last executing test programs: 2m13.129831745s ago: executing program 4 (id=3874): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 2m13.031850117s ago: executing program 4 (id=3875): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, 0x0, 0x894) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x80480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x14a0, 0x13, 0x200, 0x70bd2b, 0x25dfdbfe, {0x8, 0x2, 0x81, 0x7, {0x4e24, 0x4e22, [0x5, 0xffffffc0, 0x2, 0x80000001], [0x1, 0x80, 0x8, 0x8000], 0x0, [0xffffffff]}, 0x3, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "659fd62c0aad764b87514892c8df1b03995836d3abe023943462293829d0a5b7884b403c16a598cb71c15648c07fb928569eb2b323120396e184258757f34470159a8a556a3ad9b2e0884b5d76c1fc3574c14a67568943b60283634068e7a4e815a5dd68bdaef6400d414009577b0b24d82d33cefa390c90d8413519e9"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "1f31cb3df286"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "2402f62ff5f89d8426089979df05102d46567efaa831441a03b02269dabe8df2333c929a7bf0208809f28b2e20cab2772dbced7e0a64d2ba547751888bdc"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "744a48a0f00798117e26e13681db4709c6af0cee4f857f5f3f27f37dcfd2ca2af4e03caf215a9859ad82ab2f7f927a1883d952849e2e5b65e844c8e06ce499370050e79e3ef49b8521e49ef8f2f077762258a8ba914ce06fbb9b479f9c829a80e8579f393aece38464d6f37158f483cb3fbfc0b8f9d83b3f3b3f5c2168509461623748a45badea0ced0c50fe13a190036280fc212330bccf81fb5a242d7db3ca348da91f036fe963683d169356deb7be19f8955a73e040e0628bf0715f29a41c86c47cec3cddc6d36955f222a8b718dea40e379d8f1704b7f465ec2a0ccdd40bb26c599e9e0fecfa17f865aac992f9dd5262b7"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "2997f811cc508d23ef2dba3c9e7b1b37a3cb0988848c25fe32d3922feb1210566a497fe89ede746d8743c2d758e0199c728e0fd7c9ca990d57b58b6a7dc2667491668b638c7fa5ca294b52730fd2e7af66b16b69110d0284eeb58f971e26e450fa25bf3616de08ec529d95055aa130f113794c4eaf9911c5614a6401f78b39c675aec0109a9cc381e0196fa28508e9511da2d9860827c06b10ad942badf67cd5cd2853986bd763ae42a49055855af5f952a012ac79bdf0e0d9257491c5c53224e7f63fe9f5906be12cfb2b3cf805c73856cf6086f9b4f986c09d2eccc42923492a51289669027f342d52ee9f137a4520db0ad5"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "629aabdf50f65293048983f7c6c8d78b6e4836b8562eae2aa95a3dd2d26fbeee2d1f416524bc924ce1ef0c7eb4811d9cb7f99ac865f21567988fd6669987a6b1a24773fac1bad82964c14b6a64458a2ddfbf7ef6ace33027089347510b89099d"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "c3b80682ca9505814ccd8fa5963030a50b3231a79a7d20a4b7f941ec1a84bae158e491481f19da8df202106cbf995038bb71a42d538ab21f9cd465b89dfeebf02e19fd0fbd203f281153aeec89c632186174c51a4310e2fabb57fd35dd36"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "9547f9a64780126060754a290817594f336cc0d02aa2e4f50377374007947737b11a5b1631cf64f9dcb7d1172f992964ca276c6400314e751f5ce3fc40"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "dfca728066099543b93368265b673bb5e0c16ce5e2297698b9b99e9b0983e1ee58343ada69fd07388d11856e89a7245c5890553946109f805a580292a55daa724bf3005040575ff4d9b33dd42e544547b6a8428c57e093bc9f0dc81f1a5f98de2e783758203e45e1cf018ec18f0656ba03b4205fbe91a940861054b2"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "fbbb1844fb9e5653e6f36812e9b2e7e4a88e7be981ffc5c921fc08bad22f7d49e826d8c770e59a56df846720cb22c416c7e3450bb0ab82128734fb302118cf4d59ec02907f67e6290a8d3fed2e59bf0792e51457ebae109fb7d869e9cf3042b04412877a0b61885ea96efe3fd8dbc626de6390a6d234a7e458ecc2d0a28a1ba7a5c1a4fb7951dc4ee18dadb110e45db9f0e7112ccec767a02aa81050f8a6970dbc9821da2e3ed11088ff210338db7419d268a62e272a82b863ad05f2a9a49186e343d85a8be4a03663d7d25708e73cac569afb20a756466cb8c658261b0e1e42168ac21037c16bcab7225cec31089c1ca65799866302731be27ece0dbad8d89f6b19f987f79c56eda9e48880e000993fce432e1206b57680b8a83fd3762e3c15c4670c72956530ecd2b44359c55b391a2c88f19e5fcea9525d624efc254d6f91a56c79763b56b7b4442fce7951c5d0c88e4507874a61bfcaba52ac58c7bb4bc118fea4ada824698143e52bf49cefcc1615fcaf8566fc8fa25cb82b1f7f00ed19d5caed57d9ea961baa7230d2b39c4672a4db9fdbf090e21d3f1f22f4aab62bddcc50478776f8d07ff979db7d11c8d13af1b29c99126f456588c0b03c5e4e0c447dcb455e003e5a1be1c8772d5f0da4c2d45862353d87251b369b2ac5d4e8b2af2cbda490636089af93132e93dcfccf8b28f9b339a9f17b0a65c0a63edb8a3cd7f71054a0bff113f88a6c25f36913692dd8b12a980751f558804e4133f32bf4998f0f9a8e07e069b355e6fc841a2cd77fa11c48a02f3573f90bec14dc37f3d470724dc6377f2ecf3814ec69a5b728018ff064fe23b6c1660c665d75486cdef1cb84a78a0225a1b4a6be2365960baea0f35094e826ad6dee8a7d4c9ffd231a38b43deec3206b00526f26c3d9f7424317b4fc1bd59d025cfd1d4fa6a352ea82e99f5fa66b1e42d6b9ecab7f0c504d69bebec3e1a83235869788576363abad5479154c792ca7fa9acdefd3860089172475eba80e721792a722b208a49819b77bb549847953dc861ad606a8e34c3aa931a2a2963ee97258cb01b357a464273973098c244ad3e2787a01040987c3de194fa30e3f9e3e7bca41a976a5905fce97fa994c71b10cb67ca887593052a64a1b2fd84b348b3042e44e4c217aad0c1892396fed09642c80629aff2a1c67d846e4d4107bc70bd42a39f24ab2b6e2fa237e90c86ca9eaebf5c00caf0ff0efde5549061ec00fb3ba91b89b226c4efdf7dbc448c4645a5d077e8cde5ac03fc1a564595d34653d2e8c23ee1453b0d175c0fe45b1d5bd21769111f3ba11414d1e1ff418ba4a78e5662eb67f01a1743f58d7d30b982bd7bd678f50579f08db6d8257009a7a6a8e12fcfe92a4893c29a8ffa6808a043e4bb695654b0228c3cd2538764bb6feee59242354446c69381626cad8f6f1d50f6ff3ddc5606b294afb2d332175f00aaefb3ec0e3e652bedf8ac4bac3212d269421da84fc3fba255c8b3e1dbdbfdc3cbd6da5d4e6493ea2c3bdf45a177a33cdde0409d81b93a36efee034a940e81462c597e7bd9ed571dda465eac3a6b3d020ab088b1cac931b4debd41fdcd66336e7bda01ed482f346b6652f5e3222d1813ea0aecfaa42c171214f77534b8211089bc76681a3fd36b4ffd765ac549ddd582ecea7b304660b51be4c679d3a1b77274641c5211f9a48d25ac6779fc2678cd30986ce1f7069535734a86098a4eee282ab8b7c6ca58d3dbe452a86270c807b1ad32fa87cd61c6993f7f963ed81f7e8c3a1b93a668c3368a800461273c88a60cda09d4e009042971a2655e395321a2560af94d3509b10fbe702b1a15f90dfcfca6920fa746b68dd801fadb310c444db46a3113c2f4d9c8ee6ddd7642fd737753a918541e7f9b16d6414a86ba14194c1acd5707543f24b745fa522558498d07a5c1eeee9e1bba0164f73e2aeecaea2bf03742feba6c99877d4c5c391657eab6d5ecf342f522a8aff9bce0f9581047c3d015989d439ffec260fbe42c9246064154b7889d1cbad235fd0b429f4cd859a82b269a996b3872e9ffe9b71034a975e9a07efb3ebaf0d155a54826ab6677e18b092f2ca9582d90221ef79a1f75e8f80b32a4710e6d97324191b18066947cd71dad84f386cd708f90a7de7a7cbd9ad7f3c9a995fdab1f79d2622b941933193bda21b181883b42e46c299bc9b943b6d0625be8c87513ae0ec689aefde1e24b6907a4a34f733f673fd0c67bd4956b3b744cee084eec7d195999fb7aaaafc9da522ed7329ebaa653c3d1ed69c2acf3579388697bc4563520853b79da9a14f89a60ec0850b192ca9c4a1f2d42ffda669b0cfcfe697950a70a209529c315002ae223d87a91b3dd9033974c8a15e8c03f0997faf0bdf5e92ad559390950d9e777365497877100f718e6982953d751914b773396ba35d7134b3601a4aece97090df20fb9581c590d2bf32005c10bab2c8e9894f9aef32a1993fc49b73423ef1f542e1a1894ef2ad918ad6a9d819f37db2bee5abca09a7f7eb713d144bc9ca4f4505f425a783dc5e80fa4b407081e831e156981f90aca1e738f41d819ef7411c3439294f88d14a08f3f7c81daaadc475062ba432ab4d79dd740912dc9103612137d7aaa0087099bf545404fe419ffdbd1dc52706f08e1177eb3ba7d358442c80bf01509f98362b8f96fe63033ab94f4b00df6976d829a5058e9711a2221282e30e6bad8b1672f7d3c5570d31f02f749680d9e69878192f5d25d2b5a6d9dd4aca2d44855b2b857b54a185f9caf236b763231043dfa69765faf02c2f7fd2091f2306c259333cdfd34918fe4bd7ef0fb07ad50e8a8e5a65b6f5e2fd4a329c2a204f34cd66c750f37807da992ceaab3285081655a6f6ec01d8c3783fae36798d42e74b3858685d33b23eaa729fdc12e63acd9add648e2d9636c70e8e0fa694f3eb9f985f6f49b28377376911f63f711899387ac3b9dc7acfe231e1661be239c2b32ebdd49c7f0bfb85e6b47d031d5a78aa2cfae457e73aa1cf73704cf12b20fae090eeb082ca2109a6952c1a816a6c15e0c0bb2c07765d24bd7dca76ebcb9e29986d6fb770e3c00d21d8fc01951d0ae05cd896c5b07b6b9a61bfa55bf0ace89ad9713326fcd40ba104dac26110d37d75071900a77c0bf3e8cadea7aad8b0689cd706edca1e0464b1b092a4b5cd21540207c68cb6922819d475ddb9ba089e742060b229f74b123776a38ff81b7112d4fbb7243fce4c16d230520bb5302dbd80b9d1fc7b7b9e1f6efd104952e2c24374efa6579fbe71c40bbba5e7f10b8de9c9fb56cbadbbd9fa10f2260986408f6cb74fa5b48922af0938e52411762dad6a81af098e7b5b65432b6d7d74bbb80ff4fb2c4066eca27f6788b2f27157f1914ee624c8f032ef0afe6a1700506dbc8c61ac092bc2e687cf1377c3f0df894a9c2061ae3114fae57c9047a82db07492939579629e9e9914e91c303aea95e20edd26216b0193b04165b9eb055ab614aa59324be557f7365b2ced621d19f0156a346918a9f5c71b504715411e7761dd0bae136ab7e7d8e65640f72e0ab73f29b658f034d7e515313941a89b11a83b35c7ecf8cde8b6e08c0f90c42b67d4c862adc24af01ec5e469c52a789b4e85f391aefb20f3371df40cbf5b45b6d4f801768162944d9412ad1af8f2aea4de05bde63ce27cf87a752bd93849345fc6e70806d0722b97d79fda81efe9fffdb1ecffaaa318589c06b71fe3225252440430f6b369ef89813e148b9f450add9b3af09de3f7cea43421f262ce977e3794a1de0ede7d62215598a9c42155d18296eefa59f180890d38fae6acd8b4c2f7602ad90e169074cc582d915b723593f417b6219f13e52c389fcc98fc770728a05bbb78ca0205d57a2c2c7646a7b9254ef609b2460a97d5a17ef86ab1f422c6a53afe9b42d7c8d64c3c0224578f573a01054fe3b340bed462d090af7cdbe2b5ad42fcd14e972673d592a759ea0689e39b663041962a73813fc0f738c58ce6d01d60662c2c9e6a5e63bccb3e0abf2bc4c0f667669cb643a2b697545a9f63ac210b831abbbe78eeda569d592d9f23254b81aa0256e02478e346264efbdea9ce05bc304fbda12fd86098116e03339b8242c150554e82d876ad64792895b34a100a16994022e1a871e198a08beca01da7918f2abbaa654f6de91a70fa4c32e6d15f0a67baff71879eea0bbc428962083df7ee64dd9e94c726846ff999947dfef29d1ba60a277991a433135c68bccaec820693b85b0be6878f67828458ef5dce77cd9d11e6e83c90a6b7364fb00d649770b20e4d67af10d46a5e50afdba1be6b78736a3befe5c5c21ee5f5ced2235fbd419ba1b29cb2e5f8f058bfbbea9e9045337746b97f2056015fdc99e9b6be5416d3fb113bd8c70a384c7dc81aa4a324610022f2cbada78f520e33d78d7c698cd9a554bc1d2c55f18564e6a83f5439b9aeb4e977e87ecbb98ee6c2d365ec3264a4d346a00ab5434e502af854d02e6210f2f7c7f9954856c4033a0bfaf88bd5afac3cbfaef49efd081e8bedd91216b7c6d867dbf05511c4b036c29880f10fd5ce22d0d05cbc53b9aa159ff6871274626c845b8f3cf395d452feb6b006ae0d2533c309cf385697a70b705f4968344fca8a616ab99b35966ae964eab1bc1a2d1c10b29ff9638c0c40d9bc1ab4f031365de5195a6813382676c6a04936b77d403714f4fe6c8b205d8ff8aaee5685c166ce9b67e6e2f65c2b67b5ebcd6b84eb3130464a6b826d506cc52aeed6005b915468b277dc783610d71a9ed30f98bacb3ffb327b9b012842ae60e74e277104673df9456e8f5397b9ee7aec17f93a7950983e4043924f4fa72915f52c0f2683cb9eb2bf4a74f0a70737e2e1b9ae8eb41f0e39223bb6b7be60fce50d07a6f1a24e532b395ccd4842c8b05d75f7f9e18b323fb5dbeb24e886f3acf2e8281a09bfceedee7e9c278c01ab79f5e982753808f515a8feefc71cdf914117acc8ab1a292e43c16f44cd1f68787879507c51f8e9f321efe832f2f9e356dffcb9564e0422b7676002e111aa601e8c7ec777a6257133ba9865231049cdf0d7bb3dec25b92f5012be3506911a139548d6209dde01b3ed7e31ba1d6d799a516712ee45524fefddda8effbd1708935438a856d1a60d4f0b9fb9ff232aeac59dbfe7ef09325f48956cfd66aaee063d1727742206331c40d68b9cb6860a3006346cd472dd6fb8f563ef298374bad909cfc780175409a80f398af2c89346862b7fcf421a2e3677a858c2329b225ea9826c078b381c3b7d7f1fb8df04dfb089666f1ea1e2dadda120df6cf9638fd59bd005be6581ceebee6eac01529351e2c897b7efc846147aca083758259af5b7c0b228e8051be7d3a513b504f36dac047c1406768197db6a2b0affaae7c84f0ee34ff51a90337befcff6328c3582d3b26e66b4d73693676e2d37e595271dc1b34c3c62c429b9f49d2b673d7646813fd6c970aa3d544780e6463602b8089325d708ae31bc5177d9f70f6a1df9eb419fb67b95a09512647085973f866884d25a8c3d22ec1385883840e9dd88cc80f165177a279aa7201f115db9dda7a526049d69008d329c22bf4048f4a427943574eef628297595f26fed55643a63a23d69a50b7c96039a6e1529c6f042e854f4ae362386eb31ccefda5f8e40e4bc18fe4e9332484354e90bb8dc1557f2b91dad3df5df2542fa1bb49190f46fb90d5fc19c07418acfce99d181f5a22fe916707a6151ac7620ae0df60dc1d976f466e03e4f3af54744c463ec7890"}]}, 0x14a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x9}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2m13.001767668s ago: executing program 4 (id=3876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 2m12.974446278s ago: executing program 4 (id=3877): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0xa20b, 0x2b, &(0x7f0000000280)=""/43, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r2, r0, r2, r2], &(0x7f0000000380)=[{0x5, 0x2, 0x2, 0x7}, {0x2, 0x3, 0x7, 0xd}, {0x4, 0x4, 0x10}], 0x10, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x1c, &(0x7f0000000480)=@raw=[@generic={0x7, 0xa, 0x7, 0xf, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xa8, 0x5, 0x9, 0x3, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x1, 0x2, 0x2, 0xa, 0x40, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000580)='syzkaller\x00', 0x79fe, 0x47, &(0x7f00000005c0)=""/71, 0x41000, 0x40, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x6b490b91, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000006c0)=[r0, r0, r2, r2], &(0x7f0000000700)=[{0x0, 0x3, 0x9, 0x1}, {0x3, 0x1, 0xf, 0xb}, {0x5, 0x3, 0xe, 0x3}, {0x4, 0x3, 0xb, 0x9}, {0x1, 0x5, 0xf, 0x654f6efb8d55e37e}, {0x3, 0x5, 0x8, 0x8}, {0x3, 0x1, 0xc, 0xa}, {0x3, 0x4, 0x7, 0x4}], 0x10, 0x8e9e}, 0x94) r6 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r6, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000200)={[{@barrier}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0xfff00000000000}}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, r7}}, {@init_itable}, {@user_xattr}, {@noauto_da_alloc}]}, 0x4, 0x544, &(0x7f0000000540)="$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") statx(r2, &(0x7f0000000840)='./file0\x00', 0x4c00, 0x8, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000980)=0x0) r10 = syz_mount_image$vfat(&(0x7f0000000680), &(0x7f0000000200)='./file1/file0\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r14}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="00050000270000012cbd7000fedbdf2509025159595638800800f400c1e3510bb77dc90981878e093c7ece11"], 0x500}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051) statx(r10, &(0x7f00000000c0)='./file2\x00', 0x2000, 0x80, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000600, r15, &(0x7f0000000140)={0x2f, 0x3, 0x0, 0x5}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000b00)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000100)={0xb8, 0x2d, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x98, 0x106, 0x0, 0x1, [@generic="70496fddc1535c355053ce68cbcef12a80fdaa46071a71d912014b3a8cf8ba635891546b25dca5af237e6218f09a6e3a0109ee5ffc50f0218f3b186b4ca41a081ce87edded9d6e3eda8192f372b8e847b37b8b7bb90d067dfd0689fd6dedc0c63dc48348e6eb544f73ee27c4", @typed={0x1d, 0xea, 0x0, 0x0, @str='/selinux/avc/cache_stats\x00'}, @nested={0x4, 0x28}, @nested={0x4, 0xea}]}, @nested={0x10, 0x149, 0x0, 0x1, [@nested={0x4, 0xa5}, @typed={0x8, 0xa6, 0x0, 0x0, @fd=r3}]}]}, 0xb8}], 0x1, &(0x7f0000000a80)=[@rights={{0x24, 0x1, 0x1, [r4, r2, r5, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r15, r16}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x80, 0x4040001}, 0x4000000) 2m11.85948732s ago: executing program 4 (id=3888): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000440)=""/73, 0x49}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 2m11.33970867s ago: executing program 4 (id=3896): socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x3}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 2m11.197549693s ago: executing program 32 (id=3896): socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x3}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 5.08560428s ago: executing program 3 (id=5988): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) migrate_pages(0x0, 0x4, 0x0, 0x0) (fail_nth: 1) 4.771179197s ago: executing program 3 (id=5991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="53ba0100ffffffa9"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x28, &(0x7f0000000180)=""/40, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x0, 0x3ff, 0x6}, 0x10, 0x4132}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000f8ffffffb702000008000000b7030000000000a38500000070000000950000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 4.735913997s ago: executing program 3 (id=5992): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.675871569s ago: executing program 3 (id=5993): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x84003) 3.413177903s ago: executing program 3 (id=6007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a0000"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 3.360951684s ago: executing program 3 (id=6009): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x3]}, 0x8) 1.751718166s ago: executing program 0 (id=6050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.703089157s ago: executing program 5 (id=6053): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) recvmsg(r0, &(0x7f0000000900)={0x0, 0x2f, &(0x7f0000000400)=[{&(0x7f0000000800)=""/208, 0xd0}], 0x1, 0x0, 0xfffffffffffffe8f}, 0x0) 1.593404138s ago: executing program 0 (id=6056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x40090) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x40, 0x20, 0xfffffffc, 0xff, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe0, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @empty]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r6, 0xb720f0fb0014da51, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x1, 0x400, {{0x30, 0x4, 0x2, 0x10, 0xc0, 0x67, 0x0, 0xf1, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x4c, 0x10, 0x3, 0x2, [{@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0xff}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1, 0xfffffffb}, {@multicast2, 0x7}, {@remote, 0x7ff}, {@empty, 0x6}, {@loopback, 0x3}]}, @cipso={0x86, 0x4a, 0x3, [{0x5, 0x3, "ce"}, {0x0, 0x5, "5114c9"}, {0x2, 0xa, "9f4a04306a9dd1d5"}, {0x7, 0x8, "bb61b6b83d80"}, {0x7, 0x4, "94e9"}, {0x0, 0x3, 't'}, {0x5, 0xa, "6e7cd9c07295995e"}, {0x1, 0xe, "6e4d6b0e157e79fa9bda58b5"}, {0x1, 0xb, "cf45c1d6b457b188b6"}]}, @rr={0x7, 0xb, 0x20, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x60, [@local, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)={0x104, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xd16}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6e}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000005c0), 