last executing test programs: 13m25.372984542s ago: executing program 0 (id=131): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/157, 0x9d}, 0x5}], 0x1, 0x10002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m25.372803502s ago: executing program 0 (id=132): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{0x0}, {&(0x7f00000004c0)="c2f93b3e19ca5c30a52db151faf32252290e9050d592788dcda3340163acc902a8377a68d27b2373b6dd5b2f38105e2907c7925bf1bfca3b52cb2a3b363b9ce5c3a0433f8fd6706e526c27a8f800dc5808dabea98a97377090f4a42756327b10faf5cdcaf6ec2fdacf989335b574b8756e49cfa48d5ef177cffe7d198c3e64071c59270160545f1b6647062d5f9911ab3b00d6bd65df8d9f6f3b9d200a25264b17d33cae38093846df673d0fe39e9bf0ce81487c13fcba97", 0xb8}], 0x2}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) 13m25.366279592s ago: executing program 0 (id=133): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000700)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c", 0x0, 0xde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 13m25.331296744s ago: executing program 0 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file2\x00', 0x0) 13m24.697583411s ago: executing program 0 (id=141): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 13m24.392359329s ago: executing program 0 (id=148): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 13m24.329851963s ago: executing program 32 (id=148): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 11m30.223724734s ago: executing program 3 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a000000000000000000000020000980080000", @ANYRES16], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 11m30.223290144s ago: executing program 3 (id=1073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xa5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x202885, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1, 0x2c5, &(0x7f0000003100)="$eJzs3UFr02AYwPFnbbd2HVt7GIKC+KAXvYStfoIiG4gFZa6iHoTMpVoa29HUSkXcbl79HOrRk4L6BXbx5l28DEHwMkGMNE22rCu6bnaZ6/8HI8/e932SN3uT8TSwbOPm8weVkmOUzIbEUioxkTXZFMm2I9+Iv4158ZiErcmFie+fTl+/dftKvlCYW1Cdzy9ezKnq1Jl3j568OvuhMXHj9dTbpKxn72x8y31eP7F+cuPXYrD3moipS7Vaw1yyLV0uOxVD9ZptmY6l5apj1Rsa6i/ZtZWVlprV5cn0St1yHDWrLa1YLW3UtFFvqXnPLFfVMAydTMuwifedUXyxsGDmBzIZRGF8x3eJzqZez5vxXZ3irf9hTQwAABwdUdX/98uOlh2t1nbU90H9LxLU/zHpo/4XGer6v3/U/8fKy97N7fo/7d+/O1H/AwAAAAAAAAAAAAAAAAAAAADwP9h03Yzrupl27Ppx+yspIqlQW9TzxGAE678ZWnvWf3iE/nAvJWI/axabxc62058vSVlssWRmVOSndz34OvH85cLcjHqy8t5e9fNXm8W4JIP8QLZ3/mwnX8P5qzIq6fDxc5KR6d75uR75zeKYnD/nJv0jW2JIRj7elZrYsuxd19v5T2dVL10tdOWPe+MAAAAAADgODN2y6/O7129o8NqQrv5O4/bzAcn85flA1+frhJxKRHfeAAAAAAAME6f1uGLatuVmRLyg7rf8cIOu+gACkUHt+Q9B8P8P/skOt390h3wWW0Fqr4MTIuK3vIl4zn0FMRHZb3r8YKv8Vbpuh+mDLXc88qvFC7487NwBexkc5W8lAAAAAIMQFP0jUU8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhtteXhwXj9/PusdDh4tGcJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA0/A4AAP//rloTAQ==") mount$bind(0x0, 0x0, 0x0, 0x1333c06, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 11m28.112402228s ago: executing program 3 (id=1104): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x4604c880) sendto$inet6(r0, &(0x7f00000010c0)='\x00\x00', 0x2, 0x40800, 0x0, 0x0) 11m28.060457401s ago: executing program 3 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_open_dev$tty1(0xc, 0x4, 0x1) waitid(0x2, r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) 11m25.138401832s ago: executing program 3 (id=1129): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r0, 0x1) 11m24.956802233s ago: executing program 3 (id=1130): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r2, r2, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 11m8.728251855s ago: executing program 33 (id=1130): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r2, r2, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 2.957834028s ago: executing program 5 (id=6444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x200000c0}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000e7685f2d3c9ddd6fab9f382478bddf4bd603ebd5fddd06f424333e59d4b599881b38ed3efbd7917f4faeb7e904000000000035eeea4ad659e398eaf1fb49d6dc9a5039b11a31aac273199dc9b8bf0bed6ee5be80a1c402474a0f901f4dda28bf34041f1e9499b6645ba678c26cfacb804521f6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x575, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhj9ACntwMpeurT8mCJuPosOBvs/Q3pXRdBlNOtY62PbgXnyRIYg4EP8A330c/gP+FYIOhoyiD75UbnrTZkuytFlmW/P5wN3Oufem33ty7jn53tyEBDCwxrJ/ChEvR8TXScThpm3DkW8cW9tv5dGN6WxJYnX10z+TSPJ1jf2T/P+DeeWliPjly4iThda41aXluVK5nC7k9fHa/NXx6tLyqcvzpdl0Nr0yOTV15u2pyffefadvbX3jwt/ffXL/wzNfHV/59qcHR+4mcS4O5dua2/EMbjVXxmIsf05G4twTO070IdhOknTboc05wPYbysf5SGRzwOEYykc98P93MyJWgQGVGP8woBp5QOPavk/XwbvGww/WLoBa2z+89t5I7KtfGx1YSR67Msqud0f7ED+L8fMf9+5mS3R5H+JmxOrNPsQEyNy6HRGnh4db578kn/96d3oT7/o9GWPQXn9gO93P8p832+U/hfX8J9rkPwfbjN1edB//hQd9CNNRlv+93zb/XZ+6Rofy2gv1nG8kuXS5nJ6OiBcj4kSM7M3qvd7Pac7/siWL38gF8+N4MLz38cfMlGqlHsO1eHg74pWN/DeJlvl/Xz3XfbL/s+fjwiZjHEvvvdZpW/f2N+t/9rv6Y8Trbft/445W8vT7k+P182G8cVa0+uvOsV87xd9a+/sv6/8DT2//aNJ8v7a69Rg/7Psn7bSt1/N/T/JZvbwnX3e9VKstTETsST5uXT+58dhGvbF/1v4Tx58+/7U7//dHxOebbP+do53ToJ3Q/zNb6v+tF3776IvvO8XfXP+/VS+dyNdsZv7b7AE+y3MHAAAAAAAAO00hIg5FUiiulwuFYnHt8x1H40ChXKnWTl6qLF6Zifp3ZUdjpNC403246fMQE/nnYRv1ybWvFa3XpyLiSER8M7S/Xi9OV8oz2914AAAAAAAAAAAAAAAAAAAA2CEOdvj+f+b3oe0+OuC585PfMLi6jv9+/NITsCN5/YfBZfzD4DL+YXAZ/zC4ehn/nX/SGNhNvP7D4DL+YXAZ/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBXF86fz5bVlUc3prP6zLWlxbnKtVMzaXWuOL84XZyuLFwtzlYqs+W0OF2Z7/b3ypXK1YnJWLw+XkurtfHq0vLF+crildrFy/Ol2fRiOvKftAoAAAAAAAAAAAAAAAAAAAB2l+rS8lypXE4XFDYKr0ZE05qzsVMOrLdC0q2Xz+YnQ08hhre/gQrPobDNExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//zGhM5o=") r6 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r6, 0x0, 0x0, 0x8800000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0xe36, 0x0, 0x1b}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x4b3c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) close(r5) open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="1000"], 0x0) 2.816112916s ago: executing program 6 (id=6446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 2.681870794s ago: executing program 6 (id=6448): socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) keyctl$instantiate_iov(0xa, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r2, 0x8, r3) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@empty}, &(0x7f0000000200)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.641129656s ago: executing program 6 (id=6449): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = syz_io_uring_setup(0x35c1, &(0x7f0000000240)={0x0, 0x0, 0x1, 0xfffffffe, 0x10004}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB]) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x800001f}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x170}, 0xfc40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) 2.183688053s ago: executing program 5 (id=6453): r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 2.148859935s ago: executing program 5 (id=6456): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 2.06201884s ago: executing program 5 (id=6458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.0613264s ago: executing program 5 (id=6459): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x3bf, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 2.018318853s ago: executing program 5 (id=6461): unshare(0x22020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000100)=0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080), 0x20) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) io_setup(0x10001, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8, 0x4, 0x1, 0xb}, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000700)=0xfffbffff, 0x4) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x106, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r6 = eventfd2(0x9, 0x1) io_cancel(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000140)="a2d9614cd1544f115ce76d5f68972e25c00e5979d45b774b57b21bb82c23422cba49836db2634c3ed569fb718ae74285ed5755224270868985d496e345cbfcf4c3afd76eeb2ec76dfe38127a314068f73951f748e6b5dc4613a6abcd0403c45205ba05979380d86a95992e5fe6cdf7c1", 0x70, 0x5, 0x0, 0x1, r6}, &(0x7f0000000240)) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r7, 0x0}]) 1.735262809s ago: executing program 6 (id=6466): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r0, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.734036079s ago: executing program 4 (id=6467): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r2, 0x21, 0x70bd26, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.624616956s ago: executing program 6 (id=6469): socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x200, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x5c79, &(0x7f0000000240)={0x0, 0xa8b2, 0x20, 0x2, 0x309}) gettimeofday(0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r7, &(0x7f00000009c0)=[{&(0x7f00000000c0)="f11fc3b86d4d416805a96069888fc278bda9e3b83ab3", 0x16}], 0x1) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000480)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\x1b\xfe\xe0\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87f\xac\x06\x14\xf7\xc2\xd6iPN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x478, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 1.37975747s ago: executing program 2 (id=6478): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = syz_io_uring_setup(0x35c1, &(0x7f0000000240)={0x0, 0x0, 0x1, 0xfffffffe, 0x10004}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB]) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x800001f}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x170}, 0xfc40) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) 1.353705792s ago: executing program 1 (id=6479): openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x105200, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="6870e35e00000000020000000000000018110000dca6c51dcc933083f21bad51338e9c405bc7a19db51454627e8ef007ee270bf4b72ee1a14e", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0x5, 0x0, 0x5, 0x1524, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x8, 0x4}, 0x6020, 0xc, 0x2, 0x4, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.319832183s ago: executing program 1 (id=6480): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 1.268613846s ago: executing program 4 (id=6481): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_clone(0x80000000, &(0x7f0000000040)="fffd26b8728679bba6baa6de43b95ebe802329469817355789ab34e5551863c1914c2fd79f9df0af0651153f1871af85edf362589d95f9a63beecd2fb97e2b31fce4f7e0b089d781aae4cc75ebe6e3dd5e4ff35e96fd0126cc7f595644861355e86fd6edbb26ea95b9ac62a0d0102a0b1d884e8822cc47ad9ba9c9609e63c8cc37913cd937349883b28b6bd15eca94ca12c004a9ed94a302502924d0ad2442a180f6fe55790641263b44f1090539e6f2c8a1e9cacef65e98e3be07f497d8386dd45f553e276b481ed017a976459655997cba82c184e85d3e9ec6391e2bc1bd06e796", 0xe2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000005c0)={&(0x7f0000002000)={[{&(0x7f0000000100)="706c372161b0ff506de886875d8f9db7492d34e6ddbb8ca046c44cb5503a", 0x1e, 0x3}]}, 0x1, 0x3}, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r3 = fsmount(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '5'}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x12, 0x0, 0x0) creat(&(0x7f00000002c0)='./file1\x00', 0xecf86c37d5304858) 1.056346619s ago: executing program 4 (id=6482): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000180)={[{@inlinecrypt}, {@noblock_validity}, {@grpjquota}, {@barrier_val}, {@usrjquota}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4ed, &(0x7f0000000a40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0xb37ee7ec4d8c82c8, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x3, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000016000181ffffff00000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 908.421647ms ago: executing program 1 (id=6483): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000b02"], 0x0, 0x4e}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @mcast1, @loopback, 0x9, 0x0, 0x0, 0x0, 0x780000000, 0x272001b, r3}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="010027bd700005000000020000000900010073797a30000000000900030073797a310000000014000200776c616e3000"/58], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40) 757.018966ms ago: executing program 1 (id=6484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 697.72355ms ago: executing program 1 (id=6485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x3, 0x0, 0x7ffc0000}]}) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) rmdir(&(0x7f00000002c0)='./file0\x00') connect$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x7d82f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x40000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x0, 0xe}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x3a, 0x4, 0x15}, 0x2c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/225, 0xe1, 0x7e79ef8a, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz7EJwmAQBeAXjb8BQTKC1k4RW2v30U1stMiQRhIVN5AU31ccxyvueGFGhvV3u06zeg4fSTZTtEza5FSSkv6y29+23SJpkqpJ0rW5Hw+pM0VvXUn5vVg9qvHGqM65/2M5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJitVwAAAP//bMgQzw==") semget(0x0, 0x1, 0x220) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, r8, 0x300, 0x70bd2d, 0x56ca, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x78}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac03]}, @NL80211_ATTR_SAE_PASSWORD={0x43, 0x115, "d12b9adb9b26bb36b7c731754780e1c10c61142460fd1ac601c3aff2ee032f464a407744148ee895d31211873b63e6de70aefc92739333c7c2251c82efc6cc"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0xf313, 0x8, 0x9, 0x7}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc880}, 0x20000880) 638.286693ms ago: executing program 6 (id=6486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x3, 0x0, 0x7ffc0000}]}) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) rmdir(&(0x7f00000002c0)='./file0\x00') connect$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x7d82f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x40000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x0, 0xe}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x3a, 0x4, 0x15}, 0x2c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/225, 0xe1, 0x7e79ef8a, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz7EJwmAQBeAXjb8BQTKC1k4RW2v30U1stMiQRhIVN5AU31ccxyvueGFGhvV3u06zeg4fSTZTtEza5FSSkv6y29+23SJpkqpJ0rW5Hw+pM0VvXUn5vVg9qvHGqM65/2M5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJitVwAAAP//bMgQzw==") semget(0x0, 0x1, 0x220) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, r8, 0x300, 0x70bd2d, 0x56ca, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x78}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac03]}, @NL80211_ATTR_SAE_PASSWORD={0x43, 0x115, "d12b9adb9b26bb36b7c731754780e1c10c61142460fd1ac601c3aff2ee032f464a407744148ee895d31211873b63e6de70aefc92739333c7c2251c82efc6cc"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0xf313, 0x8, 0x9, 0x7}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc880}, 0x20000880) 340.486891ms ago: executing program 4 (id=6487): socket$inet_udplite(0x2, 0x2, 0x88) io_uring_setup(0x650b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x1, 0x0, 0x38}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$ptp(r4, &(0x7f0000000300)=""/212, 0xd4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000006c0)={0x4, &(0x7f0000000b80)=[{@fixed}, {@none}, {@none}, {@fixed}]}) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000940)={0x1, 'syzkaller0\x00', {}, 0x5262}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000680)={r1}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e20, @broadcast}], 0x58) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r8, 0x2210}], 0x1, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000980)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000009c0)=0x2c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0xe8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0xfffffffe, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a00)=""/80, 0x50}], 0x1, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x40, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffd, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x10001}, &(0x7f00000005c0)=0x7ff, &(0x7f0000000600)=0xe111, 0x7, 0x4, 0x5, 0x1ff, 0x1, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x100}}, @mask_cswp={0x58, 0x114, 0x9, {{0x400, 0x7}, &(0x7f0000000780)=0x8, &(0x7f00000007c0)=0xf, 0x8, 0x0, 0x5, 0x80000001, 0x3f, 0x3}}], 0xf8, 0x4}, 0x80) 339.861801ms ago: executing program 2 (id=6488): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) 220.776338ms ago: executing program 2 (id=6489): openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x105200, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0x5, 0x0, 0x5, 0x1524, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x8, 0x4}, 0x6020, 0xc, 0x2, 0x4, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 135.399852ms ago: executing program 2 (id=6490): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x143142, 0x94) splice(r4, 0x0, r3, 0x0, 0x7ffffffffffffffc, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000200)=""/98, 0x62}], 0x3) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='pagemap\x00') perf_event_open(0x0, r6, 0xe, r7, 0x0) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000180), 0x400000000000256, 0x40, 0x0) 739.63µs ago: executing program 2 (id=6491): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 0s ago: executing program 2 (id=6492): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x12) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f0000000000)='.%)-\x00', 0x200, &(0x7f00000001c0)={@align=0x10001, {0xfffd, 0x2, 0xbf, 0x8e}}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x1}, 0x5, &(0x7f0000000740)=[{0x2, 0x8, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000480)="6d02ae3dbbd6cb25cec72e67e9d44702c065e46d418723cb9ef6cd", 0x1b, 0x30}, {0x2, 0x9, &(0x7f00000004c0)='\x00', &(0x7f0000000980)="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", 0x1000, 0x8}, {0x3, 0xb, &(0x7f0000000580)='%\'\'\x00', &(0x7f0000001dc0)="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", 0x1000, 0x12}, {0x2, 0x6, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="0211ee065a4b48d5d214f1fcdfbc7a8588ba400af8cc0a98ae3538a8ab2f3929", 0x20, 0x12}, {0x3, 0xffffa352, &(0x7f0000000640)='\x00', &(0x7f0000000680)="7491071907d0b5d23cec804c716fce45ff041dc3228f7c99ebf2e8fc9059bb2b0cf0297b7f72e77e5ab6d2a58eab1ab02cc8a23e7b994367863154148b414de47622db465c290786a49a0c72d542c0056fac435ee51cbe56511d7c6c4e3531fb80c52bb02f932b210b5a87c22d5d3b4f9b72ff2fadf4abe567183518b9c32e295c59872013343dd4e22a55ab28d90f255cbf8293cb5a693e41f95fa56d289e55191b6324633729faac39946c3a636bd45127a725718cfc637bde6d18e3", 0xbd, 0x8}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000880)={0x1, 0x5}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 2 (id=6493): socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (async) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) truncate(0x0, 0x8fff5) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x10, 0x10, 0x80000001, 0x9, 0x4000000}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYRESHEX=r5], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0x13e22ee5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20007}}, 0x0, 0x0, 0x23, 0x0, "023d9f9842360fd6efdad82a09a2b01aa09a7eac52f9467e610a0c4996ec3f91ef1e30c2a7f7f9cdf978cefc34f4d0a02ca0585556b03580f09a14fe5fa56785ae9fda917b42837b6ad2191f8d3618ba"}, 0x129) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000600)=0xa, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x800, 0xfff8}, @sack_perm, @window={0x3, 0x8, 0x2}, @sack_perm, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x4, @void}, 0x10) (async) syz_emit_ethernet(0x9e, &(0x7f0000000740)=ANY=[], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES16=r12, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRES32=r3, @ANYRESHEX=r12], 0x0, 0x4a, 0x0, 0x1, 0x200}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): _1 [ 793.718187][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.727644][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.739507][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.749022][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.841536][T28562] __nla_validate_parse: 1 callbacks suppressed [ 793.841551][T28562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5805'. [ 793.873278][T28562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5805'. [ 793.926292][T28564] netlink: 'syz.2.5849': attribute type 10 has an invalid length. [ 794.326243][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.326312][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.333775][T28571] loop4: detected capacity change from 0 to 512 [ 794.367419][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 794.367434][ T28] audit: type=1400 audit(1770931180.367:2709): avc: denied { map } for pid=28590 comm="syz.1.5857" path="socket:[66876]" dev="sockfs" ino=66876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 794.406382][T28571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 794.479387][ T28] audit: type=1400 audit(1770931180.461:2710): avc: denied { connect } for pid=28578 comm="syz.2.