 139.136714][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 139.149544][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.2.1827 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.149640][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.149654][ T8442] Call Trace: [ 139.149663][ T8442] [ 139.149673][ T8442] __dump_stack+0x1d/0x30 [ 139.149728][ T8442] dump_stack_lvl+0xe8/0x140 [ 139.149747][ T8442] dump_stack+0x15/0x1b [ 139.149770][ T8442] should_fail_ex+0x265/0x280 [ 139.149860][ T8442] should_failslab+0x8c/0xb0 [ 139.149941][ T8442] kmem_cache_alloc_noprof+0x50/0x480 [ 139.149968][ T8442] ? getname_flags+0x80/0x3b0 [ 139.150020][ T8442] ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0 [ 139.150078][ T8442] getname_flags+0x80/0x3b0 [ 139.150111][ T8442] user_path_at+0x28/0x130 [ 139.150142][ T8442] do_fchmodat+0x9c/0x180 [ 139.150171][ T8442] __x64_sys_fchmodat+0x42/0x50 [ 139.150207][ T8442] x64_sys_call+0x2891/0x3000 [ 139.150262][ T8442] do_syscall_64+0xd2/0x200 [ 139.150284][ T8442] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.150313][ T8442] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.150356][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.150415][ T8442] RIP: 0033:0x7fe665cfeec9 [ 139.150439][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.150536][ T8442] RSP: 002b:00007fe664767038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 139.150565][ T8442] RAX: ffffffffffffffda RBX: 00007fe665f55fa0 RCX: 00007fe665cfeec9 [ 139.150612][ T8442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 139.150628][ T8442] RBP: 00007fe664767090 R08: 0000000000000000 R09: 0000000000000000 [ 139.150640][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.150723][ T8442] R13: 00007fe665f56038 R14: 00007fe665f55fa0 R15: 00007ffc68812428 [ 139.150775][ T8442] [ 139.370405][ T29] kauditd_printk_skb: 1053 callbacks suppressed [ 139.370423][ T29] audit: type=1326 audit(1759863191.374:10641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.418206][ T29] audit: type=1326 audit(1759863191.374:10642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.442075][ T29] audit: type=1326 audit(1759863191.374:10643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.465723][ T29] audit: type=1326 audit(1759863191.374:10644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.489351][ T29] audit: type=1326 audit(1759863191.374:10645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.512953][ T29] audit: type=1326 audit(1759863191.374:10646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.536537][ T29] audit: type=1326 audit(1759863191.374:10647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.560117][ T29] audit: type=1326 audit(1759863191.374:10648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.583745][ T29] audit: type=1326 audit(1759863191.374:10649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.607295][ T29] audit: type=1326 audit(1759863191.374:10650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 139.683305][ T8458] wg2: left promiscuous mode [ 139.688024][ T8458] wg2: left allmulticast mode [ 140.489312][ T8483] wg2: left promiscuous mode [ 140.494031][ T8483] wg2: left allmulticast mode [ 140.662572][ T8493] Unsupported ieee802154 address type: 0 [ 140.691356][ T8493] siw: device registration error -23 [ 140.698215][ T8495] FAULT_INJECTION: forcing a failure. [ 140.698215][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.711322][ T8495] CPU: 0 UID: 0 PID: 8495 Comm: syz.1.1846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.711363][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.711378][ T8495] Call Trace: [ 140.711384][ T8495] [ 140.711392][ T8495] __dump_stack+0x1d/0x30 [ 140.711450][ T8495] dump_stack_lvl+0xe8/0x140 [ 140.711475][ T8495] dump_stack+0x15/0x1b [ 140.711494][ T8495] should_fail_ex+0x265/0x280 [ 140.711527][ T8495] should_fail+0xb/0x20 [ 140.711638][ T8495] should_fail_usercopy+0x1a/0x20 [ 140.711657][ T8495] _copy_to_user+0x20/0xa0 [ 140.711682][ T8495] simple_read_from_buffer+0xb5/0x130 [ 140.711718][ T8495] proc_fail_nth_read+0x10e/0x150 [ 140.711755][ T8495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.711790][ T8495] vfs_read+0x1a5/0x770 [ 140.711816][ T8495] ? __rcu_read_unlock+0x4f/0x70 [ 140.711966][ T8495] ? __fget_files+0x184/0x1c0 [ 140.712001][ T8495] ksys_read+0xda/0x1a0 [ 140.712031][ T8495] __x64_sys_read+0x40/0x50 [ 140.712056][ T8495] x64_sys_call+0x27c0/0x3000 [ 140.712137][ T8495] do_syscall_64+0xd2/0x200 [ 140.712167][ T8495] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.712193][ T8495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 140.712267][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.712295][ T8495] RIP: 0033:0x7f754d8ad8dc [ 140.712314][ T8495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.712332][ T8495] RSP: 002b:00007f754c30f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.712356][ T8495] RAX: ffffffffffffffda RBX: 00007f754db05fa0 RCX: 00007f754d8ad8dc [ 140.712371][ T8495] RDX: 000000000000000f RSI: 00007f754c30f0a0 RDI: 0000000000000005 [ 140.712387][ T8495] RBP: 00007f754c30f090 R08: 0000000000000000 R09: 0000000000000000 [ 140.712402][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.712416][ T8495] R13: 00007f754db06038 R14: 00007f754db05fa0 R15: 00007ffcc1ea7e78 [ 140.712435][ T8495] [ 141.104744][ T8516] FAULT_INJECTION: forcing a failure. [ 141.104744][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.117948][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.1.1853 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.117992][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.118004][ T8516] Call Trace: [ 