0x1, 0x539, &(0x7f0000000600)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x0, r9, 0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x9, 0xb}, {0x3, 0x8002}], 0xee00}, 0x18, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.461863501s ago: executing program 2 (id=6058): unshare(0x6a040000) socket(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0x5, 0x4, {0x0, 0x2}, 0x4, 0x0, 0xb4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.139242847s ago: executing program 2 (id=6061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbffffffffffffffb}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 1.095798488s ago: executing program 2 (id=6064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086"], 0xfdef) 999.8159ms ago: executing program 0 (id=6067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x40090) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0xb720f0fb0014da51, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x1, 0x400, {{0x32, 0x4, 0x2, 0x10, 0xc8, 0x67, 0x0, 0xf1, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x54, 0x10, 0x3, 0x2, [{@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0xff}, {@loopback, 0x6}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1, 0xfffffffb}, {@multicast2, 0x7}, {@remote, 0x7ff}, {@empty, 0x6}, {@loopback, 0x3}]}, @cipso={0x86, 0x4a, 0x3, [{0x5, 0x3, "ce"}, {0x0, 0x5, "5114c9"}, {0x2, 0xa, "9f4a04306a9dd1d5"}, {0x7, 0x8, "bb61b6b83d80"}, {0x7, 0x4, "94e9"}, {0x0, 0x3, 't'}, {0x5, 0xa, "6e7cd9c07295995e"}, {0x1, 0xe, "6e4d6b0e157e79fa9bda58b5"}, {0x1, 0xb, "cf45c1d6b457b188b6"}]}, @rr={0x7, 0xb, 0x20, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x60, [@local, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)={0xb8, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6e}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000005c0), 0x1, 0x539, &(0x7f0000000600)="$eJzs3c1rHGUYAPBnZrPWttFU/EA9FbRUKd2kTYvk1hw8VqrBo8Sw2YaQSTZkN7UJObTgXUFBUQT15N2riPgHeBbRf0ARGyytt5XJ7qY1X6616Wrm94PZfT+GPO+b2edlZ5hhAyis4/lLGvFMRFxKIobu6huITufx9n631teqt9fXqkm0WhO/JZFExM31tWp3/6TzfjQirkXE0xHxbTniVLo9bmNldW4qy2pLnfpwc35xuLGyenp2fmqmNlNbGB07PzY69tLYudH7NteJybFXT/zwSvJ1Mv7yzU/euJHEhRjs9N09j/up/T8px4Ut7ef2I1gfJf0eAPek1MnzckQ8GUNR6mQ9cPC1DkW0gIJK5D8UVPd7QH7+290e5PePX8fbJyB53Fudrd0z0L42EQ9vnJsc+T35y5lJfr557EEOlAPp2vWIGBkY2P75Tzqfv3s3cj8GyL76Zrx9oLYf/3Rz/Ykd1p/B7rXTf6m7/t3atv7diV/aZf271GOMhbHvnto1/vWIZ3eMn2zGT3aIn0bEmz3Gn/jyl89362t9FnEydo7flex9fXj48mxWG2m/7hjjnddGvthr/kd2iX9hj/nnbYs9zj9ef/zHa3vEf+G5vY//TvEPR8S7PYb/6aP33t6tL48/vcv894qft33aY/wTL3413uOuAAAAAAAAAADAP5Bu3MuWpJXNcppWKu1neJ+II2lWbzRPXa4vL0y373k7FuW0e6fVULue5PUznftxu/WzW+qjEfFYRLxfOrxRr1Tr2XS/Jw8AAAAAAAAAAAAAAAAAAAD/EUe3PP9/s9R+/h8oCD/5DcUl/6G45D8Ul/yH4pL/UFzyH4pL/kNxyX8oLvkPxSX/objkPwAAAAAAAAAAAAAAAAAAAAAAAAAA7ItLFy/mW+v2+lo1r09fWVmeq185PV1rzFXml6uVan1psTJTr89ktUq1Pv93fy+r1xfPx8Ly1eFmrdEcbqysTs7Xlxeak7PzUzO1yVr5gcwKAAAAAAAAAAAAAAAAAAAA/l8GN7YkrUREulFO00ol4pGIOBbl5PJsVhuJiEcj4vtS+VBeP9PvQQMAAAAAAAAAAAAAAAAAAMAB01hZnZvKstqSgoKCwmah3ysTAAAAAAAAAAAAAAAAAAAUz52Hfvs9EgAAAAAAAAAAAAAAAAAAACiy9OdWq9VKIuLk0PODW3sfSv4obbxHxFsfT3xwdarZXDqTt9/YbG9+2Gk/24/xA73q5mk3jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7Giurc1NZVlvax0K/5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwL/4MAAD//7HA27Q=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x0, r6, 0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x9, 0xb}, {0x3, 0x8002}], 0xee00}, 0x18, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r7, 0x8, 0x5) 929.599392ms ago: executing program 2 (id=6068): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x1002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x5e, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x2b6, &(0x7f00000006c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x280, 0x2c, 0xff, @dev, @mcast2, {[@dstopts={0x3a, 0x20, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x0, 0xe2, "7c5a9c1c10355ddbdad5c4463d8f49e89c6f39bbb88d58116056f1b6b29eb90cd7dbbadbdb623f9c2ba930601d6781fe2c530fee8287b062320a76c42b4bf4d92a36bf868e806601b4992be023637c2670840e56436a038c996f9f39a6300c03ef328fe8836cc98f1974b003f1ec0b9f79d766f8392f63c545369554c3d23f1b31b7f4012037c3a9e57b0265e2128a2cc04b0860e9c662c8754111a128c3b24353f9c118c15aa5669c1939c4df3e12919662f1d42a97d12cc98a62c58324c43a2c03f0071c2ddcc683ca284a64bb83abe696350d610a46d3068796de7a0a80986039"}]}, @srh={0x0, 0xe, 0x4, 0x7, 0xff, 0x70, 0x7, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @remote, @loopback, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x3c, 0x0, 0xb, 0x0, 0x0, 0x11, 0x65}, @routing={0x11, 0x10, 0x2, 0xbb, 0x0, [@local, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, @empty, @remote]}, @fragment={0x21, 0x0, 0x5, 0x1, 0x0, 0x6, 0x66}, @dstopts={0x29, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa3}, @hao={0xc9, 0x10, @private2}]}, @srh={0x62, 0x2, 0x4, 0x1, 0x8, 0x8, 0x5, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x3b, 0x4, 0x4, 0x2, 0x6, 0x78, 0xfff, [@remote, @dev={0xfe, 0x80, '\x00', 0x25}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x7]}, &(0x7f0000000080), &(0x7f0000000100)={0x77359400}, 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/150, 0x96}, 0xd}], 0x1, 0x45833af92e4b39ff, 0x0) 892.656442ms ago: executing program 1 (id=6069): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff000000000000000000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 847.840053ms ago: executing program 1 (id=6070): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kvm_dirty_ring_reset\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 847.368813ms ago: executing program 5 (id=6071): unshare(0x6a040000) socket(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0x5, 0x4, {0x0, 0x2}, 0x4, 0x0, 0xb4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 830.403754ms ago: executing program 1 (id=6072): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 785.631584ms ago: executing program 1 (id=6073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xbffffffffffffffb}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 759.368625ms ago: executing program 1 (id=6074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[], 0xfdef) 748.676145ms ago: executing program 5 (id=6075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0xf7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x400c805}, 0x840) 665.392877ms ago: executing program 5 (id=6076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x40090) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x40, 0x20, 0xfffffffc, 0xff, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe0, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @empty]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r6, 0xb720f0fb0014da51, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x1, 0x400, {{0x30, 0x4, 0x2, 0x10, 0xc0, 0x67, 0x0, 0xf1, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x4c, 0x10, 0x3, 0x2, [{@private=0xa010101, 0x7}, {@rand_addr=0x64010100, 0xff}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@multicast1, 0xfffffffb}, {@multicast2, 0x7}, {@remote, 0x7ff}, {@empty, 0x6}, {@loopback, 0x3}]}, @cipso={0x86, 0x4a, 0x3, [{0x5, 0x3, "ce"}, {0x0, 0x5, "5114c9"}, {0x2, 0xa, "9f4a04306a9dd1d5"}, {0x7, 0x8, "bb61b6b83d80"}, {0x7, 0x4, "94e9"}, {0x0, 0x3, 't'}, {0x5, 0xa, "6e7cd9c07295995e"}, {0x1, 0xe, "6e4d6b0e157e79fa9bda58b5"}, {0x1, 0xb, "cf45c1d6b457b188b6"}]}, @rr={0x7, 0xb, 0x20, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0x60, [@local, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)={0x104, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xd16}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6e}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000005c0), 0x1, 0x539, &(0x7f0000000600)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x0, r9, 0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x9, 0xb}, {0x3, 0x8002}], 0xee00}, 0x18, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 601.265498ms ago: executing program 1 (id=6077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000000c0)='./file0\x00', 0xec) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401ff, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x3, 0x27d50a2aa12aa55d, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x201, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xc004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="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"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x69d9b450c1fb548c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001900010900000000200000000218000071b7931bb1a7ce7d0855352342e0db0002fd010000000008000100ac1414000800050064010100100016800c000100039266f68211bbd25c"], 0x44}}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r6, 0x2) flock(r6, 0x1) flock(r7, 0x1) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) mknod$loop(&(0x7f0000000180)='./file1\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) 565.540259ms ago: executing program 0 (id=6078): unshare(0x6a040000) socket(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0x5, 0x4, {0x0, 0x2}, 0x4, 0x0, 0xb4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") syz_io_uring_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 349.130123ms ago: executing program 5 (id=6079): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff00000000000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 327.252693ms ago: executing program 0 (id=6080): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x3]}, 0x8) 278.414224ms ago: executing program 5 (id=6081): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e31, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4a}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002340)={r2, 0x4, 0xffffffff, 0x71b1cf24}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x68, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], &(0x7f0000000280)='GPL\x00', 0x105, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)="8df86045ed05569ac7ad1d535d92f7a6580b1380e61c588e913082efb9b7e69518fc14d2637525dba1b07fff8145af4a81a8fe02cfe28296f3fa62a4995779b53f931538dd293f471db4798cde1f64166fefaeea0f", 0x55}], 0x2, &(0x7f0000000480)=ANY=[@ANYRESDEC=r4], 0x30}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001680)={0x2, 0x8001, @start={0x0, 0x0, "e3130d14a2aa5fda70d6a7a8fac34dae044ee1c4040fcf280f04cd303f612be383dc9bae395626e4eb67028e1a064d6be623ae7447b9f6e62aa5a28fd2373bebbaa6b9e4d93e42dafdf43f23e41be91178eb5acb0ca211c30148b283147312230b499b4894de4b5c3682e051561743846d9c39196530dcc29b82eda23e15b93e664da8d7420c3afa5e6306c3f73267ddcd7e9502d6214e1a4b5f9a9c880e6e3b56d9c6f1b6cd3058affae6510c5e68476712221588de2ebe554cf45b905e9ea09563260560f041c8e7ff63b5e7df2507cce94966bb2cbca805f27c684776480d493cbf76669bf4d481455841d16ddfc651974acd4155e3041d6b3447a7ca59bb8ff04d6ae9b1357cbc3e0bb1c0e398a5cd990dd15c75dc10572c7606cac1a1fe654097b2bd73218e3e8ccf2dee06d7a02a679cbab0699470e558451dcb72685037d8e6f3132becd41c99b16a457223ff7835a347edce71a98756894d97d6bae59407db8b11423ccb2da0fc848661e0277a053d43b02c2b5faa3cbf3f7880e2fabafe32c2f7f666831978fea845fa0e975e51d71f713c44e3419975617aecf9bb0960d4090a79eaa3419459fe5966870e8cc839c8062a5c36c5d1139ec4a1234faafccba73934427095131cfae0c2ddb9a2b26a8e67b92978054f4d886610c7333e1ae79fbbcbc0b25c39c6ca5039af045bb1a46370e56826343f150b33de74637ed19bbb3595024260f926bd9c25d78d1723bdf665332e7409459dddc939e17a84d2f03c6972f1528b70dcce895d73cd1fbd82f9f27719bd903988ca7e3f40a0c4b963ba1ec71efc45e207d31a7c4230da4348f97e243dc29970837671e3a30712854945f14da8e27f2ffe8410e485be3376cbdf9be16b4bcffbd13ce5b145640415b47699d71117c6accbda46c5ebc91d6973797beddc9029bb07d1e081e6c83e1836b05eb31741d781bc5a7c64fe71a6632ce1ab1c3cececf3176d726b8993572810cda6518793b8a62369b5072590ebe31631d716f7ddf282b55a0f990044074a89ad9aa2b488db0b1344bacdee95b1d41dbdc00ae60c12f6d54fd9be7405dd22a35b31a13e18211a9122699c25db76a1e623996454588e5555b61b3bc66df03e291ee7a7fc15746dfa85bcee41ae63ce39ab69261af74407d82345d16abd09df34e995e64c9b03e97a59385d0591370f86a41002cc3b687a2aae9e7437d12028ae31abb3a1f900a52143590a8871a02057a6bacd5dff0ef635c845b2e2eaffcb288952bc70a9d79f28c042bc5170cba0d064e02d47f7700cca964cae1623a1045d86a568c1f929db264d4304805ffee15f237ecf5d9f9861ce54313749927881ef3e23e7e76a8ce8789dcf53920498956bc1f9d2b031cf77e69be99702e08f1da60d273d991056f12bfb541e315f96de69fbeadf86f622516d8e30b388f7f6", "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"}, [0x7, 0xe01, 0x3, 0x5, 0xc, 0xeeb4, 0x6, 0x69a, 0x2, 0xffffffffffffffff, 0x2, 0x6, 0x1000, 0x6, 0x3, 0x841, 0x6, 0x0, 0x35d, 0x52c962ee, 0xfffffffffffffff7, 0x401, 0x1, 0x5, 0xffffffffffff812f, 0x6c1, 0x3, 0x9, 0x6, 0xd028, 0x9, 0x800, 0x3, 0x3, 0xff, 0xfffffffffffffff9, 0x101, 0x6, 0x6, 0x80000000, 0x1000, 0x100000000, 0x6, 0x5fbe, 0x100, 0x100000001, 0xffff, 0x7fffffffffffffff, 0xfff, 0x0, 0x7, 0x4dee340c, 0xd1, 0x7bc, 0x80000000, 0xfffffffffffffff9, 0xa0, 0x4b68, 0x0, 0x5, 0x0, 0xfff, 0x6d, 0x7]}) socket(0x200000000000011, 0x2, 0xe6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0}, 0x94) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000080)) 277.874524ms ago: executing program 0 (id=6082): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040), &(0x7f00000000c0)) pwrite64(r2, &(0x7f00000002c0)="073e593944f1ee327ddf1ef1b4af37b27d43d35357dd8101c5006c7be40f95d103adbe8d81ff828a6027f83845e2a44f5622297ca5bc0e6ec4fc68f6390f4eb24954f1bad3c32a8cf50f57ffe98793c7c4f48d47bd27cafea12cfb835e80cfcdb72c09df3daaf6354ba56ce6fcacd08fb0912b894848aaacfc0f66383e51816fad200acec4", 0x85, 0x7) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 7.881359ms ago: executing program 2 (id=6083): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 0s ago: executing program 2 (id=6084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) lsm_list_modules(&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=0x8, 0x0) kernel console output (not intermixed with test programs): led to load policy [ 476.901298][T20233] loop3: detected capacity change from 0 to 128 [ 476.909787][T20233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.922363][T20233] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.937604][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3372 comm=kworker/0:2 [ 476.961113][T20239] tipc: Enabling of bearer rejected, failed to enable media [ 476.994899][T20246] loop1: detected capacity change from 0 to 512 [ 477.001990][T20246] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.011192][T20246] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 477.020425][T20246] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 477.024939][T20244] bond1: (slave veth3): Releasing active interface [ 477.028508][T20246] System zones: 0-2, 18-18, 34-35 [ 477.040838][T20246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.059374][T12832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.094795][T14006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.128915][T20254] loop2: detected capacity change from 0 to 128 [ 477.230172][T20272] loop2: detected capacity change from 0 to 128 [ 477.239755][T20272] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.255313][T20272] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.270457][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3372 comm=kworker/0:2 [ 477.445845][T13375] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.495080][T20276] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 477.495198][T20281] loop2: detected capacity change from 0 to 512 [ 477.502902][T20276] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5230'. [ 477.554579][T20281] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.563792][T20281] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 477.578557][T20281] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 477.588242][T20281] System zones: 0-2, 18-18, 34-35 [ 477.594203][T20281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 478.026808][T20290] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5234'. [ 478.036258][T20289] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5234'. [ 478.127362][ T383] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.135802][ T383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.150188][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.208612][ T383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.224302][ T383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.341798][T20319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.371075][T20321] netlink: 'syz.3.5246': attribute type 1 has an invalid length. [ 478.379039][T20321] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5246'. [ 478.388191][T20321] NCSI netlink: No device for ifindex 131092 [ 478.398446][T20319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.416909][T20323] loop2: detected capacity change from 0 to 512 [ 478.424762][T20323] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 478.433933][T20323] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 478.447671][T20323] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 478.456198][T20323] System zones: 0-2, 18-18, 34-35 [ 478.462008][T20323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 478.475577][T20319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.492259][T20323] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5247'. [ 478.509961][T20329] FAULT_INJECTION: forcing a failure. [ 478.509961][T20329] name failslab, interval 1, probability 0, space 0, times 0 [ 478.522744][T20329] CPU: 0 UID: 0 PID: 20329 Comm: syz.3.5249 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 478.522785][T20329] Tainted: [W]=WARN [ 478.522794][T20329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.522834][T20329] Call Trace: [ 478.522842][T20329] [ 