last executing test programs: 3m30.414086456s ago: executing program 3 (id=187): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000001811"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = getpid() ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, 0xffffffffffffffff, 0x10}}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000007bd3120000364e43ae6a58309a46a6b9d529ef13e873a38da40e8352bc4155e622092f98a697213706d64d346f5421d770aa3cf54e9d4991a969bb6901bcfda63b1a42cfced62084562990bbbfe73b2617ce54e80ab7b3ba04b16fb07ffb8e61aeedd7845899bba865ce83f4803993f9e86d297d4acecf2eabcec98ddf3172990695d39c4e65680fe2b8095340ef8035bb7a30e5bddc850e6fa105fd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 3m30.255352179s ago: executing program 3 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304040018fb034c3cc4708e1560", @ANYRES32=0x0, @ANYBLOB="4101030000000200140012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0xba01}, 0x0) 3m30.101508282s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) 3m30.00360479s ago: executing program 3 (id=196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5}, 0x94) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, @hci={0x1f, 0x2, 0x4}, 0x5, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x2, 0xfffffffffffffffe, 0x80}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) rename(0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7000000000000000ffffaaaaaaaaaabb00000000ffffffff000000009078ac1e0001e00000010000655800189078040000000000000086ddffff00000000"], 0xfdef) 3m29.818977145s ago: executing program 3 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410011030000000000000000000000000ffff00000000fe800000000000000000"], 0x0) 3m29.342454493s ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3m29.342358923s ago: executing program 32 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3m20.884574497s ago: executing program 1 (id=318): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000030007000000"], 0x10}, 0x80) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) r11 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000480)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@private1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xdb, @mcast1, 0x10001}}}, &(0x7f0000000080)=0x84) 3m20.764056176s ago: executing program 1 (id=323): setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000004a00010000000000000001000a"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r4) 3m20.725112179s ago: executing program 1 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x12b, 0x840) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010029bd500067ba65ae00000000", @ANYRES32=0x0, @ANYBLOB="6cb2060000000000140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3m20.666302634s ago: executing program 1 (id=325): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, 0xffffffffffffffff, 0x10}}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 3m20.557621473s ago: executing program 1 (id=326): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c00"], 0x30}}, 0x800) 3m20.510920687s ago: executing program 1 (id=327): mknodat(0xffffffffffffff9c, &(0x7f0000018300)='./file1\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = dup(r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x88, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0x91, 0x5) socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)="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", 0x19e}, {&(0x7f0000000ac0)="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", 0xe63}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0ad0", 0x2}], 0x1}}], 0x2, 0x4000880) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x8000000000025a5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r11, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x9, 0x3) unshare(0x2040400) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @loopback}, &(0x7f0000000040)=0xc) r13 = socket(0x2000000000000021, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, 0x0, 0x0) 3m5.441964604s ago: executing program 33 (id=327): mknodat(0xffffffffffffff9c, &(0x7f0000018300)='./file1\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = dup(r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x88, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0x91, 0x5) socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)="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", 0x19e}, {&(0x7f0000000ac0)="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", 0xe63}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0ad0", 0x2}], 0x1}}], 0x2, 0x4000880) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x8000000000025a5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r11, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x9, 0x3) unshare(0x2040400) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @loopback}, &(0x7f0000000040)=0xc) r13 = socket(0x2000000000000021, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, 0x0, 0x0) 40.814133072s ago: executing program 0 (id=3811): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcfffffffffffffffeffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000feffffff00000000000000000000000000000000ac1414bb000000000000000000000000000000003c00000000000000fe800000000000000000000000000000000000000003000000080000ffffffff0000000000000000000000000000000000000001000000006c00000000000000ac1e0001000000000000000000000000000000000400040000000000333518c700000000ac1414aa0000000000000000000000000000000033"], 0x23c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f0000000300)=0x14) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x8, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x6, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x40e, @loopback={0xfec0ffff00000000}, 0x3}, 0x1c) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) sendmmsg$inet(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="d4", 0x1}], 0x1}}], 0x1, 0x4000) r10 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000340)={0x1, 0x9, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000140)='devices.deny\x00') r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r13, 0x1, 0x46, &(0x7f0000000040), 0x4) write$qrtrtun(r10, &(0x7f0000001d00)="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", 0x45d) 40.750731238s ago: executing program 0 (id=3813): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 40.566050572s ago: executing program 0 (id=3819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, 0x0) 40.520850496s ago: executing program 0 (id=3821): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000300), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) 40.437313393s ago: executing program 0 (id=3825): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 37.374490201s ago: executing program 0 (id=3889): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r10, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) r13 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="a58e1c22f6", 0x5, 0xfffffffffffffffc) r14 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r13, r14) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r15, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 37.341922573s ago: executing program 34 (id=3889): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r10, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) r13 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="a58e1c22f6", 0x5, 0xfffffffffffffffc) r14 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r13, r14) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r15, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.784679336s ago: executing program 5 (id=4589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x9, 0x9, 0xa083, 0x5, 0x6, 0xffffffffffffffff}) tkill(r1, 0x29) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x84c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000300)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}, {0x7fff, 0x4, 0x7f, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000380)='.\x00', 0x10000840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x30) 1.659383036s ago: executing program 4 (id=4596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r5, &(0x7f0000000300)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, 'system_u:object_r:groupadd_exec_t:s0', 0x20, 0x2, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x8a) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x200}) 1.618407949s ago: executing program 6 (id=4598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 1.558246524s ago: executing program 6 (id=4599): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00000, &(0x7f0000000380), 0x11, 0x4f5, &(0x7f0000000b40)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000200)='./file1\x00') io_setup(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb9}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x110) 1.504676248s ago: executing program 4 (id=4601): memfd_create(0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_compaction_kcompactd_sleep\x00', r1, 0x0, 0x8}, 0x18) readv(r0, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) write$ppp(r0, &(0x7f0000003700)="aaf55cb6a6c58f655b33e7742ce27e30d20934e0732e5b18c2e478a65d964d2e59", 0x21) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0200120914000100fe880000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x29ecc4b41844ecad}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x0, 0xe, 0x15, 0xe, 0xf, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "50dbc55f186d37eb024354586df26e78a5c25160ffe1f06bc705594160975cc0c24e10a167844b99be2ac90f105f3d6c7a86b0cb53218e6ce295220bf84856182841f64adf5615f1fbbda560166f2345337334004cd7471cd100ebcc2792192544bb2bbc9c35accd3eb9233854f03750d8d60c18de2397ce6af37c8d492be318ed813ef4cd43284638396872fdd03aabe6b67335aa03a735e8b5212a1a855755ddecc5a228321a29bbb3181154de3def9040b2126d40c2f2d18fc79f4bf6174d4f33bc961bfea2048e83115eb4aac511b7d4beabcc61f4567e71cafdfc1185c4f565f993dd77291e1da9fa705dd21283c562c4a2456b329f4471c183ca416e05"}]}}]}, 0x150}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='.\x02\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") 1.440892503s ago: executing program 2 (id=4604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) pread64(r1, &(0x7f0000003900)=""/37, 0x25, 0x10) 1.321725193s ago: executing program 2 (id=4606): syz_read_part_table(0x5cd, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x90, 0x1, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="280000000045ce0029000000370000007327000000000000c2040000000105020006000000000000cec8d0f42c11eaf69c4861c5bfc199aaa92d03e8d6de1c06f5b05611217b7c176b9c445fdcba40f6f0073627425a7e61abd0dcc96773cde720958bce8417c501cbd1d2d483211b51667dbac015c4a1214928e0b523e3da1522afd0791e703edbb93f1a676bcba759e6d948135cb681b776b60a17f6617ba0558c204ddefa737c8049849cfdbc415574a5ec536d438919692ac00aec76020a"], 0x28}, 0x40c0) tkill(r1, 0x12) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mq_open(&(0x7f0000000b80)='fth0\x00#\x13\xaeu\x13\xfcO\x1c\xe5*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xee:\xf7\xb1.\"\xa6\xc0#p\xcd\x1c\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x90\x1a{@!2\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xe1(\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xd5j*\xad%I\xcc\xe9\xaa{]\xef\xfb\xff\xff\xff\xff\xff\xff\xfft\xd0s\xc4\x04\xe0\xa1\xd2@\x06\xc2`H\xf7\xcc\xe3\xa0\xaa\xc0\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xfa\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa3\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\x9c\xbf\x87\x84\x17r\x8aP\xfeD\xf4n\xdd\xf7\xa8\xd3-\x96\xb4\x90\x92K\xebo\xc6o\x8c\xbd\xf5\xd3\x1b\xd3c\xe3\x0e\xd4\xaf\x0edT1\x05\x15\x14\xc3N\xa6\xed1\xda\xcf\x89\x0eay \xd7\xc7\x95\x19\xca\xe1}d\x0e\x042\x05\x8bX\x9dJd\xcfF\xb8V\xa5\x87$\xaa\x14I\xdf\x83\x9f\xcd2Y\xcb\x1e\r\xf6\xe6U\au\xc6QO9\xbdp\xd5]\xd7HR\xa0\xbeV\xb5\xae\xde\xf2\xdf\xca\xbaX+D\xe1\x06\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2lm,\xbfU\x96x\xb4%f\xfe\xedFO\xcd\xa3>\xf7\xeb\xc9\x88\v\x1a\xb9\x05\xb6\x14\x10\xe9\xcc\x8b\xe4hN\x82Faf`\xd9\x13\x16j\x8d\xce\x04)Z\xb4f\xe1$\xc3H \x00', 0x42, 0x68, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000640)='./file1/file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0xfd39) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000180001002cbd7000fcfbf3c82d"], 0x1c}, 0x1, 0x2}, 0x40084) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) open(0x0, 0x591002, 0x50f) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000780)={[&(0x7f0000000880)='%\\\x00\f\x92H\v\xd6\x84QR\x14\xfc\fk\x9f\xd6\xf3D\x84\xb2\xc4\a\xee\n\xdf\x00\xbf\\\xc7-\xf8\x82S\x058\xe2\xdf\xc9\xe9\xd1%\x80jz\xdf\xe3\xec}\xd9\xa3\xd5\rVG\xbeH:%yVFE\xf3\xf1\xbdS\xeb`\xa5 \x05\xc5\xf0H\xb9\xf8\xf7\x06\xd8:]\xb7\xf5\x7f\xa5\xbf\xda\xe6\xa4\xaeH\xd3\x16\xda\x01\xab\xeb\xa5w\x9fHeZ\xfa\xbc\xdc\x83\x17\xe2\xfd\x9b\xe6\xf8gF\aM\xd4$3\xa6\x94I=!\xffT\xb9\xb6\xc5g\x98\xb2\xcb{e\xf5\x97\x13;\xfaRz\x96!$\xde\xdc\xff\xbc\x1ea_\xfa\x04\xf4T\xb8:\xe4A0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x110) 762.143198ms ago: executing program 5 (id=4612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 761.818018ms ago: executing program 7 (id=4613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r5, &(0x7f0000000300)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, 'system_u:object_r:groupadd_exec_t:s0', 0x20, 0x2, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x8a) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'gre0\x00', 0x200}) 737.45236ms ago: executing program 6 (id=4614): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000030007000000"], 0x10}, 0x80) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b"]) r11 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000480)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@private1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xdb, @mcast1, 0x10001}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r12, 0x4) 646.776588ms ago: executing program 2 (id=4615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 646.298778ms ago: executing program 5 (id=4616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000400850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab82", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 582.136233ms ago: executing program 2 (id=4617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ip_tables_matches\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/44, 0x2c, 0x0, 0x0, 0x8, 0xc87}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r0, 0x0, 0x6) 559.385545ms ago: executing program 6 (id=4618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) socket(0x80000000000000a, 0x2, 0x0) close(r0) 501.98838ms ago: executing program 5 (id=4619): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 501.058939ms ago: executing program 7 (id=4620): r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x1, 0x2) fchdir(r3) (async) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000900), &(0x7f0000000000)=0xfe47) (async) splice(r9, &(0x7f00000002c0)=0x5, r6, &(0x7f0000000300)=0x8, 0x4, 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) 466.722772ms ago: executing program 2 (id=4621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 466.431332ms ago: executing program 5 (id=4622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010004b240000000000007a00c40d0000", @ANYRES32=0x0, @ANYBLOB="40880000000000001800128008000100677265000c00028008000700e0"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 449.180434ms ago: executing program 6 (id=4623): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)="74b6ef9062aeb1a00157c0614af202", 