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 794.500261][T28571] EXT4-fs (loop4): 1 truncate cleaned up [ 794.510777][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.533714][T28571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.538663][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.571764][ T28] audit: type=1400 audit(1770931180.461:2711): avc: denied { ioctl } for pid=28578 comm="syz.2.5856" path="socket:[67698]" dev="sockfs" ino=67698 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 794.646868][ T28] audit: type=1400 audit(1770931180.461:2712): avc: denied { write } for pid=28578 comm="syz.2.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 794.664256][T28576] Q6`Ҙ speed is unknown, defaulting to 1000 [ 794.689051][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.701369][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.778920][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.796823][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.137166][ T28] audit: type=1400 audit(1770931181.059:2713): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 795.194742][ T12] bridge_slave_1: left allmulticast mode [ 795.204770][ T12] bridge_slave_1: left promiscuous mode [ 795.217608][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.219014][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.242133][ T12] bridge_slave_0: left allmulticast mode [ 795.242155][ T12] bridge_slave_0: left promiscuous mode [ 795.242268][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.262763][T28625] loop4: detected capacity change from 0 to 1024 [ 795.281354][T28625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 795.281422][T28625] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.333568][ T12] gretap0 (unregistering): left promiscuous mode [ 795.430683][ T12] bond0 (unregistering): left promiscuous mode [ 795.444772][ T12] bond_slave_0: left promiscuous mode [ 795.452749][ T12] bond_slave_1: left promiscuous mode [ 795.470960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.480339][T28633] loop6: detected capacity change from 0 to 1764 [ 795.488316][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.504132][ T12] bond0 (unregistering): Released all slaves [ 795.508870][T28633] ISOFS: Unable to identify CD-ROM format. [ 795.516704][ T12] bond1 (unregistering): Released all slaves [ 795.549343][ T12] bond2 (unregistering): Released all slaves [ 795.566194][ T28] audit: type=1400 audit(1770931181.499:2714): avc: denied { map } for pid=28624 comm="syz.4.5865" path="/proc/8/task" dev="proc" ino=67878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 795.607726][T28635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.616257][T28635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.624317][ T28] audit: type=1400 audit(1770931181.527:2715): avc: denied { create } for pid=28634 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 795.660393][ T28] audit: type=1400 audit(1770931181.527:2716): avc: denied { accept } for pid=28634 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 795.714742][ T28] audit: type=1400 audit(1770931181.527:2717): avc: denied { bind } for pid=28634 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 795.752454][ T28] audit: type=1400 audit(1770931181.527:2718): avc: denied { create } for pid=28634 comm="syz.2.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 795.819660][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 796.339021][ T12] hsr_slave_0: left promiscuous mode [ 796.376509][ T12] hsr_slave_1: left promiscuous mode [ 796.382514][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.390935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.399320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.406762][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.417237][ T12] veth1_macvtap: left promiscuous mode [ 796.423088][ T12] veth0_macvtap: left promiscuous mode [ 796.429477][ T12] veth1_vlan: left promiscuous mode [ 796.434913][ T12] veth0_vlan: left promiscuous mode [ 796.561827][T28576] chnl_net:caif_netlink_parms(): no params data found [ 796.742125][T28576] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.770961][T28576] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.792629][T28576] bridge_slave_0: entered allmulticast mode [ 796.812622][T28576] bridge_slave_0: entered promiscuous mode [ 796.829924][T28576] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.842145][T28576] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.311139][T28707] FAULT_INJECTION: forcing a failure. [ 797.311139][T28707] name failslab, interval 1, probability 0, space 0, times 0 [ 797.353421][T28707] CPU: 0 UID: 0 PID: 28707 Comm: syz.2.5882 Tainted: G W syzkaller #0 PREEMPT(full) [ 797.353488][T28707] Tainted: [W]=WARN [ 797.353496][T28707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.353510][T28707] Call Trace: [ 797.353518][T28707] [ 797.353526][T28707] __dump_stack+0x1d/0x30 [ 797.353554][T28707] dump_stack_lvl+0x95/0xd0 [ 797.353576][T28707] dump_stack+0x15/0x1b [ 797.353598][T28707] should_fail_ex+0x263/0x280 [ 797.353622][T28707] ? sysfs_init_fs_context+0x7f/0x2b0 [ 797.353667][T28707] should_failslab+0x8c/0xb0 [ 797.353696][T28707] __kmalloc_cache_noprof+0x5f/0x400 [ 797.353745][T28707] ? ns_capable+0x7c/0xb0 [ 797.353799][T28707] sysfs_init_fs_context+0x7f/0x2b0 [ 797.353877][T28707] finish_clean_context+0x68/0xc0 [ 797.353905][T28707] vfs_fsconfig_locked+0x1e/0x210 [ 797.353931][T28707] __se_sys_fsconfig+0x684/0x7d0 [ 797.353981][T28707] __x64_sys_fsconfig+0x67/0x80 [ 797.354005][T28707] x64_sys_call+0xd6e/0x3020 [ 797.354077][T28707] do_syscall_64+0x12c/0x370 [ 797.354101][T28707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.354160][T28707] RIP: 0033:0x7f67cebbbf79 [ 797.354178][T28707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.354194][T28707] RSP: 002b:00007f67cd60f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 797.354212][T28707] RAX: ffffffffffffffda RBX: 00007f67cee35fa0 RCX: 00007f67cebbbf79 [ 797.354224][T28707] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 797.354311][T28707] RBP: 00007f67cd60f090 R08: 0000000000000000 R09: 0000000000000000 [ 797.354323][T28707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.354334][T28707] R13: 00007f67cee36038 R14: 00007f67cee35fa0 R15: 00007ffc9dd80e78 [ 797.354350][T28707] [ 797.575751][T28576] bridge_slave_1: entered allmulticast mode [ 797.582569][T28576] bridge_slave_1: entered promiscuous mode [ 797.597170][T28709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5883'. [ 797.620918][ T12] IPVS: stop unused estimator thread 0... [ 797.637045][T28576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.672019][T28713] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5884'. [ 797.682877][T28576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.732659][T28719] loop6: detected capacity change from 0 to 128 [ 797.748150][T28576] team0: Port device team_slave_0 added [ 797.754981][T28576] team0: Port device team_slave_1 added [ 797.855404][T28719] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 797.868330][T28719] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.895787][T28576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.902996][T28576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.930068][T28576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.943630][T28719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.944504][T28576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.952640][T28719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.965655][T28576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.993392][T28576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.019779][T28576] hsr_slave_0: entered promiscuous mode [ 798.026584][T28576] hsr_slave_1: entered promiscuous mode [ 798.032481][T28576] debugfs: 'hsr0' already exists in 'hsr' [ 798.038355][T28576] Cannot create hsr debugfs directory [ 798.186095][T28738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5886'. [ 799.158663][T24029] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 799.250530][T28754] loop6: detected capacity change from 0 to 2048 [ 799.298402][T28754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.360376][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.462221][T28784] loop6: detected capacity change from 0 to 512 [ 799.503904][T28784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 799.528384][T28576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 799.536279][T28784] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 799.564259][T28784] EXT4-fs (loop6): 1 truncate cleaned up [ 799.570592][T28784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.595362][T28576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 799.603589][T28784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5895'. [ 799.663395][T28576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 799.680058][T28794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.698953][T28794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.721901][T28794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.740165][T28794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.769457][T28576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 799.793407][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.835458][T28808] loop6: detected capacity change from 0 to 764 [ 