478.522852][T20329] __dump_stack+0x1d/0x30 [ 478.522981][T20329] dump_stack_lvl+0xe8/0x140 [ 478.523001][T20329] dump_stack+0x15/0x1b [ 478.523017][T20329] should_fail_ex+0x265/0x280 [ 478.523042][T20329] should_failslab+0x8c/0xb0 [ 478.523137][T20329] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 478.523221][T20329] ? save_fpregs_to_fpstate+0x100/0x160 [ 478.523258][T20329] ? sidtab_sid2str_get+0xa0/0x130 [ 478.523291][T20329] kmemdup_noprof+0x2b/0x70 [ 478.523437][T20329] sidtab_sid2str_get+0xa0/0x130 [ 478.523466][T20329] security_sid_to_context_core+0x1eb/0x2e0 [ 478.523550][T20329] security_sid_to_context_force+0x2a/0x40 [ 478.523694][T20329] selinux_inode_init_security+0x31f/0x3c0 [ 478.523733][T20329] security_inode_init_security+0x149/0x330 [ 478.523848][T20329] ? __pfx_shmem_initxattrs+0x10/0x10 [ 478.523877][T20329] shmem_mknod+0xad/0x180 [ 478.523973][T20329] shmem_rename2+0x159/0x290 [ 478.524005][T20329] ? __pfx_shmem_rename2+0x10/0x10 [ 478.524036][T20329] vfs_rename+0x7f3/0xa40 [ 478.524146][T20329] do_renameat2+0x557/0xa10 [ 478.524197][T20329] __x64_sys_renameat2+0x7e/0x90 [ 478.524290][T20329] x64_sys_call+0x3f9/0x2ff0 [ 478.524319][T20329] do_syscall_64+0xd2/0x200 [ 478.524360][T20329] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 478.524388][T20329] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 478.524496][T20329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.524524][T20329] RIP: 0033:0x7f3599a8eba9 [ 478.524543][T20329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.524591][T20329] RSP: 002b:00007f35984ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 478.524610][T20329] RAX: ffffffffffffffda RBX: 00007f3599cd5fa0 RCX: 00007f3599a8eba9 [ 478.524623][T20329] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 478.524635][T20329] RBP: 00007f35984ef090 R08: 0000000000000004 R09: 0000000000000000 [ 478.524650][T20329] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000002 [ 478.524665][T20329] R13: 00007f3599cd6038 R14: 00007f3599cd5fa0 R15: 00007fffa2113ec8 [ 478.524690][T20329] [ 478.764187][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.779725][T20319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.894216][ T383] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.894264][ T383] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.894329][ T383] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.913323][T19629] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.942206][T20351] netlink: 'syz.1.5258': attribute type 1 has an invalid length. [ 478.974162][T20351] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5258'. [ 478.983337][T20351] NCSI netlink: No device for ifindex 131092 [ 479.054419][T20357] loop5: detected capacity change from 0 to 1024 [ 479.059560][T20362] loop3: detected capacity change from 0 to 2048 [ 479.071834][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 479.094377][T20359] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 479.094403][T20359] vhci_hcd: invalid port number 96 [ 479.094414][T20359] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 479.102391][T20357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.102502][T20357] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.193777][T20379] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.204146][T20377] FAULT_INJECTION: forcing a failure. [ 479.204146][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.204185][T20377] CPU: 0 UID: 0 PID: 20377 Comm: syz.1.5268 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 479.204223][T20377] Tainted: [W]=WARN [ 479.204258][T20377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.204272][T20377] Call Trace: [ 479.204280][T20377] [ 479.204289][T20377] __dump_stack+0x1d/0x30 [ 479.204314][T20377] dump_stack_lvl+0xe8/0x140 [ 479.204339][T20377] dump_stack+0x15/0x1b [ 479.204360][T20377] should_fail_ex+0x265/0x280 [ 479.204391][T20377] should_fail+0xb/0x20 [ 479.204471][T20377] should_fail_usercopy+0x1a/0x20 [ 479.204511][T20377] _copy_from_user+0x1c/0xb0 [ 479.204595][T20377] __se_sys_mount+0x10d/0x2e0 [ 479.204674][T20377] ? fput+0x8f/0xc0 [ 479.204705][T20377] ? ksys_write+0x192/0x1a0 [ 479.204729][T20377] __x64_sys_mount+0x67/0x80 [ 479.204754][T20377] x64_sys_call+0x2b4d/0x2ff0 [ 479.204783][T20377] do_syscall_64+0xd2/0x200 [ 479.204842][T20377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 479.204872][T20377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 479.204956][T20377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.204978][T20377] RIP: 0033:0x7f8f75f1eba9 [ 479.204992][T20377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.205092][T20377] RSP: 002b:00007f8f74987038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 479.205117][T20377] RAX: ffffffffffffffda RBX: 00007f8f76165fa0 RCX: 00007f8f75f1eba9 [ 479.205134][T20377] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 479.205147][T20377] RBP: 00007f8f74987090 R08: 0000200000000740 R09: 0000000000000000 [ 479.205159][T20377] R10: 0000000000000801 R11: 0000000000000246 R12: 0000000000000001 [ 479.205198][T20377] R13: 00007f8f76166038 R14: 00007f8f76165fa0 R15: 00007ffd2f22c2b8 [ 479.205219][T20377] [ 479.248499][T20366] loop3: detected capacity change from 0 to 8192 [ 479.269171][T20383] netlink: 'syz.1.5271': attribute type 1 has an invalid length. [ 479.445582][T20383] NCSI netlink: No device for ifindex 131092 [ 479.457775][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.467811][T20379] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.468556][T20366] loop3: p1 p2[DM] p4 [ 479.468608][T20366] loop3: p1 size 196608 extends beyond EOD, truncated [ 479.474319][T20366] loop3: p2 start 4292936063 is beyond EOD, truncated [ 479.489780][T20366] loop3: p4 size 50331648 extends beyond EOD, truncated [ 479.533171][T20391] loop1: detected capacity change from 0 to 2048 [ 479.547035][T20379] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.690287][T20403] netlink: 'syz.5.5279': attribute type 3 has an invalid length. [ 479.699619][T20405] loop2: detected capacity change from 0 to 128 [ 479.707762][T20379] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.720110][T20405] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 479.732770][T20405] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.761013][T13375] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.824302][T20412] FAULT_INJECTION: forcing a failure. [ 479.824302][T20412] name failslab, interval 1, probability 0, space 0, times 0 [ 479.837068][T20412] CPU: 1 UID: 0 PID: 20412 Comm: syz.2.5281 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 479.837117][T20412] Tainted: [W]=WARN [ 479.837123][T20412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.837136][T20412] Call Trace: [ 479.837142][T20412] [ 479.837150][T20412] __dump_stack+0x1d/0x30 [ 479.837177][T20412] dump_stack_lvl+0xe8/0x140 [ 479.837202][T20412] dump_stack+0x15/0x1b [ 479.837258][T20412] should_fail_ex+0x265/0x280 [ 479.837283][T20412] should_failslab+0x8c/0xb0 [ 479.837366][T20412] __kmalloc_noprof+0xa5/0x3e0 [ 479.837394][T20412] ? bio_kmalloc+0x41/0x50 [ 479.837468][T20412] bio_kmalloc+0x41/0x50 [ 479.837489][T20412] blk_rq_map_user_iov+0x58a/0x14a0 [ 479.837522][T20412] ? blk_mq_get_tag+0x4f9/0x570 [ 479.837585][T20412] ? plist_check_list+0x1e4/0x210 [ 479.837622][T20412] blk_rq_map_user_io+0x18f/0x260 [ 479.837718][T20412] ? _raw_spin_unlock+0x26/0x50 [ 479.837741][T20412] ? finish_task_switch+0xad/0x2b0 [ 479.837767][T20412] ? __schedule+0x6b9/0xb30 [ 479.837800][T20412] ? sg_link_reserve+0x117/0x140 [ 479.837827][T20412] sg_common_write+0xb06/0xc30 [ 479.837863][T20412] sg_write+0x6b5/0x750 [ 479.837918][T20412] vfs_writev+0x406/0x8b0 [ 479.837947][T20412] ? __pfx_sg_write+0x10/0x10 [ 479.838085][T20412] do_writev+0xe7/0x210 [ 479.838124][T20412] __x64_sys_writev+0x45/0x50 [ 479.838181][T20412] x64_sys_call+0x1e9a/0x2ff0 [ 479.838202][T20412] do_syscall_64+0xd2/0x200 [ 479.838236][T20412] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 479.838268][T20412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 479.838334][T20412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.838358][T20412] RIP: 0033:0x7f91e9b4eba9 [ 479.838414][T20412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.838438][T20412] RSP: 002b:00007f91e85af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 479.838468][T20412] RAX: ffffffffffffffda RBX: 00007f91e9d95fa0 RCX: 00007f91e9b4eba9 [ 479.838480][T20412] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 479.838523][T20412] RBP: 00007f91e85af090 R08: 0000000000000000 R09: 0000000000000000 [ 479.838540][T20412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.838555][T20412] R13: 00007f91e9d96038 R14: 00007f91e9d95fa0 R15: 00007fffb73db928 [ 479.838579][T20412] [ 480.113854][T20403] SELinux: Context Ü is not valid (left unmapped). [ 480.245049][T20423] loop3: detected capacity change from 0 to 128 [ 480.355643][T20424] netlink: 'syz.2.5284': attribute type 1 has an invalid length. [ 480.944249][T20439] SELinux: failed to load policy [ 480.966223][T20441] FAULT_INJECTION: forcing a failure. [ 480.966223][T20441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.979394][T20441] CPU: 0 UID: 0 PID: 20441 Comm: syz.1.5293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 480.979427][T20441] Tainted: [W]=WARN [ 480.979433][T20441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.979491][T20441] Call Trace: [ 480.979497][T20441] [ 480.979504][T20441] __dump_stack+0x1d/0x30 [ 480.979524][T20441] dump_stack_lvl+0xe8/0x140 [ 480.979542][T20441] dump_stack+0x15/0x1b [ 480.979556][T20441] should_fail_ex+0x265/0x280 [ 480.979615][T20441] should_fail+0xb/0x20 [ 480.979694][T20441] should_fail_usercopy+0x1a/0x20 [ 480.979722][T20441] _copy_from_iter+0xd2/0xe80 [ 480.979770][T20441] ? __build_skb_around+0x1a0/0x200 [ 480.979800][T20441] ? __alloc_skb+0x223/0x320 [ 480.979894][T20441] netlink_sendmsg+0x471/0x6b0 [ 480.979930][T20441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.979964][T20441] __sock_sendmsg+0x142/0x180 [ 480.980021][T20441] ____sys_sendmsg+0x31e/0x4e0 [ 480.980047][T20441] ___sys_sendmsg+0x17b/0x1d0 [ 480.980182][T20441] __x64_sys_sendmsg+0xd4/0x160 [ 480.980214][T20441] x64_sys_call+0x191e/0x2ff0 [ 480.980236][T20441] do_syscall_64+0xd2/0x200 [ 480.980330][T20441] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 480.980359][T20441] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 480.980401][T20441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.980426][T20441] RIP: 0033:0x7f8f75f1eba9 [ 480.980502][T20441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.980518][T20441] RSP: 002b:00007f8f74987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.980575][T20441] RAX: ffffffffffffffda RBX: 00007f8f76165fa0 RCX: 00007f8f75f1eba9 [ 480.980604][T20441] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 480.980619][T20441] RBP: 00007f8f74987090 R08: 0000000000000000 R09: 0000000000000000 [ 480.980662][T20441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.980675][T20441] R13: 00007f8f76166038 R14: 00007f8f76165fa0 R15: 00007ffd2f22c2b8 [ 480.980697][T20441] [ 481.230918][T20446] loop2: detected capacity change from 0 to 512 [ 481.238649][T20446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 481.260382][T20446] EXT4-fs (loop2): 1 orphan inode deleted [ 481.260406][T20446] EXT4-fs (loop2): 1 truncate cleaned up [ 481.260830][T20446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.261661][T20446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.300374][T20455] loop5: detected capacity change from 0 to 128 [ 481.353290][T20463] random: crng reseeded on system resumption [ 481.383868][T20463] loop5: detected capacity change from 0 to 1024 [ 481.429217][T20469] loop2: detected capacity change from 0 to 128 [ 481.439761][T20463] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 481.440770][T20469] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 481.450300][T20463] EXT4-fs (loop5): mount failed [ 481.460114][T20469] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.531081][T13375] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.561548][T20475] loop5: detected capacity change from 0 to 1024 [ 481.585517][T20475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.597848][T20475] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.670148][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 481.670223][ T29] audit: type=1326 audit(1757903085.109:31534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.700183][ T29] audit: type=1326 audit(1757903085.109:31535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.726852][T20484] __nla_validate_parse: 5 callbacks suppressed [ 481.726871][T20484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5305'. [ 481.748123][ T29] audit: type=1326 audit(1757903085.169:31536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.771788][ T29] audit: type=1326 audit(1757903085.169:31537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.795530][ T29] audit: type=1326 audit(1757903085.169:31538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.819141][ T29] audit: type=1326 audit(1757903085.169:31539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.842977][ T29] audit: type=1326 audit(1757903085.169:31540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.866590][ T29] audit: type=1326 audit(1757903085.169:31541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.890459][ T29] audit: type=1326 audit(1757903085.169:31542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.914170][ T29] audit: type=1326 audit(1757903085.169:31543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 481.944407][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.968779][T20490] netlink: 'syz.5.5306': attribute type 21 has an invalid length. [ 481.983094][T20490] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5306'. [ 481.992176][T20490] netlink: 'syz.5.5306': attribute type 1 has an invalid length. [ 482.050419][T20494] loop5: detected capacity change from 0 to 512 [ 482.057546][T20494] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 482.066724][T20494] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 482.076538][T20494] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 482.084646][T20494] System zones: 0-2, 18-18, 34-35 [ 482.090281][T20494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 482.130442][T20494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5308'. [ 482.160491][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.398049][T20511] loop5: detected capacity change from 0 to 128 [ 482.407072][T20511] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.419688][T20511] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.436293][T20514] tipc: Enabling of bearer rejected, failed to enable media [ 482.436329][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 482.504145][T16265] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.550019][T20526] loop5: detected capacity change from 0 to 128 [ 482.559032][T20526] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 482.560111][T20526] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.583728][T20528] loop2: detected capacity change from 0 to 128 [ 482.639042][T20533] loop2: detected capacity change from 0 to 2048 [ 482.659136][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 482.683790][T16265] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.702965][T19629] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.703013][T19629] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.706578][T19631] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.747930][T19631] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.772707][T20544] netlink: 'syz.0.5328': attribute type 21 has an invalid length. [ 482.772819][T20544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5328'. [ 482.772833][T20544] netlink: 'syz.0.5328': attribute type 1 has an invalid length. [ 482.884217][T20557] loop1: detected capacity change from 0 to 128 [ 482.899420][T20560] netlink: 'syz.5.5335': attribute type 1 has an invalid length. [ 482.899437][T20560] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5335'. [ 482.899452][T20560] NCSI netlink: No device for ifindex 131092 [ 482.948778][T20562] loop1: detected capacity change from 0 to 2048 [ 482.954345][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5336'. [ 482.998117][T20567] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.034966][T20567] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.104922][T20567] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.150316][T20577] random: crng reseeded on system resumption [ 483.157748][T20567] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.159534][T20577] netlink: 464 bytes leftover after parsing attributes in process `syz.1.5342'. [ 483.186022][T20577] loop1: detected capacity change from 0 to 1024 [ 483.198437][T20577] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 483.198474][T20577] EXT4-fs (loop1): mount failed [ 483.234011][T19629] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.238697][T19629] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.258741][T19629] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.258913][T19629] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.262590][T20581] loop1: detected capacity change from 0 to 512 [ 483.271683][T20581] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.271721][T20581] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 483.280615][T20581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 483.280653][T20581] System zones: 0-2, 18-18, 34-35 [ 483.281055][T20581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 