141.118011][ T8516] [ 141.118019][ T8516] __dump_stack+0x1d/0x30 [ 141.118045][ T8516] dump_stack_lvl+0xe8/0x140 [ 141.118069][ T8516] dump_stack+0x15/0x1b [ 141.118089][ T8516] should_fail_ex+0x265/0x280 [ 141.118147][ T8516] should_fail+0xb/0x20 [ 141.118179][ T8516] should_fail_usercopy+0x1a/0x20 [ 141.118204][ T8516] _copy_from_user+0x1c/0xb0 [ 141.118235][ T8516] ___sys_sendmsg+0xc1/0x1d0 [ 141.118376][ T8516] __x64_sys_sendmsg+0xd4/0x160 [ 141.118426][ T8516] x64_sys_call+0x191e/0x3000 [ 141.118454][ T8516] do_syscall_64+0xd2/0x200 [ 141.118483][ T8516] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.118518][ T8516] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.118605][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.118631][ T8516] RIP: 0033:0x7f754d8aeec9 [ 141.118651][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.118700][ T8516] RSP: 002b:00007f754c30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.118724][ T8516] RAX: ffffffffffffffda RBX: 00007f754db05fa0 RCX: 00007f754d8aeec9 [ 141.118763][ T8516] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 141.118777][ T8516] RBP: 00007f754c30f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.118862][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.118878][ T8516] R13: 00007f754db06038 R14: 00007f754db05fa0 R15: 00007ffcc1ea7e78 [ 141.118902][ T8516] [ 141.422259][ T8529] Unsupported ieee802154 address type: 0 [ 141.427592][ T8529] siw: device registration error -23 [ 141.782233][ T8550] syz_tun: entered allmulticast mode [ 141.846839][ T8557] Unsupported ieee802154 address type: 0 [ 141.856932][ T8557] siw: device registration error -23 [ 142.267735][ T8580] loop2: detected capacity change from 0 to 1024 [ 142.274803][ T8580] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 142.385894][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.394541][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.595025][ T8555] syz_tun: left allmulticast mode [ 143.016847][ T8601] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 143.020851][ T8601] team0: Port device dummy0 added [ 143.022177][ T8601] netlink: 'syz.0.1886': attribute type 10 has an invalid length. [ 143.032629][ T8601] team0: Port device dummy0 removed [ 143.035817][ T8601] dummy0: entered promiscuous mode [ 143.036221][ T8601] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 143.521107][ T8619] __nla_validate_parse: 6 callbacks suppressed [ 143.521126][ T8619] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1893'. [ 143.578926][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 143.798380][ T8631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.923829][ T8631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.077423][ T8631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.124366][ T8638] loop2: detected capacity change from 0 to 1024 [ 144.140166][ T8638] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 144.309569][ T8648] netlink: 'syz.0.1905': attribute type 10 has an invalid length. [ 144.394753][ T8631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.603721][ T3829] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.615991][ T3829] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.629941][ T3829] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.633704][ T3829] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.684215][ T8664] netlink: 'syz.1.1907': attribute type 10 has an invalid length. [ 144.813876][ T8664] wg2: entered promiscuous mode [ 144.813934][ T8664] wg2: entered allmulticast mode [ 144.858282][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 144.858300][ T29] audit: type=1326 audit(1759863196.854:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.858339][ T29] audit: type=1326 audit(1759863196.854:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.858376][ T29] audit: type=1326 audit(1759863196.854:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.860029][ T29] audit: type=1326 audit(1759863196.864:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.860068][ T29] audit: type=1326 audit(1759863196.864:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.860352][ T29] audit: type=1326 audit(1759863196.864:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.860712][ T29] audit: type=1326 audit(1759863196.864:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.860745][ T29] audit: type=1326 audit(1759863196.864:11143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.861146][ T29] audit: type=1326 audit(1759863196.864:11144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 144.861253][ T29] audit: type=1326 audit(1759863196.864:11145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c64ceec9 code=0x7ffc0000 [ 145.148976][ T8678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.285086][ T8701] loop2: detected capacity change from 0 to 1024 [ 145.296550][ T8701] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 145.518481][ T8708] Unsupported ieee802154 address type: 0 [ 145.601779][ T8708] siw: device registration error -23 [ 145.631933][ T8710] FAULT_INJECTION: forcing a failure. [ 145.631933][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 145.631969][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.1.1924 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.632003][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.632020][ T8710] Call Trace: [ 145.632028][ T8710] [ 145.632037][ T8710] __dump_stack+0x1d/0x30 [ 145.632116][ T8710] dump_stack_lvl+0xe8/0x140 [ 145.632141][ T8710] dump_stack+0x15/0x1b [ 145.632162][ T8710] should_fail_ex+0x265/0x280 [ 145.632232][ T8710] should_failslab+0x8c/0xb0 [ 145.632274][ T8710] kmem_cache_alloc_noprof+0x50/0x480 [ 145.632388][ T8710] ? getname_flags+0x80/0x3b0 [ 145.632425][ T8710] getname_flags+0x80/0x3b0 [ 145.632483][ T8710] user_path_at+0x28/0x130 [ 145.632566][ T8710] do_fchmodat+0x9c/0x180 [ 145.632641][ T8710] __x64_sys_fchmodat+0x42/0x50 [ 145.632750][ T8710] x64_sys_call+0x2891/0x3000 [ 145.632811][ T8710] do_syscall_64+0xd2/0x200 [ 145.632960][ T8710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.632993][ T8710] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.633039][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.633115][ T8710] RIP: 0033:0x7f754d8aeec9 [ 145.633135][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.633154][ T8710] RSP: 002b:00007f754c30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 145.633194][ T8710] RAX: ffffffffffffffda RBX: 00007f754db05fa0 RCX: 00007f754d8aeec9 [ 145.633211][ T8710] RDX: 00000000ffffffd3 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 145.633227][ T8710] RBP: 00007f754c30f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.633243][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.633266][ T8710] R13: 00007f754db06038 R14: 00007f754db05fa0 R15: 00007ffcc1ea7e78 [ 145.633296][ T8710] [ 145.842563][ T8719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.021951][ T8731] FAULT_INJECTION: forcing a failure. [ 146.021951][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 146.021981][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.1.1933 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.022130][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.022146][ T8731] Call Trace: [ 146.022155][ T8731] [ 146.022165][ T8731] __dump_stack+0x1d/0x30 [ 146.022224][ T8731] dump_stack_lvl+0xe8/0x140 [ 146.022249][ T8731] dump_stack+0x15/0x1b [ 146.022284][ T8731] should_fail_ex+0x265/0x280 [ 146.022327][ T8731] should_failslab+0x8c/0xb0 [ 146.022429][ T8731] kmem_cache_alloc_noprof+0x50/0x480 [ 146.022463][ T8731] ? audit_log_start+0x342/0x720 [ 146.022483][ T8731] audit_log_start+0x342/0x720 [ 146.022502][ T8731] ? kstrtouint+0x76/0xc0 [ 146.022639][ T8731] audit_seccomp+0x48/0x100 [ 146.022677][ T8731] ? __seccomp_filter+0x82d/0x1250 [ 146.022711][ T8731] __seccomp_filter+0x83e/0x1250 [ 146.022746][ T8731] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.022788][ T8731] ? vfs_write+0x7e8/0x960 [ 146.022893][ T8731] ? __rcu_read_unlock+0x4f/0x70 [ 146.022918][ T8731] ? __fget_files+0x184/0x1c0 [ 146.022999][ T8731] __secure_computing+0x82/0x150 [ 146.023032][ T8731] syscall_trace_enter+0xcf/0x1e0 [ 146.023067][ T8731] do_syscall_64+0xac/0x200 [ 146.023110][ T8731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.023145][ T8731] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.023281][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.023307][ T8731] RIP: 0033:0x7f754d8aeec9 [ 146.023323][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.023420][ T8731] RSP: 002b:00007f754c30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 146.023447][ T8731] RAX: ffffffffffffffda RBX: 00007f754db05fa0 RCX: 00007f754d8aeec9 [ 146.023464][ T8731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 146.023519][ T8731] RBP: 00007f754c30f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.023535][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.023552][ T8731] R13: 00007f754db06038 R14: 00007f754db05fa0 R15: 00007ffcc1ea7e78 [ 146.023576][ T8731] [ 146.251724][ T8739] FAULT_INJECTION: forcing a failure. [ 146.251724][ T8739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.251756][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.3.1935 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.251782][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.251796][ T8739] Call Trace: [ 146.251804][ T8739] [ 146.251812][ T8739] __dump_stack+0x1d/0x30 [ 146.251854][ T8739] dump_stack_lvl+0xe8/0x140 [ 146.251950][ T8739] dump_stack+0x15/0x1b [ 146.251971][ T8739] should_fail_ex+0x265/0x280 [ 146.252012][ T8739] should_fail+0xb/0x20 [ 146.252049][ T8739] should_fail_usercopy+0x1a/0x20 [ 146.252091][ T8739] _copy_from_user+0x1c/0xb0 [ 146.252192][ T8739] __sys_connect+0xd0/0x2b0 [ 146.252259][ T8739] __x64_sys_connect+0x3f/0x50 [ 146.252283][ T8739] x64_sys_call+0x2c0c/0x3000 [ 146.252341][ T8739] do_syscall_64+0xd2/0x200 [ 146.252365][ T8739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.252395][ T8739] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.252456][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.252510][ T8739] RIP: 0033:0x7f09c64ceec9 [ 146.252525][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.252545][ T8739] RSP: 002b:00007f09c4f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 146.252566][ T8739] RAX: ffffffffffffffda RBX: 00007f09c6725fa0 RCX: 00007f09c64ceec9 [ 146.252633][ T8739] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 146.252646][ T8739] RBP: 00007f09c4f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.252659][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.252671][ T8739] R13: 00007f09c6726038 R14: 00007f09c6725fa0 R15: 00007ffe8b2d72b8 [ 146.252691][ T8739] [ 146.750313][ T8750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.156743][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 148.015962][ T8795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.245211][ T8814] loop7: detected capacity change from 0 to 7 [ 148.258258][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.258307][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1960'. [ 148.267444][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.287961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.297198][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.313965][ T8814] loop7: unable to read partition table [ 148.319912][ T8814] loop_reread_partitions: partition scan of loop7 ( [ 148.319912][ T8814] ) failed (rc=-5) [ 148.375912][ T8822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.501897][ T8835] Unsupported ieee802154 address type: 0 [ 148.530634][ T8835] siw: device registration error -23 [ 148.875774][ T8854] netlink: 'syz.4.1975': attribute type 13 has an invalid length. [ 149.158591][ T3790] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.178297][ T3790] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.194502][ T3790] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.213779][ T3790] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.273604][ T8863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.509340][ T8869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 149.516037][ T8869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.523696][ T8869] vhci_hcd vhci_hcd.0: Device attached [ 149.531637][ T8873] usbip_core: unknown command [ 149.536381][ T8873] vhci_hcd: unknown pdu 2844066640 [ 149.541586][ T8873] usbip_core: unknown command [ 149.551496][ T3860] vhci_hcd: stop threads [ 149.555793][ T3860] vhci_hcd: release socket [ 149.560360][ T3860] vhci_hcd: disconnect device [ 149.653961][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1984'. [ 149.689598][ T8891] can0: slcan on ttyS3. [ 149.723433][ T8898] Unsupported ieee802154 address type: 0 [ 149.729466][ T8891] can0 (unregistered): slcan off ttyS3. [ 149.735262][ T8891] Falling back ldisc for ttyS3. [ 149.762363][ T8898] siw: device registration error -23 [ 149.799352][ T8902] $Hÿ: (slave dummy0): Releasing backup interface [ 149.806248][ T8902] dummy0: left promiscuous mode [ 149.822144][ T8902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.084739][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 150.084754][ T29] audit: type=1326 audit(1759863202.084:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.114715][ T29] audit: type=1326 audit(1759863202.084:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.138393][ T29] audit: type=1326 audit(1759863202.084:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.162023][ T29] audit: type=1326 audit(1759863202.084:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.185660][ T29] audit: type=1326 audit(1759863202.084:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 150.209388][ T29] audit: type=1326 audit(1759863202.084:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 150.232981][ T29] audit: type=1326 audit(1759863202.094:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.256554][ T29] audit: type=1326 audit(1759863202.094:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 150.280113][ T29] audit: type=1326 audit(1759863202.094:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.303666][ T29] audit: type=1326 audit(1759863202.094:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 150.506161][ T8916] Unsupported ieee802154 address type: 0 [ 150.531352][ T8916] siw: device registration error -23 [ 150.759111][ T8934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.790782][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2004'. [ 151.553756][ T8967] loop2: detected capacity change from 0 to 1024 [ 151.554473][ T8967] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.575297][ T8967] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2014: Invalid block bitmap block 0 in block_group 0 [ 151.589322][ T8967] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2014: Failed to acquire dquot type 0 [ 151.589587][ T8967] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2014: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.589761][ T8967] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2014: Invalid inode bitmap blk 0 in block_group 0 [ 151.589878][ T8967] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 151.589954][ T8967] EXT4-fs (loop2): 1 orphan inode deleted [ 151.590421][ T8967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.605049][ T3806] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 0 [ 151.606011][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.733696][ T8974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.776661][ T8979] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 152.147984][ T8985] wg2: entered promiscuous mode [ 152.152908][ T8985] wg2: entered allmulticast mode [ 152.749698][ T9000] Unsupported ieee802154 address type: 0 [ 152.882840][ T9000] siw: device registration error -23 [ 152.932087][ T9008] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.932164][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.932189][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.954031][ T9008] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.954153][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.954182][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.987488][ T9008] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2028'. [ 152.987580][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2028'. [ 153.051616][ T9016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.161949][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.170640][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.702783][ T9034] Unsupported ieee802154 address type: 0 [ 153.733601][ T9034] siw: device registration error -23 [ 153.766743][ T9038] can0: slcan on ttyS3. [ 153.798198][ T9038] can0 (unregistered): slcan off ttyS3. [ 153.800968][ T9040] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.804175][ T9038] Falling back ldisc for ttyS3. [ 153.845701][ T9043] Unsupported ieee802154 address type: 0 [ 154.156347][ T9062] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 154.832864][ T9075] Unsupported ieee802154 address type: 0 [ 154.875930][ T9073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.229271][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 155.229289][ T29] audit: type=1326 audit(1759863207.234:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.259066][ T29] audit: type=1326 audit(1759863207.234:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342510][ T29] audit: type=1326 audit(1759863207.234:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342552][ T29] audit: type=1326 audit(1759863207.234:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342649][ T29] audit: type=1326 audit(1759863207.234:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342679][ T29] audit: type=1326 audit(1759863207.284:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe665cfd710 code=0x7ffc0000 [ 155.342733][ T29] audit: type=1326 audit(1759863207.284:11754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe665cfd710 code=0x7ffc0000 [ 155.342762][ T29] audit: type=1326 audit(1759863207.284:11755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342790][ T29] audit: type=1326 audit(1759863207.284:11756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe665cfeec9 code=0x7ffc0000 [ 155.342895][ T29] audit: type=1326 audit(1759863207.284:11757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe665cfd710 code=0x7ffc0000 [ 155.496452][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.496514][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.729007][ T9102] Unsupported ieee802154 address type: 0 [ 155.927880][ T9108] __nla_validate_parse: 1 callbacks suppressed [ 155.934235][ T9108] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2067'. [ 155.943798][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 155.952827][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 155.987362][ T9108] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2067'. [ 155.998817][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.005423][ T9107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.007990][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.083724][ T9118] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 156.118125][ T9108] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.127064][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.136057][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.397527][ T9136] Unsupported ieee802154 address type: 0 [ 156.462632][ T9136] siw: device registration error -23 [ 156.546990][ T9153] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2085'. [ 156.550500][ T9147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.283039][ T9180] Unsupported ieee802154 address type: 0 [ 157.317418][ T9180] siw: device registration error -23 [ 157.352215][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.369485][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.913759][ T9186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.183009][ T9197] netlink: 'syz.3.2101': attribute type 10 has an invalid length. [ 158.303269][ T9202] loop2: detected capacity change from 0 to 256 [ 158.318581][ T9205] wg2: entered promiscuous mode [ 158.323546][ T9205] wg2: entered allmulticast mode [ 158.341868][ T9202] FAT-fs (loop2): Directory bread(block 64) failed [ 158.358078][ T9202] FAT-fs (loop2): Directory bread(block 65) failed [ 158.378177][ T9202] FAT-fs (loop2): Directory bread(block 66) failed [ 158.384825][ T9202] FAT-fs (loop2): Directory bread(block 67) failed [ 158.418074][ T9202] FAT-fs (loop2): Directory bread(block 68) failed [ 158.437995][ T9202] FAT-fs (loop2): Directory bread(block 69) failed [ 158.444589][ T9202] FAT-fs (loop2): Directory bread(block 70) failed [ 158.468508][ T9202] FAT-fs (loop2): Directory bread(block 71) failed [ 158.493861][ T9202] FAT-fs (loop2): Directory bread(block 72) failed [ 158.517189][ T9202] FAT-fs (loop2): Directory bread(block 73) failed [ 158.829441][ T9219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.286819][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.295508][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.450073][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.458698][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.038396][ T9250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.244980][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 160.245006][ T29] audit: type=1326 audit(1759863212.244:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.274715][ T29] audit: type=1326 audit(1759863212.244:12035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.274750][ T29] audit: type=1326 audit(1759863212.244:12036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275210][ T29] audit: type=1326 audit(1759863212.284:12037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275250][ T29] audit: type=1326 audit(1759863212.284:12038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275347][ T29] audit: type=1326 audit(1759863212.284:12039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275836][ T29] audit: type=1326 audit(1759863212.284:12040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275889][ T29] audit: type=1326 audit(1759863212.284:12041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.275926][ T29] audit: type=1326 audit(1759863212.284:12042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.282171][ T29] audit: type=1326 audit(1759863212.284:12043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 160.407121][ T9258] Unsupported ieee802154 address type: 0 [ 160.515923][ T9262] Unsupported ieee802154 address type: 0 [ 160.526424][ T9258] siw: device