799.911699][T28576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.962373][T28576] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.986595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.993790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.040412][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.047546][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.100735][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 800.100813][ T28] audit: type=1400 audit(1770931697.732:2742): avc: denied { watch watch_reads } for pid=28829 comm="syz.6.5900" path="/273/file0" dev="tmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 800.123563][T28576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 800.223619][T28837] loop6: detected capacity change from 0 to 512 [ 800.231954][T28837] EXT4-fs: Ignoring removed bh option [ 800.265387][T28837] EXT4-fs error (device loop6): ext4_quota_enable:7189: inode #4: comm syz.6.5900: iget: checksum invalid [ 800.304531][T28576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.335699][T28837] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 800.335918][T28837] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.5900: Bad quota inode: 4, type: 1 [ 800.405131][T28837] loop6: lost filesystem error report for type 5 error -117 [ 800.406717][T28837] EXT4-fs warning (device loop6): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 800.441209][T28837] EXT4-fs (loop6): mount failed [ 800.521487][ T28] audit: type=1400 audit(1770931698.125:2743): avc: denied { unlink } for pid=24029 comm="syz-executor" name="file0" dev="tmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 800.553816][ T28] audit: type=1400 audit(1770931698.153:2744): avc: denied { bind } for pid=28865 comm="syz.6.5901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.594368][T28576] veth0_vlan: entered promiscuous mode [ 800.617222][T28576] veth1_vlan: entered promiscuous mode [ 800.625217][ T28] audit: type=1400 audit(1770931698.153:2745): avc: denied { name_bind } for pid=28865 comm="syz.6.5901" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 800.665112][T28576] veth0_macvtap: entered promiscuous mode [ 800.682763][T28576] veth1_macvtap: entered promiscuous mode [ 800.693766][ T28] audit: type=1400 audit(1770931698.153:2746): avc: denied { node_bind } for pid=28865 comm="syz.6.5901" saddr=::ffff:172.30.1.7 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 800.723682][T28576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.736634][T28576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.750716][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.759513][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.800946][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.833485][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.904348][T28878] loop6: detected capacity change from 0 to 512 [ 800.911268][ T28] audit: type=1400 audit(1770931698.490:2747): avc: denied { setopt } for pid=28877 comm="syz.6.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 800.940899][T28878] EXT4-fs: Ignoring removed oldalloc option [ 800.987862][T28878] EXT4-fs (loop6): 1 truncate cleaned up [ 801.019882][T28878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.089799][T28891] Cannot find del_set index 0 as target [ 801.127574][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.127894][T28885] loop5: detected capacity change from 0 to 8192 [ 801.188743][T26988] loop5: p1 p2 p3 [ 801.192635][T26988] loop5: p1 start 51379968 is beyond EOD, truncated [ 801.205981][ T28] audit: type=1400 audit(1770931698.771:2748): avc: denied { read append } for pid=28894 comm="syz.6.5907" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 801.231508][ T28] audit: type=1400 audit(1770931698.771:2749): avc: denied { open } for pid=28894 comm="syz.6.5907" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 801.255310][T26988] loop5: p3 size 100663552 extends beyond EOD, truncated [ 801.276280][T28885] loop5: p1 p2 p3 [ 801.280797][T28885] loop5: p1 start 51379968 is beyond EOD, truncated [ 801.293350][T28885] loop5: p3 size 100663552 extends beyond EOD, truncated [ 801.363432][ T28] audit: type=1400 audit(1770931698.902:2750): avc: denied { bind } for pid=28883 comm="syz.5.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 801.433642][ T28] audit: type=1400 audit(1770931698.902:2751): avc: denied { connect } for pid=28883 comm="syz.5.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 801.444427][T28913] loop6: detected capacity change from 0 to 2048 [ 801.474292][T26706] udevd[26706]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 801.485962][T26988] udevd[26988]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 801.534738][T28913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.553273][T28926] loop5: detected capacity change from 0 to 512 [ 801.605883][T28926] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 801.630635][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.682207][T28926] x_tables: duplicate underflow at hook 4 [ 801.711459][T28926] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.5919: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 801.733891][T28926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28926 comm=syz.5.5919 [ 801.830578][T28940] vhci_hcd vhci_hcd.0: default hub control req: 4003 v0012 i0000 l0 [ 801.844805][T28576] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 801.945176][T28946] vhci_hcd vhci_hcd.0: default hub control req: 4003 v0012 i0000 l0 [ 801.995447][T28955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5930'. [ 802.003275][T28956] loop4: detected capacity change from 0 to 512 [ 802.019886][T28956] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 802.071503][T28956] FAULT_INJECTION: forcing a failure. [ 802.071503][T28956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.089163][T28956] CPU: 0 UID: 0 PID: 28956 Comm: syz.4.5931 Tainted: G W syzkaller #0 PREEMPT(full) [ 802.089231][T28956] Tainted: [W]=WARN [ 802.089239][T28956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 802.089251][T28956] Call Trace: [ 802.089260][T28956] [ 802.089268][T28956] __dump_stack+0x1d/0x30 [ 802.089294][T28956] dump_stack_lvl+0x95/0xd0 [ 802.089317][T28956] dump_stack+0x15/0x1b [ 802.089335][T28956] should_fail_ex+0x263/0x280 [ 802.089411][T28956] should_fail+0xb/0x20 [ 802.089474][T28956] should_fail_usercopy+0x1a/0x20 [ 802.089547][T28956] _copy_from_user+0x1c/0xb0 [ 802.089590][T28956] copy_from_sockptr_offset+0x66/0xa0 [ 802.089659][T28956] do_ip6t_set_ctl+0x61b/0x8f0 [ 802.089691][T28956] ? irqentry_exit+0x91/0x520 [ 802.089717][T28956] nf_setsockopt+0x199/0x1b0 [ 802.089743][T28956] ipv6_setsockopt+0x11a/0x130 [ 802.089760][T28956] udpv6_setsockopt+0x99/0xb0 [ 802.089791][T28956] sock_common_setsockopt+0x69/0x80 [ 802.089940][T28956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 802.089969][T28956] __sys_setsockopt+0x184/0x200 [ 802.089990][T28956] __x64_sys_setsockopt+0x64/0x80 [ 802.090047][T28956] x64_sys_call+0x2327/0x3020 [ 802.090071][T28956] do_syscall_64+0x12c/0x370 [ 802.090129][T28956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.090148][T28956] RIP: 0033:0x7f768fbcbf79 [ 802.090163][T28956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.090261][T28956] RSP: 002b:00007f768e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 802.090283][T28956] RAX: ffffffffffffffda RBX: 00007f768fe45fa0 RCX: 00007f768fbcbf79 [ 802.090298][T28956] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 802.090309][T28956] RBP: 00007f768e61f090 R08: 0000000000000738 R09: 0000000000000000 [ 802.090322][T28956] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 802.090334][T28956] R13: 00007f768fe46038 R14: 00007f768fe45fa0 R15: 00007ffe3af19818 [ 802.090412][T28956] [ 802.091632][T28963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.115033][T28956] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.5931: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 802.170196][T28966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28966 comm=syz.4.5931 [ 802.203206][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.413754][T28971] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 802.431210][T28971] EXT4-fs (loop5): orphan cleanup on readonly fs [ 802.443647][T28971] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5933: Block bitmap for bg 0 marked uninitialized [ 802.457452][T28971] loop5: lost filesystem error report for type 5 error -117 [ 802.460945][T28971] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 802.480446][T28971] loop5: lost filesystem error report for type 5 error -117 [ 802.480790][T28971] EXT4-fs (loop5): 1 orphan inode deleted [ 802.487493][T28978] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5937'. [ 802.488962][T28971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 802.493920][T28978] netlink: 'syz.2.5937': attribute type 2 has an invalid length. [ 802.503699][T28394] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 802.515346][T28978] netlink: 'syz.2.5937': attribute type 1 has an invalid length. [ 802.540142][T28978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5937'. [ 802.549495][T28971] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 802.573932][T28971] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 802.584903][T28981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5938'. [ 802.586848][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5939'. [ 802.603516][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5938'. [ 802.623499][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5939'. [ 802.632847][T28971] netlink: 'syz.5.5933': attribute type 1 has an invalid length. [ 802.640803][T28971] netlink: 'syz.5.5933': attribute type 2 has an invalid length. [ 802.648996][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5933'. [ 802.662628][T28985] syzkaller0: entered promiscuous mode [ 802.668431][T28985] syzkaller0: entered allmulticast mode [ 802.671491][T28971] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5933: Block bitmap for bg 0 marked uninitialized [ 802.697109][T28987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5941'. [ 802.766450][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.739026][T27142] bond0: (slave syz_tun): Releasing backup interface [ 803.814468][T29037] Q6`Ҙ speed is unknown, defaulting to 1000 [ 803.833964][T29049] Q6`Ҙ speed is unknown, defaulting to 1000 [ 