0xf}, {&(0x7f0000000380)="adda5d806f1ff99a7ae2870dae2c9aa8dee3062962b2d61d11b1ae9946745efcc4ac3d60f59ba858e092acd179d41fe50ab2f6ac6f4f21ca6d38ea7847d67cceb5af17ffbcc3a0ed55705ab5e577074dd0241f51f0cdcc8c59d69e9507ce19e49b3684efe00889b18cd17edc6ec68e5d74c9b1a7db501e8e6cddb4e7b47c8757ae1367bc9a3d7f1069710aff", 0x8c}, {&(0x7f0000000580)="5e4cc8e4fdbe4f6cc7aeea6d1b584edcbd5230c1a6db0bd80273c846c007577337bdae8dc8f95b777c4372e6189b01a99dbc982aebe162040d626359558490d206cc6bc68fb308b3f02c46a962c4e4016170cfa3ac5ffaadcc12d591e1a197a41c2c914698ae082a6507f711e4f7f0643f0d9cae46b19092bf8fb170e20e566660a5f627eb6a2783c24e922367241187d99c7d16b0439defba61be9c6f3a6dd80b11467c5be668b6c2102dfa00b26695b2b234256cb23fdab6c701fdf2", 0xbd}, {&(0x7f0000000640)="43bd99685469eeda1d25054af9fac0b14d18a87cf45d5610270c1cdb4dc1e4e17fa5f46492925ea24bc4dc0f6e8ce13aaf6a9798402f8827f7d34ffba51c7ab630521d5bd7f5deb08c7089b0c6ea2ce61838dc2947682f7cb290d7c6d7488a014afd28eb9373c19f18fed99103e33442b1c272e22b543d78916518f4c815b4c72aee3706650ca26f6cba09cd8d346f91383ed29c01f0453df782458c1a341c93edebc6cdf6b157aabfd10ebef998e88105227485c28a7d8bde4aa21ac1407b91444444e2c451a0fcd9a6944f118c81ff0e051f71db32d971ebf2fd080a7717ceacb0c566a51e307a27803f6d9397a1e6526a0ef7", 0xf4}, {&(0x7f0000000740)="e1fb2e2f10261c844315e2d60cb4969a1812f40018f8f860fb51c42cb861efe4d0622ad331e4a2d8a4b8767a5b52126e08bfc05390394a85901fe09b900ceb73f14e1c3eb02e549693315bd9e7b90b9dc0126f1a267873d22ace300ee0fcc54a4f0a415601b713ba50056a29aaf6d4c2061a4798a6e0bbe3c0853ade307545ff931df56da0206157fef4589ec301bac01b2d7819957b1fc4c82ee7897585757513796cb2e08ceb81377535fc2108c89f30aa12db9369d8864c5593c6d2a5f92520f080d866323055970ece1ccffd3ecdef71f7", 0xd3}, {&(0x7f0000000840)="5efd13bc2f25a6e7d1b303552f2a24221858edc59db82724cc5f201b4eb7e10a6be7e771580fbf147130050b0822d712afc4332dea1817219842cbf3df252075652a20f25b94679f73254c88f402567f599d56223d2e533c233e76f3c94fe5b9be3f56ba69ba174a0d742da52ffac169455bcb0c7ac70346cffca1eb4fcea446e107cab89d0e18c170d29ebe054086d8996716e76798624aeb9f68740f8c50fb77c50869aee61e084ce5e9123622e567c49d63667a9f70c3d3e74a57fa04dc2c019b06", 0xc3}, {&(0x7f0000000940)="def289e2b7ee7d74beb2f6d6f41a4c43616a64250284021c78cab9d29970525e4489374451c082d9b2dbf3dad14a7d7f5a4567983e1eca11db496672075981b047243bb65f558aecafb978262702f3358ab2894020bd5ffcb85991a9902b9839ba18690956a360dbd21626ffd4d2372606716b1cf0d61ac71b6ffa31ca56a170daa19e23211695fae760f0f66e64363e58b83f70fff31c4414e20158ab5c41ae0a8615952969f1d2595cd08ceb077fd05f367a879baee59c8e580a2bad361b72f93e19b0f7cf1b60f5c1ca251cad8faac2af5c88e492be1d387e3994b9da1320fa522ebc0293484170f2d41b7d7ee30a", 0xf0}, {&(0x7f0000000a40)="55a4aa65c75c2fec54bd43010aac5c36c4366795ab3330c394cc624273aae98f4af42709a3ec318520a424282c4026b5b33044da03d48c8509d8039afd55184b3d5f995929b96ebfb4600c28adf59f44fab6338c6b323ca165665ff744b202e556e4d76e2067cf7d41540f8c68bbff289db98d703f88a4", 0x77}, {&(0x7f00000000c0)="c628b94282b89ab4697ef444aa9d725568990accff978b0d70ae80fa4bc592", 0x1f}, {0x0}], 0xa, &(0x7f0000000c00)=[{0x48, 0xff, 0x6, "0b05507b59d7b086363af115388d4d6a705a351abc2e09f9678f7c86999b080cbd8b762bc61d2740d02aff4b518d7387eab805a2fe3550"}, {0xe0, 0x10f, 0xff, "878f52b038689733d8a7cdf250d6373be49d45614c2dd35ea5725ba153edd320252a21bca9e80a4276743a72256d437ac60a5a374231cf38856fbdd2e8f34f3497d5aad7828ac961beccebc149ba95a8cfcee32004abf2366c8507a6d3148faf6b8c01252ad59af8d6cb1ab683cf823cdf3cd81153f2e903c5188a356b1db14fed5756ad6cec2ba96fe794fa0829d332b5a2fb39d1dc9bc5515b504eb69aaf89a6d49c2d1da9f79eeac7ecf9a413ee71b4ba0ea19e3c89cbbb1d3355b79732cfcd4153df7133803bcd"}, {0xb8, 0x1, 0x7, "cbe62bfcbc3a553add14320a91a3a1c0c817a00eb51a52761c2db7dea5e7c8b16f81411dd467cf0b569123e97cf7a3dfb65d196e7ed1c9661be558f5a78ebdf7e85c6c995bc8a50a1065fac0c686d9c44f04395f587f4a9684cd931389d3556efcc07d758f4c4f78d46f7a868eb826a3b461fb9f8fece57be57fdd93942e4d093642b4c76bc6242ce305fbbc7affb4a652416c7a7077c194930f8f14b74c24197165b37975c2f6"}, {0xa8, 0x104, 0x10000, "9d86761a81233f371c49dafac8052d6637f03baf7f066b754242c14bbaf7729022f8ca04f9da2adbc41acc6d03ba6e84d6328c0811026278e9d4a765322e757b01cd82b9624a959b69994f60e5239b20719d7926d13eaf3d96c450d0289c06bb86e9a852cd7cd45e68df3bb37a55ddb4322945d2487f8489d56f4a9794949c7c704f003db64452e6698f21f17784dd8ebbf93733017121"}], 0x288}, 0x24048004) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 448.392524ms ago: executing program 2 (id=4624): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00000, &(0x7f0000000380), 0x11, 0x4f5, &(0x7f0000000b40)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000200)='./file1\x00') io_setup(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb9}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x110) 358.138431ms ago: executing program 5 (id=4625): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) socket$nl_audit(0x10, 0x3, 0x9) sendfile(r0, r0, 0x0, 0x800000009) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 273.485248ms ago: executing program 6 (id=4626): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b"]) r11 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000480)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@private1, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xdb, @mcast1, 0x10001}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r12, 0x4) 63.796744ms ago: executing program 7 (id=4629): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 0s ago: executing program 4 (id=4630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000021000000008112de81bf80100000003b810000850000006d00394b00000700000008ef733daf6c758f084991e1d521c2fc05d4318ab014c390c873848a7b328b79169631101d8ad73e262e83813a78"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create(0x6) (async) r2 = epoll_create1(0x80000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) kernel console output (not intermixed with test programs): p7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.837263][T14942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14942 comm=syz.4.4038 [ 225.853705][T14936] loop4: detected capacity change from 0 to 256 [ 225.862065][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4041'. [ 225.873470][T14936] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 225.902819][T14948] FAULT_INJECTION: forcing a failure. [ 225.902819][T14948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.915975][T14948] CPU: 1 UID: 0 PID: 14948 Comm: syz.7.4042 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 225.916009][T14948] Tainted: [W]=WARN [ 225.916016][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.916027][T14948] Call Trace: [ 225.916034][T14948] [ 225.916041][T14948] __dump_stack+0x1d/0x30 [ 225.916139][T14948] dump_stack_lvl+0xe8/0x140 [ 225.916158][T14948] dump_stack+0x15/0x1b [ 225.916173][T14948] should_fail_ex+0x265/0x280 [ 225.916201][T14948] should_fail+0xb/0x20 [ 225.916216][T14948] should_fail_usercopy+0x1a/0x20 [ 225.916234][T14948] strncpy_from_user+0x25/0x230 [ 225.916260][T14948] ? kmem_cache_alloc_noprof+0x186/0x310 [ 225.916309][T14948] ? getname_flags+0x80/0x3b0 [ 225.916357][T14948] getname_flags+0xae/0x3b0 [ 225.916453][T14948] user_path_create+0x27/0x130 [ 225.916474][T14948] bpf_obj_pin_user+0xe0/0x230 [ 225.916492][T14948] bpf_obj_pin+0xac/0xd0 [ 225.916551][T14948] __sys_bpf+0x6cb/0x7b0 [ 225.916580][T14948] __x64_sys_bpf+0x41/0x50 [ 225.916604][T14948] x64_sys_call+0x2aea/0x2ff0 [ 225.916674][T14948] do_syscall_64+0xd2/0x200 [ 225.916697][T14948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 225.916767][T14948] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.916791][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.916814][T14948] RIP: 0033:0x7f060fe5ebe9 [ 225.916828][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.916925][T14948] RSP: 002b:00007f060e8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.916945][T14948] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 225.916956][T14948] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000006 [ 225.916966][T14948] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 225.917102][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.917115][T14948] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 225.917134][T14948] [ 225.942188][T14950] program syz.2.4044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.068637][T14960] program syz.6.4048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.153659][T14961] netlink: 'syz.4.4047': attribute type 8 has an invalid length. [ 226.163828][T14961] tipc: Started in network mode [ 226.168831][T14961] tipc: Node identity ac14140f, cluster identity 4711 [ 226.176006][T14961] tipc: New replicast peer: 255.255.255.255 [ 226.182074][T14961] tipc: Enabled bearer , priority 10 [ 226.288512][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 226.288528][ T29] audit: type=1326 audit(1754984664.542:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.318764][ T29] audit: type=1326 audit(1754984664.542:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.342480][ T29] audit: type=1326 audit(1754984664.542:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.366050][ T29] audit: type=1326 audit(1754984664.542:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.366074][ T29] audit: type=1326 audit(1754984664.542:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.366152][ T29] audit: type=1326 audit(1754984664.542:16838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.436966][ T29] audit: type=1326 audit(1754984664.542:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.460525][ T29] audit: type=1326 audit(1754984664.542:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.469180][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4053'. [ 226.484194][ T29] audit: type=1326 audit(1754984664.602:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.484227][ T29] audit: type=1326 audit(1754984664.602:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14973 comm="syz.4.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 226.667932][T14980] netlink: 'syz.4.4055': attribute type 21 has an invalid length. [ 226.676245][T14980] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4055'. [ 226.699274][T14982] FAULT_INJECTION: forcing a failure. [ 226.699274][T14982] name failslab, interval 1, probability 0, space 0, times 0 [ 226.711999][T14982] CPU: 1 UID: 0 PID: 14982 Comm: syz.4.4056 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 226.712055][T14982] Tainted: [W]=WARN [ 226.712061][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.712071][T14982] Call Trace: [ 226.712076][T14982] [ 226.712083][T14982] __dump_stack+0x1d/0x30 [ 226.712102][T14982] dump_stack_lvl+0xe8/0x140 [ 226.712118][T14982] dump_stack+0x15/0x1b [ 226.712204][T14982] should_fail_ex+0x265/0x280 [ 226.712222][T14982] should_failslab+0x8c/0xb0 [ 226.712246][T14982] kmem_cache_alloc_noprof+0x50/0x310 [ 226.712338][T14982] ? getname_flags+0x80/0x3b0 [ 226.712392][T14982] ? kstrtoull+0x111/0x140 [ 226.712482][T14982] getname_flags+0x80/0x3b0 [ 226.712564][T14982] vfs_fstatat+0x43/0x170 [ 226.712589][T14982] __se_sys_newfstatat+0x55/0x260 [ 226.712641][T14982] ? __fget_files+0x184/0x1c0 [ 226.712667][T14982] ? ksys_write+0x11a/0x1a0 [ 226.712688][T14982] ? fput+0x8f/0xc0 [ 226.712715][T14982] ? ksys_write+0x192/0x1a0 [ 226.712787][T14982] __x64_sys_newfstatat+0x55/0x70 [ 226.712868][T14982] x64_sys_call+0x135a/0x2ff0 [ 226.712887][T14982] do_syscall_64+0xd2/0x200 [ 226.712978][T14982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 226.713003][T14982] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 226.713028][T14982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.713041][T14982] RIP: 0033:0x7fb52d90ebe9 [ 226.713096][T14982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.713170][T14982] RSP: 002b:00007fb52c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 226.713182][T14982] RAX: ffffffffffffffda RBX: 00007fb52db35fa0 RCX: 00007fb52d90ebe9 [ 226.713189][T14982] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 226.713197][T14982] RBP: 00007fb52c377090 R08: 0000000000000000 R09: 0000000000000000 [ 226.713204][T14982] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 226.713211][T14982] R13: 00007fb52db36038 R14: 00007fb52db35fa0 R15: 00007fff71dda7c8 [ 226.713244][T14982] [ 227.043985][T14988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14988 comm=syz.4.4057 [ 227.057614][T14999] syzkaller0: entered promiscuous mode [ 227.063280][T14999] syzkaller0: entered allmulticast mode [ 227.075933][T14988] loop4: detected capacity change from 0 to 256 [ 227.082821][T14988] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 227.170337][T15010] program syz.4.4068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.193887][T15014] siw: device registration error -23 [ 227.206236][T15014] loop6: detected capacity change from 0 to 1024 [ 227.212701][ T3390] tipc: Node number set to 2886997007 [ 227.224979][T15014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.252203][T15014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.287156][T15026] loop5: detected capacity change from 0 to 512 [ 227.313343][T15026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.341672][T15026] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.355359][T15033] loop6: detected capacity change from 0 to 2048 [ 227.363201][T15033] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.364906][T15026] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4073: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 227.386561][T15026] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 227.394818][T15033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.395686][T15026] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4073: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 227.446147][T15026] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 227.456270][T15026] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4073: bg 0: block 18: invalid block bitmap [ 227.485287][T15026] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4073: Failed to acquire dquot type 1 [ 227.542330][T13781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.552243][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.597179][T15047] bridge_slave_0: left allmulticast mode [ 227.602897][T15047] bridge_slave_0: left promiscuous mode [ 227.608556][T15047] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.618905][T15047] bridge_slave_1: left allmulticast mode [ 227.624716][T15047] bridge_slave_1: left promiscuous mode [ 227.630457][T15047] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.640212][T15047] bond0: (slave bond_slave_0): Releasing backup interface [ 227.650102][T15053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15053 comm=syz.5.4077 [ 227.650348][T15047] bond0: (slave bond_slave_1): Releasing backup interface [ 227.759874][T15057] loop5: detected capacity change from 0 to 512 [ 227.769568][T15057] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 227.788974][T15057] EXT4-fs: error: could not find journal device path [ 227.851357][T15064] FAULT_INJECTION: forcing a failure. [ 227.851357][T15064] name failslab, interval 1, probability 0, space 0, times 0 [ 227.864054][T15064] CPU: 0 UID: 0 PID: 15064 Comm: syz.6.4085 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 227.864148][T15064] Tainted: [W]=WARN [ 227.864155][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.864166][T15064] Call Trace: [ 227.864172][T15064] [ 227.864179][T15064] __dump_stack+0x1d/0x30 [ 227.864199][T15064] dump_stack_lvl+0xe8/0x140 [ 227.864217][T15064] dump_stack+0x15/0x1b [ 227.864231][T15064] should_fail_ex+0x265/0x280 [ 227.864272][T15064] should_failslab+0x8c/0xb0 [ 227.864297][T15064] kmem_cache_alloc_noprof+0x50/0x310 [ 227.864397][T15064] ? audit_log_start+0x365/0x6c0 [ 227.864422][T15064] audit_log_start+0x365/0x6c0 [ 227.864484][T15064] audit_seccomp+0x48/0x100 [ 227.864506][T15064] ? __seccomp_filter+0x68c/0x10d0 [ 227.864528][T15064] __seccomp_filter+0x69d/0x10d0 [ 227.864604][T15064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 227.864629][T15064] ? vfs_write+0x7e8/0x960 [ 227.864650][T15064] ? __rcu_read_unlock+0x4f/0x70 [ 227.864700][T15064] ? __fget_files+0x184/0x1c0 [ 227.864726][T15064] __secure_computing+0x82/0x150 [ 227.864750][T15064] syscall_trace_enter+0xcf/0x1e0 [ 227.864774][T15064] do_syscall_64+0xac/0x200 [ 227.864800][T15064] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 227.864864][T15064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 227.864888][T15064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.864908][T15064] RIP: 0033:0x7f97f76cebe9 [ 227.864923][T15064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.864938][T15064] RSP: 002b:00007f97f6137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.864960][T15064] RAX: ffffffffffffffda RBX: 00007f97f78f5fa0 RCX: 00007f97f76cebe9 [ 227.864971][T15064] RDX: 0000200000000080 RSI: 0000000000002275 RDI: 0000000000000006 [ 227.865043][T15064] RBP: 00007f97f6137090 R08: 0000000000000000 R09: 0000000000000000 [ 227.865056][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.865067][T15064] R13: 00007f97f78f6038 R14: 00007f97f78f5fa0 R15: 00007ffccdfca7d8 [ 227.865083][T15064] [ 228.115127][T15066] siw: device registration error -23 [ 228.118581][T15068] loop2: detected capacity change from 0 to 1024 [ 228.147170][T15066] loop5: detected capacity change from 0 to 1024 [ 228.158159][T15068] EXT4-fs: Ignoring removed oldalloc option [ 228.191763][T15066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.207693][T15068] EXT4-fs: Ignoring removed orlov option [ 228.224823][T15079] lo speed is unknown, defaulting to 1000 [ 228.274808][T15083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15083 comm=syz.4.4092 [ 228.313069][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.320029][T15070] nfs: Deprecated parameter 'nointr' [ 228.335152][T15068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.506023][T15095] syzkaller0: entered promiscuous mode [ 228.511601][T15095] syzkaller0: entered allmulticast mode [ 228.536828][T15097] FAULT_INJECTION: forcing a failure. [ 228.536828][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 228.549574][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.6.4095 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 228.549608][T15097] Tainted: [W]=WARN [ 228.549660][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.549672][T15097] Call Trace: [ 228.549680][T15097] [ 228.549689][T15097] __dump_stack+0x1d/0x30 [ 228.549711][T15097] dump_stack_lvl+0xe8/0x140 [ 228.549732][T15097] dump_stack+0x15/0x1b [ 228.549765][T15097] should_fail_ex+0x265/0x280 [ 228.549783][T15097] should_failslab+0x8c/0xb0 [ 228.549804][T15097] __kmalloc_noprof+0xa5/0x3e0 [ 228.549831][T15097] ? security_sk_alloc+0x52/0x120 [ 228.549869][T15097] ? should_failslab+0x8c/0xb0 [ 228.549891][T15097] security_sk_alloc+0x52/0x120 [ 228.549947][T15097] sk_prot_alloc+0xc2/0x190 [ 228.549969][T15097] sk_alloc+0x34/0x360 [ 228.549990][T15097] ? __pfx_genl_release+0x10/0x10 [ 228.550025][T15097] ? __pfx_genl_release+0x10/0x10 [ 228.550059][T15097] netlink_create+0x32a/0x460 [ 228.550081][T15097] ? __pfx_genl_unbind+0x10/0x10 [ 228.550168][T15097] ? __pfx_genl_bind+0x10/0x10 [ 228.550194][T15097] __sock_create+0x2ec/0x5b0 [ 228.550219][T15097] __sys_socket+0xb0/0x180 [ 228.550243][T15097] __x64_sys_socket+0x3f/0x50 [ 228.550341][T15097] x64_sys_call+0x1147/0x2ff0 [ 228.550376][T15097] do_syscall_64+0xd2/0x200 [ 228.550399][T15097] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.550441][T15097] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 228.550462][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.550480][T15097] RIP: 0033:0x7f97f76d0b07 [ 228.550568][T15097] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.550585][T15097] RSP: 002b:00007f97f6114fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 228.550603][T15097] RAX: ffffffffffffffda RBX: 00007f97f78f6090 RCX: 00007f97f76d0b07 [ 228.550617][T15097] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 228.550631][T15097] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 228.550641][T15097] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000001 [ 228.550652][T15097] R13: 00007f97f78f6128 R14: 00007f97f78f6090 R15: 00007ffccdfca7d8 [ 228.550732][T15097] [ 228.779792][T15093] loop4: detected capacity change from 0 to 256 [ 228.786661][T15093] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 228.800420][T12217] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.962232][T15122] netlink: 'syz.6.4103': attribute type 21 has an invalid length. [ 228.992223][T15126] loop6: detected capacity change from 0 to 512 [ 229.011029][T15125] siw: device registration error -23 [ 229.028041][T15126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.029536][T15125] loop7: detected capacity change from 0 to 1024 [ 229.055067][T15126] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.067389][T15125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.083452][T15133] netlink: 'syz.5.4107': attribute type 21 has an invalid length. [ 229.090647][T15125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.100436][T15126] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4105: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.118859][T15126] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 229.140807][T15126] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4105: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.183688][T15126] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 229.210727][T15126] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4105: bg 0: block 18: invalid block bitmap [ 229.257542][T15126] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4105: Failed to acquire dquot type 1 [ 229.279246][T15146] syzkaller0: entered promiscuous mode [ 229.284840][T15146] syzkaller0: entered allmulticast mode [ 229.328276][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.357369][T15154] bridge_slave_0: left allmulticast mode [ 229.363144][T15154] bridge_slave_0: left promiscuous mode [ 229.368760][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.381083][T15154] bridge_slave_1: left allmulticast mode [ 229.385143][T15157] loop6: detected capacity change from 0 to 512 [ 229.386819][T15154] bridge_slave_1: left promiscuous mode [ 229.398702][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.406321][T15157] EXT4-fs: Ignoring removed bh option [ 229.422120][T15154] bond0: (slave bond_slave_0): Releasing backup interface [ 229.429061][T15157] EXT4-fs (loop6): 1 truncate cleaned up [ 229.438439][T15157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.439078][T15159] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15159 comm=syz.7.4113 [ 229.477903][T15154] bond0: (slave bond_slave_1): Releasing backup interface [ 229.492951][T15154] team0: Port device team_slave_0 removed [ 229.505988][T15154] team0: Port device team_slave_1 removed [ 229.519930][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.720543][T15180] loop4: detected capacity change from 0 to 1024 [ 229.736429][T15180] EXT4-fs: Ignoring removed bh option [ 229.750085][T15186] loop5: detected capacity change from 0 to 512 [ 229.760664][T15180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.782304][T15186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.808425][T15186] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.819750][T15177] nfs: Deprecated parameter 'nointr' [ 229.824178][T15186] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4124: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.845328][T15186] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 229.847409][T11063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.854420][T15186] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4124: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.880296][T15186] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 229.889909][T15186] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4124: bg 0: block 18: invalid block bitmap [ 229.915318][T15186] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4124: Failed to acquire dquot type 1 [ 229.966120][T13781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.993867][T15200] __nla_validate_parse: 25 callbacks suppressed [ 229.993918][T15200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4126'. [ 230.012976][T15203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15203 comm=syz.4.4129 [ 230.035933][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 230.079065][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4131'. [ 230.085333][T15209] syzkaller0: entered promiscuous mode [ 230.093618][T15209] syzkaller0: entered allmulticast mode [ 230.148279][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4132'. [ 230.204884][T15220] loop5: detected capacity change from 0 to 512 [ 230.214882][T15220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 230.245654][T15226] loop4: detected capacity change from 0 to 1024 [ 230.252064][T15220] System zones: 1-12 [ 230.252719][T15226] EXT4-fs: Ignoring removed oldalloc option [ 230.256072][T15220] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.4133: Directory hole found for htree index block 0 [ 230.262295][T15226] EXT4-fs: Ignoring removed orlov option [ 230.296009][T15220] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 230.302608][T15226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.304927][T15220] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.4133: Directory hole found for htree index block 0 [ 230.350147][T15220] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 230.372264][T15220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.469426][T11063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.525405][T13781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.536050][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4137'. [ 230.585732][T15246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4143'. [ 230.592251][T15240] siw: device registration error -23 [ 230.592627][T15240] binfmt_misc: register: failed to install interpreter file ./file2 [ 230.652190][T15252] syzkaller0: entered promiscuous mode [ 230.652246][T15252] syzkaller0: entered allmulticast mode [ 230.666164][T15249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15249 comm=syz.4.4144 [ 230.679109][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4144'. [ 230.760652][T15237] nfs: Deprecated parameter 'nointr' [ 230.828108][T15265] loop4: detected capacity change from 0 to 512 [ 230.836838][T15263] netlink: 'syz.5.4149': attribute type 21 has an invalid length. [ 230.871571][T15263] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4149'. [ 230.880747][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4149'. [ 230.902735][T15265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.929909][T15265] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.950579][T15265] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4150: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 230.965000][T15276] loop6: detected capacity change from 0 to 736 [ 230.974636][T15265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 230.992720][T15265] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4150: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 231.009173][T15276] rock: directory entry would overflow storage [ 231.015504][T15276] rock: sig=0x3b10, size=4, remaining=3 [ 231.023165][T15276] lo: entered allmulticast mode [ 231.028486][T15265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 231.038403][T15275] lo: left allmulticast mode [ 231.051519][T15265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4150: bg 0: block 18: invalid block bitmap [ 231.053017][T15280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4155'. [ 231.084892][T15265] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4150: Failed to acquire dquot type 1 [ 231.103877][T15280] siw: device registration error -23 [ 231.104239][T15280] binfmt_misc: register: failed to install interpreter file ./file2 [ 231.335364][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 231.335378][ T29] audit: type=1326 audit(1754984669.592:17454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.400097][ T29] audit: type=1326 audit(1754984669.592:17455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.423898][ T29] audit: type=1326 audit(1754984669.612:17456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de23ebe9 code=0x7ffc0000 [ 231.423923][ T29] audit: type=1326 audit(1754984669.612:17457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.2.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31de23ebe9 code=0x7ffc0000 [ 231.423942][ T29] audit: type=1326 audit(1754984669.622:17458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.424043][ T29] audit: type=1326 audit(1754984669.622:17459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.424069][ T29] audit: type=1326 audit(1754984669.622:17460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.424091][ T29] audit: type=1326 audit(1754984669.622:17461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.424114][ T29] audit: type=1326 audit(1754984669.622:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.424134][ T29] audit: type=1326 audit(1754984669.622:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15303 comm="syz.7.