registration error -23 [ 160.564467][ T9262] siw: device registration error -23 [ 160.768817][ T9278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.994936][ T9289] Unsupported ieee802154 address type: 0 [ 161.023028][ T9289] siw: device registration error -23 [ 161.032055][ T9293] netlink: 'syz.3.2137': attribute type 10 has an invalid length. [ 161.901065][ T9322] Unsupported ieee802154 address type: 0 [ 162.047851][ T9339] Unsupported ieee802154 address type: 0 [ 162.087112][ T9339] siw: device registration error -23 [ 162.319010][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.327631][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.384878][ T9345] netlink: 'syz.4.2158': attribute type 10 has an invalid length. [ 162.536948][ T9349] can0: slcan on ttyS3. [ 162.588167][ T9349] can0 (unregistered): slcan off ttyS3. [ 162.594185][ T9349] Falling back ldisc for ttyS3. [ 162.620859][ T9352] Unsupported ieee802154 address type: 0 [ 162.645805][ T9352] siw: device registration error -23 [ 162.930412][ T9361] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 163.594443][ T9372] Unsupported ieee802154 address type: 0 [ 163.620604][ T9372] siw: device registration error -23 [ 163.721363][ T9380] Unsupported ieee802154 address type: 0 [ 163.764860][ T9380] siw: device registration error -23 [ 163.775319][ T9385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.783964][ T9385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.409952][ T9399] Unsupported ieee802154 address type: 0 [ 164.629185][ T9405] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.792897][ T9424] Unsupported ieee802154 address type: 0 [ 164.823620][ T9424] siw: device registration error -23 [ 164.827672][ T9426] netlink: 'syz.3.2189': attribute type 13 has an invalid length. [ 164.913690][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.932970][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.114172][ T3398] lo speed is unknown, defaulting to 1000 [ 165.114844][ T3802] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.120147][ T3398] syz0: Port: 1 Link DOWN [ 165.148000][ T3802] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.166730][ T3802] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.178065][ T3802] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.224941][ T9458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.537425][ T9464] loop2: detected capacity change from 0 to 1024 [ 165.549828][ T9464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.562126][ T9464] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.582401][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 165.582495][ T29] audit: type=1326 audit(1759863217.584:12361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.612352][ T29] audit: type=1326 audit(1759863217.594:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.635936][ T29] audit: type=1326 audit(1759863217.594:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.659522][ T29] audit: type=1326 audit(1759863217.594:12364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.683093][ T29] audit: type=1326 audit(1759863217.594:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 165.706728][ T29] audit: type=1326 audit(1759863217.594:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 165.730282][ T29] audit: type=1326 audit(1759863217.594:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.753842][ T29] audit: type=1326 audit(1759863217.594:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.777377][ T29] audit: type=1326 audit(1759863217.594:12369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754d8ad710 code=0x7ffc0000 [ 165.783585][ T9474] Unsupported ieee802154 address type: 0 [ 165.800925][ T29] audit: type=1326 audit(1759863217.594:12370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.1.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d8aeec9 code=0x7ffc0000 [ 165.825684][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.831589][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.848498][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.913293][ T9474] siw: device registration error -23 [ 166.473760][ T9489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.596944][ T9496] netlink: 'syz.3.2207': attribute type 13 has an invalid length. [ 166.781680][ T9505] syz_tun: entered allmulticast mode [ 167.138504][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.154235][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.614151][ T9506] syz_tun: left allmulticast mode [ 167.731869][ T9524] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.753467][ T9527] loop2: detected capacity change from 0 to 1024 [ 167.779555][ T9527] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 168.002454][ T9542] Unsupported ieee802154 address type: 0 [ 168.026620][ T9542] siw: device registration error -23 [ 168.066762][ T9548] syz_tun: entered allmulticast mode [ 168.168220][ T9551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.415531][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.434418][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.897674][ T9549] syz_tun: left allmulticast mode [ 168.940183][ T9560] can0: slcan on ttyS3. [ 168.977997][ T9560] can0 (unregistered): slcan off ttyS3. [ 168.983740][ T9560] Falling back ldisc for ttyS3. [ 169.493912][ T9584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.554916][ T9587] Unsupported ieee802154 address type: 0 [ 169.745996][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.754683][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.311729][ T9612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.543437][ T9618] Unsupported ieee802154 address type: 