483.287386][T20581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5343'. [ 483.307148][T14006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.368994][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 483.369589][T20590] SELinux: failed to load policy [ 483.427987][T20594] loop3: detected capacity change from 0 to 2048 [ 483.439020][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'. [ 483.507443][T20603] loop5: detected capacity change from 0 to 128 [ 483.515862][T20603] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.528438][T20605] loop3: detected capacity change from 0 to 512 [ 483.528721][T20603] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.547377][T20605] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.554509][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 483.556492][T20605] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 483.578015][T20605] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 483.586094][T20605] System zones: 0-2, 18-18, 34-35 [ 483.592344][T20605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 483.630291][T20609] loop3: detected capacity change from 0 to 128 [ 483.692726][T20616] SELinux: failed to load policy [ 483.758728][T20630] loop5: detected capacity change from 0 to 1024 [ 483.774440][T20630] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.979040][T20646] FAULT_INJECTION: forcing a failure. [ 483.979040][T20646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.979078][T20646] CPU: 1 UID: 0 PID: 20646 Comm: syz.5.5368 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 483.979111][T20646] Tainted: [W]=WARN [ 483.979122][T20646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.979153][T20646] Call Trace: [ 483.979159][T20646] [ 483.979165][T20646] __dump_stack+0x1d/0x30 [ 483.979189][T20646] dump_stack_lvl+0xe8/0x140 [ 483.979209][T20646] dump_stack+0x15/0x1b [ 483.979281][T20646] should_fail_ex+0x265/0x280 [ 483.979320][T20646] should_fail+0xb/0x20 [ 483.979350][T20646] should_fail_usercopy+0x1a/0x20 [ 483.979386][T20646] _copy_from_iter+0xd2/0xe80 [ 483.979458][T20646] ? __build_skb_around+0x1a0/0x200 [ 483.979492][T20646] ? __alloc_skb+0x223/0x320 [ 483.979539][T20646] netlink_sendmsg+0x471/0x6b0 [ 483.979580][T20646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.979618][T20646] __sock_sendmsg+0x142/0x180 [ 483.979669][T20646] ____sys_sendmsg+0x31e/0x4e0 [ 483.979768][T20646] ___sys_sendmsg+0x17b/0x1d0 [ 483.979822][T20646] __x64_sys_sendmsg+0xd4/0x160 [ 483.979866][T20646] x64_sys_call+0x191e/0x2ff0 [ 483.979954][T20646] do_syscall_64+0xd2/0x200 [ 483.980068][T20646] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 483.980093][T20646] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 483.980128][T20646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.980155][T20646] RIP: 0033:0x7f424b10eba9 [ 483.980243][T20646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.980268][T20646] RSP: 002b:00007f4249b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.980294][T20646] RAX: ffffffffffffffda RBX: 00007f424b355fa0 RCX: 00007f424b10eba9 [ 483.980399][T20646] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 483.980429][T20646] RBP: 00007f4249b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 483.980525][T20646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.980542][T20646] R13: 00007f424b356038 R14: 00007f424b355fa0 R15: 00007ffdfdeea3c8 [ 483.980568][T20646] [ 484.029430][T20648] loop5: detected capacity change from 0 to 128 [ 484.208171][T20648] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.212699][ T3386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3386 comm=kworker/1:3 [ 484.272127][T20651] tipc: Enabling of bearer rejected, failed to enable media [ 484.339643][T20657] SELinux: failed to load policy [ 484.629531][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3372 comm=kworker/0:2 [ 484.687996][T20687] FAULT_INJECTION: forcing a failure. [ 484.687996][T20687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.688052][T20687] CPU: 0 UID: 0 PID: 20687 Comm: syz.1.5386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 484.688090][T20687] Tainted: [W]=WARN [ 484.688097][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.688109][T20687] Call Trace: [ 484.688115][T20687] [ 484.688122][T20687] __dump_stack+0x1d/0x30 [ 484.688146][T20687] dump_stack_lvl+0xe8/0x140 [ 484.688210][T20687] dump_stack+0x15/0x1b [ 484.688231][T20687] should_fail_ex+0x265/0x280 [ 484.688262][T20687] should_fail+0xb/0x20 [ 484.688288][T20687] should_fail_usercopy+0x1a/0x20 [ 484.688398][T20687] _copy_from_iter+0xd2/0xe80 [ 484.688434][T20687] ? __build_skb_around+0x1a0/0x200 [ 484.688477][T20687] ? __alloc_skb+0x223/0x320 [ 484.688507][T20687] netlink_sendmsg+0x471/0x6b0 [ 484.688543][T20687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.688577][T20687] __sock_sendmsg+0x142/0x180 [ 484.688739][T20687] ____sys_sendmsg+0x31e/0x4e0 [ 484.688776][T20687] ___sys_sendmsg+0x17b/0x1d0 [ 484.688890][T20687] __x64_sys_sendmsg+0xd4/0x160 [ 484.688921][T20687] x64_sys_call+0x191e/0x2ff0 [ 484.689006][T20687] do_syscall_64+0xd2/0x200 [ 484.689045][T20687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 484.689144][T20687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 484.689186][T20687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.689286][T20687] RIP: 0033:0x7f8f75f1eba9 [ 484.689307][T20687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.689332][T20687] RSP: 002b:00007f8f74987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.689358][T20687] RAX: ffffffffffffffda RBX: 00007f8f76165fa0 RCX: 00007f8f75f1eba9 [ 484.689376][T20687] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 484.689468][T20687] RBP: 00007f8f74987090 R08: 0000000000000000 R09: 0000000000000000 [ 484.689485][T20687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.689534][T20687] R13: 00007f8f76166038 R14: 00007f8f76165fa0 R15: 00007ffd2f22c2b8 [ 484.689561][T20687] [ 484.803404][T20697] Dead loop on virtual device ipvlan0, fix it urgently! [ 485.105950][T20714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20714 comm=syz.3.5397 [ 485.174330][T20718] FAULT_INJECTION: forcing a failure. [ 485.174330][T20718] name failslab, interval 1, probability 0, space 0, times 0 [ 485.187063][T20718] CPU: 0 UID: 0 PID: 20718 Comm: syz.3.5398 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 485.187124][T20718] Tainted: [W]=WARN [ 485.187133][T20718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.187182][T20718] Call Trace: [ 485.187190][T20718] [ 485.187199][T20718] __dump_stack+0x1d/0x30 [ 485.187220][T20718] dump_stack_lvl+0xe8/0x140 [ 485.187257][T20718] dump_stack+0x15/0x1b [ 485.187308][T20718] should_fail_ex+0x265/0x280 [ 485.187409][T20718] should_failslab+0x8c/0xb0 [ 485.187443][T20718] kmem_cache_alloc_noprof+0x50/0x310 [ 485.187498][T20718] ? audit_log_start+0x365/0x6c0 [ 485.187589][T20718] audit_log_start+0x365/0x6c0 [ 485.187628][T20718] audit_seccomp+0x48/0x100 [ 485.187657][T20718] ? __seccomp_filter+0x68c/0x10d0 [ 485.187698][T20718] __seccomp_filter+0x69d/0x10d0 [ 485.187728][T20718] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 485.187764][T20718] ? vfs_write+0x7e8/0x960 [ 485.187923][T20718] __secure_computing+0x82/0x150 [ 485.187944][T20718] syscall_trace_enter+0xcf/0x1e0 [ 485.187969][T20718] do_syscall_64+0xac/0x200 [ 485.188012][T20718] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 485.188087][T20718] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 485.188118][T20718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.188139][T20718] RIP: 0033:0x7f3599a8eba9 [ 485.188154][T20718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.188247][T20718] RSP: 002b:00007f35984ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 485.188271][T20718] RAX: ffffffffffffffda RBX: 00007f3599cd5fa0 RCX: 00007f3599a8eba9 [ 485.188285][T20718] RDX: 0000000000000000 RSI: ffffffff80000800 RDI: ffffffffffffffff [ 485.188297][T20718] RBP: 00007f35984ef090 R08: 0000000000000000 R09: 0000000000000000 [ 485.188309][T20718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.188321][T20718] R13: 00007f3599cd6038 R14: 00007f3599cd5fa0 R15: 00007fffa2113ec8 [ 485.188340][T20718] [ 485.446125][T20727] FAULT_INJECTION: forcing a failure. [ 485.446125][T20727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.448733][T20726] loop5: detected capacity change from 0 to 2048 [ 485.459264][T20727] CPU: 0 UID: 0 PID: 20727 Comm: syz.3.5401 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 485.459302][T20727] Tainted: [W]=WARN [ 485.459311][T20727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.459328][T20727] Call Trace: [ 485.459375][T20727] [ 485.459387][T20727] __dump_stack+0x1d/0x30 [ 485.459482][T20727] dump_stack_lvl+0xe8/0x140 [ 485.459588][T20727] dump_stack+0x15/0x1b [ 485.459611][T20727] should_fail_ex+0x265/0x280 [ 485.459644][T20727] should_fail+0xb/0x20 [ 485.459671][T20727] should_fail_usercopy+0x1a/0x20 [ 485.459735][T20727] _copy_from_iter+0xd2/0xe80 [ 485.459913][T20727] ? __build_skb_around+0x1a0/0x200 [ 485.459999][T20727] ? __alloc_skb+0x223/0x320 [ 485.460032][T20727] netlink_sendmsg+0x471/0x6b0 [ 485.460069][T20727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.460103][T20727] __sock_sendmsg+0x142/0x180 [ 485.460203][T20727] ____sys_sendmsg+0x31e/0x4e0 [ 485.460259][T20727] ___sys_sendmsg+0x17b/0x1d0 [ 485.460312][T20727] __x64_sys_sendmsg+0xd4/0x160 [ 485.460367][T20727] x64_sys_call+0x191e/0x2ff0 [ 485.460395][T20727] do_syscall_64+0xd2/0x200 [ 485.460439][T20727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 485.460471][T20727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 485.460539][T20727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.460688][T20727] RIP: 0033:0x7f3599a8eba9 [ 485.460710][T20727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.460746][T20727] RSP: 002b:00007f35984ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.460774][T20727] RAX: ffffffffffffffda RBX: 00007f3599cd5fa0 RCX: 00007f3599a8eba9 [ 485.460795][T20727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 485.460813][T20727] RBP: 00007f35984ef090 R08: 0000000000000000 R09: 0000000000000000 [ 485.460833][T20727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.460850][T20727] R13: 00007f3599cd6038 R14: 00007f3599cd5fa0 R15: 00007fffa2113ec8 [ 485.460899][T20727] [ 485.799356][T20740] netlink: 'syz.5.5408': attribute type 3 has an invalid length. [ 485.836230][T20746] loop3: detected capacity change from 0 to 128 [ 485.852194][T20746] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.868695][T16456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=16456 comm=kworker/1:0 [ 485.997381][T20751] SELinux: failed to load policy [ 486.078738][T20757] loop1: detected capacity change from 0 to 512 [ 486.159246][T20763] loop1: detected capacity change from 0 to 1024 [ 486.237478][T20770] loop3: detected capacity change from 0 to 1024 [ 486.250605][T20778] netlink: 'syz.1.5420': attribute type 3 has an invalid length. [ 486.269008][T20770] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.285379][T20778] SELinux: Context @ is not valid (left unmapped). [ 486.423284][T20796] loop1: detected capacity change from 0 to 512 [ 486.472109][T20800] loop1: detected capacity change from 0 to 128 [ 486.482148][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 486.561160][T20810] random: crng reseeded on system resumption [ 486.580830][T20810] loop1: detected capacity change from 0 to 1024 [ 486.678137][T20822] netlink: 'syz.3.5440': attribute type 21 has an invalid length. [ 486.692952][T20822] netlink: 'syz.3.5440': attribute type 1 has an invalid length. [ 486.807824][T20825] netlink: 'syz.5.5436': attribute type 1 has an invalid length. [ 486.807843][T20825] __nla_validate_parse: 6 callbacks suppressed [ 486.807856][T20825] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5436'. [ 487.374338][T20845] netlink: 'syz.3.5447': attribute type 3 has an invalid length. [ 487.464608][T20857] tipc: Enabling of bearer rejected, failed to enable media [ 487.544347][T20866] loop5: detected capacity change from 0 to 128 [ 487.552126][T20867] netlink: 'syz.0.5455': attribute type 21 has an invalid length. [ 487.552159][T20867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5455'. [ 487.567528][T20866] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.571788][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 487.571806][ T29] audit: type=1326 audit(1757903091.019:32287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.572166][ T29] audit: type=1326 audit(1757903091.019:32288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.572335][ T29] audit: type=1326 audit(1757903091.019:32289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.572560][ T29] audit: type=1326 audit(1757903091.019:32290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.572792][ T29] audit: type=1326 audit(1757903091.019:32291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.573288][ T29] audit: type=1326 audit(1757903091.019:32292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.573401][ T29] audit: type=1326 audit(1757903091.019:32293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.573621][ T29] audit: type=1326 audit(1757903091.019:32294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.573705][ T29] audit: type=1326 audit(1757903091.019:32295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.574068][ T29] audit: type=1326 audit(1757903091.019:32296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.3.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 487.851535][T20877] loop5: detected capacity change from 0 to 1024 [ 487.944828][T20877] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.109761][T20895] SELinux: failed to load policy [ 488.138387][T20893] validate_nla: 1 callbacks suppressed [ 488.138405][T20893] netlink: 'syz.0.5464': attribute type 1 has an invalid length. [ 488.151925][T20893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5464'. [ 488.577089][T20898] loop1: detected capacity change from 0 to 2048 [ 488.583740][T20902] loop2: detected capacity change from 0 to 128 [ 488.597397][T20902] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.606688][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 488.695714][T20921] netlink: 'syz.3.5475': attribute type 3 has an invalid length. [ 488.924381][T20943] netlink: 'syz.2.5481': attribute type 21 has an invalid length. [ 488.941526][T20943] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5481'. [ 488.950692][T20943] netlink: 'syz.2.5481': attribute type 1 has an invalid length. [ 488.997290][T20947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5483'. [ 489.590034][T20983] netlink: 'syz.5.5498': attribute type 21 has an invalid length. [ 489.612981][T20983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5498'. [ 489.622093][T20983] netlink: 'syz.5.5498': attribute type 1 has an invalid length. [ 489.640048][T20987] netlink: 'syz.1.5500': attribute type 1 has an invalid length. [ 489.647943][T20987] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5500'. [ 489.657114][T20987] NCSI netlink: No device for ifindex 131092 [ 489.778043][T20999] loop5: detected capacity change from 0 to 128 [ 489.791028][T20999] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.868677][T21010] FAULT_INJECTION: forcing a failure. [ 489.868677][T21010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.868717][T21010] CPU: 0 UID: 0 PID: 21010 Comm: syz.2.5508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 489.868777][T21010] Tainted: [W]=WARN [ 489.868785][T21010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.868832][T21010] Call Trace: [ 489.868841][T21010] [ 489.868851][T21010] __dump_stack+0x1d/0x30 [ 489.868873][T21010] dump_stack_lvl+0xe8/0x140 [ 489.868952][T21010] dump_stack+0x15/0x1b [ 489.869035][T21010] should_fail_ex+0x265/0x280 [ 489.869060][T21010] should_fail+0xb/0x20 [ 489.869080][T21010] should_fail_usercopy+0x1a/0x20 [ 489.869156][T21010] strncpy_from_user+0x25/0x230 [ 489.869198][T21010] ? __kmalloc_cache_noprof+0x189/0x320 [ 489.869231][T21010] __se_sys_memfd_create+0x1ff/0x590 [ 489.869254][T21010] __x64_sys_memfd_create+0x31/0x40 [ 489.869292][T21010] x64_sys_call+0x2abe/0x2ff0 [ 489.869321][T21010] do_syscall_64+0xd2/0x200 [ 489.869355][T21010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 489.869394][T21010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 489.869434][T21010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.869462][T21010] RIP: 0033:0x7f91e9b4eba9 [ 489.869481][T21010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.869557][T21010] RSP: 002b:00007f91e85aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 489.869603][T21010] RAX: ffffffffffffffda RBX: 000000000000023f RCX: 00007f91e9b4eba9 [ 489.869619][T21010] RDX: 00007f91e85aeef0 RSI: 0000000000000000 RDI: 00007f91e9bd27e8 [ 489.869653][T21010] RBP: 0000200000000540 R08: 00007f91e85aebb7 R09: 00007f91e85aee40 [ 489.869668][T21010] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 489.869683][T21010] R13: 00007f91e85aeef0 R14: 00007f91e85aeeb0 R15: 00002000000002c0 [ 489.869705][T21010] [ 489.960401][T21018] loop1: detected capacity change from 0 to 128 [ 489.993179][T21024] netlink: 'syz.5.5515': attribute type 21 has an invalid length. [ 490.109684][T21025] netlink: 'syz.2.5514': attribute type 3 has an invalid length. [ 490.114739][T21024] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5515'. [ 490.148618][T21029] loop1: detected capacity change from 0 to 512 [ 490.156209][T21024] netlink: 'syz.5.5515': attribute type 1 has an invalid length. [ 490.190975][T21031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5518'. [ 