803.875617][T29052] set_capacity_and_notify: 2 callbacks suppressed [ 803.875634][T29052] loop5: detected capacity change from 0 to 512 [ 803.910333][T29052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.965721][T29052] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.057837][T29049] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 804.076248][T29037] chnl_net:caif_netlink_parms(): no params data found [ 804.094615][T29066] loop6: detected capacity change from 0 to 2048 [ 804.123133][T29066] EXT4-fs (loop6): #clusters per group too big: 16384 [ 804.155541][T29067] loop4: detected capacity change from 0 to 512 [ 804.177750][T29067] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 804.185904][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.231955][T29037] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.242545][T29067] EXT4-fs (loop4): 1 truncate cleaned up [ 804.260360][T29037] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.268185][T29037] bridge_slave_0: entered allmulticast mode [ 804.269313][T29067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.287772][T29037] bridge_slave_0: entered promiscuous mode [ 804.294951][ T12] bridge_slave_1: left allmulticast mode [ 804.311821][ T12] bridge_slave_1: left promiscuous mode [ 804.340751][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.387518][ T12] bridge_slave_0: left allmulticast mode [ 804.412371][ T12] bridge_slave_0: left promiscuous mode [ 804.558006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.696776][ T12] team0: Port device bond0 removed [ 804.703701][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.713426][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.723394][ T12] bond0 (unregistering): Released all slaves [ 804.733670][ T12] bond1 (unregistering): Released all slaves [ 804.743020][ T12] bond2 (unregistering): Released all slaves [ 804.752073][ T12] bond3 (unregistering): Released all slaves [ 804.761164][T29037] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.768679][T29037] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.777017][T29037] bridge_slave_1: entered allmulticast mode [ 804.788827][T29037] bridge_slave_1: entered promiscuous mode [ 804.828680][T29037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.850491][ T12] pim6reg (unregistering): left allmulticast mode [ 804.899715][ T12] team0 (unregistering): Port device team_slave_1 removed [ 804.911502][ T12] team0 (unregistering): Port device team_slave_0 removed [ 804.959152][T29037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.990797][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.020246][T29100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 805.020982][T29037] team0: Port device team_slave_0 added [ 805.053219][T29037] team0: Port device team_slave_1 added [ 805.077005][T29037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.086192][T29037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.086234][T29108] __nla_validate_parse: 10 callbacks suppressed [ 805.086245][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 805.086275][T29037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.117015][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 805.121419][T29037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.158473][T29037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.185610][T29037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.261613][T29037] hsr_slave_0: entered promiscuous mode [ 805.281490][T29037] hsr_slave_1: entered promiscuous mode [ 805.296916][T29037] debugfs: 'hsr0' already exists in 'hsr' [ 805.308089][T29037] Cannot create hsr debugfs directory [ 805.492110][ T12] IPVS: stop unused estimator thread 0... [ 805.832094][T29139] loop5: detected capacity change from 0 to 512 [ 805.844794][T29139] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5985: inode has both inline data and extents flags [ 805.880293][T29139] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 805.880666][T29139] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5985: couldn't read orphan inode 15 (err -117) [ 805.903782][T29139] loop5: lost filesystem error report for type 5 error -117 [ 805.904490][T29139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.925558][T29139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.960290][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 805.960327][ T28] audit: type=1400 audit(1770931703.214:2797): avc: denied { listen } for pid=29138 comm="syz.5.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 805.989966][T29139] netlink: 'syz.5.5985': attribute type 8 has an invalid length. [ 806.012792][ T28] audit: type=1400 audit(1770931703.242:2798): avc: denied { connect } for pid=29138 comm="syz.5.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 806.037424][T29154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29154 comm=syz.2.5988 [ 806.064976][ T28] audit: type=1400 audit(1770931703.242:2799): avc: denied { setopt } for pid=29138 comm="syz.5.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 806.089280][ T28] audit: type=1400 audit(1770931703.242:2800): avc: denied { ioctl } for pid=29138 comm="syz.5.5985" path="socket:[69929]" dev="sockfs" ino=69929 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 806.161436][ T28] audit: type=1400 audit(1770931703.307:2801): avc: denied { setopt } for pid=29138 comm="syz.5.5985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 806.203186][T29166] FAULT_INJECTION: forcing a failure. [ 806.203186][T29166] name failslab, interval 1, probability 0, space 0, times 0 [ 806.223730][T29166] CPU: 0 UID: 0 PID: 29166 Comm: syz.2.5991 Tainted: G W syzkaller #0 PREEMPT(full) [ 806.223765][T29166] Tainted: [W]=WARN [ 806.223771][T29166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 806.223783][T29166] Call Trace: [ 806.223792][T29166] [ 806.223829][T29166] __dump_stack+0x1d/0x30 [ 806.223869][T29166] dump_stack_lvl+0x95/0xd0 [ 806.223893][T29166] dump_stack+0x15/0x1b [ 806.223911][T29166] should_fail_ex+0x263/0x280 [ 806.223937][T29166] should_failslab+0x8c/0xb0 [ 806.224020][T29166] kmem_cache_alloc_noprof+0x66/0x400 [ 806.224049][T29166] ? io_submit_one+0xcf/0x1350 [ 806.224149][T29166] io_submit_one+0xcf/0x1350 [ 806.224174][T29166] __se_sys_io_submit+0xfb/0x280 [ 806.224211][T29166] __x64_sys_io_submit+0x43/0x50 [ 806.224248][T29166] x64_sys_call+0x19d5/0x3020 [ 806.224347][T29166] do_syscall_64+0x12c/0x370 [ 806.224476][T29166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.224501][T29166] RIP: 0033:0x7f67cebbbf79 [ 806.224588][T29166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.224649][T29166] RSP: 002b:00007f67cd60f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 806.224736][T29166] RAX: ffffffffffffffda RBX: 00007f67cee35fa0 RCX: 00007f67cebbbf79 [ 806.224751][T29166] RDX: 0000200000000880 RSI: 0000000000000002 RDI: 00007f67cf971000 [ 806.224781][T29166] RBP: 00007f67cd60f090 R08: 0000000000000000 R09: 0000000000000000 [ 806.224792][T29166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.224803][T29166] R13: 00007f67cee36038 R14: 00007f67cee35fa0 R15: 00007ffc9dd80e78 [ 806.224820][T29166] [ 806.464365][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5992'. [ 806.548421][T29037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 806.569809][T29037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 806.583234][T29179] Q6`Ҙ speed is unknown, defaulting to 1000 [ 806.590145][T29037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 806.597352][T29186] loop5: detected capacity change from 0 to 512 [ 806.606590][T29037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 806.660116][ T28] audit: type=1400 audit(1770931703.841:2802): avc: denied { append } for pid=29159 comm="syz.6.5989" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 806.689050][T29195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=29195 comm=syz.4.5997 [ 806.731591][T29186] EXT4-fs (loop5): 1 orphan inode deleted [ 806.755226][T29186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.771393][T29186] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.860679][T29208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29208 comm=syz.4.5997 [ 806.894836][T29037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.962737][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.983610][ T28] audit: type=1326 audit(1770931704.168:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29159 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7fc00000 [ 807.088613][T29037] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.163072][T29213] loop6: detected capacity change from 0 to 1024 [ 807.184431][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.191553][T17418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.229486][T29213] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 807.249962][ T28] audit: type=1400 audit(1770931704.421:2804): avc: denied { getopt } for pid=29214 comm="syz.4.6002" laddr=fe80::13 lport=7 faddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.314039][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.321239][T17418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.340197][T29213] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6001: Invalid block bitmap block 0 in block_group 0 [ 807.354334][T29213] loop6: lost filesystem error report for type 5 error -117 [ 807.354457][T29213] Quota error (device loop6): write_blk: dquota write failed [ 807.369321][T29213] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 807.379300][T29213] EXT4-fs error (device loop6): ext4_acquire_dquot:6998: comm syz.6.6001: Failed to acquire dquot type 0 [ 807.390662][T29213] loop6: lost filesystem error report for type 5 error -117 [ 807.391160][T29213] EXT4-fs error (device loop6): ext4_free_blocks:6727: comm syz.6.6001: Freeing blocks not in datazone - block = 0, count = 4096 [ 807.411851][T29213] loop6: lost filesystem error report for type 5 error -117 [ 807.416357][T29213] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6001: Invalid inode bitmap blk 0 in block_group 0 [ 807.436746][T17418] EXT4-fs error (device loop6): ext4_release_dquot:7034: comm kworker/u8:11: Failed to release dquot type 0 [ 807.443395][T29223] loop5: detected capacity change from 0 to 2048 [ 