0 [ 170.565416][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.589223][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.723823][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 170.723839][ T29] audit: type=1326 audit(1759863222.724:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.754204][ T29] audit: type=1326 audit(1759863222.754:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.779544][ T29] audit: type=1326 audit(1759863222.774:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.803195][ T29] audit: type=1326 audit(1759863222.784:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.826766][ T29] audit: type=1326 audit(1759863222.784:12694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.850286][ T29] audit: type=1326 audit(1759863222.784:12695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.873925][ T29] audit: type=1326 audit(1759863222.784:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.897334][ T29] audit: type=1326 audit(1759863222.784:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.920846][ T29] audit: type=1326 audit(1759863222.784:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 170.944440][ T29] audit: type=1326 audit(1759863222.784:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.4.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638aeaeec9 code=0x7ffc0000 [ 171.356388][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.365048][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.512249][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.521167][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.890215][ T9639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.952080][ T9647] __nla_validate_parse: 8 callbacks suppressed [ 171.952093][ T9647] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2267'. [ 171.967760][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 171.976911][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 171.987740][ T9648] netlink: 'syz.3.2264': attribute type 13 has an invalid length. [ 172.007593][ T9647] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.016900][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.026027][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.068592][ T9647] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.077792][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.086828][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2267'. [ 172.143798][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.143871][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.235891][ T9668] netlink: 'syz.0.2273': attribute type 13 has an invalid length. [ 172.348593][ T3830] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.348736][ T3830] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.348776][ T3830] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.348814][ T3830] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.784035][ T9675] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2275'. [ 172.843834][ T9680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.121478][ T9698] netlink: 'syz.0.2284': attribute type 10 has an invalid length. [ 173.184874][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.193635][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.244177][ T9702] loop2: detected capacity change from 0 to 1024 [ 173.259835][ T9702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.272066][ T9702] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.297989][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.538631][ T9709] can0: slcan on ttyS3. [ 173.578216][ T9709] can0 (unregistered): slcan off ttyS3. [ 173.584094][ T9709] Falling back ldisc for ttyS3. [ 174.213258][ T9737] loop2: detected capacity change from 0 to 1024 [ 174.229547][ T9737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.241861][ T9737] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.264525][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.222021][ T9792] can0: slcan on ttyS3. [ 175.268052][ T9792] can0 (unregistered): slcan off ttyS3. [ 175.278911][ T9792] Falling back ldisc for ttyS3. [ 175.325066][ T9798] loop2: detected capacity change from 0 to 1024 [ 175.448735][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.458279][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.568520][ T9798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.582801][ T9798] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.616965][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.861530][ T29] kauditd_printk_skb: 2743 callbacks suppressed [ 175.861604][ T29] audit: type=1326 audit(1759863227.864:15443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 175.891462][ T29] audit: type=1326 audit(1759863227.864:15444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.117270][ T9830] netlink: 'syz.4.2331': attribute type 10 has an invalid length. [ 176.459993][ T29] audit: type=1326 audit(1759863228.464:15445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.483650][ T29] audit: type=1326 audit(1759863228.464:15446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.507264][ T29] audit: type=1326 audit(1759863228.464:15447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.530861][ T29] audit: type=1326 audit(1759863228.464:15448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.554373][ T29] audit: type=1326 audit(1759863228.464:15449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7d8cd710 code=0x7ffc0000 [ 176.577912][ T29] audit: type=1326 audit(1759863228.464:15450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7d8cd710 code=0x7ffc0000 [ 176.601408][ T29] audit: type=1326 audit(1759863228.464:15451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7d8ceec9 