490.218941][T21035] loop2: detected capacity change from 0 to 512 [ 490.225573][T21029] can0: slcan on ttyS3. [ 490.253337][T21029] can0 (unregistered): slcan off ttyS3. [ 490.287801][T21035] loop2: detected capacity change from 0 to 512 [ 490.305773][T21035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 490.306311][T21035] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5520: bg 0: block 248: padding at end of block bitmap is not set [ 490.306507][T21035] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5520: Failed to acquire dquot type 1 [ 490.307100][T21035] EXT4-fs (loop2): 1 truncate cleaned up [ 490.330924][T21046] FAULT_INJECTION: forcing a failure. [ 490.330924][T21046] name failslab, interval 1, probability 0, space 0, times 0 [ 490.359878][T21046] CPU: 0 UID: 0 PID: 21046 Comm: syz.5.5523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 490.359928][T21046] Tainted: [W]=WARN [ 490.359934][T21046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.359947][T21046] Call Trace: [ 490.359954][T21046] [ 490.359961][T21046] __dump_stack+0x1d/0x30 [ 490.359984][T21046] dump_stack_lvl+0xe8/0x140 [ 490.360034][T21046] dump_stack+0x15/0x1b [ 490.360051][T21046] should_fail_ex+0x265/0x280 [ 490.360078][T21046] should_failslab+0x8c/0xb0 [ 490.360177][T21046] kmem_cache_alloc_node_noprof+0x57/0x320 [ 490.360209][T21046] ? __alloc_skb+0x101/0x320 [ 490.360234][T21046] __alloc_skb+0x101/0x320 [ 490.360295][T21046] netlink_alloc_large_skb+0xba/0xf0 [ 490.360320][T21046] netlink_sendmsg+0x3cf/0x6b0 [ 490.360418][T21046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.360446][T21046] __sock_sendmsg+0x142/0x180 [ 490.360533][T21046] ____sys_sendmsg+0x31e/0x4e0 [ 490.360580][T21046] ___sys_sendmsg+0x17b/0x1d0 [ 490.360659][T21046] __x64_sys_sendmsg+0xd4/0x160 [ 490.360693][T21046] x64_sys_call+0x191e/0x2ff0 [ 490.360843][T21046] do_syscall_64+0xd2/0x200 [ 490.360919][T21046] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 490.361000][T21046] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 490.361037][T21046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.361060][T21046] RIP: 0033:0x7f424b10eba9 [ 490.361076][T21046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.361096][T21046] RSP: 002b:00007f4249b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.361150][T21046] RAX: ffffffffffffffda RBX: 00007f424b355fa0 RCX: 00007f424b10eba9 [ 490.361164][T21046] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 490.361177][T21046] RBP: 00007f4249b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 490.361254][T21046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.361267][T21046] R13: 00007f424b356038 R14: 00007f424b355fa0 R15: 00007ffdfdeea3c8 [ 490.361288][T21046] [ 490.506847][T21058] loop5: detected capacity change from 0 to 1024 [ 490.607206][T21058] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.676002][T21062] loop3: detected capacity change from 0 to 1024 [ 490.775432][T21062] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.229282][T21097] NCSI netlink: No device for ifindex 131092 [ 491.466392][T21121] loop5: detected capacity change from 0 to 512 [ 491.601906][T21136] random: crng reseeded on system resumption [ 491.650094][T21136] loop5: detected capacity change from 0 to 1024 [ 491.670491][T21136] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 491.679229][T21136] EXT4-fs (loop5): mount failed [ 491.691442][T21149] tipc: Enabling of bearer rejected, failed to enable media [ 491.739276][T21158] random: crng reseeded on system resumption [ 491.804085][T21158] loop2: detected capacity change from 0 to 1024 [ 491.815574][T21158] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 491.822056][T21158] EXT4-fs (loop2): mount failed [ 491.881958][T21183] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 491.891733][T21183] SELinux: failed to load policy [ 492.049148][T21199] loop5: detected capacity change from 0 to 512 [ 492.056691][T21199] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 492.068612][T21199] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5587: invalid indirect mapped block 4294967295 (level 0) [ 492.083651][T21199] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5587: invalid indirect mapped block 4294967295 (level 1) [ 492.098306][T21199] EXT4-fs (loop5): 1 orphan inode deleted [ 492.104070][T21199] EXT4-fs (loop5): 1 truncate cleaned up [ 492.148723][T21201] __nla_validate_parse: 11 callbacks suppressed [ 492.148738][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5588'. [ 492.194373][T21210] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 492.212956][T21210] SELinux: failed to load policy [ 492.383682][T21229] loop1: detected capacity change from 0 to 512 [ 492.420189][T21231] tipc: Enabling of bearer rejected, failed to enable media [ 492.451530][T21235] loop3: detected capacity change from 0 to 512 [ 492.540862][T21246] random: crng reseeded on system resumption [ 492.555516][T21244] loop1: detected capacity change from 0 to 1024 [ 492.572278][T21246] netlink: 464 bytes leftover after parsing attributes in process `syz.3.5605'. [ 492.622816][T21246] loop3: detected capacity change from 0 to 1024 [ 492.644851][T21246] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 492.661174][T21258] loop1: detected capacity change from 0 to 128 [ 492.677257][T21246] EXT4-fs (loop3): mount failed [ 492.765397][T21264] loop1: detected capacity change from 0 to 128 [ 492.824859][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 492.824875][ T29] audit: type=1326 audit(1757903096.269:33203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.835920][T21266] loop3: detected capacity change from 0 to 512 [ 492.858826][ T29] audit: type=1326 audit(1757903096.269:33204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.874179][T21269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5614'. [ 492.885023][ T29] audit: type=1326 audit(1757903096.269:33205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.917485][ T29] audit: type=1326 audit(1757903096.269:33206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.941187][ T29] audit: type=1326 audit(1757903096.269:33207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.964878][ T29] audit: type=1326 audit(1757903096.269:33208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 492.988538][ T29] audit: type=1326 audit(1757903096.269:33209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 493.012230][ T29] audit: type=1326 audit(1757903096.269:33210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 493.035892][ T29] audit: type=1326 audit(1757903096.269:33211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 493.059491][ T29] audit: type=1326 audit(1757903096.269:33212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.3.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3599a8eba9 code=0x7ffc0000 [ 493.175817][T21283] loop2: detected capacity change from 0 to 2048 [ 493.230951][T21288] validate_nla: 6 callbacks suppressed [ 493.230970][T21288] netlink: 'syz.2.5621': attribute type 3 has an invalid length. [ 493.350333][T21298] random: crng reseeded on system resumption [ 493.370225][T21298] netlink: 464 bytes leftover after parsing attributes in process `syz.2.5624'. [ 493.386364][T21298] loop2: detected capacity change from 0 to 1024 [ 493.411592][T21298] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 493.424221][T21298] EXT4-fs (loop2): mount failed [ 493.573229][T21315] loop2: detected capacity change from 0 to 512 [ 493.642446][T21320] loop5: detected capacity change from 0 to 2048 [ 493.710758][T21327] netlink: 'syz.5.5634': attribute type 3 has an invalid length. [ 493.818534][T21335] loop1: detected capacity change from 0 to 2048 [ 493.863553][T21337] random: crng reseeded on system resumption [ 493.869214][T21337] netlink: 464 bytes leftover after parsing attributes in process `syz.2.5638'. [ 493.886308][T21337] loop2: detected capacity change from 0 to 1024 [ 493.892675][T21340] netlink: 'syz.1.5637': attribute type 1 has an invalid length. [ 494.020899][T21344] loop3: detected capacity change from 0 to 512 [ 494.064013][T21337] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 494.064038][T21337] EXT4-fs (loop2): mount failed [ 494.299787][T21359] netlink: 'syz.5.5645': attribute type 1 has an invalid length. [ 494.302687][T21368] loop2: detected capacity change from 0 to 128 [ 494.307589][T21359] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5645'. [ 494.339075][T21368] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.591578][T21376] random: crng reseeded on system resumption [ 494.669872][T21379] netlink: 464 bytes leftover after parsing attributes in process `syz.3.5654'. [ 494.766814][T21376] loop3: detected capacity change from 0 to 1024 [ 494.795275][T21376] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 494.802572][T21381] loop1: detected capacity change from 0 to 2048 [ 494.809369][T21376] EXT4-fs (loop3): mount failed [ 494.890331][T21385] loop1: detected capacity change from 0 to 1024 [ 494.899104][T21389] loop2: detected capacity change from 0 to 512 [ 494.919583][T21385] loop1: detected capacity change from 0 to 512 [ 494.929341][T21385] EXT4-fs: Ignoring removed nobh option [ 495.299921][T21411] loop5: detected capacity change from 0 to 2048 [ 495.503092][T21411] netlink: 'syz.5.5665': attribute type 1 has an invalid length. [ 495.704627][T21423] netlink: 'syz.5.5670': attribute type 21 has an invalid length. [ 495.704660][T21423] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5670'. [ 495.704717][T21423] netlink: 'syz.5.5670': attribute type 1 has an invalid length. [ 495.761737][T21426] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5671'. [ 495.763016][T21428] loop1: detected capacity change from 0 to 128 [ 495.978641][T21450] netlink: 'syz.0.5677': attribute type 1 has an invalid length. [ 496.001555][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5678'. [ 496.836619][T21470] tipc: Enabling of bearer rejected, failed to enable media [ 496.905678][T21476] netlink: 'syz.3.5689': attribute type 21 has an invalid length. [ 496.924041][T21478] loop1: detected capacity change from 0 to 2048 [ 496.962296][T21476] netlink: 'syz.3.5689': attribute type 1 has an invalid length. [ 497.131238][T21490] geneve2: entered promiscuous mode [ 497.136524][T21490] geneve2: entered allmulticast mode [ 497.215224][T21497] tipc: Enabling of bearer rejected, failed to enable media [ 497.233696][T21494] Falling back ldisc for ttyS3. [ 497.280913][T21502] __nla_validate_parse: 1 callbacks suppressed [ 497.280933][T21502] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5699'. [ 497.296405][T21502] NCSI netlink: No device for ifindex 131092 [ 497.464271][T21513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5704'. [ 497.532014][T21518] loop2: detected capacity change from 0 to 512 [ 497.561449][T21518] EXT4-fs mount: 46 callbacks suppressed [ 497.561469][T21518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.615518][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.672477][T21529] loop2: detected capacity change from 0 to 128 [ 497.688389][T21529] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.704795][T21529] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.723734][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 497.798819][T13375] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 497.840820][ T29] kauditd_printk_skb: 955 callbacks suppressed [ 497.840834][ T29] audit: type=1326 audit(1757903101.279:34168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.840877][ T29] audit: type=1326 audit(1757903101.279:34169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841131][ T29] audit: type=1326 audit(1757903101.279:34170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841289][ T29] audit: type=1326 audit(1757903101.279:34171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841405][ T29] audit: type=1326 audit(1757903101.279:34172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841638][ T29] audit: type=1326 audit(1757903101.279:34173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841841][ T29] audit: type=1326 audit(1757903101.279:34174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.841984][ T29] audit: type=1326 audit(1757903101.279:34175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 497.859046][ T29] audit: type=1326 audit(1757903101.299:34176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 498.066258][ T29] audit: type=1326 audit(1757903101.319:34177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21544 comm="syz.2.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e9b4eba9 code=0x7ffc0000 [ 498.101009][T21552] FAULT_INJECTION: forcing a failure. [ 498.101009][T21552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.101050][T21552] CPU: 0 UID: 0 PID: 21552 Comm: syz.3.5719 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 498.101169][T21552] Tainted: [W]=WARN [ 498.101178][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.101195][T21552] Call Trace: [ 498.101202][T21552] [ 498.101211][T21552] __dump_stack+0x1d/0x30 [ 498.101239][T21552] dump_stack_lvl+0xe8/0x140 [ 498.101265][T21552] dump_stack+0x15/0x1b [ 498.101347][T21552] should_fail_ex+0x265/0x280 [ 498.101380][T21552] should_fail+0xb/0x20 [ 498.101408][T21552] should_fail_usercopy+0x1a/0x20 [ 498.101545][T21552] _copy_from_iter+0xd2/0xe80 [ 498.101583][T21552] ? __build_skb_around+0x1a0/0x200 [ 498.101615][T21552] ? __alloc_skb+0x223/0x320 [ 498.101647][T21552] netlink_sendmsg+0x471/0x6b0 [ 498.101678][T21552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.101803][T21552] __sock_sendmsg+0x142/0x180 [ 498.101836][T21552] ____sys_sendmsg+0x31e/0x4e0 [ 498.101878][T21552] ___sys_sendmsg+0x17b/0x1d0 [ 498.101955][T21552] __x64_sys_sendmsg+0xd4/0x160 [ 498.101984][T21552] x64_sys_call+0x191e/0x2ff0 [ 498.102009][T21552] do_syscall_64+0xd2/0x200 [ 498.102096][T21552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 498.102120][T21552] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 498.102199][T21552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.102225][T21552] RIP: 0033:0x7f3599a8eba9 [ 498.102243][T21552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.102265][T21552] RSP: 002b:00007f35984ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.102287][T21552] RAX: ffffffffffffffda RBX: 00007f3599cd5fa0 RCX: 00007f3599a8eba9 [ 498.102332][T21552] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 498.102347][T21552] RBP: 00007f35984ef090 R08: 0000000000000000 R09: 0000000000000000 [ 498.102362][T21552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.102403][T21552] R13: 00007f3599cd6038 R14: 00007f3599cd5fa0 R15: 00007fffa2113ec8 [ 498.102423][T21552] [ 498.148131][T21554] tipc: Enabling of bearer rejected, failed to enable media [ 498.252128][T21555] validate_nla: 4 callbacks suppressed [ 498.252148][T21555] netlink: 'syz.5.5718': attribute type 1 has an invalid length. [ 498.252217][T21555] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5718'. [ 498.981577][T21576] loop3: detected capacity change from 0 to 512 [ 499.008403][T21576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 499.121757][T21576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5728: invalid indirect mapped block 4294967295 (level 0) [ 499.175196][T21576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5728: invalid indirect mapped block 4294967295 (level 1) [ 499.275176][T21576] EXT4-fs (loop3): 1 orphan inode deleted [ 499.280968][T21576] EXT4-fs (loop3): 1 truncate cleaned up [ 499.293509][T21576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.322494][T21600] loop5: detected capacity change from 0 to 2048 [ 499.341257][T12832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.365336][T21600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.505389][T21608] netlink: 'syz.5.5737': attribute type 1 has an invalid length. [ 499.563487][T21614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58984 sclass=netlink_route_socket pid=21614 comm=syz.2.5741 [ 499.739881][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.946001][T21628] loop3: detected capacity change from 0 to 512 [ 499.950311][T21628] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 500.067835][T21628] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5747: Failed to acquire dquot type 1 [ 500.068817][T21628] EXT4-fs (loop3): 1 truncate cleaned up [ 500.103389][T21628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.117140][T21628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.288331][T21646] loop1: detected capacity change from 0 to 128 [ 500.370137][T21650] netlink: 'syz.1.5755': attribute type 3 has an invalid length. [ 500.479146][T21656] FAULT_INJECTION: forcing a failure. [ 500.479146][T21656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.492306][T21656] CPU: 0 UID: 0 PID: 21656 Comm: syz.0.5758 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 500.492415][T21656] Tainted: [W]=WARN [ 500.492421][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.492434][T21656] Call Trace: [ 500.492441][T21656] [ 500.492448][T21656] __dump_stack+0x1d/0x30 [ 500.492471][T21656] dump_stack_lvl+0xe8/0x140 [ 500.492494][T21656] dump_stack+0x15/0x1b [ 500.492546][T21656] should_fail_ex+0x265/0x280 [ 500.492577][T21656] should_fail+0xb/0x20 [ 500.492599][T21656] should_fail_usercopy+0x1a/0x20 [ 500.492645][T21656] _copy_to_user+0x20/0xa0 [ 500.492707][T21656] simple_read_from_buffer+0xb5/0x130 [ 500.492731][T21656] proc_fail_nth_read+0x10e/0x150 [ 500.492767][T21656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.492861][T21656] vfs_read+0x1a8/0x770 [ 500.492883][T21656] ? __rcu_read_unlock+0x4f/0x70 [ 500.492907][T21656] ? __fget_files+0x184/0x1c0 [ 500.492943][T21656] ksys_read+0xda/0x1a0 [ 500.492974][T21656] __x64_sys_read+0x40/0x50 [ 500.493075][T21656] x64_sys_call+0x27bc/0x2ff0 [ 500.493103][T21656] do_syscall_64+0xd2/0x200 [ 500.493139][T21656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 500.493241][T21656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.493297][T21656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.493325][T21656] RIP: 0033:0x7fce33d0d5bc [ 500.493344][T21656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 500.493423][T21656] RSP: 002b:00007fce3276f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.493442][T21656] RAX: ffffffffffffffda RBX: 00007fce33f55fa0 RCX: 00007fce33d0d5bc [ 500.493480][T21656] RDX: 000000000000000f RSI: 00007fce3276f0a0 RDI: 0000000000000004 [ 500.493496][T21656] RBP: 00007fce3276f090 R08: 0000000000000000 R09: 0000000000000000 [ 500.493512][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.493526][T21656] R13: 00007fce33f56038 R14: 00007fce33f55fa0 R15: 00007ffdc262ded8 [ 500.493545][T21656] [ 500.784959][T21667] loop2: detected capacity change from 0 to 1024 [ 500.795693][T21667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.807881][T21667] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.848586][T21664] loop1: detected capacity change from 0 to 512 [ 501.085945][T21675] netlink: 'syz.5.5763': attribute type 1 has an invalid length. [ 501.093773][T21675] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5763'. [ 501.371916][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.606710][T21695] netlink: 'syz.0.5768': attribute type 3 has an invalid length. [ 501.654281][T21700] loop1: detected capacity change from 0 to 2048 [ 501.676767][T21705] SELinux: policydb string SE Li does not match my string SE Linux [ 501.676803][T21705] SELinux: failed to load policy [ 501.744365][T21711] loop2: detected capacity change from 0 to 1024 [ 501.762506][T21713] loop1: detected capacity change from 0 to 128 [ 501.786084][T21711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.786181][T21711] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.798466][T21718] netlink: 'syz.5.5780': attribute type 21 has an invalid length. [ 501.798580][T21718] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5780'. [ 501.798599][T21718] netlink: 'syz.5.5780': attribute type 1 has an invalid length. [ 501.891848][T21728] netlink: 'syz.5.5785': attribute type 3 has an invalid length. [ 501.926481][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.949700][T21736] gre1: entered promiscuous mode [ 502.076626][T21748] netlink: 'syz.0.5793': attribute type 12 has an invalid length. [ 502.084617][T21748] netlink: 'syz.0.5793': attribute type 29 has an invalid length. [ 502.092625][T21748] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5793'. [ 502.101747][T21748] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5793'. [ 502.190966][T21756] loop5: detected capacity change from 0 to 1024 [ 502.200160][T21759] tipc: Enabling of bearer rejected, failed to enable media [ 502.220204][T21756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.237153][T21756] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.400665][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.438299][T21778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5805'. [ 502.645238][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5811'. [ 502.654407][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5811'. [ 502.711572][T21800] loop2: detected capacity change from 0 to 1024 [ 502.730333][T21800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.732512][T21802] loop1: detected capacity change from 0 to 2048 [ 502.754087][T21800] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.754259][T21805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21805 comm=syz.5.5811 [ 502.777101][T21805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21805 comm=syz.5.5811 [ 502.790166][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5811'. [ 502.801880][T21805] vxlan0: entered promiscuous mode [ 502.808597][ T1633] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.837107][ T1633] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.859529][ T1633] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.867891][ T1633] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.904796][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 502.904813][ T29] audit: type=1326 audit(1757903106.349:34467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 502.935832][ T29] audit: type=1326 audit(1757903106.379:34468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 502.959533][ T29] audit: type=1326 audit(1757903106.379:34469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 502.983289][ T29] audit: type=1326 audit(1757903106.379:34470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.008045][ T29] audit: type=1326 audit(1757903106.449:34471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.031966][ T29] audit: type=1326 audit(1757903106.449:34472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.055623][ T29] audit: type=1326 audit(1757903106.449:34473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.079366][ T29] audit: type=1326 audit(1757903106.449:34474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.102913][ T29] audit: type=1326 audit(1757903106.449:34475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.136267][ T29] audit: type=1326 audit(1757903106.449:34476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.0.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fce33d0eba9 code=0x7ffc0000 [ 503.165393][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.288759][T21826] FAULT_INJECTION: forcing a failure. [ 503.288759][T21826] name failslab, interval 1, probability 0, space 0, times 0 [ 503.301489][T21826] CPU: 1 UID: 0 PID: 21826 Comm: syz.1.5823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 503.301521][T21826] Tainted: [W]=WARN [ 503.301534][T21826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.301549][T21826] Call Trace: [ 503.301573][T21826] [ 503.301580][T21826] __dump_stack+0x1d/0x30 [ 503.301606][T21826] dump_stack_lvl+0xe8/0x140 [ 503.301630][T21826] dump_stack+0x15/0x1b [ 503.301649][T21826] should_fail_ex+0x265/0x280 [ 503.301688][T21826] should_failslab+0x8c/0xb0 [ 503.301722][T21826] kmem_cache_alloc_node_noprof+0x57/0x320 [ 503.301763][T21826] ? __alloc_skb+0x101/0x320 [ 503.301794][T21826] __alloc_skb+0x101/0x320 [ 503.301899][T21826] ? audit_log_start+0x365/0x6c0 [ 503.301942][T21826] audit_log_start+0x380/0x6c0 [ 503.301986][T21826] audit_seccomp+0x48/0x100 [ 503.302021][T21826] ? __seccomp_filter+0x68c/0x10d0 [ 503.302055][T21826] __seccomp_filter+0x69d/0x10d0 [ 503.302080][T21826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.302167][T21826] ? vfs_write+0x7e8/0x960 [ 503.302278][T21826] __secure_computing+0x82/0x150 [ 503.302306][T21826] syscall_trace_enter+0xcf/0x1e0 [ 503.302339][T21826] do_syscall_64+0xac/0x200 [ 503.302382][T21826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 503.302476][T21826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 503.302510][T21826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.302539][T21826] RIP: 0033:0x7f8f75f1eba9 [ 503.302589][T21826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.302613][T21826] RSP: 002b:00007f8f74987038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 503.302692][T21826] RAX: ffffffffffffffda RBX: 00007f8f76165fa0 RCX: 00007f8f75f1eba9 [ 503.302707][T21826] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000069 [ 503.302723][T21826] RBP: 00007f8f74987090 R08: 0000000000000000 R09: 0000000000000000 [ 503.302738][T21826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.302750][T21826] R13: 00007f8f76166038 R14: 00007f8f76165fa0 R15: 00007ffd2f22c2b8 [ 503.302773][T21826] [ 503.573386][T21828] loop3: detected capacity change from 0 to 1024 [ 503.638848][T21828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.652012][T21828] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.741332][T21845] loop1: detected capacity change from 0 to 1024 [ 503.752903][T21845] loop1: detected capacity change from 0 to 512 [ 503.759439][T21845] EXT4-fs: Ignoring removed nobh option [ 504.034926][T12832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.233153][T21856] tipc: Enabling of bearer rejected, failed to enable media [ 504.259563][T21858] loop3: detected capacity change from 0 to 2048 [ 504.301655][T21858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.411741][T21875] validate_nla: 3 callbacks suppressed [ 504.411758][T21875] netlink: 'syz.3.5835': attribute type 1 has an invalid length. [ 504.429513][T21870] loop2: detected capacity change from 0 to 512 [ 504.437809][T21870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 504.454998][T21870] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5840: invalid indirect mapped block 4294967295 (level 0) [ 504.456285][T21877] gre1: entered promiscuous mode [ 504.494068][T21870] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5840: invalid indirect mapped block 4294967295 (level 1) [ 504.534128][T21870] EXT4-fs (loop2): 1 orphan inode deleted [ 504.539964][T21870] EXT4-fs (loop2): 1 truncate cleaned up [ 504.562427][T21870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.577636][T21880] loop1: detected capacity change from 0 to 2048 [ 504.633408][T21884] netlink: 'syz.0.5845': attribute type 21 has an invalid length. [ 504.642243][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.644470][T21884] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5845'. [ 504.660432][T21884] netlink: 'syz.0.5845': attribute type 1 has an invalid length. [ 504.740094][T12832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.943339][T21911] loop5: detected capacity change from 0 to 1024 [ 504.955240][T21907] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 504.962443][T21911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.963513][T21907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5852'. [ 504.975748][T21911] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.345036][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.597145][T21932] loop1: detected capacity change from 0 to 2048 [ 505.674755][T21936] netlink: 'syz.1.5863': attribute type 1 has an invalid length. [ 505.712865][T21935] loop2: detected capacity change from 0 to 512 [ 505.719961][T21935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 505.740637][T21935] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5864: invalid indirect mapped block 4294967295 (level 0) [ 505.755851][T21935] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5864: invalid indirect mapped block 4294967295 (level 1) [ 505.770481][T21935] EXT4-fs (loop2): 1 orphan inode deleted [ 505.776265][T21935] EXT4-fs (loop2): 1 truncate cleaned up [ 505.800245][T21935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.885531][T13375] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.987490][T21949] tipc: Enabling of bearer rejected, failed to enable media [ 506.224560][T21967] loop5: detected capacity change from 0 to 512 [ 506.234135][T21967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 506.251030][T21967] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5878: invalid indirect mapped block 4294967295 (level 0) [ 506.266383][T21967] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5878: invalid indirect mapped block 4294967295 (level 1) [ 506.301642][T21967] EXT4-fs (loop5): 1 orphan inode deleted [ 506.307501][T21967] EXT4-fs (loop5): 1 truncate cleaned up [ 506.322240][T21967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.363481][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.527337][T21972] chnl_net:caif_netlink_parms(): no params data found [ 506.540340][T21993] SELinux: policydb version 0 does not match my version range 15-35 [ 506.549282][T21993] SELinux: failed to load policy [ 506.586586][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.593725][T21972] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.603581][T21972] bridge_slave_0: entered allmulticast mode [ 506.610289][T21972] bridge_slave_0: entered promiscuous mode [ 506.617721][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.624873][T21972] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.632313][T21972] bridge_slave_1: entered allmulticast mode [ 506.639091][T21972] bridge_slave_1: entered promiscuous mode [ 506.680240][T22007] gre1: entered promiscuous mode [ 506.705445][T22009] FAULT_INJECTION: forcing a failure. [ 506.705445][T22009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.707173][T21972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.718562][T22009] CPU: 0 UID: 0 PID: 22009 Comm: syz.1.5889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 506.718663][T22009] Tainted: [W]=WARN [ 506.718672][T22009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.718692][T22009] Call Trace: [ 506.718721][T22009] [ 506.718731][T22009] __dump_stack+0x1d/0x30 [ 506.718762][T22009] dump_stack_lvl+0xe8/0x140 [ 506.718789][T22009] dump_stack+0x15/0x1b [ 506.718813][T22009] should_fail_ex+0x265/0x280 [ 506.718849][T22009] should_fail+0xb/0x20 [ 506.718888][T22009] should_fail_usercopy+0x1a/0x20 [ 506.718924][T22009] strncpy_from_user+0x25/0x230 [ 506.718994][T22009] ? kmem_cache_alloc_noprof+0x186/0x310 [ 506.719022][T22009] ? getname_flags+0x80/0x3b0 [ 506.719086][T22009] getname_flags+0xae/0x3b0 [ 506.719151][T22009] getname_uflags+0x21/0x30 [ 506.719191][T22009] __x64_sys_execveat+0x5d/0x90 [ 506.719257][T22009] x64_sys_call+0x1fec/0x2ff0 [ 506.719287][T22009] do_syscall_64+0xd2/0x200 [ 506.719340][T22009] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 506.719375][T22009] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 506.719418][T22009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.719461][T22009] RIP: 0033:0x7f8f75f1eba9 [ 506.719483][T22009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.719510][T22009] RSP: 002b:00007f8f74987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 506.719536][T22009] RAX: ffffffffffffffda RBX: 00007f8f76165fa0 RCX: 00007f8f75f1eba9 [ 506.719554][T22009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 506.719572][T22009] RBP: 00007f8f74987090 R08: 0000000000001000 R09: 0000000000000000 [ 506.719626][T22009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.719643][T22009] R13: 00007f8f76166038 R14: 00007f8f76165fa0 R15: 00007ffd2f22c2b8 [ 506.719670][T22009] [ 506.926366][T21972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.953846][T22015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=22015 comm=syz.0.5892 [ 506.995324][T21972] team0: Port device team_slave_0 added [ 507.019961][T21972] team0: Port device team_slave_1 added [ 507.041269][ T1633] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.052305][T22021] Dead loop on virtual device ipvlan0, fix it urgently! [ 507.096228][T21972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.103309][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.129234][T21972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.171978][T22029] loop3: detected capacity change from 0 to 512 [ 507.178903][T22029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 507.241519][T22029] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5898: invalid indirect mapped block 4294967295 (level 0) [ 507.256819][T22029] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5898: invalid indirect mapped block 4294967295 (level 1) [ 507.283574][T22029] EXT4-fs (loop3): 1 orphan inode deleted [ 507.289434][T22029] EXT4-fs (loop3): 1 truncate cleaned up [ 507.309258][ T1633] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.330091][T22029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.345464][T21972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.352500][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.378566][T21972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.461982][ T1633] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.481719][T21972] hsr_slave_0: entered promiscuous mode [ 507.488153][T21972] hsr_slave_1: entered promiscuous mode [ 507.495563][T21972] debugfs: 'hsr0' already exists in 'hsr' [ 507.501302][T21972] Cannot create hsr debugfs directory [ 507.535677][ T1633] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.581561][T12832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.806115][T22050] loop1: detected capacity change from 0 to 128 [ 507.856148][ T1633] $Hÿ (unregistering): Released all slaves [ 507.864948][ T1633] bond1 (unregistering): Released all slaves [ 507.873514][ T1633] bond2 (unregistering): Released all slaves [ 507.881805][ T1633] bond3 (unregistering): Released all slaves [ 507.924415][ T1633] hsr_slave_0: left promiscuous mode [ 507.930248][ T1633] hsr_slave_1: left promiscuous mode [ 507.940046][ T1633] veth1_macvtap: left promiscuous mode [ 507.946265][ T1633] veth0_macvtap: left promiscuous mode [ 507.951935][ T1633] veth1_vlan: left promiscuous mode [ 507.957358][ T1633] veth0_vlan: left promiscuous mode [ 508.060984][T22062] loop1: detected capacity change from 0 to 1024 [ 508.087646][T22055] loop1: detected capacity change from 0 to 512 [ 508.096629][T22055] EXT4-fs: Ignoring removed nobh option [ 508.102230][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 508.102248][ T29] audit: type=1400 audit(1757903111.539:34689): avc: denied { watch watch_reads } for pid=22064 comm="syz.0.5910" path="/563/file0" dev="tmpfs" ino=2990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 