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 231.458322][T15298] nfs: Deprecated parameter 'nointr' [ 231.610266][T15312] loop5: detected capacity change from 0 to 736 [ 231.644313][T15312] rock: directory entry would overflow storage [ 231.644323][T15312] rock: sig=0x3b10, size=4, remaining=3 [ 231.669232][T15312] syz_tun: entered allmulticast mode [ 231.669358][T15311] syz_tun: left allmulticast mode [ 231.806935][T15319] loop5: detected capacity change from 0 to 512 [ 231.827569][T15320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15320 comm=syz.2.4180 [ 231.846341][T15319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.864344][T15322] siw: device registration error -23 [ 231.870085][T15322] binfmt_misc: register: failed to install interpreter file ./file2 [ 231.878432][T15319] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.928974][T15319] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4170: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 231.953681][T15326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15326 comm=syz.7.4172 [ 231.967035][T15319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 231.978559][T15319] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4170: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 232.016158][T15319] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 232.026214][T15319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4170: bg 0: block 18: invalid block bitmap [ 232.050093][T15319] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4170: Failed to acquire dquot type 1 [ 232.128450][T15332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15332 comm=syz.6.4175 [ 232.146103][T15332] loop6: detected capacity change from 0 to 256 [ 232.146229][T13781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.154386][T15332] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 232.287646][T15344] loop6: detected capacity change from 0 to 736 [ 232.322920][T15344] rock: directory entry would overflow storage [ 232.329284][T15344] rock: sig=0x3b10, size=4, remaining=3 [ 232.353995][T15344] lo: entered allmulticast mode [ 232.360093][T15343] lo: left allmulticast mode [ 232.366080][T15346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15346 comm=syz.2.4179 [ 232.421235][T15346] loop2: detected capacity change from 0 to 256 [ 232.430388][T15346] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 232.538714][T15355] loop2: detected capacity change from 0 to 128 [ 232.555839][T15355] EXT4-fs: Ignoring removed nobh option [ 232.573246][T15355] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.591775][T15355] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.665887][T15355] bond0 (unregistering): Released all slaves [ 232.700926][T15358] loop6: detected capacity change from 0 to 1024 [ 232.740600][T15360] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 232.750796][T15358] EXT4-fs: Ignoring removed bh option [ 232.786850][T15358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.848479][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.880068][T12217] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.906638][T15365] program syz.2.4186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.933839][T15367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15367 comm=syz.6.4185 [ 233.106013][T15379] loop7: detected capacity change from 0 to 736 [ 233.112956][T15374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15374 comm=syz.6.4189 [ 233.132467][T15379] rock: directory entry would overflow storage [ 233.138651][T15379] rock: sig=0x3b10, size=4, remaining=3 [ 233.147682][T15374] loop6: detected capacity change from 0 to 256 [ 233.157654][T15374] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 233.167487][T15379] syz_tun: entered allmulticast mode [ 233.176507][T15378] syz_tun: left allmulticast mode [ 233.422409][T15384] nfs: Deprecated parameter 'nointr' [ 233.696430][T15403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15403 comm=syz.6.4200 [ 233.777268][T15407] loop2: detected capacity change from 0 to 736 [ 233.809185][T15407] rock: directory entry would overflow storage [ 233.815442][T15407] rock: sig=0x3b10, size=4, remaining=3 [ 233.824358][T15407] lo: entered allmulticast mode [ 233.842461][T15406] lo: left allmulticast mode [ 233.842644][T11063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.912720][T15410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15410 comm=syz.6.4203 [ 233.946914][T15410] loop6: detected capacity change from 0 to 256 [ 233.961244][T15423] syzkaller0: entered promiscuous mode [ 233.966777][T15423] syzkaller0: entered allmulticast mode [ 233.975002][T15410] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 234.069026][T15429] FAULT_INJECTION: forcing a failure. [ 234.069026][T15429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.082150][T15429] CPU: 0 UID: 0 PID: 15429 Comm: syz.5.4209 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 234.082199][T15429] Tainted: [W]=WARN [ 234.082218][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.082230][T15429] Call Trace: [ 234.082246][T15429] [ 234.082254][T15429] __dump_stack+0x1d/0x30 [ 234.082276][T15429] dump_stack_lvl+0xe8/0x140 [ 234.082295][T15429] dump_stack+0x15/0x1b [ 234.082312][T15429] should_fail_ex+0x265/0x280 [ 234.082333][T15429] should_fail+0xb/0x20 [ 234.082409][T15429] should_fail_usercopy+0x1a/0x20 [ 234.082431][T15429] strncpy_from_user+0x25/0x230 [ 234.082458][T15429] ? __kmalloc_cache_noprof+0x189/0x320 [ 234.082487][T15429] __se_sys_memfd_create+0x1ff/0x590 [ 234.082549][T15429] __x64_sys_memfd_create+0x31/0x40 [ 234.082592][T15429] x64_sys_call+0x2abe/0x2ff0 [ 234.082617][T15429] do_syscall_64+0xd2/0x200 [ 234.082642][T15429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.082666][T15429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.082689][T15429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.082729][T15429] RIP: 0033:0x7fabc573ebe9 [ 234.082745][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.082776][T15429] RSP: 002b:00007fabc41a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 234.082796][T15429] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fabc573ebe9 [ 234.082810][T15429] RDX: 00007fabc41a6ef0 RSI: 0000000000000000 RDI: 00007fabc57c27e8 [ 234.082823][T15429] RBP: 0000200000000180 R08: 00007fabc41a6bb7 R09: 00007fabc41a6e40 [ 234.082881][T15429] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 234.082952][T15429] R13: 00007fabc41a6ef0 R14: 00007fabc41a6eb0 R15: 0000200000000940 [ 234.082971][T15429] [ 234.106247][T15415] nfs: Deprecated parameter 'nointr' [ 234.287626][T15436] siw: device registration error -23 [ 234.300155][T15436] loop5: detected capacity change from 0 to 1024 [ 234.318316][T15436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.336080][T15442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15442 comm=syz.7.4214 [ 234.379789][T15436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.395354][T15447] loop2: detected capacity change from 0 to 512 [ 234.408916][T15448] loop6: detected capacity change from 0 to 736 [ 234.426489][T15436] binfmt_misc: register: failed to install interpreter file ./file2 [ 234.439462][T15447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.478576][T15448] rock: directory entry would overflow storage [ 234.484769][T15448] rock: sig=0x3b10, size=4, remaining=3 [ 234.487949][T15447] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.514170][T15447] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4217: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 234.531082][T15447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 234.541318][T15448] lo: entered allmulticast mode [ 234.548173][T15445] lo: left allmulticast mode [ 234.561805][T15447] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4217: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 234.583700][T15456] syzkaller0: entered promiscuous mode [ 234.589193][T15456] syzkaller0: entered allmulticast mode [ 234.619590][T15447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 234.629226][T15447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4217: bg 0: block 18: invalid block bitmap [ 234.629363][T15447] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4217: Failed to acquire dquot type 1 [ 234.798894][T15483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15483 comm=syz.7.4229 [ 234.827304][T15487] loop6: detected capacity change from 0 to 1024 [ 234.837290][T15487] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 234.838177][T15491] siw: device registration error -23 [ 234.848296][T15487] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 234.861976][T15491] loop4: detected capacity change from 0 to 1024 [ 234.875817][T15491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.889268][T15487] JBD2: no valid journal superblock found [ 234.895049][T15487] EXT4-fs (loop6): Could not load journal inode [ 234.902417][T15491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.929637][T15491] binfmt_misc: register: failed to install interpreter file ./file2 [ 234.941999][T15496] loop6: detected capacity change from 0 to 512 [ 234.984455][T15496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.001600][T15496] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.026426][T15505] loop4: detected capacity change from 0 to 1024 [ 235.031802][T15496] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4234: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 235.087989][T15496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 235.097188][T15496] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4234: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 235.097371][T15496] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 235.097709][T15496] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4234: bg 0: block 18: invalid block bitmap [ 235.123774][T15505] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4237: Allocating blocks 449-513 which overlap fs metadata [ 235.149562][T15514] netlink: 'syz.4.4237': attribute type 32 has an invalid length. [ 235.149776][T15496] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4234: Failed to acquire dquot type 1 [ 235.228236][T15522] __nla_validate_parse: 29 callbacks suppressed [ 235.228252][T15522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4240'. [ 235.257232][T15504] EXT4-fs (loop4): pa ffff8881071c6d90: logic 48, phys. 177, len 21 [ 235.265334][T15504] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 235.395375][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4246'. [ 235.397455][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4248'. [ 235.428815][T15538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15538 comm=syz.5.4246 [ 235.430079][T15540] siw: device registration error -23 [ 235.458590][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4246'. [ 235.462775][T15540] loop4: detected capacity change from 0 to 1024 [ 235.505391][T15540] binfmt_misc: register: failed to install interpreter file ./file2 [ 235.542439][T15550] netlink: 'syz.4.4251': attribute type 2 has an invalid length. [ 235.664219][T15560] loop7: detected capacity change from 0 to 512 [ 235.695289][T15560] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.893543][T15572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4259'. [ 236.036531][T15581] netlink: 'syz.6.4263': attribute type 21 has an invalid length. [ 236.038209][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4262'. [ 236.051712][T15581] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4263'. [ 236.062420][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4263'. [ 236.076830][T15583] siw: device registration error -23 [ 236.087273][T15583] loop7: detected capacity change from 0 to 1024 [ 236.102504][T15583] binfmt_misc: register: failed to install interpreter file ./file2 [ 236.138969][T15586] netlink: 'syz.6.4264': attribute type 21 has an invalid length. [ 236.149760][T15586] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4264'. [ 236.158839][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4264'. [ 236.197354][T15588] lo speed is unknown, defaulting to 1000 [ 236.372453][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 236.372468][ T29] audit: type=1326 audit(1754984674.632:18048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.402365][ T29] audit: type=1326 audit(1754984674.632:18049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.426455][ T29] audit: type=1326 audit(1754984674.662:18050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15600 comm="syz.7.4269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 236.450080][ T29] audit: type=1326 audit(1754984674.662:18051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15600 comm="syz.7.4269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 236.473782][ T29] audit: type=1326 audit(1754984674.662:18052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.497517][ T29] audit: type=1326 audit(1754984674.662:18053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.521133][ T29] audit: type=1326 audit(1754984674.662:18054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.544721][ T29] audit: type=1326 audit(1754984674.662:18055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.568389][ T29] audit: type=1326 audit(1754984674.662:18056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.591982][ T29] audit: type=1326 audit(1754984674.662:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc573ebe9 code=0x7ffc0000 [ 236.663450][T15612] loop4: detected capacity change from 0 to 512 [ 236.673345][T15612] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.685590][T15612] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4272: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 236.703281][T15612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 236.712381][T15612] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4272: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 236.749483][T15612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 236.765007][T15612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4272: bg 0: block 18: invalid block bitmap [ 236.797286][T15612] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4272: Failed to acquire dquot type 1 [ 236.799272][T15621] netlink: 'syz.7.4275': attribute type 21 has an invalid length. [ 236.844216][T15625] FAULT_INJECTION: forcing a failure. [ 236.844216][T15625] name failslab, interval 1, probability 0, space 0, times 0 [ 236.857030][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.7.4276 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 236.857067][T15625] Tainted: [W]=WARN [ 236.857075][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.857086][T15625] Call Trace: [ 236.857093][T15625] [ 236.857115][T15625] __dump_stack+0x1d/0x30 [ 236.857157][T15625] dump_stack_lvl+0xe8/0x140 [ 236.857178][T15625] dump_stack+0x15/0x1b [ 236.857196][T15625] should_fail_ex+0x265/0x280 [ 236.857273][T15625] should_failslab+0x8c/0xb0 [ 236.857379][T15625] kmem_cache_alloc_node_noprof+0x57/0x320 [ 236.857467][T15625] ? dup_task_struct+0x70/0x6a0 [ 236.857557][T15625] dup_task_struct+0x70/0x6a0 [ 236.857576][T15625] ? _parse_integer+0x27/0x40 [ 236.857594][T15625] copy_process+0x399/0x2000 [ 236.857613][T15625] ? kstrtouint+0x76/0xc0 [ 236.857638][T15625] ? kstrtouint_from_user+0x9f/0xf0 [ 236.857692][T15625] ? __rcu_read_unlock+0x4f/0x70 [ 236.857712][T15625] kernel_clone+0x16c/0x5c0 [ 236.857733][T15625] ? vfs_write+0x7e8/0x960 [ 236.857753][T15625] __x64_sys_clone+0xe6/0x120 [ 236.857837][T15625] x64_sys_call+0x119c/0x2ff0 [ 236.857859][T15625] do_syscall_64+0xd2/0x200 [ 236.857887][T15625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.857912][T15625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.858009][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.858032][T15625] RIP: 0033:0x7f060fe5ebe9 [ 236.858048][T15625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.858130][T15625] RSP: 002b:00007f060e8befe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 236.858151][T15625] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 236.858164][T15625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 236.858175][T15625] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 236.858185][T15625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 236.858196][T15625] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 236.858212][T15625] [ 237.139094][T15637] loop6: detected capacity change from 0 to 512 [ 237.155545][T15637] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.222607][T15649] FAULT_INJECTION: forcing a failure. [ 237.222607][T15649] name failslab, interval 1, probability 0, space 0, times 0 [ 237.235454][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.7.4284 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 237.235538][T15649] Tainted: [W]=WARN [ 237.235545][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.235556][T15649] Call Trace: [ 237.235562][T15649] [ 237.235569][T15649] __dump_stack+0x1d/0x30 [ 237.235585][T15649] dump_stack_lvl+0xe8/0x140 [ 237.235660][T15649] dump_stack+0x15/0x1b [ 237.235670][T15649] should_fail_ex+0x265/0x280 [ 237.235682][T15649] should_failslab+0x8c/0xb0 [ 237.235696][T15649] kmem_cache_alloc_noprof+0x50/0x310 [ 237.235713][T15649] ? audit_log_start+0x365/0x6c0 [ 237.235792][T15649] audit_log_start+0x365/0x6c0 [ 237.235810][T15649] audit_seccomp+0x48/0x100 [ 237.235868][T15649] ? __seccomp_filter+0x68c/0x10d0 [ 237.235880][T15649] __seccomp_filter+0x69d/0x10d0 [ 237.235918][T15649] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.235933][T15649] ? vfs_write+0x7e8/0x960 [ 237.235948][T15649] __secure_computing+0x82/0x150 [ 237.235960][T15649] syscall_trace_enter+0xcf/0x1e0 [ 237.236015][T15649] do_syscall_64+0xac/0x200 [ 237.236030][T15649] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.236043][T15649] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.236127][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.236139][T15649] RIP: 