807.461635][T17418] loop6: lost filesystem error report for type 5 error -117 [ 807.493846][T29213] loop6: lost filesystem error report for type 5 error -117 [ 807.504211][T29223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.524063][T29213] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 807.544666][T29037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.552205][T29213] loop6: lost filesystem error report for type 5 error -117 [ 807.552321][T29213] EXT4-fs (loop6): 1 orphan inode deleted [ 807.569917][T29240] loop4: detected capacity change from 0 to 256 [ 807.570950][T29213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.578024][T29240] vfat: Unknown parameter '!' [ 807.617613][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.695514][T29037] veth0_vlan: entered promiscuous mode [ 807.728078][T29037] veth1_vlan: entered promiscuous mode [ 807.782759][T29037] veth0_macvtap: entered promiscuous mode [ 807.791548][T29037] veth1_macvtap: entered promiscuous mode [ 807.815174][T29037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.832422][T29037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.844793][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.857984][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.869476][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.879792][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.178778][T29213] EXT4-fs (loop6): shut down requested (0) [ 808.677331][T29322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6013'. [ 808.688035][T29322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6013'. [ 808.700156][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.873716][T29333] loop5: detected capacity change from 0 to 256 [ 808.961115][T29347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6019'. [ 808.977714][T29346] netlink: 'syz.5.6020': attribute type 10 has an invalid length. [ 808.989187][T29350] netlink: 'syz.4.6018': attribute type 27 has an invalid length. [ 808.998175][T29350] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6018'. [ 809.001230][T29346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.025984][T29346] team0: Port device bond0 added [ 809.035971][T29350] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 810.399428][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6025'. [ 810.482160][T29371] loop1: detected capacity change from 0 to 1024 [ 810.639021][T29371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 810.662634][T29371] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.869564][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 811.941237][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 811.941255][ T28] audit: type=1400 audit(1770931708.808:2827): avc: denied { setopt } for pid=29360 comm="syz.4.6024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 811.979291][T29361] netlink: 'syz.4.6024': attribute type 1 has an invalid length. [ 811.980203][T29405] loop1: detected capacity change from 0 to 1024 [ 812.014616][T29405] EXT4-fs: inline encryption not supported [ 812.032749][T29405] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.041890][T29361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 812.050596][T29361] bond1: (slave bond2): making interface the new active one [ 812.060314][T29361] bond1: (slave bond2): Enslaving as an active interface with an up link [ 812.071887][T29409] syz_tun: entered allmulticast mode [ 812.077951][T29408] syz_tun: left allmulticast mode [ 812.078018][ T28] audit: type=1400 audit(1770931708.939:2828): avc: denied { listen } for pid=29360 comm="syz.4.6024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 812.086731][T29405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.149150][ T28] audit: type=1326 audit(1770931709.004:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29379 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7fc00000 [ 812.223092][ T28] audit: type=1400 audit(1770931709.079:2830): avc: denied { read append open } for pid=29404 comm="syz.1.6036" path="/4/file1/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 812.238565][T29405] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 19: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 812.251782][ T28] audit: type=1400 audit(1770931709.079:2831): avc: denied { lock } for pid=29404 comm="syz.1.6036" path="/4/file1/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 812.318747][T29405] EXT4-fs (loop1): Remounting filesystem read-only [ 812.336728][T29420] loop4: detected capacity change from 0 to 1024 [ 812.361989][T29421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6040'. [ 812.376206][T29420] EXT4-fs: inline encryption not supported [ 812.393335][T29420] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.416604][T29420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.455614][T29420] FAULT_INJECTION: forcing a failure. [ 812.455614][T29420] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 812.472252][T29420] CPU: 1 UID: 0 PID: 29420 Comm: syz.4.6039 Tainted: G W syzkaller #0 PREEMPT(full) [ 812.472283][T29420] Tainted: [W]=WARN [ 812.472290][T29420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 812.472304][T29420] Call Trace: [ 812.472313][T29420] [ 812.472322][T29420] __dump_stack+0x1d/0x30 [ 812.472394][T29420] dump_stack_lvl+0x95/0xd0 [ 812.472474][T29420] dump_stack+0x15/0x1b [ 812.472496][T29420] should_fail_ex+0x263/0x280 [ 812.472540][T29420] should_fail_alloc_page+0xf2/0x100 [ 812.472573][T29420] __alloc_frozen_pages_noprof+0x108/0x350 [ 812.472637][T29420] alloc_pages_mpol+0xb3/0x260 [ 812.472661][T29420] folio_alloc_noprof+0x96/0x150 [ 812.472684][T29420] filemap_alloc_folio_noprof+0x92/0x220 [ 812.472718][T29420] __filemap_get_folio_mpol+0x295/0x680 [ 812.472818][T29420] ? ext4_try_to_write_inline_data+0x54/0x90 [ 812.472856][T29420] ext4_write_begin+0x2fa/0xe90 [ 812.472930][T29420] ext4_da_write_begin+0x1f0/0x6b0 [ 812.472963][T29420] ? inode_to_bdi+0x47/0xa0 [ 812.472990][T29420] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 812.473018][T29420] generic_perform_write+0x183/0x490 [ 812.473110][T29420] ext4_buffered_write_iter+0x1ee/0x3c0 [ 812.473137][T29420] ? ext4_file_write_iter+0x100/0xf70 [ 812.473164][T29420] ext4_file_write_iter+0x380/0xf70 [ 812.473193][T29420] ? kstrtouint+0x76/0xc0 [ 812.473305][T29420] ? selinux_file_permission+0x1f2/0x690 [ 812.473332][T29420] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 812.473358][T29420] vfs_write+0x5a6/0x9f0 [ 812.473434][T29420] ksys_write+0xdc/0x1a0 [ 812.474138][T29420] __x64_sys_write+0x40/0x50 [ 812.474166][T29420] x64_sys_call+0x27e1/0x3020 [ 812.474219][T29420] do_syscall_64+0x12c/0x370 [ 812.474248][T29420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.474278][T29420] RIP: 0033:0x7f768fbcbf79 [ 812.474332][T29420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.474352][T29420] RSP: 002b:00007f768e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 812.474373][T29420] RAX: ffffffffffffffda RBX: 00007f768fe45fa0 RCX: 00007f768fbcbf79 [ 812.474389][T29420] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000009 [ 812.474403][T29420] RBP: 00007f768e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 812.474418][T29420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.474431][T29420] R13: 00007f768fe46038 R14: 00007f768fe45fa0 R15: 00007ffe3af19818 [ 812.475194][T29420] [ 812.768630][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.803091][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.866176][ T28] audit: type=1400 audit(1770931709.678:2832): avc: denied { ioctl } for pid=29437 comm="syz.4.6044" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 812.897211][ T28] audit: type=1400 audit(1770931709.706:2833): avc: denied { read } for pid=29437 comm="syz.4.6044" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 812.928830][ T28] audit: type=1400 audit(1770931709.706:2834): avc: denied { open } for pid=29437 comm="syz.4.6044" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 812.997672][T29447] Q6`Ҙ speed is unknown, defaulting to 1000 [ 813.048260][T29446] Q6`Ҙ speed is unknown, defaulting to 1000 [ 813.067747][T29456] FAULT_INJECTION: forcing a failure. [ 813.067747][T29456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.098354][ T28] audit: type=1400 audit(1770931709.893:2835): avc: denied { ioctl } for pid=29455 comm="syz.4.6052" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69473 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.130774][T29456] CPU: 1 UID: 0 PID: 29456 Comm: syz.1.6053 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.130810][T29456] Tainted: [W]=WARN [ 813.130818][T29456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.130834][T29456] Call Trace: [ 813.130841][T29456] [ 813.130849][T29456] __dump_stack+0x1d/0x30 [ 813.130872][T29456] dump_stack_lvl+0x95/0xd0 [ 813.130899][T29456] dump_stack+0x15/0x1b [ 813.130920][T29456] should_fail_ex+0x263/0x280 [ 813.130978][T29456] should_fail+0xb/0x20 [ 813.131000][T29456] should_fail_usercopy+0x1a/0x20 [ 813.131027][T29456] _copy_from_user+0x1c/0xb0 [ 813.131075][T29456] __sys_connect+0xd0/0x2a0 [ 813.131096][T29456] __x64_sys_connect+0x3f/0x50 [ 813.131114][T29456] x64_sys_call+0x2df0/0x3020 [ 813.131213][T29456] do_syscall_64+0x12c/0x370 [ 813.131304][T29456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.131335][T29456] RIP: 0033:0x7f77af5abf79 [ 813.131351][T29456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.131371][T29456] RSP: 002b:00007f77ae007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 813.131393][T29456] RAX: ffffffffffffffda RBX: 00007f77af825fa0 RCX: 00007f77af5abf79 [ 813.131407][T29456] RDX: 0000000000000014 RSI: 0000200000000040 RDI: 0000000000000004 [ 813.131419][T29456] RBP: 00007f77ae007090 R08: 0000000000000000 R09: 0000000000000000 [ 813.131460][T29456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.131475][T29456] R13: 00007f77af826038 R14: 00007f77af825fa0 R15: 00007ffd9481c148 [ 813.131529][T29456] [ 813.387283][T29463] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6054'. [ 813.441990][ T28] audit: type=1400 audit(1770931710.201:2836): avc: denied { getopt } for pid=29462 comm="syz.5.6055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.945589][T29480] FAULT_INJECTION: forcing a failure. [ 