508.586613][T21972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.597729][T21972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.620488][T21972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.634708][T21972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.662523][T22077] loop1: detected capacity change from 0 to 512 [ 508.677113][T22077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.684041][T22077] EXT4-fs: test_dummy_encryption option not supported [ 508.710456][T22082] tipc: Enabling of bearer rejected, failed to enable media [ 508.728737][T21972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.749504][T21972] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.756260][T22084] loop1: detected capacity change from 0 to 128 [ 508.759462][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.769684][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.784376][T19629] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.791494][T19629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.827394][T22091] loop5: detected capacity change from 0 to 128 [ 508.842363][T22091] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 508.868351][T22091] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.909908][T21972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.961060][T16265] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.050288][T21972] veth0_vlan: entered promiscuous mode [ 509.083618][T22120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5924'. [ 509.084390][T21972] veth1_vlan: entered promiscuous mode [ 509.112273][T21972] veth0_macvtap: entered promiscuous mode [ 509.141856][T21972] veth1_macvtap: entered promiscuous mode [ 509.157203][T21972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.186462][T21972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.196145][ T1805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.196235][ T1805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.196277][ T1805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.196415][ T1805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.282333][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 509.282358][T22135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5929'. [ 509.282380][T22135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5929'. [ 509.407348][T22139] loop2: detected capacity change from 0 to 1024 [ 509.425870][T22139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.462025][T22139] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.694890][ T29] audit: type=1326 audit(1757903113.139:34690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fce33d05b67 code=0x0 [ 509.749965][ T29] audit: type=1326 audit(1757903113.189:34691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce33d05b67 code=0x7ffc0000 [ 509.750104][ T29] audit: type=1326 audit(1757903113.189:34692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce33caada9 code=0x7ffc0000 [ 509.750361][ T29] audit: type=1326 audit(1757903113.189:34693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce33d05b67 code=0x7ffc0000 [ 509.750586][ T29] audit: type=1326 audit(1757903113.189:34694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce33caada9 code=0x7ffc0000 [ 509.750812][ T29] audit: type=1326 audit(1757903113.189:34695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce33d05b67 code=0x7ffc0000 [ 509.751192][ T29] audit: type=1326 audit(1757903113.189:34696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce33caada9 code=0x7ffc0000 [ 509.751525][ T29] audit: type=1326 audit(1757903113.189:34697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce33d05b67 code=0x7ffc0000 [ 509.751630][ T29] audit: type=1326 audit(1757903113.189:34698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22144 comm="syz.0.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce33caada9 code=0x7ffc0000 [ 509.868252][T21972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.218601][T22171] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 510.255992][T22172] loop5: detected capacity change from 0 to 512 [ 510.261383][T22172] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 510.264830][T22172] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5940: invalid indirect mapped block 4294967295 (level 0) [ 510.337375][T22174] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 510.444864][T22172] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5940: invalid indirect mapped block 4294967295 (level 1) [ 510.475687][T22172] EXT4-fs (loop5): 1 orphan inode deleted [ 510.481516][T22172] EXT4-fs (loop5): 1 truncate cleaned up [ 510.494700][T22181] loop2: detected capacity change from 0 to 1024 [ 510.521855][T22172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.578623][T22181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.609206][T22181] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.706136][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.782959][T22191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5947'. [ 510.910612][T22213] netlink: 'syz.0.5949': attribute type 21 has an invalid length. [ 510.916668][T22211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5950'. [ 510.927044][T21972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.952962][T22213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5949'. [ 510.962135][T22213] netlink: 'syz.0.5949': attribute type 1 has an invalid length. [ 511.003938][T22178] chnl_net:caif_netlink_parms(): no params data found [ 511.024230][T22219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5952'. [ 511.106419][T22178] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.113714][T22178] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.120962][T22178] bridge_slave_0: entered allmulticast mode [ 511.128923][T22178] bridge_slave_0: entered promiscuous mode [ 511.135931][T22178] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.143094][T22178] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.159387][T22178] bridge_slave_1: entered allmulticast mode [ 511.172332][T22178] bridge_slave_1: entered promiscuous mode [ 511.213919][T22178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.245243][T22178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.279162][T22249] FAULT_INJECTION: forcing a failure. [ 511.279162][T22249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.292275][T22249] CPU: 0 UID: 0 PID: 22249 Comm: syz.0.5965 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.292427][T22249] Tainted: [W]=WARN [ 511.292437][T22249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.292454][T22249] Call Trace: [ 511.292463][T22249] [ 511.292471][T22249] __dump_stack+0x1d/0x30 [ 511.292541][T22249] dump_stack_lvl+0xe8/0x140 [ 511.292567][T22249] dump_stack+0x15/0x1b [ 511.292590][T22249] should_fail_ex+0x265/0x280 [ 511.292619][T22249] should_fail+0xb/0x20 [ 511.292715][T22249] should_fail_usercopy+0x1a/0x20 [ 511.292748][T22249] _copy_from_user+0x1c/0xb0 [ 511.292788][T22249] __sys_sendto+0x19e/0x330 [ 511.292837][T22249] __x64_sys_sendto+0x76/0x90 [ 511.292932][T22249] x64_sys_call+0x2d05/0x2ff0 [ 511.292961][T22249] do_syscall_64+0xd2/0x200 [ 511.293032][T22249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.293064][T22249] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.293094][T22249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.293121][T22249] RIP: 0033:0x7fce33d0eba9 [ 511.293154][T22249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.293212][T22249] RSP: 002b:00007fce3276f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.293304][T22249] RAX: ffffffffffffffda RBX: 00007fce33f55fa0 RCX: 00007fce33d0eba9 [ 511.293349][T22249] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000003 [ 511.293432][T22249] RBP: 00007fce3276f090 R08: 0000200000000540 R09: 000000000000001c [ 511.293446][T22249] R10: 000000000404c844 R11: 0000000000000246 R12: 0000000000000001 [ 511.293463][T22249] R13: 00007fce33f56038 R14: 00007fce33f55fa0 R15: 00007ffdc262ded8 [ 511.293485][T22249] [ 511.495387][T22245] tipc: Enabling of bearer rejected, failed to enable media [ 511.506577][T22178] team0: Port device team_slave_0 added [ 511.517005][T22178] team0: Port device team_slave_1 added [ 511.547902][T22178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.554974][T22178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.580986][T22178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.624641][T22178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.631759][T22178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.657846][T22178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.754348][T22264] netlink: 'syz.5.5969': attribute type 21 has an invalid length. [ 511.789915][T22264] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5969'. [ 511.799120][T22264] netlink: 'syz.5.5969': attribute type 1 has an invalid length. [ 511.834221][T22178] hsr_slave_0: entered promiscuous mode [ 511.840960][T22178] hsr_slave_1: entered promiscuous mode [ 512.008634][T22284] tipc: Enabling of bearer rejected, failed to enable media [ 512.020342][T22178] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.068492][T22290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5981'. [ 512.085924][T22178] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.151768][T22178] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.172696][T22301] loop3: detected capacity change from 0 to 512 [ 512.183567][T22301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.183887][T22303] gre1: entered promiscuous mode [ 512.203391][T22301] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5982: invalid indirect mapped block 4294967295 (level 0) [ 512.219207][T22301] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5982: invalid indirect mapped block 4294967295 (level 1) [ 512.234323][T22301] EXT4-fs (loop3): 1 orphan inode deleted [ 512.234762][T22178] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.240080][T22301] EXT4-fs (loop3): 1 truncate cleaned up [ 512.256104][T22301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.365771][T12832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.425484][T22317] FAULT_INJECTION: forcing a failure. [ 512.425484][T22317] name failslab, interval 1, probability 0, space 0, times 0 [ 512.438316][T22317] CPU: 1 UID: 0 PID: 22317 Comm: syz.3.5988 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 512.438355][T22317] Tainted: [W]=WARN [ 512.438361][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.438390][T22317] Call Trace: [ 512.438443][T22317] [ 512.438452][T22317] __dump_stack+0x1d/0x30 [ 512.438476][T22317] dump_stack_lvl+0xe8/0x140 [ 512.438510][T22317] dump_stack+0x15/0x1b [ 512.438531][T22317] should_fail_ex+0x265/0x280 [ 512.438556][T22317] should_failslab+0x8c/0xb0 [ 512.438580][T22317] kmem_cache_alloc_noprof+0x50/0x310 [ 512.438673][T22317] ? audit_log_start+0x365/0x6c0 [ 512.438781][T22317] audit_log_start+0x365/0x6c0 [ 512.438824][T22317] audit_seccomp+0x48/0x100 [ 512.438961][T22317] ? __seccomp_filter+0x68c/0x10d0 [ 512.438984][T22317] __seccomp_filter+0x69d/0x10d0 [ 512.439006][T22317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 512.439042][T22317] ? vfs_write+0x7e8/0x960 [ 512.439079][T22317] __secure_computing+0x82/0x150 [ 512.439107][T22317] syscall_trace_enter+0xcf/0x1e0 [ 512.439188][T22317] do_syscall_64+0xac/0x200 [ 512.439230][T22317] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 512.439262][T22317] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 512.439345][T22317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.439381][T22317] RIP: 0033:0x7f3599a8eba9 [ 512.439401][T22317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.439424][T22317] RSP: 002b:00007f35984ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 512.439448][T22317] RAX: ffffffffffffffda RBX: 00007f3599cd5fa0 RCX: 00007f3599a8eba9 [ 512.439463][T22317] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 512.439501][T22317] RBP: 00007f35984ef090 R08: 0000000000000000 R09: 0000000000000000 [ 512.439515][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.439526][T22317] R13: 00007f3599cd6038 R14: 00007f3599cd5fa0 R15: 00007fffa2113ec8 [ 512.439551][T22317] [ 512.446276][T22178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.640457][T22321] random: crng reseeded on system resumption [ 512.659270][T22178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.683136][T22178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.797732][T22321] loop2: detected capacity change from 0 to 1024 [ 512.825482][T22321] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 512.835019][T22178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.836419][T22321] EXT4-fs (loop2): mount failed [ 512.904535][T22178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.931954][T22178] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.952616][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.959913][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.991997][T19631] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.999158][T19631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.136272][T22178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.146806][T22178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.197412][T22353] tipc: Started in network mode [ 513.202433][T22353] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 513.211609][T22353] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 513.220084][T22353] tipc: Enabled bearer , priority 10 [ 513.235045][ T29] kauditd_printk_skb: 2391 callbacks suppressed [ 513.235061][ T29] audit: type=1326 audit(1757903116.679:37088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.294161][T22178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.463677][ T29] audit: type=1326 audit(1757903116.709:37089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.487393][ T29] audit: type=1326 audit(1757903116.709:37090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.511141][ T29] audit: type=1326 audit(1757903116.709:37091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.534759][ T29] audit: type=1326 audit(1757903116.709:37092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.558452][ T29] audit: type=1326 audit(1757903116.709:37093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.582153][ T29] audit: type=1326 audit(1757903116.709:37094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.605796][ T29] audit: type=1326 audit(1757903116.709:37095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.629434][ T29] audit: type=1326 audit(1757903116.709:37096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.653065][ T29] audit: type=1326 audit(1757903116.709:37097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22355 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f424b10eba9 code=0x7ffc0000 [ 513.734190][T22178] veth0_vlan: entered promiscuous mode [ 513.757470][T22378] loop2: detected capacity change from 0 to 1024 [ 513.763167][T22178] veth1_vlan: entered promiscuous mode [ 513.789752][T22178] veth0_macvtap: entered promiscuous mode [ 513.799128][T22378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.812248][T22378] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.827519][T22178] veth1_macvtap: entered promiscuous mode [ 513.846228][T22178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.855978][T22178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.875153][ T1805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.896021][ T1805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.910435][T22373] loop5: detected capacity change from 0 to 512 [ 513.929161][ T1805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.938459][ T1805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.966665][T22373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 513.986961][T22390] gre1: entered promiscuous mode [ 514.004015][T22373] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.6003: invalid indirect mapped block 4294967295 (level 0) [ 514.040222][T22373] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.6003: invalid indirect mapped block 4294967295 (level 1) [ 514.074807][T22373] EXT4-fs (loop5): 1 orphan inode deleted [ 514.080676][T22373] EXT4-fs (loop5): 1 truncate cleaned up [ 514.103566][T22397] loop1: detected capacity change from 0 to 128 [ 514.111688][T22373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.125688][T22399] netlink: 'syz.0.6010': attribute type 21 has an invalid length. [ 514.166287][T22399] __nla_validate_parse: 2 callbacks suppressed [ 514.166324][T22399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6010'. [ 514.166724][T22401] loop1: detected capacity change from 0 to 128 [ 514.172575][T22399] netlink: 'syz.0.6010': attribute type 1 has an invalid length. [ 514.195962][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.213290][ T3372] tipc: Node number set to 1 [ 514.230934][T21972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.326780][T22412] loop5: detected capacity change from 0 to 512 [ 514.344401][T22419] loop2: detected capacity change from 0 to 512 [ 514.351157][T22419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.353114][T22412] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 514.375843][T22419] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6013: invalid indirect mapped block 4294967295 (level 0) [ 514.397227][T22424] loop1: detected capacity change from 0 to 164 [ 514.413677][T22424] Unable to read rock-ridge attributes [ 514.419522][T22419] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6013: invalid indirect mapped block 4294967295 (level 1) [ 514.435758][T22424] Unable to read rock-ridge attributes [ 514.436279][T22419] EXT4-fs (loop2): 1 orphan inode deleted [ 514.447111][T22419] EXT4-fs (loop2): 1 truncate cleaned up [ 