0033:0x7f060fe5ebe9 [ 237.236148][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.236210][T15649] RSP: 002b:00007f060e8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 237.236258][T15649] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 237.236265][T15649] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000003 [ 237.236272][T15649] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 237.236279][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.236286][T15649] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 237.236329][T15649] [ 237.474454][T15654] netlink: 'syz.7.4287': attribute type 21 has an invalid length. [ 237.498280][T15656] loop2: detected capacity change from 0 to 512 [ 237.535896][T15656] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.550070][T15656] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4286: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 237.569830][T15656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 237.578955][T15656] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4286: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 237.596577][T15656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 237.606152][T15656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4286: bg 0: block 18: invalid block bitmap [ 237.644797][T15656] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4286: Failed to acquire dquot type 1 [ 237.672751][T15673] FAULT_INJECTION: forcing a failure. [ 237.672751][T15673] name failslab, interval 1, probability 0, space 0, times 0 [ 237.685598][T15673] CPU: 1 UID: 0 PID: 15673 Comm: syz.4.4293 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 237.685634][T15673] Tainted: [W]=WARN [ 237.685641][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.685653][T15673] Call Trace: [ 237.685661][T15673] [ 237.685669][T15673] __dump_stack+0x1d/0x30 [ 237.685691][T15673] dump_stack_lvl+0xe8/0x140 [ 237.685743][T15673] dump_stack+0x15/0x1b [ 237.685776][T15673] should_fail_ex+0x265/0x280 [ 237.685841][T15673] should_failslab+0x8c/0xb0 [ 237.685866][T15673] kmem_cache_alloc_node_noprof+0x57/0x320 [ 237.685944][T15673] ? __alloc_skb+0x101/0x320 [ 237.685974][T15673] __alloc_skb+0x101/0x320 [ 237.686001][T15673] ? audit_log_start+0x365/0x6c0 [ 237.686084][T15673] audit_log_start+0x380/0x6c0 [ 237.686155][T15673] audit_seccomp+0x48/0x100 [ 237.686185][T15673] ? __seccomp_filter+0x68c/0x10d0 [ 237.686257][T15673] __seccomp_filter+0x69d/0x10d0 [ 237.686359][T15673] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.686386][T15673] ? vfs_write+0x7e8/0x960 [ 237.686442][T15673] __secure_computing+0x82/0x150 [ 237.686524][T15673] syscall_trace_enter+0xcf/0x1e0 [ 237.686548][T15673] do_syscall_64+0xac/0x200 [ 237.686574][T15673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.686599][T15673] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.686755][T15673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.686777][T15673] RIP: 0033:0x7fb52d90ebe9 [ 237.686832][T15673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.686851][T15673] RSP: 002b:00007fb52c377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 237.686932][T15673] RAX: ffffffffffffffda RBX: 00007fb52db35fa0 RCX: 00007fb52d90ebe9 [ 237.686945][T15673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.686958][T15673] RBP: 00007fb52c377090 R08: 0000000000000000 R09: 0000000000000000 [ 237.686972][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.687036][T15673] R13: 00007fb52db36038 R14: 00007fb52db35fa0 R15: 00007fff71dda7c8 [ 237.687055][T15673] [ 237.916977][T15677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15677 comm=syz.4.4294 [ 237.990364][T15683] loop5: detected capacity change from 0 to 512 [ 238.017326][T15683] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.029563][T15685] loop7: detected capacity change from 0 to 1764 [ 238.030518][T15683] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4297: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.041513][T15685] iso9660: Bad value for 'check' [ 238.075763][T15683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 238.111368][T15683] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4297: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.150200][T15683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 238.150671][T15683] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4297: bg 0: block 18: invalid block bitmap [ 238.150837][T15683] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4297: Failed to acquire dquot type 1 [ 238.423079][T15705] loop5: detected capacity change from 0 to 512 [ 238.443620][T15705] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.462160][T15707] siw: device registration error -23 [ 238.469936][T15705] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4303: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.491353][T15707] loop7: detected capacity change from 0 to 1024 [ 238.499285][T15705] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 238.509319][T15705] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4303: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.558856][T15707] binfmt_misc: register: failed to install interpreter file ./file2 [ 238.573430][T15705] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 238.576313][T15705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4303: bg 0: block 18: invalid block bitmap [ 238.576460][T15705] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4303: Failed to acquire dquot type 1 [ 238.634213][T15714] loop7: detected capacity change from 0 to 512 [ 238.653877][T15714] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4305: bad orphan inode 15 [ 238.674137][T15714] ext4_test_bit(bit=14, block=5) = 0 [ 238.748451][T15725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15725 comm=syz.4.4309 [ 238.819365][T15739] loop4: detected capacity change from 0 to 512 [ 238.844481][T15739] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.856491][T15739] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4313: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.874894][T15739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 238.884580][T15739] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4313: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.901395][T15739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 238.913453][T15739] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4313: bg 0: block 18: invalid block bitmap [ 238.926358][T15739] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4313: Failed to acquire dquot type 1 [ 238.993532][T15747] vhci_hcd: invalid port number 96 [ 238.998673][T15747] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 239.287362][T15780] loop6: detected capacity change from 0 to 512 [ 239.302941][T15780] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.317394][T15780] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4327: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.334727][T15780] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 239.344279][T15780] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4327: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.364247][T15780] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 239.374120][T15780] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4327: bg 0: block 18: invalid block bitmap [ 239.387124][T15780] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4327: Failed to acquire dquot type 1 [ 239.467111][T15794] siw: device registration error -23 [ 239.478769][T15794] loop4: detected capacity change from 0 to 1024 [ 239.502996][T15799] FAULT_INJECTION: forcing a failure. [ 239.502996][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 239.515703][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.6.4333 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 239.515734][T15799] Tainted: [W]=WARN [ 239.515764][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.515775][T15799] Call Trace: [ 239.515781][T15799] [ 239.515788][T15799] __dump_stack+0x1d/0x30 [ 239.515809][T15799] dump_stack_lvl+0xe8/0x140 [ 239.515826][T15799] dump_stack+0x15/0x1b [ 239.515839][T15799] should_fail_ex+0x265/0x280 [ 239.515860][T15799] should_failslab+0x8c/0xb0 [ 239.515940][T15799] kmem_cache_alloc_noprof+0x50/0x310 [ 239.516043][T15799] ? alloc_vfsmnt+0x2d/0x300 [ 239.516076][T15799] alloc_vfsmnt+0x2d/0x300 [ 239.516143][T15799] vfs_create_mount+0x3b/0x240 [ 239.516173][T15799] __se_sys_fsmount+0x2d9/0x580 [ 239.516197][T15799] __x64_sys_fsmount+0x43/0x50 [ 239.516216][T15799] x64_sys_call+0x2ab3/0x2ff0 [ 239.516298][T15799] do_syscall_64+0xd2/0x200 [ 239.516322][T15799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.516344][T15799] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.516366][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.516405][T15799] RIP: 0033:0x7f97f76cebe9 [ 239.516418][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.516433][T15799] RSP: 002b:00007f97f6137038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 239.516495][T15799] RAX: ffffffffffffffda RBX: 00007f97f78f5fa0 RCX: 00007f97f76cebe9 [ 239.516508][T15799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 239.516521][T15799] RBP: 00007f97f6137090 R08: 0000000000000000 R09: 0000000000000000 [ 239.516533][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.516544][T15799] R13: 00007f97f78f6038 R14: 00007f97f78f5fa0 R15: 00007ffccdfca7d8 [ 239.516563][T15799] [ 239.516875][T15794] binfmt_misc: register: failed to install interpreter file ./file2 [ 239.854965][T15819] loop4: detected capacity change from 0 to 512 [ 239.874056][T15819] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.893456][T15819] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4341: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.915177][T15827] netlink: 'syz.6.4344': attribute type 21 has an invalid length. [ 239.922563][T15819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 239.932360][T15819] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4341: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.954939][T15819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 239.985318][T15819] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4341: bg 0: block 18: invalid block bitmap [ 240.012619][T15819] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4341: Failed to acquire dquot type 1 [ 240.077997][T15838] siw: device registration error -23 [ 240.086899][T15836] infiniband syz1: set down [ 240.087883][T15838] loop6: detected capacity change from 0 to 1024 [ 240.091500][T15836] infiniband syz1: added syz_tun [ 240.118700][T15836] RDS/IB: syz1: added [ 240.120656][T15838] binfmt_misc: register: failed to install interpreter file ./file2 [ 240.135914][T15836] smc: adding ib device syz1 with port count 1 [ 240.162466][T15836] smc: ib device syz1 port 1 has pnetid [ 240.256863][T15850] __nla_validate_parse: 23 callbacks suppressed [ 240.256876][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4352'. [ 240.599812][T15841] Set syz1 is full, maxelem 65536 reached [ 240.677069][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4357'. [ 240.704373][T15865] loop6: detected capacity change from 0 to 512 [ 240.727030][T15862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15862 comm=syz.4.4357 [ 240.747177][T15865] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.764017][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4357'. [ 240.774841][T15865] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4358: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 240.793615][T15865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 240.804102][T15865] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4358: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 240.820809][T15865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 240.834883][T15865] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4358: bg 0: block 18: invalid block bitmap [ 240.863698][T15858] nfs: Deprecated parameter 'nointr' [ 240.869717][T15865] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4358: Failed to acquire dquot type 1 [ 240.955373][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4361'. [ 240.973301][T15879] siw: device registration error -23 [ 240.986426][T15879] loop4: detected capacity change from 0 to 1024 [ 241.010754][T15879] binfmt_misc: register: failed to install interpreter file ./file2 [ 241.204065][T15903] loop7: detected capacity change from 0 to 512 [ 241.223172][T15901] lo speed is unknown, defaulting to 1000 [ 241.235384][T15903] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.260302][T15903] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.4371: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 241.283853][T15910] FAULT_INJECTION: forcing a failure. [ 241.283853][T15910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.296925][T15903] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 241.305924][T15910] CPU: 1 UID: 0 PID: 15910 Comm: syz.6.4374 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 241.305977][T15910] Tainted: [W]=WARN [ 241.305984][T15910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.305995][T15910] Call Trace: [ 241.306001][T15910] [ 241.306009][T15910] __dump_stack+0x1d/0x30 [ 241.306028][T15910] dump_stack_lvl+0xe8/0x140 [ 241.306066][T15910] dump_stack+0x15/0x1b [ 241.306080][T15910] should_fail_ex+0x265/0x280 [ 241.306150][T15910] should_fail+0xb/0x20 [ 241.306168][T15910] should_fail_usercopy+0x1a/0x20 [ 241.306187][T15910] _copy_from_user+0x1c/0xb0 [ 241.306210][T15910] __se_sys_io_uring_setup+0x11f/0x210 [ 241.306252][T15910] __x64_sys_io_uring_setup+0x31/0x40 [ 241.306272][T15910] x64_sys_call+0x2b21/0x2ff0 [ 241.306291][T15910] do_syscall_64+0xd2/0x200 [ 241.306313][T15910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.306397][T15910] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.306417][T15910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.306435][T15910] RIP: 0033:0x7f97f76cebe9 [ 241.306535][T15910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.306552][T15910] RSP: 002b:00007f97f6137038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 241.306570][T15910] RAX: ffffffffffffffda RBX: 00007f97f78f5fa0 RCX: 00007f97f76cebe9 [ 241.306582][T15910] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000007b9d [ 241.306648][T15910] RBP: 00007f97f6137090 R08: 0000000000000000 R09: 0000000000000000 [ 241.306659][T15910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.306670][T15910] R13: 00007f97f78f6038 R14: 00007f97f78f5fa0 R15: 00007ffccdfca7d8 [ 241.306686][T15910] [ 241.316573][T15903] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.4371: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 241.481508][ T29] kauditd_printk_skb: 1013 callbacks suppressed [ 241.481599][ T29] audit: type=1326 audit(1754984679.632:19051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 241.489070][T15903] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 241.490269][ T29] audit: type=1326 audit(1754984679.632:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.4.