813.945589][T29480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.983067][T29480] CPU: 0 UID: 0 PID: 29480 Comm: syz.6.6059 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.983222][T29480] Tainted: [W]=WARN [ 813.983229][T29480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.983243][T29480] Call Trace: [ 813.983250][T29480] [ 813.983258][T29480] __dump_stack+0x1d/0x30 [ 813.983282][T29480] dump_stack_lvl+0x95/0xd0 [ 813.983383][T29480] dump_stack+0x15/0x1b [ 813.983405][T29480] should_fail_ex+0x263/0x280 [ 813.983484][T29480] should_fail+0xb/0x20 [ 813.983557][T29480] should_fail_usercopy+0x1a/0x20 [ 813.983585][T29480] _copy_from_user+0x1c/0xb0 [ 813.983667][T29480] proc_control+0x43/0xa0 [ 813.983698][T29480] usbdev_ioctl+0x93a/0x1750 [ 813.983729][T29480] ? __pfx_usbdev_ioctl+0x10/0x10 [ 813.983816][T29480] __se_sys_ioctl+0xce/0x140 [ 813.983845][T29480] __x64_sys_ioctl+0x43/0x50 [ 813.983914][T29480] x64_sys_call+0x1563/0x3020 [ 813.983997][T29480] do_syscall_64+0x12c/0x370 [ 813.984026][T29480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.984050][T29480] RIP: 0033:0x7f5e71e5bf79 [ 813.984088][T29480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.984108][T29480] RSP: 002b:00007f5e708af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.984131][T29480] RAX: ffffffffffffffda RBX: 00007f5e720d5fa0 RCX: 00007f5e71e5bf79 [ 813.984147][T29480] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000005 [ 813.984162][T29480] RBP: 00007f5e708af090 R08: 0000000000000000 R09: 0000000000000000 [ 813.984174][T29480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.984188][T29480] R13: 00007f5e720d6038 R14: 00007f5e720d5fa0 R15: 00007ffd488e35e8 [ 813.984213][T29480] [ 815.293883][T29503] loop6: detected capacity change from 0 to 1024 [ 815.345908][T29503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.387173][T29503] pim6reg: entered allmulticast mode [ 815.401832][T29503] pim6reg: left allmulticast mode [ 815.455262][T29515] loop5: detected capacity change from 0 to 2048 [ 815.477762][T29507] loop1: detected capacity change from 0 to 512 [ 815.500349][T29507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 815.514777][T29515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.580313][T29507] EXT4-fs (loop1): 1 truncate cleaned up [ 815.583654][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.601811][T29507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.618314][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.671646][T29526] netlink: 'syz.2.6076': attribute type 4 has an invalid length. [ 815.722991][T29525] netlink: 'syz.2.6076': attribute type 4 has an invalid length. [ 815.759408][T29535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.763990][T25518] Q6`Ҙ speed is unknown, defaulting to 1000 [ 815.768360][T29535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.782391][T25518] syz2: Port: 1 Link DOWN [ 815.878792][T29550] loop5: detected capacity change from 0 to 2048 [ 816.046462][T29555] pim6reg1: entered promiscuous mode [ 816.056436][T29555] pim6reg1: entered allmulticast mode [ 816.427017][T29550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.474492][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.500751][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.534896][T29566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6089'. [ 816.701465][T29583] netlink: 4372 bytes leftover after parsing attributes in process `syz.2.6093'. [ 816.823469][T29591] FAULT_INJECTION: forcing a failure. [ 816.823469][T29591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.855376][T29591] CPU: 1 UID: 0 PID: 29591 Comm: syz.5.6094 Tainted: G W syzkaller #0 PREEMPT(full) [ 816.855423][T29591] Tainted: [W]=WARN [ 816.855430][T29591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 816.855443][T29591] Call Trace: [ 816.855450][T29591] [ 816.855458][T29591] __dump_stack+0x1d/0x30 [ 816.855484][T29591] dump_stack_lvl+0x95/0xd0 [ 816.855502][T29591] dump_stack+0x15/0x1b [ 816.855608][T29591] should_fail_ex+0x263/0x280 [ 816.855632][T29591] should_fail+0xb/0x20 [ 816.855703][T29591] should_fail_usercopy+0x1a/0x20 [ 816.855733][T29591] _copy_to_user+0x20/0xa0 [ 816.855765][T29591] simple_read_from_buffer+0xb5/0x130 [ 816.855865][T29591] proc_fail_nth_read+0x10e/0x150 [ 816.855890][T29591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.855910][T29591] vfs_read+0x1ab/0x7f0 [ 816.855950][T29591] ? __rcu_read_unlock+0x4e/0x70 [ 816.856058][T29591] ? __fget_files+0x184/0x1c0 [ 816.856090][T29591] ? mutex_lock+0x57/0x90 [ 816.856112][T29591] ksys_read+0xdc/0x1a0 [ 816.856197][T29591] __x64_sys_read+0x40/0x50 [ 816.856220][T29591] x64_sys_call+0x2886/0x3020 [ 816.856247][T29591] do_syscall_64+0x12c/0x370 [ 816.856274][T29591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.856339][T29591] RIP: 0033:0x7fd47852c84e [ 816.856356][T29591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.856375][T29591] RSP: 002b:00007fd476f9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.856397][T29591] RAX: ffffffffffffffda RBX: 00007fd476f9e6c0 RCX: 00007fd47852c84e [ 816.856413][T29591] RDX: 000000000000000f RSI: 00007fd476f9e0a0 RDI: 0000000000000004 [ 816.856437][T29591] RBP: 00007fd476f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 816.856507][T29591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.856520][T29591] R13: 00007fd4787e6128 R14: 00007fd4787e6090 R15: 00007fff6b31cd68 [ 816.856579][T29591] [ 817.073914][T29595] loop1: detected capacity change from 0 to 2048 [ 817.131916][T29595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.176750][T29602] FAULT_INJECTION: forcing a failure. [ 817.176750][T29602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.190283][T29602] CPU: 1 UID: 0 PID: 29602 Comm: syz.4.6100 Tainted: G W syzkaller #0 PREEMPT(full) [ 817.190324][T29602] Tainted: [W]=WARN [ 817.190331][T29602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 817.190391][T29602] Call Trace: [ 817.190399][T29602] [ 817.190408][T29602] __dump_stack+0x1d/0x30 [ 817.190435][T29602] dump_stack_lvl+0x95/0xd0 [ 817.190459][T29602] dump_stack+0x15/0x1b [ 817.190516][T29602] should_fail_ex+0x263/0x280 [ 817.190541][T29602] should_fail+0xb/0x20 [ 817.190707][T29602] should_fail_usercopy+0x1a/0x20 [ 817.190737][T29602] _copy_from_user+0x1c/0xb0 [ 817.190770][T29602] ___sys_sendmsg+0xc1/0x1e0 [ 817.190861][T29602] __x64_sys_sendmsg+0xd4/0x160 [ 817.190886][T29602] x64_sys_call+0x194c/0x3020 [ 817.190907][T29602] do_syscall_64+0x12c/0x370 [ 817.190930][T29602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.190998][T29602] RIP: 0033:0x7f768fbcbf79 [ 817.191013][T29602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.191029][T29602] RSP: 002b:00007f768e61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.191051][T29602] RAX: ffffffffffffffda RBX: 00007f768fe45fa0 RCX: 00007f768fbcbf79 [ 817.191066][T29602] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 817.191081][T29602] RBP: 00007f768e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 817.191138][T29602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.191150][T29602] R13: 00007f768fe46038 R14: 00007f768fe45fa0 R15: 00007ffe3af19818 [ 817.191257][T29602] [ 817.408631][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.467927][T29620] loop1: detected capacity change from 0 to 512 [ 817.501191][T29620] FAT-fs (loop1): Directory bread(block 199916) failed [ 817.534086][T29620] FAT-fs (loop1): Directory bread(block 199917) failed [ 817.543250][T29620] FAT-fs (loop1): Directory bread(block 199918) failed [ 817.565097][T29620] FAT-fs (loop1): Directory bread(block 199919) failed [ 817.587203][T29620] FAT-fs (loop1): Directory bread(block 199920) failed [ 817.589872][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 817.596757][T29620] FAT-fs (loop1): Directory bread(block 199921) failed [ 817.610509][T29620] FAT-fs (loop1): Directory bread(block 199922) failed [ 817.617793][T29620] FAT-fs (loop1): Directory bread(block 199923) failed [ 817.666865][ T28] kauditd_printk_skb: 288 callbacks suppressed [ 817.666880][ T28] audit: type=1326 audit(1770931714.167:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29586 comm="syz.6.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7fc00000 [ 817.715560][ T28] audit: type=1326 audit(1770931714.177:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29588 comm="syz.2.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cebbbf79 code=0x7fc00000 [ 817.782235][ T28] audit: type=1400 audit(1770931714.270:3127): avc: denied { connect } for pid=29631 comm="syz.2.6107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 817.800440][T29634] loop6: detected capacity change from 0 to 2048 [ 817.834901][T29637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6108'. [ 817.986015][T29634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.006666][T29642] FAULT_INJECTION: forcing a failure. [ 818.006666][T29642] name failslab, interval 1, probability 0, space 0, times 0 [ 818.138794][T29642] CPU: 0 UID: 0 PID: 29642 Comm: syz.2.6109 Tainted: G W syzkaller #0 PREEMPT(full) [ 818.138829][T29642] Tainted: [W]=WARN [ 818.138835][T29642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 818.138953][T29642] Call Trace: [ 818.138960][T29642] [ 818.138967][T29642] __dump_stack+0x1d/0x30 [ 818.138992][T29642] dump_stack_lvl+0x95/0xd0 [ 818.139016][T29642] dump_stack+0x15/0x1b [ 818.139034][T29642] should_fail_ex+0x263/0x280 [ 818.139108][T29642] should_failslab+0x8c/0xb0 [ 818.139132][T29642] kmem_cache_alloc_noprof+0x66/0x400 [ 818.139157][T29642] ? audit_log_start+0x34c/0x730 [ 818.139229][T29642] audit_log_start+0x34c/0x730 [ 818.139258][T29642] ? kstrtouint_from_user+0xa8/0xf0 [ 818.139359][T29642] audit_seccomp+0x47/0x100 [ 818.139384][T29642] ? __seccomp_filter+0x8db/0x1350 [ 818.139406][T29642] __seccomp_filter+0x8ec/0x1350 [ 818.139427][T29642] ? __rcu_read_unlock+0x4e/0x70 [ 818.139618][T29642] ? __fget_files+0x184/0x1c0 [ 818.139660][T29642] ? mutex_lock+0x57/0x90 [ 818.139675][T29642] ? mutex_unlock+0x4e/0x90 [ 818.139728][T29642] __secure_computing+0x81/0x150 [ 818.139750][T29642] do_syscall_64+0xd3/0x370 [ 818.139814][T29642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.139837][T29642] RIP: 0033:0x7f67cebbbf79 [ 818.139854][T29642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.139950][T29642] RSP: 002b:00007f67cd60f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000027 [ 818.139970][T29642] RAX: ffffffffffffffda RBX: 00007f67cee35fa0 RCX: 00007f67cebbbf79 [ 818.139989][T29642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.140001][T29642] RBP: 00007f67cd60f090 R08: 0000000000000000 R09: 0000000000000000 [ 818.140013][T29642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.140024][T29642] R13: 00007f67cee36038 R14: 00007f67cee35fa0 R15: 00007ffc9dd80e78 [ 818.140042][T29642] [ 818.351657][T29642] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 818.389779][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.402514][T29642] audit: out of memory in audit_log_start [ 818.466670][ T28] audit: type=1400 audit(1770931714.317:3128): avc: denied { write } for pid=29636 comm="syz.2.6108" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 818.490204][ T28] audit: type=1326 audit(1770931714.457:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29641 comm="syz.2.