514.456560][T22419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.468822][T22412] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.6014: invalid indirect mapped block 4294967295 (level 0) [ 514.469621][T22424] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 514.505808][T22412] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.6014: invalid indirect mapped block 4294967295 (level 1) [ 514.530373][T22424] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6018'. [ 514.559605][T22412] EXT4-fs (loop5): 1 orphan inode deleted [ 514.559989][T21972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.565401][T22412] EXT4-fs (loop5): 1 truncate cleaned up [ 514.581118][T22412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.608409][T22437] loop1: detected capacity change from 0 to 128 [ 514.685280][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.736410][T22449] netlink: 'syz.1.6026': attribute type 21 has an invalid length. [ 514.751046][T22449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6026'. [ 514.760180][T22449] netlink: 'syz.1.6026': attribute type 1 has an invalid length. [ 514.768203][T22410] chnl_net:caif_netlink_parms(): no params data found [ 514.912781][T22410] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.919987][T22410] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.938316][T22410] bridge_slave_0: entered allmulticast mode [ 514.953747][T22410] bridge_slave_0: entered promiscuous mode [ 515.005120][T22410] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.012244][T22410] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.039407][T22410] bridge_slave_1: entered allmulticast mode [ 515.048223][T22410] bridge_slave_1: entered promiscuous mode [ 515.256553][T22485] netlink: 'syz.0.6038': attribute type 21 has an invalid length. [ 515.304718][T22489] FAULT_INJECTION: forcing a failure. [ 515.304718][T22489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.317975][T22489] CPU: 1 UID: 0 PID: 22489 Comm: syz.2.6040 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.318077][T22489] Tainted: [W]=WARN [ 515.318083][T22489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.318094][T22489] Call Trace: [ 515.318100][T22489] [ 515.318107][T22489] __dump_stack+0x1d/0x30 [ 515.318126][T22489] dump_stack_lvl+0xe8/0x140 [ 515.318142][T22489] dump_stack+0x15/0x1b [ 515.318223][T22489] should_fail_ex+0x265/0x280 [ 515.318278][T22489] should_fail+0xb/0x20 [ 515.318297][T22489] should_fail_usercopy+0x1a/0x20 [ 515.318320][T22489] _copy_from_user+0x1c/0xb0 [ 515.318449][T22489] ___sys_sendmsg+0xc1/0x1d0 [ 515.318507][T22489] __x64_sys_sendmsg+0xd4/0x160 [ 515.318536][T22489] x64_sys_call+0x191e/0x2ff0 [ 515.318563][T22489] do_syscall_64+0xd2/0x200 [ 515.318593][T22489] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.318615][T22489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 515.318671][T22489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.318691][T22489] RIP: 0033:0x7f55117beba9 [ 515.318705][T22489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.318788][T22489] RSP: 002b:00007f551021f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.318805][T22489] RAX: ffffffffffffffda RBX: 00007f5511a05fa0 RCX: 00007f55117beba9 [ 515.318817][T22489] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 515.318828][T22489] RBP: 00007f551021f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.318839][T22489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.318865][T22489] R13: 00007f5511a06038 R14: 00007f5511a05fa0 R15: 00007ffdc7dc8338 [ 515.318899][T22489] [ 515.605471][ T383] bond0 (unregistering): Released all slaves [ 515.614380][ T383] bond1 (unregistering): Released all slaves [ 515.630060][T22485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6038'. [ 515.639233][T22485] netlink: 'syz.0.6038': attribute type 1 has an invalid length. [ 515.648994][T22410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.668971][T22410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.689486][ T383] tipc: Left network mode [ 515.714536][ T383] hsr_slave_0: left promiscuous mode [ 515.725020][ T383] hsr_slave_1: left promiscuous mode [ 515.801485][T22511] tipc: Enabling of bearer rejected, failed to enable media [ 515.811561][T22410] team0: Port device team_slave_0 added [ 515.821356][T22410] team0: Port device team_slave_1 added [ 515.840846][T22521] FAULT_INJECTION: forcing a failure. [ 515.840846][T22521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.854083][T22521] CPU: 0 UID: 0 PID: 22521 Comm: syz.2.6055 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.854126][T22521] Tainted: [W]=WARN [ 515.854145][T22521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.854162][T22521] Call Trace: [ 515.854170][T22521] [ 515.854179][T22521] __dump_stack+0x1d/0x30 [ 515.854212][T22521] dump_stack_lvl+0xe8/0x140 [ 515.854235][T22521] dump_stack+0x15/0x1b [ 515.854252][T22521] should_fail_ex+0x265/0x280 [ 515.854286][T22521] should_fail+0xb/0x20 [ 515.854308][T22521] should_fail_usercopy+0x1a/0x20 [ 515.854334][T22521] _copy_from_user+0x1c/0xb0 [ 515.854426][T22521] __sys_bpf+0x178/0x7b0 [ 515.854514][T22521] __x64_sys_bpf+0x41/0x50 [ 515.854540][T22521] x64_sys_call+0x2aea/0x2ff0 [ 515.854562][T22521] do_syscall_64+0xd2/0x200 [ 515.854675][T22521] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.854701][T22521] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 515.854732][T22521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.854754][T22521] RIP: 0033:0x7f55117beba9 [ 515.854782][T22521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.854854][T22521] RSP: 002b:00007f551021f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.854874][T22521] RAX: ffffffffffffffda RBX: 00007f5511a05fa0 RCX: 00007f55117beba9 [ 515.854887][T22521] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000001 [ 515.854899][T22521] RBP: 00007f551021f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.854913][T22521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.854925][T22521] R13: 00007f5511a06038 R14: 00007f5511a05fa0 R15: 00007ffdc7dc8338 [ 515.854945][T22521] [ 515.861033][T22410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.043602][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.069693][T22410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.083852][T22410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.090900][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.116872][T22410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.161945][T22410] hsr_slave_0: entered promiscuous mode [ 516.170819][T22410] hsr_slave_1: entered promiscuous mode [ 516.178024][T22410] debugfs: 'hsr0' already exists in 'hsr' [ 516.183827][T22410] Cannot create hsr debugfs directory [ 516.376447][T22557] tipc: Enabling of bearer rejected, failed to enable media [ 516.719764][T22410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.735071][T22410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.761404][T22410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.775121][T22410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.841951][T22595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6077'. [ 516.866076][T22585] loop5: detected capacity change from 0 to 1024 [ 516.874123][T22410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.884768][T22585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.901604][T22410] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.908961][T22585] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.933500][T19631] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.940625][T19631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.952910][T19631] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.959998][T19631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.977545][T22410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.987956][T22410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.106342][T16265] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.118827][T22410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.263182][T22410] veth0_vlan: entered promiscuous mode [ 517.280669][T22410] veth1_vlan: entered promiscuous mode [ 517.359576][T22410] veth0_macvtap: entered promiscuous mode [ 517.384726][T22410] veth1_macvtap: entered promiscuous mode [ 517.406331][T22410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.419580][T22410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.450597][T19093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.472961][T22587] ================================================================== [ 517.481094][T22587] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 517.488134][T22587] [ 517.490467][T22587] read-write to 0xffff888237d29d64 of 4 bytes by task 16456 on cpu 1: [ 517.498608][T22587] wq_worker_running+0x95/0x120 [ 517.503453][T22587] schedule_timeout+0xb7/0x170 [ 517.508211][T22587] msleep+0x50/0x90 [ 517.512020][T22587] nsim_fib_event_work+0x14a2/0x21a0 [ 517.517306][T22587] process_scheduled_works+0x4cb/0x9d0 [ 517.522771][T22587] worker_thread+0x582/0x770 [ 517.527366][T22587] kthread+0x489/0x510 [ 517.531429][T22587] ret_from_fork+0x11f/0x1b0 [ 517.536039][T22587] ret_from_fork_asm+0x1a/0x30 [ 517.540822][T22587] [ 517.543139][T22587] read to 0xffff888237d29d64 of 4 bytes by task 22587 on cpu 0: [ 517.550777][T22587] kick_pool+0x49/0x2d0 [ 517.554930][T22587] __queue_work+0x8cb/0xb50 [ 517.559427][T22587] queue_work_on+0xd1/0x160 [ 517.563927][T22587] wg_packet_send_staged_packets+0x83d/0xab0 [ 517.569904][T22587] wg_packet_rx_poll+0xeaa/0x1160 [ 517.574928][T22587] __napi_poll+0x63/0x310 [ 517.579260][T22587] napi_threaded_poll_loop+0x18a/0x4a0 [ 517.584736][T22587] napi_threaded_poll+0xda/0x160 [ 517.589693][T22587] kthread+0x489/0x510 [ 517.593758][T22587] ret_from_fork+0x11f/0x1b0 [ 517.598349][T22587] ret_from_fork_asm+0x1a/0x30 [ 517.603121][T22587] [ 517.605439][T22587] value changed: 0x00000000 -> 0x00000001 [ 517.611153][T22587] [ 517.613466][T22587] Reported by Kernel Concurrency Sanitizer on: [ 517.619607][T22587] CPU: 0 UID: 0 PID: 22587 Comm: napi/wg0-0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.630980][T22587] Tainted: [W]=WARN [ 517.634835][T22587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.644881][T22587] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.672111][T19093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.703397][T19093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.741537][ T1959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.035660][T19629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.095990][T19629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.167947][T19629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.235560][T19629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.347616][T19629] bridge_slave_1: left allmulticast mode [ 518.353411][T19629] bridge_slave_1: left promiscuous mode [ 518.359099][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.366904][T19629] bridge_slave_0: left allmulticast mode [ 518.372551][T19629] bridge_slave_0: left promiscuous mode [ 518.378259][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.465356][T19629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.475440][T19629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.485114][T19629] bond0 (unregistering): Released all slaves [ 518.546909][T19629] hsr_slave_0: left promiscuous mode [ 518.552551][T19629] hsr_slave_1: left promiscuous mode [ 518.558415][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.565815][T19629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.573443][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.580819][T19629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.590924][T19629] veth1_macvtap: left promiscuous mode [ 518.596533][T19629] veth0_macvtap: left promiscuous mode [ 518.602053][T19629] veth1_vlan: left promiscuous mode [ 518.607570][T19629] veth0_vlan: left promiscuous mode [ 518.669123][T19629] team0 (unregistering): Port device team_slave_1 removed [ 518.679300][T19629] team0 (unregistering): Port device team_slave_0 removed [ 518.975424][T19629] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.985297][T19629] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.034886][T19629] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.044671][T19629] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.084963][T19629] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.094788][T19629] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.154406][T19629] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.164200][T19629] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.236761][T19629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.274753][T19629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.324519][T19629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.374488][T19629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.441242][T19629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.476212][T19629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.546014][T19629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.625622][T19629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.687607][T19629] bridge_slave_1: left allmulticast mode [ 519.693410][T19629] bridge_slave_1: left promiscuous mode [ 519.699012][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.706782][T19629] bridge_slave_0: left allmulticast mode [ 519.712463][T19629] bridge_slave_0: left promiscuous mode [ 519.718173][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.727725][T19629] bridge_slave_1: left allmulticast mode [ 519.733481][T19629] bridge_slave_1: left promiscuous mode [ 519.739136][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.746995][T19629] bridge_slave_0: left allmulticast mode [ 519.752723][T19629] bridge_slave_0: left promiscuous mode [ 519.758389][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.914982][T19629] bond0 (unregistering): Released all slaves [ 520.154911][T19629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.164580][T19629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.174071][T19629] bond0 (unregistering): Released all slaves [ 520.225972][T19629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.236121][T19629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.245673][T19629] bond0 (unregistering): Released all slaves [ 520.297405][T19629] tipc: Disabling bearer [ 520.302476][T19629] tipc: Left network mode [ 520.307196][T19629] tipc: Disabling bearer [ 520.312418][T19629] tipc: Left network mode [ 520.321353][T19629] hsr_slave_0: left promiscuous mode [ 520.327132][T19629] hsr_slave_1: left promiscuous mode [ 520.336037][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.343601][T19629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.351094][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.358551][T19629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.367584][T19629] hsr_slave_0: left promiscuous mode [ 520.374092][T19629] hsr_slave_1: left promiscuous mode [ 520.379773][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.387173][T19629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.394710][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.402086][T19629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.416365][T19629] veth1_macvtap: left promiscuous mode [ 520.421868][T19629] veth0_macvtap: left promiscuous mode [ 520.427424][T19629] veth1_vlan: left promiscuous mode [ 520.432637][T19629] veth0_vlan: left promiscuous mode [ 520.438295][T19629] veth1_macvtap: left promiscuous mode [ 520.444101][T19629] veth0_macvtap: left promiscuous mode [ 520.449624][T19629] veth1_vlan: left promiscuous mode [ 520.454873][T19629] veth0_vlan: left promiscuous mode [ 520.460536][T19629] veth1_macvtap: left promiscuous mode [ 520.466035][T19629] veth0_macvtap: left promiscuous mode [ 520.471538][T19629] veth1_vlan: left promiscuous mode [ 520.476873][T19629] veth0_vlan: left promiscuous mode [ 520.686993][T19629] team0 (unregistering): Port device team_slave_1 removed [ 520.696729][T19629] team0 (unregistering): Port device team_slave_0 removed [ 521.477115][T19629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.535607][T19629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.575628][T19629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.625472][T19629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.705827][T19629] bridge_slave_1: left allmulticast mode [ 521.711552][T19629] bridge_slave_1: left promiscuous mode [ 521.717232][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.725074][T19629] bridge_slave_0: left allmulticast mode [ 521.730728][T19629] bridge_slave_0: left promiscuous mode [ 521.736474][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.805573][T19629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.815533][T19629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.825189][T19629] bond0 (unregistering): Released all slaves [ 521.887003][T19629] hsr_slave_0: left promiscuous mode [ 521.892688][T19629] hsr_slave_1: left promiscuous mode [ 521.898521][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.905949][T19629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.913838][T19629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.921295][T19629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.931078][T19629] veth1_macvtap: left promiscuous mode [ 521.936756][T19629] veth0_macvtap: left promiscuous mode [ 521.942321][T19629] veth1_vlan: left promiscuous mode [ 521.947597][T19629] veth0_vlan: left promiscuous mode [ 522.009594][T19629] team0 (unregistering): Port device team_slave_1 removed [ 522.019402][T19629] team0 (unregistering): Port device team_slave_0 removed