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52d90ebe9 code=0x7ffc0000 [ 241.507272][T15903] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4371: bg 0: block 18: invalid block bitmap [ 241.512803][ T29] audit: type=1326 audit(1754984679.662:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 241.512826][ T29] audit: type=1326 audit(1754984679.662:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 241.554313][T15903] Quota error (device loop7): write_blk: dquota write failed [ 241.568872][ T29] audit: type=1326 audit(1754984679.662:19055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 241.581896][T15903] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 241.604830][ T29] audit: type=1326 audit(1754984679.662:19056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 241.641662][T15903] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4371: Failed to acquire dquot type 1 [ 241.659396][ T29] audit: type=1326 audit(1754984679.662:19057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f060fe5d550 code=0x7ffc0000 [ 241.727743][ T29] audit: type=1326 audit(1754984679.662:19058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 241.872150][T15930] gtp0: entered promiscuous mode [ 241.877274][T15930] gtp0: entered allmulticast mode [ 241.888127][T15930] loop4: detected capacity change from 0 to 1024 [ 241.897620][T15930] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 241.907421][T15930] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 241.917169][T15930] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 241.928096][T15930] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.4381: unexpected bad inode w/o EXT4_IGET_BAD [ 241.941659][T15930] EXT4-fs (loop4): no journal found [ 241.946863][T15930] EXT4-fs (loop4): can't get journal size [ 241.992119][T15938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15938 comm=syz.4.4383 [ 242.005724][T15938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4383'. [ 242.081986][T15947] FAULT_INJECTION: forcing a failure. [ 242.081986][T15947] name failslab, interval 1, probability 0, space 0, times 0 [ 242.094672][T15947] CPU: 1 UID: 0 PID: 15947 Comm: syz.2.4387 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 242.094703][T15947] Tainted: [W]=WARN [ 242.094708][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.094718][T15947] Call Trace: [ 242.094724][T15947] [ 242.094730][T15947] __dump_stack+0x1d/0x30 [ 242.094748][T15947] dump_stack_lvl+0xe8/0x140 [ 242.094765][T15947] dump_stack+0x15/0x1b [ 242.094780][T15947] should_fail_ex+0x265/0x280 [ 242.094800][T15947] should_failslab+0x8c/0xb0 [ 242.094821][T15947] kmem_cache_alloc_noprof+0x50/0x310 [ 242.094842][T15947] ? vm_area_dup+0x33/0x2c0 [ 242.094866][T15947] vm_area_dup+0x33/0x2c0 [ 242.094889][T15947] __split_vma+0xe9/0x650 [ 242.094911][T15947] ? can_vma_merge_right+0xfe/0x2e0 [ 242.094928][T15947] vma_modify+0x21e/0xc80 [ 242.094946][T15947] ? _parse_integer_limit+0x170/0x190 [ 242.094965][T15947] vma_modify_flags+0x101/0x130 [ 242.094991][T15947] mlock_fixup+0x11d/0x210 [ 242.095018][T15947] apply_vma_lock_flags+0x193/0x250 [ 242.095047][T15947] do_mlock+0x3c6/0x520 [ 242.095074][T15947] ? __bpf_trace_sys_enter+0x10/0x30 [ 242.095095][T15947] ? trace_sys_enter+0xd0/0xf0 [ 242.095114][T15947] __x64_sys_mlock+0x36/0x50 [ 242.095134][T15947] x64_sys_call+0x18f8/0x2ff0 [ 242.095150][T15947] do_syscall_64+0xd2/0x200 [ 242.095170][T15947] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.095191][T15947] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.095214][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.095235][T15947] RIP: 0033:0x7f31de23ebe9 [ 242.095250][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.095266][T15947] RSP: 002b:00007f31dcca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 242.095282][T15947] RAX: ffffffffffffffda RBX: 00007f31de465fa0 RCX: 00007f31de23ebe9 [ 242.095292][T15947] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 242.095302][T15947] RBP: 00007f31dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.095312][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.095324][T15947] R13: 00007f31de466038 R14: 00007f31de465fa0 R15: 00007ffee308f5c8 [ 242.095341][T15947] [ 242.421886][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4393'. [ 242.442237][T15962] FAULT_INJECTION: forcing a failure. [ 242.442237][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.455414][T15962] CPU: 0 UID: 0 PID: 15962 Comm: syz.4.4394 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 242.455455][T15962] Tainted: [W]=WARN [ 242.455462][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.455476][T15962] Call Trace: [ 242.455483][T15962] [ 242.455491][T15962] __dump_stack+0x1d/0x30 [ 242.455511][T15962] dump_stack_lvl+0xe8/0x140 [ 242.455593][T15962] dump_stack+0x15/0x1b [ 242.455611][T15962] should_fail_ex+0x265/0x280 [ 242.455633][T15962] should_fail+0xb/0x20 [ 242.455651][T15962] should_fail_usercopy+0x1a/0x20 [ 242.455674][T15962] _copy_from_user+0x1c/0xb0 [ 242.455746][T15962] ___sys_sendmsg+0xc1/0x1d0 [ 242.455789][T15962] __x64_sys_sendmsg+0xd4/0x160 [ 242.455813][T15962] x64_sys_call+0x191e/0x2ff0 [ 242.455831][T15962] do_syscall_64+0xd2/0x200 [ 242.455852][T15962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.455953][T15962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.455976][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.455995][T15962] RIP: 0033:0x7fb52d90ebe9 [ 242.456009][T15962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.456037][T15962] RSP: 002b:00007fb52c377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.456057][T15962] RAX: ffffffffffffffda RBX: 00007fb52db35fa0 RCX: 00007fb52d90ebe9 [ 242.456071][T15962] RDX: 0000000004004050 RSI: 0000200000000000 RDI: 0000000000000003 [ 242.456085][T15962] RBP: 00007fb52c377090 R08: 0000000000000000 R09: 0000000000000000 [ 242.456098][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.456111][T15962] R13: 00007fb52db36038 R14: 00007fb52db35fa0 R15: 00007fff71dda7c8 [ 242.456128][T15962] [ 242.456601][T15960] siw: device registration error -23 [ 242.646693][T15967] loop7: detected capacity change from 0 to 1024 [ 242.672766][T15970] program syz.4.4395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.686589][T15965] binfmt_misc: register: failed to install interpreter file ./file2 [ 242.771722][T15980] netlink: 'syz.5.4399': attribute type 21 has an invalid length. [ 242.796615][T15980] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4399'. [ 242.796742][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4400'. [ 242.805887][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4399'. [ 242.824740][T15982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15982 comm=syz.7.4398 [ 242.870125][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4398'. [ 242.898809][T15984] FAULT_INJECTION: forcing a failure. [ 242.898809][T15984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.911896][T15984] CPU: 1 UID: 0 PID: 15984 Comm: syz.6.4400 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 242.911946][T15984] Tainted: [W]=WARN [ 242.911953][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.911999][T15984] Call Trace: [ 242.912005][T15984] [ 242.912011][T15984] __dump_stack+0x1d/0x30 [ 242.912031][T15984] dump_stack_lvl+0xe8/0x140 [ 242.912048][T15984] dump_stack+0x15/0x1b [ 242.912111][T15984] should_fail_ex+0x265/0x280 [ 242.912131][T15984] should_fail+0xb/0x20 [ 242.912227][T15984] should_fail_usercopy+0x1a/0x20 [ 242.912248][T15984] _copy_from_user+0x1c/0xb0 [ 242.912271][T15984] ___sys_sendmsg+0xc1/0x1d0 [ 242.912299][T15984] __x64_sys_sendmsg+0xd4/0x160 [ 242.912364][T15984] x64_sys_call+0x191e/0x2ff0 [ 242.912382][T15984] do_syscall_64+0xd2/0x200 [ 242.912404][T15984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.912451][T15984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.912533][T15984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.912552][T15984] RIP: 0033:0x7f97f76cebe9 [ 242.912565][T15984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.912651][T15984] RSP: 002b:00007f97f6116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.912671][T15984] RAX: ffffffffffffffda RBX: 00007f97f78f6090 RCX: 00007f97f76cebe9 [ 242.912685][T15984] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 242.912766][T15984] RBP: 00007f97f6116090 R08: 0000000000000000 R09: 0000000000000000 [ 242.912778][T15984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.912857][T15984] R13: 00007f97f78f6128 R14: 00007f97f78f6090 R15: 00007ffccdfca7d8 [ 242.912875][T15984] [ 243.200402][T16007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16007 comm=syz.5.4410 [ 243.216166][T16008] loop6: detected capacity change from 0 to 128 [ 243.223214][T16008] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.261744][T16008] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.287854][T16015] netlink: 'syz.7.4413': attribute type 21 has an invalid length. [ 243.329568][T16022] FAULT_INJECTION: forcing a failure. [ 243.329568][T16022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.342773][T16022] CPU: 1 UID: 0 PID: 16022 Comm: syz.7.4415 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 243.342824][T16022] Tainted: [W]=WARN [ 243.342831][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.342844][T16022] Call Trace: [ 243.342850][T16022] [ 243.342858][T16022] __dump_stack+0x1d/0x30 [ 243.342881][T16022] dump_stack_lvl+0xe8/0x140 [ 243.343026][T16022] dump_stack+0x15/0x1b [ 243.343044][T16022] should_fail_ex+0x265/0x280 [ 243.343067][T16022] should_fail+0xb/0x20 [ 243.343140][T16022] should_fail_usercopy+0x1a/0x20 [ 243.343163][T16022] _copy_from_user+0x1c/0xb0 [ 243.343192][T16022] __sys_bpf+0x178/0x7b0 [ 243.343255][T16022] __x64_sys_bpf+0x41/0x50 [ 243.343274][T16022] x64_sys_call+0x2aea/0x2ff0 [ 243.343292][T16022] do_syscall_64+0xd2/0x200 [ 243.343318][T16022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.343360][T16022] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.343380][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.343553][T16022] RIP: 0033:0x7f060fe5ebe9 [ 243.343568][T16022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.343585][T16022] RSP: 002b:00007f060e8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.343604][T16022] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 243.343616][T16022] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 243.343629][T16022] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 243.343642][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.343709][T16022] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 243.343730][T16022] [ 243.530524][T16025] loop7: detected capacity change from 0 to 512 [ 243.558281][T16025] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4417: bad orphan inode 15 [ 243.574268][T16030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16030 comm=syz.4.4418 [ 243.596793][T16005] nfs: Deprecated parameter 'nointr' [ 243.611486][T16025] ext4_test_bit(bit=14, block=5) = 0 [ 243.623365][T16025] FAULT_INJECTION: forcing a failure. [ 243.623365][T16025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.636454][T16025] CPU: 0 UID: 0 PID: 16025 Comm: syz.7.4417 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 243.636486][T16025] Tainted: [W]=WARN [ 243.636492][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.636503][T16025] Call Trace: [ 243.636508][T16025] [ 243.636564][T16025] __dump_stack+0x1d/0x30 [ 243.636587][T16025] dump_stack_lvl+0xe8/0x140 [ 243.636608][T16025] dump_stack+0x15/0x1b [ 243.636624][T16025] should_fail_ex+0x265/0x280 [ 243.636723][T16025] should_fail+0xb/0x20 [ 243.636750][T16025] should_fail_usercopy+0x1a/0x20 [ 243.636769][T16025] _copy_from_user+0x1c/0xb0 [ 243.636791][T16025] do_handle_open+0x6d/0x6b0 [ 243.636830][T16025] __x64_sys_open_by_handle_at+0x44/0x50 [ 243.636857][T16025] x64_sys_call+0x279b/0x2ff0 [ 243.636927][T16025] do_syscall_64+0xd2/0x200 [ 243.636953][T16025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.637003][T16025] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.637025][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.637094][T16025] RIP: 0033:0x7f060fe5ebe9 [ 243.637107][T16025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.637160][T16025] RSP: 002b:00007f060e8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 243.637180][T16025] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 243.637194][T16025] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 243.637207][T16025] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 243.637221][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.637234][T16025] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 243.637255][T16025] [ 243.930444][T16048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16048 comm=syz.4.4424 [ 244.002042][T16054] loop5: detected capacity change from 0 to 512 [ 244.028560][T16054] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.040590][T16058] program syz.4.4428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.060286][T16054] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4427: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 244.083187][T16054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 244.098623][T16054] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.4427: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 244.121995][T16068] FAULT_INJECTION: forcing a failure. [ 244.121995][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 244.132663][T16054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 244.134647][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.2.4431 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 244.134676][T16068] Tainted: [W]=WARN [ 244.134681][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.134698][T16068] Call Trace: [ 244.134705][T16068] [ 244.134712][T16068] __dump_stack+0x1d/0x30 [ 244.134733][T16068] dump_stack_lvl+0xe8/0x140 [ 244.134751][T16068] dump_stack+0x15/0x1b [ 244.134767][T16068] should_fail_ex+0x265/0x280 [ 244.134787][T16068] should_failslab+0x8c/0xb0 [ 244.134809][T16068] kmem_cache_alloc_noprof+0x50/0x310 [ 244.134835][T16068] ? vm_area_dup+0x33/0x2c0 [ 244.134862][T16068] vm_area_dup+0x33/0x2c0 [ 244.134890][T16068] __split_vma+0xe9/0x650 [ 244.134915][T16068] ? can_vma_merge_right+0xfe/0x2e0 [ 244.134936][T16068] vma_modify+0x21e/0xc80 [ 244.134957][T16068] ? 