code=0x7ffc0000 [ 176.624965][ T29] audit: type=1326 audit(1759863228.464:15452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7d8cd710 code=0x7ffc0000 [ 176.671579][ T9854] Unsupported ieee802154 address type: 0 [ 176.689695][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.700557][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.732752][ T9858] loop2: detected capacity change from 0 to 1024 [ 176.740839][ T9858] EXT4-fs: test_dummy_encryption option not supported [ 177.744105][ T9889] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 177.801618][ T9893] loop2: detected capacity change from 0 to 1024 [ 177.840750][ T9893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.857779][ T9893] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.885410][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.929304][ T9902] loop2: detected capacity change from 0 to 1024 [ 177.936214][ T9902] EXT4-fs: test_dummy_encryption option not supported [ 178.082683][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.096689][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.756472][ T9926] netlink: 'syz.4.2369': attribute type 10 has an invalid length. [ 178.998605][ T9935] __nla_validate_parse: 44 callbacks suppressed [ 178.998627][ T9935] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.014193][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.023208][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.042267][ T9935] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.051455][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.060511][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.087896][ T9935] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.097024][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.106146][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2372'. [ 179.244745][ T9947] loop2: detected capacity change from 0 to 256 [ 179.262626][ T9949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2377'. [ 179.287642][ T9947] FAT-fs (loop2): Directory bread(block 64) failed [ 179.305208][ T9947] FAT-fs (loop2): Directory bread(block 65) failed [ 179.312046][ T9947] FAT-fs (loop2): Directory bread(block 66) failed [ 179.319091][ T9947] FAT-fs (loop2): Directory bread(block 67) failed [ 179.325729][ T9947] FAT-fs (loop2): Directory bread(block 68) failed [ 179.332809][ T9947] FAT-fs (loop2): Directory bread(block 69) failed [ 179.339950][ T9947] FAT-fs (loop2): Directory bread(block 70) failed [ 179.346988][ T9947] FAT-fs (loop2): Directory bread(block 71) failed [ 179.355659][ T9947] FAT-fs (loop2): Directory bread(block 72) failed [ 179.362361][ T9947] FAT-fs (loop2): Directory bread(block 73) failed [ 179.526946][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.535652][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.637963][ C0] ================================================================== [ 179.646102][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 179.653348][ C0] [ 179.655681][ C0] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 1: [ 179.663747][ C0] wq_worker_tick+0x60/0x230 [ 179.668345][ C0] sched_tick+0x11a/0x270 [ 179.672685][ C0] update_process_times+0x15f/0x190 [ 179.677891][ C0] tick_nohz_handler+0x249/0x2d0 [ 179.682847][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 179.688056][ C0] hrtimer_interrupt+0x21a/0x460 [ 179.693016][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 179.698926][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 179.704582][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.710568][ C0] _raw_spin_unlock_irq+0x2f/0x50 [ 179.715605][ C0] process_scheduled_works+0x486/0x9d0 [ 179.721369][ C0] worker_thread+0x582/0x770 [ 179.725963][ C0] kthread+0x489/0x510 [ 179.730038][ C0] ret_from_fork+0x122/0x1b0 [ 179.734639][ C0] ret_from_fork_asm+0x1a/0x30 [ 179.739413][ C0] [ 179.741734][ C0] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 0: [ 179.749887][ C0] wq_worker_tick+0x60/0x230 [ 179.754490][ C0] sched_tick+0x11a/0x270 [ 179.758829][ C0] update_process_times+0x15f/0x190 [ 179.764032][ C0] tick_nohz_handler+0x249/0x2d0 [ 179.768991][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 179.774231][ C0] hrtimer_interrupt+0x21a/0x460 [ 179.779181][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 179.785091][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 179.790748][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.796734][ C0] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 179.802381][ C0] tty_insert_flip_string_and_push_buffer+0x1aa/0x1f0 [ 179.809155][ C0] pty_write+0x70/0x90 [ 179.813242][ C0] tty_put_char+0x8f/0xc0 [ 179.817580][ C0] __process_echoes+0x309/0x6b0 [ 179.822442][ C0] n_tty_receive_buf_common+0x8e4/0xbe0 [ 179.828005][ C0] n_tty_receive_buf2+0x33/0x40 [ 179.832867][ C0] tty_ldisc_receive_buf+0x66/0xf0 [ 179.838005][ C0] tty_port_default_receive_buf+0x59/0x90 [ 179.843738][ C0] flush_to_ldisc+0x148/0x340 [ 179.848422][ C0] process_scheduled_works+0x4ce/0x9d0 [ 179.853910][ C0] worker_thread+0x582/0x770 [ 179.858515][ C0] kthread+0x489/0x510 [ 179.862592][ C0] ret_from_fork+0x122/0x1b0 [ 179.867187][ C0] ret_from_fork_asm+0x1a/0x30 [ 179.871958][ C0] [ 179.874290][ C0] value changed: 0x000000000092f130 -> 0x0000000000931840 [ 179.881399][ C0] [ 179.883725][ C0] Reported by Kernel Concurrency Sanitizer on: [ 179.889874][ C0] CPU: 0 UID: 0 PID: 3800 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.899859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.909919][ C0] Workqueue: events_unbound flush_to_ldisc [ 179.915741][ C0] ==================================================================