0xffffffffa0201870 [ 244.134970][T16068] ? _parse_integer_limit+0x170/0x190 [ 244.134992][T16068] vma_modify_flags+0x101/0x130 [ 244.135017][T16068] mlock_fixup+0x11d/0x210 [ 244.135045][T16068] apply_vma_lock_flags+0x193/0x250 [ 244.135076][T16068] do_mlock+0x3c6/0x520 [ 244.135101][T16068] ? __bpf_trace_sys_enter+0x10/0x30 [ 244.135122][T16068] ? __traceiter_sys_enter+0x5c/0x80 [ 244.135141][T16068] ? trace_sys_enter+0xd0/0xf0 [ 244.135162][T16068] __x64_sys_mlock+0x36/0x50 [ 244.135186][T16068] x64_sys_call+0x18f8/0x2ff0 [ 244.135204][T16068] do_syscall_64+0xd2/0x200 [ 244.135275][T16068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.135297][T16068] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.135319][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.135339][T16068] RIP: 0033:0x7f31de23ebe9 [ 244.135353][T16068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.135376][T16068] RSP: 002b:00007f31dcca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 244.135394][T16068] RAX: ffffffffffffffda RBX: 00007f31de465fa0 RCX: 00007f31de23ebe9 [ 244.135406][T16068] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 244.135417][T16068] RBP: 00007f31dcca7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.135429][T16068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.135441][T16068] R13: 00007f31de466038 R14: 00007f31de465fa0 R15: 00007ffee308f5c8 [ 244.135458][T16068] [ 244.381270][T16054] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4427: bg 0: block 18: invalid block bitmap [ 244.418239][T16054] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4427: Failed to acquire dquot type 1 [ 244.522311][T16082] nfs: Deprecated parameter 'nointr' [ 244.607503][T16093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16093 comm=syz.2.4438 [ 244.819535][T16105] netlink: 'syz.5.4443': attribute type 21 has an invalid length. [ 245.083204][T16130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16130 comm=syz.6.4452 [ 245.185595][T16136] netlink: 'syz.7.4454': attribute type 21 has an invalid length. [ 245.246395][T16142] program syz.4.4456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.258280][T16140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16140 comm=syz.7.4455 [ 245.273842][T16140] __nla_validate_parse: 19 callbacks suppressed [ 245.273854][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4455'. [ 245.411330][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'. [ 245.487752][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4460'. [ 245.511269][T16154] siw: device registration error -23 [ 245.527504][T16156] tipc: Enabling of bearer rejected, failed to enable media [ 245.541101][T16154] loop6: detected capacity change from 0 to 1024 [ 245.560253][T16158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4462'. [ 245.585321][T16154] binfmt_misc: register: failed to install interpreter file ./file2 [ 245.614093][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4464'. [ 245.640844][T16164] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16164 comm=syz.2.4464 [ 245.664115][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4464'. [ 245.680840][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4465'. [ 245.764820][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4466'. [ 245.846109][T16176] nfs: Deprecated parameter 'nointr' [ 245.912058][T16180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16180 comm=syz.6.4468 [ 245.951740][T16179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4468'. [ 246.037461][T16188] loop6: detected capacity change from 0 to 512 [ 246.037554][T16189] loop2: detected capacity change from 0 to 512 [ 246.086365][T16189] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 246.108051][T16188] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.150511][T16188] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4472: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 246.193889][T16188] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 246.205592][T16188] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4472: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 246.224401][T16188] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 246.234050][T16188] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4472: bg 0: block 18: invalid block bitmap [ 246.246921][T16188] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4472: Failed to acquire dquot type 1 [ 246.262133][T16204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4477'. [ 246.280750][T16204] siw: device registration error -23 [ 246.286954][T16206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16206 comm=syz.5.4478 [ 246.288523][T16204] loop7: detected capacity change from 0 to 1024 [ 246.310149][T16204] binfmt_misc: register: failed to install interpreter file ./file2 [ 246.365244][T16210] netlink: 'syz.7.4479': attribute type 21 has an invalid length. [ 246.488891][ T29] kauditd_printk_skb: 852 callbacks suppressed [ 246.488906][ T29] audit: type=1326 audit(1754984684.742:19907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.518693][ T29] audit: type=1326 audit(1754984684.742:19908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.542352][ T29] audit: type=1326 audit(1754984684.742:19909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.565969][ T29] audit: type=1326 audit(1754984684.742:19910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.589896][ T29] audit: type=1326 audit(1754984684.742:19911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.616489][ T29] audit: type=1326 audit(1754984684.782:19912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.659028][ T29] audit: type=1326 audit(1754984684.872:19913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.682680][ T29] audit: type=1326 audit(1754984684.872:19914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.717150][ T29] audit: type=1326 audit(1754984684.912:19915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.740822][ T29] audit: type=1326 audit(1754984684.912:19916): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.7.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 246.935397][T16244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16244 comm=syz.6.4490 [ 246.989810][T16249] loop4: detected capacity change from 0 to 512 [ 247.003646][T16249] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.037834][T16249] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4492: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.097804][T16249] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 247.135721][T16249] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4492: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.136097][T16249] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 247.161492][T16249] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4492: bg 0: block 18: invalid block bitmap [ 247.161715][T16249] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4492: Failed to acquire dquot type 1 [ 247.449446][T16269] nfs: Deprecated parameter 'nointr' [ 247.469948][T16278] loop6: detected capacity change from 0 to 512 [ 247.519744][T16278] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.537632][T16278] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4500: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.562578][T16278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 247.578952][T16278] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4500: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 247.598701][T16278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 247.618954][T16278] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4500: bg 0: block 18: invalid block bitmap [ 247.643960][T16278] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4500: Failed to acquire dquot type 1 [ 247.666875][T16295] loop2: detected capacity change from 0 to 736 [ 247.688907][T16295] rock: directory entry would overflow storage [ 247.695197][T16295] rock: sig=0x3b10, size=4, remaining=3 [ 247.702506][T16295] lo: entered allmulticast mode [ 247.707552][T16294] lo: left allmulticast mode [ 247.768700][T16305] FAULT_INJECTION: forcing a failure. [ 247.768700][T16305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.781968][T16305] CPU: 0 UID: 0 PID: 16305 Comm: syz.5.4503 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 247.782002][T16305] Tainted: [W]=WARN [ 247.782009][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.782022][T16305] Call Trace: [ 247.782029][T16305] [ 247.782037][T16305] __dump_stack+0x1d/0x30 [ 247.782077][T16305] dump_stack_lvl+0xe8/0x140 [ 247.782098][T16305] dump_stack+0x15/0x1b [ 247.782115][T16305] should_fail_ex+0x265/0x280 [ 247.782136][T16305] should_fail+0xb/0x20 [ 247.782154][T16305] should_fail_usercopy+0x1a/0x20 [ 247.782200][T16305] _copy_from_user+0x1c/0xb0 [ 247.782224][T16305] user_termios_to_kernel_termios_1+0x22/0x30 [ 247.782248][T16305] set_termios+0x125/0x4e0 [ 247.782334][T16305] tty_mode_ioctl+0x379/0x5c0 [ 247.782399][T16305] n_tty_ioctl_helper+0x91/0x210 [ 247.782424][T16305] n_tty_ioctl+0x101/0x200 [ 247.782445][T16305] ? __pfx_n_tty_ioctl+0x10/0x10 [ 247.782465][T16305] tty_ioctl+0x842/0xb80 [ 247.782549][T16305] ? __pfx_tty_ioctl+0x10/0x10 [ 247.782575][T16305] __se_sys_ioctl+0xcb/0x140 [ 247.782607][T16305] __x64_sys_ioctl+0x43/0x50 [ 247.782668][T16305] x64_sys_call+0x1816/0x2ff0 [ 247.782688][T16305] do_syscall_64+0xd2/0x200 [ 247.782711][T16305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.782732][T16305] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.782760][T16305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.782777][T16305] RIP: 0033:0x7fabc573ebe9 [ 247.782790][T16305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.782805][T16305] RSP: 002b:00007fabc4165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.782901][T16305] RAX: ffffffffffffffda RBX: 00007fabc5966180 RCX: 00007fabc573ebe9 [ 247.782914][T16305] RDX: 0000200000000180 RSI: 0000000000005404 RDI: 0000000000000017 [ 247.782927][T16305] RBP: 00007fabc4165090 R08: 0000000000000000 R09: 0000000000000000 [ 247.782940][T16305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.782951][T16305] R13: 00007fabc5966218 R14: 00007fabc5966180 R15: 00007ffc66d695d8 [ 247.782969][T16305] [ 248.387297][T16321] nfs: Deprecated parameter 'nointr' [ 248.405500][T16333] selinux_netlink_send: 1 callbacks suppressed [ 248.405529][T16333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16333 comm=syz.6.4518 [ 248.437131][T16334] loop7: detected capacity change from 0 to 128 [ 248.466929][T16334] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.508190][T16334] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.542490][T16337] vhci_hcd: invalid port number 96 [ 248.543746][T16339] loop6: detected capacity change from 0 to 512 [ 248.547627][T16337] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 248.578966][T16339] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.610186][T16339] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4520: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 248.641473][T16339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 248.661672][T16339] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4520: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 248.699399][T16339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 248.703245][T16339] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4520: bg 0: block 18: invalid block bitmap [ 248.755109][T16363] loop2: detected capacity change from 0 to 1024 [ 248.765083][T16339] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4520: Failed to acquire dquot type 1 [ 248.826010][T16363] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4526: Allocating blocks 449-513 which overlap fs metadata [ 248.846464][T16362] EXT4-fs (loop2): pa ffff888107256620: logic 48, phys. 177, len 21 [ 248.854502][T16362] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 248.904429][T16371] loop2: detected capacity change from 0 to 512 [ 248.921895][T16371] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.934324][T16371] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4527: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 248.951207][T16371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 248.960507][T16371] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4527: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 248.977358][T16371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 248.987115][T16371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4527: bg 0: block 18: invalid block bitmap [ 249.000362][T16371] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4527: Failed to acquire dquot type 1 [ 249.186534][T16383] netlink: 'syz.5.4529': attribute type 4 has an invalid length. [ 249.232259][T16383] vhci_hcd: invalid port number 96 [ 249.237543][T16383] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 249.266923][T16387] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16387 comm=syz.7.4531 [ 249.757896][T12217] EXT4-fs unmount: 63 callbacks suppressed [ 249.757911][T12217] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.773991][T16413] nfs: Deprecated parameter 'nointr' [ 249.837608][T16424] loop6: detected capacity change from 0 to 512 [ 249.874281][T16424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.890280][T16422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16422 comm=syz.2.4544 [ 249.893879][T16424] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.918568][T16424] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4545: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 249.941782][T16424] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 249.956499][T16424] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4545: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 249.989608][T16424] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 250.010495][T16424] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4545: bg 0: block 18: invalid block bitmap [ 250.026098][T16424] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4545: Failed to acquire dquot type 1 [ 250.131308][T16446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16446 comm=syz.2.4552 [ 250.206913][T16446] loop2: detected capacity change from 0 to 256 [ 250.221920][T16446] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 250.388853][T16454] nfs: Deprecated parameter 'nointr' [ 250.464905][T16463] __nla_validate_parse: 24 callbacks suppressed [ 250.464919][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4559'. [ 250.496397][T16463] siw: device registration error -23 [ 250.507364][T16462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16462 comm=syz.5.4560 [ 250.514190][T16467] netlink: 'syz.7.4562': attribute type 21 has an invalid length. [ 250.527927][T16467] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4562'. [ 250.528104][T16463] loop4: detected capacity change from 0 to 1024 [ 250.537051][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4562'. [ 250.554742][T16462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4560'. [ 250.565353][T16469] netlink: 'syz.7.4563': attribute type 21 has an invalid length. [ 250.574938][T16469] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4563'. [ 250.575706][T16463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.584017][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4563'. [ 250.606395][T16463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.617185][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4564'. [ 250.642370][T16472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16472 comm=syz.7.4564 [ 250.657057][T16463] binfmt_misc: register: failed to install interpreter file ./file2 [ 250.658584][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4564'. [ 250.697910][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.901987][T16495] loop4: detected capacity change from 0 to 128 [ 250.918848][T16495] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.948161][T16495] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.043675][T16491] nfs: Deprecated parameter 'nointr' [ 251.097994][T16504] netlink: 'syz.5.4575': attribute type 21 has an invalid length. [ 251.106382][T16504] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4575'. [ 251.115547][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4575'. [ 251.170966][T16506] siw: device registration error -23 [ 251.192738][T16506] loop5: detected capacity change from 0 to 1024 [ 251.213983][T16506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.232825][T16506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.272736][T16506] binfmt_misc: register: failed to install interpreter file ./file2 [ 251.349089][T16516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16516 comm=syz.5.4580 [ 251.366000][T16518] loop7: detected capacity change from 0 to 512 [ 251.378538][T16518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.407752][T16518] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.433349][T16518] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.4581: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 251.456851][T16518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 251.466197][T16518] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.4581: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 251.504367][T16518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 251.514284][ T29] kauditd_printk_skb: 1133 callbacks suppressed [ 251.514297][ T29] audit: type=1326 audit(1754984689.772:21040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f060fe55ba7 code=0x7ffc0000 [ 251.544148][T16518] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4581: bg 0: block 18: invalid block bitmap [ 251.544307][ T29] audit: type=1326 audit(1754984689.772:21041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f060fdfadd9 code=0x7ffc0000 [ 251.544338][ T29] audit: type=1326 audit(1754984689.772:21042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f060fe55ba7 code=0x7ffc0000 [ 251.544397][ T29] audit: type=1326 audit(1754984689.772:21043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f060fdfadd9 code=0x7ffc0000 [ 251.544525][ T29] audit: type=1326 audit(1754984689.772:21044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 251.544552][ T29] audit: type=1326 audit(1754984689.772:21045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 251.544577][ T29] audit: type=1326 audit(1754984689.772:21046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 251.698758][ T29] audit: type=1326 audit(1754984689.772:21047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 251.722320][ T29] audit: type=1326 audit(1754984689.772:21048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060fe5ebe9 code=0x7ffc0000 [ 251.745888][ T29] audit: type=1326 audit(1754984689.772:21049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.7.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f060fe5d550 code=0x7ffc0000 [ 251.769518][T16518] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4581: Failed to acquire dquot type 1 [ 251.785259][T16535] netlink: 'syz.5.4586': attribute type 21 has an invalid length. [ 251.843882][T14489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.882500][T16549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16549 comm=syz.6.4592 [ 252.026398][T16567] loop6: detected capacity change from 0 to 512 [ 252.033586][T16565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16565 comm=syz.2.4597 [ 252.072332][T16567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.094647][T16567] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.120560][T16574] netlink: 'syz.7.4600': attribute type 21 has an invalid length. [ 252.130605][T16567] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4599: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 252.151489][T16567] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 252.174993][T16567] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4599: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 252.197051][T16567] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 252.201331][T16585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16585 comm=syz.4.4601 [ 252.225692][T16567] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4599: bg 0: block 18: invalid block bitmap [ 252.245642][T16576] loop4: detected capacity change from 0 to 256 [ 252.245855][T16576] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙' [ 252.259049][T16588] FAULT_INJECTION: forcing a failure. [ 252.259049][T16588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.272199][T16588] CPU: 1 UID: 0 PID: 16588 Comm: syz.7.4605 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 252.272228][T16588] Tainted: [W]=WARN [ 252.272234][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.272267][T16588] Call Trace: [ 252.272274][T16588] [ 252.272284][T16588] __dump_stack+0x1d/0x30 [ 252.272306][T16588] dump_stack_lvl+0xe8/0x140 [ 252.272325][T16588] dump_stack+0x15/0x1b [ 252.272410][T16588] should_fail_ex+0x265/0x280 [ 252.272429][T16588] should_fail+0xb/0x20 [ 252.272444][T16588] should_fail_usercopy+0x1a/0x20 [ 252.272514][T16588] _copy_to_user+0x20/0xa0 [ 252.272540][T16588] simple_read_from_buffer+0xb5/0x130 [ 252.272561][T16588] proc_fail_nth_read+0x10e/0x150 [ 252.272667][T16588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.272701][T16588] vfs_read+0x1a8/0x770 [ 252.272733][T16588] ? __rcu_read_unlock+0x4f/0x70 [ 252.272754][T16588] ? __fget_files+0x184/0x1c0 [ 252.272779][T16588] ksys_read+0xda/0x1a0 [ 252.272801][T16588] __x64_sys_read+0x40/0x50 [ 252.272882][T16588] x64_sys_call+0x27bc/0x2ff0 [ 252.272930][T16588] do_syscall_64+0xd2/0x200 [ 252.272951][T16588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 252.272971][T16588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 252.273143][T16588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.273163][T16588] RIP: 0033:0x7f060fe5d5fc [ 252.273179][T16588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.273227][T16588] RSP: 002b:00007f060e8bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.273245][T16588] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5d5fc [ 252.273258][T16588] RDX: 000000000000000f RSI: 00007f060e8bf0a0 RDI: 0000000000000006 [ 252.273272][T16588] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 252.273284][T16588] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 252.273296][T16588] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 252.273392][T16588] [ 252.278164][T16567] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4599: Failed to acquire dquot type 1 [ 252.311616][T16589] loop2: detected capacity change from 0 to 2048 [ 252.349693][T16592] FAULT_INJECTION: forcing a failure. [ 252.349693][T16592] name failslab, interval 1, probability 0, space 0, times 0 [ 252.512809][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.7.4607 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 252.512879][T16592] Tainted: [W]=WARN [ 252.512885][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.512895][T16592] Call Trace: [ 252.512901][T16592] [ 252.512908][T16592] __dump_stack+0x1d/0x30 [ 252.512929][T16592] dump_stack_lvl+0xe8/0x140 [ 252.513012][T16592] dump_stack+0x15/0x1b [ 252.513028][T16592] should_fail_ex+0x265/0x280 [ 252.513197][T16592] should_failslab+0x8c/0xb0 [ 252.513221][T16592] kmem_cache_alloc_noprof+0x50/0x310 [ 252.513247][T16592] ? security_file_alloc+0x32/0x100 [ 252.513277][T16592] security_file_alloc+0x32/0x100 [ 252.513360][T16592] init_file+0x5c/0x1d0 [ 252.513388][T16592] alloc_empty_file+0x8b/0x200 [ 252.513415][T16592] path_openat+0x68/0x2170 [ 252.513435][T16592] ? mntput+0x4b/0x80 [ 252.513529][T16592] ? terminate_walk+0x27f/0x2a0 [ 252.513556][T16592] ? path_openat+0x1bf8/0x2170 [ 252.513574][T16592] ? _parse_integer_limit+0x170/0x190 [ 252.513597][T16592] do_filp_open+0x109/0x230 [ 252.513645][T16592] do_open_execat+0xd8/0x260 [ 252.513671][T16592] alloc_bprm+0x25/0x350 [ 252.513691][T16592] do_execveat_common+0x12e/0x750 [ 252.513750][T16592] ? getname_flags+0x154/0x3b0 [ 252.513776][T16592] __x64_sys_execveat+0x73/0x90 [ 252.513817][T16592] x64_sys_call+0x1fec/0x2ff0 [ 252.513838][T16592] do_syscall_64+0xd2/0x200 [ 252.513863][T16592] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 252.513949][T16592] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 252.513973][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.513995][T16592] RIP: 0033:0x7f060fe5ebe9 [ 252.514010][T16592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.514104][T16592] RSP: 002b:00007f060e8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 252.514123][T16592] RAX: ffffffffffffffda RBX: 00007f0610085fa0 RCX: 00007f060fe5ebe9 [ 252.514259][T16592] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 252.514272][T16592] RBP: 00007f060e8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 252.514285][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.514297][T16592] R13: 00007f0610086038 R14: 00007f0610085fa0 R15: 00007ffe9bf9a868 [ 252.514316][T16592] [ 252.565183][T16589] loop2: p1 < > p3 < p5 > p4 [ 252.615105][T16599] loop7: detected capacity change from 0 to 736 [ 252.619667][T16589] loop2: partition table partially beyond EOD, truncated [ 252.642389][T16589] loop2: p1 start 100663296 is beyond EOD, [ 252.653246][T16599] rock: directory entry would overflow storage [ 252.656993][T16589] truncated [ 252.735282][T16603] loop4: detected capacity change from 0 to 512 [ 252.739186][T16599] rock: sig=0x3b10, size=4, remaining=3 [ 252.772124][T16589] loop2: p4 size 395008 extends beyond EOD, [ 252.790799][T16599] syz_tun: entered allmulticast mode [ 252.795122][T16589] truncated [ 252.820233][T16598] syz_tun: left allmulticast mode [ 252.837249][T16603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.866412][T16589] loop2: p5 size 395008 extends beyond EOD, truncated [ 252.873886][T16603] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.894087][T12402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.925644][T16603] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4611: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 252.964581][T16603] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 252.975229][ T7024] udevd[7024]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 252.977274][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 252.995359][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 253.016284][T16603] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4611: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 253.016482][T16603] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 253.017014][T16603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4611: bg 0: block 18: invalid block bitmap [ 253.017226][T16603] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4611: Failed to acquire dquot type 1 [ 253.070223][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070249][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070269][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070290][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070395][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070416][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070458][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070480][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070504][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.070530][ T3390] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 253.074298][ T3390] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 253.102511][T16628] IPv6: Can't replace route, no match found [ 253.154268][T16638] loop6: detected capacity change from 0 to 736 [ 253.166660][T16640] loop2: detected capacity change from 0 to 512 [ 253.207967][T16638] rock: directory entry would overflow storage [ 253.229933][T16629] fido_id[16629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.236993][T16638] rock: sig=0x3b10, size=4, remaining=3 [ 253.304789][T16638] lo: entered allmulticast mode [ 253.304954][T16637] lo: left allmulticast mode [ 253.308662][T16645] loop5: detected capacity change from 0 to 1024 [ 253.348186][T16640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.365624][T16645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.371669][T16640] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.398130][T16651] loop6: detected capacity change from 0 to 164 [ 253.419605][T16640] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4624: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 253.426071][T16645] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.4625: Allocating blocks 449-513 which overlap fs metadata [ 253.457582][T16640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 253.471388][T16640] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4624: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 253.472008][T16651] bio_check_eod: 105 callbacks suppressed [ 253.472021][T16651] syz.6.4626: attempt to access beyond end of device [ 253.472021][T16651] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 253.499137][T16640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 253.557628][T16640] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4624: bg 0: block 18: invalid block bitmap [ 253.560275][T16651] syz.6.4626: attempt to access beyond end of device [ 253.560275][T16651] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 253.570999][T16660] IPv6: Can't replace route, no match found [ 253.601068][T16645] lo speed is unknown, defaulting to 1000 [ 253.611516][ C0] ================================================================== [ 253.619617][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 253.626843][ C0] [ 253.629156][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1: [ 253.637202][ C0] wq_worker_tick+0x60/0x230 [ 253.641785][ C0] sched_tick+0x11a/0x270 [ 253.646097][ C0] update_process_times+0x15f/0x190 [ 253.651303][ C0] tick_nohz_handler+0x249/0x2d0 [ 253.656227][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 253.661411][ C0] hrtimer_interrupt+0x21a/0x460 [ 253.666339][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 253.672227][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 253.677849][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.683819][ C0] __sanitizer_cov_trace_pc+0x8/0x70 [ 253.689101][ C0] __alloc_skb+0x313/0x320 [ 253.693513][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 253.699143][ C0] process_scheduled_works+0x4cb/0x9d0 [ 253.704591][ C0] worker_thread+0x582/0x770 [ 253.709176][ C0] kthread+0x489/0x510 [ 253.713227][ C0] ret_from_fork+0xda/0x150 [ 253.717715][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.722463][ C0] [ 253.724766][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0: [ 253.732809][ C0] wq_worker_tick+0x60/0x230 [ 253.737384][ C0] sched_tick+0x11a/0x270 [ 253.741701][ C0] update_process_times+0x15f/0x190 [ 253.746901][ C0] tick_nohz_handler+0x249/0x2d0 [ 253.751913][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 253.757095][ C0] hrtimer_interrupt+0x21a/0x460 [ 253.762014][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 253.767893][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 253.773509][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.779478][ C0] crng_make_state+0xf7/0x250 [ 253.784140][ C0] _get_random_bytes+0x85/0x190 [ 253.789060][ C0] get_random_bytes+0x1d/0x30 [ 253.793715][ C0] nsim_dev_trap_report_work+0x482/0x630 [ 253.799340][ C0] process_scheduled_works+0x4cb/0x9d0 [ 253.804786][ C0] worker_thread+0x582/0x770 [ 253.809368][ C0] kthread+0x489/0x510 [ 253.813433][ C0] ret_from_fork+0xda/0x150 [ 253.817916][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.822662][ C0] [ 253.824963][ C0] value changed: 0x00000000002a4450 -> 0x00000000002a6b60 [ 253.832045][ C0] [ 253.834347][ C0] Reported by Kernel Concurrency Sanitizer on: [ 253.840476][ C0] CPU: 0 UID: 0 PID: 6151 Comm: kworker/u8:35 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 253.854693][ C0] Tainted: [W]=WARN [ 253.858473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.868526][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 253.875284][ C0] ================================================================== [ 253.947945][T16640] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4624: Failed to acquire dquot type 1 [ 253.948304][T11063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.991419][T12217] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.371700][T16663] EXT4-fs (loop5): pa ffff8881072565b0: logic 48, phys. 177, len 21 [ 254.379862][T16663] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 254.391754][T16663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.415344][ T6136] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.482729][ T6136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.543230][ T6136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.603322][ T6136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.823220][ T6136] bond0 (unregistering): Released all slaves [ 254.881389][ T6136] hsr_slave_0: left promiscuous mode [ 254.887608][ T6136] hsr_slave_1: left promiscuous mode [ 254.896229][ T6136] veth1_macvtap: left promiscuous mode [ 254.902147][ T6136] veth0_macvtap: left promiscuous mode [ 254.907627][ T6136] veth1_vlan: left promiscuous mode [ 254.913338][ T6136] veth0_vlan: left promiscuous mode