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cebbbf79 code=0x7ffc0000 [ 818.514076][ T28] audit: type=1326 audit(1770931714.457:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29641 comm="syz.2.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cebbbf79 code=0x7ffc0000 [ 818.538856][ T28] audit: type=1326 audit(1770931714.457:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29641 comm="syz.2.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f67cebbbf79 code=0x7ffc0000 [ 818.564547][ T28] audit: type=1326 audit(1770931714.457:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29641 comm="syz.2.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cebbbf79 code=0x7ffc0000 [ 818.789600][T29650] loop4: detected capacity change from 0 to 2048 [ 818.881548][T29650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.963731][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.006222][T29651] Q6`Ҙ speed is unknown, defaulting to 1000 [ 819.242401][T29667] loop4: detected capacity change from 0 to 512 [ 819.281074][T29671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6115'. [ 819.494465][T29667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 819.688619][T29651] chnl_net:caif_netlink_parms(): no params data found [ 819.795288][T29667] EXT4-fs (loop4): 1 truncate cleaned up [ 819.825246][T29651] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.825302][T29667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.852064][T29651] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.872976][T29651] bridge_slave_0: entered allmulticast mode [ 819.900691][T29651] bridge_slave_0: entered promiscuous mode [ 819.970993][T29651] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.996023][T29651] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.019021][T29651] bridge_slave_1: entered allmulticast mode [ 820.034040][T29651] bridge_slave_1: entered promiscuous mode [ 820.067529][T29651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.095439][T29651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.057191][T16656] smc: removing ib device syz1 [ 821.078410][T29651] team0: Port device team_slave_0 added [ 821.085311][T29651] team0: Port device team_slave_1 added [ 821.101280][T29651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.108486][T29651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.138312][T29651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.159878][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.163525][T29698] loop1: detected capacity change from 0 to 2048 [ 821.176543][T29651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.185281][T29651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.221467][T29651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.245298][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6119'. [ 821.264563][T29698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.280054][T25519] syz1: Port: 1 Link DOWN [ 821.288956][T29706] loop5: detected capacity change from 0 to 2048 [ 821.335716][T29711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 821.335849][T29651] hsr_slave_0: entered promiscuous mode [ 821.353652][T29711] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 821.394596][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.410025][T29651] hsr_slave_1: entered promiscuous mode [ 821.421201][T29706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.444051][T29651] debugfs: 'hsr0' already exists in 'hsr' [ 821.476290][T29651] Cannot create hsr debugfs directory [ 821.528438][T29719] loop6: detected capacity change from 0 to 2048 [ 821.562641][T29721] FAULT_INJECTION: forcing a failure. [ 821.562641][T29721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.586606][T29721] CPU: 0 UID: 0 PID: 29721 Comm: syz.1.6124 Tainted: G W syzkaller #0 PREEMPT(full) [ 821.586624][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.586641][T29721] Tainted: [W]=WARN [ 821.586647][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 821.586666][T29721] Call Trace: [ 821.586673][T29721] [ 821.586681][T29721] __dump_stack+0x1d/0x30 [ 821.586743][T29721] dump_stack_lvl+0x95/0xd0 [ 821.586765][T29721] dump_stack+0x15/0x1b [ 821.586786][T29721] should_fail_ex+0x263/0x280 [ 821.586816][T29721] should_fail+0xb/0x20 [ 821.586907][T29721] should_fail_usercopy+0x1a/0x20 [ 821.586936][T29721] _copy_from_user+0x1c/0xb0 [ 821.586967][T29721] ___sys_sendmsg+0xc1/0x1e0 [ 821.587019][T29721] __x64_sys_sendmsg+0xd4/0x160 [ 821.587045][T29721] x64_sys_call+0x194c/0x3020 [ 821.587070][T29721] do_syscall_64+0x12c/0x370 [ 821.587096][T29721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.587135][T29721] RIP: 0033:0x7f77af5abf79 [ 821.587152][T29721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.587248][T29721] RSP: 002b:00007f77ae007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.587280][T29721] RAX: ffffffffffffffda RBX: 00007f77af825fa0 RCX: 00007f77af5abf79 [ 821.587295][T29721] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 821.587309][T29721] RBP: 00007f77ae007090 R08: 0000000000000000 R09: 0000000000000000 [ 821.587322][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.587393][T29721] R13: 00007f77af826038 R14: 00007f77af825fa0 R15: 00007ffd9481c148 [ 821.587413][T29721] [ 821.764333][T29719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.790480][T29651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.801189][T29651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.816173][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.958195][T29651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.980901][T29651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.028850][T29735] loop6: detected capacity change from 0 to 512 [ 822.584545][T29651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.605940][T29735] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 822.624472][T29651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.711520][T29651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.775504][T29735] EXT4-fs (loop6): 1 truncate cleaned up [ 822.785006][T29651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.828998][T29735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.855352][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6133'. [ 823.015510][T29746] loop5: detected capacity change from 0 to 2048 [ 823.085209][T29748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6135'. [ 823.125051][T29746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.160528][T16656] bond1 (unregistering): Released all slaves [ 823.169481][T16656] bond2 (unregistering): Released all slaves [ 823.184017][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.204520][T16656] bond0 (unregistering): (slave bond3): Releasing backup interface [ 823.215631][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.227116][T16656] bond0 (unregistering): Released all slaves [ 823.265257][T16656] bond3 (unregistering): Released all slaves [ 823.299014][T29757] FAULT_INJECTION: forcing a failure. [ 823.299014][T29757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.312783][T29757] CPU: 0 UID: 0 PID: 29757 Comm: syz.5.6136 Tainted: G W syzkaller #0 PREEMPT(full) [ 823.312819][T29757] Tainted: [W]=WARN [ 823.312826][T29757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.312839][T29757] Call Trace: [ 823.312847][T29757] [ 823.312856][T29757] __dump_stack+0x1d/0x30 [ 823.312917][T29757] dump_stack_lvl+0x95/0xd0 [ 823.312941][T29757] dump_stack+0x15/0x1b [ 823.312962][T29757] should_fail_ex+0x263/0x280 [ 823.313015][T29757] should_fail+0xb/0x20 [ 823.313035][T29757] should_fail_usercopy+0x1a/0x20 [ 823.313079][T29757] _copy_from_user+0x1c/0xb0 [ 823.313149][T29757] kcm_ioctl+0x21b/0xa70 [ 823.313168][T29757] sock_do_ioctl+0x73/0x230 [ 823.313193][T29757] sock_ioctl+0x41b/0x610 [ 823.313226][T29757] ? mutex_lock+0x57/0x90 [ 823.313247][T29757] ? __pfx_sock_ioctl+0x10/0x10 [ 823.313347][T29757] __se_sys_ioctl+0xce/0x140 [ 823.313370][T29757] __x64_sys_ioctl+0x43/0x50 [ 823.313397][T29757] x64_sys_call+0x1563/0x3020 [ 823.313424][T29757] do_syscall_64+0x12c/0x370 [ 823.313460][T29757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.313484][T29757] RIP: 0033:0x7fd47856bf79 [ 823.313499][T29757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.313538][T29757] RSP: 002b:00007fd476fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.313556][T29757] RAX: ffffffffffffffda RBX: 00007fd4787e5fa0 RCX: 00007fd47856bf79 [ 823.313575][T29757] RDX: 0000200000000180 RSI: 00000000000089e0 RDI: 0000000000000004 [ 823.313590][T29757] RBP: 00007fd476fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 823.313605][T29757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.313681][T29757] R13: 00007fd4787e6038 R14: 00007fd4787e5fa0 R15: 00007fff6b31cd68 [ 823.313699][T29757] [ 823.551037][T29762] loop1: detected capacity change from 0 to 2048 [ 823.555279][T29651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 823.587727][T29762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.612257][T29651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.635873][T29651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 824.154450][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 824.154465][ T28] audit: type=1326 audit(1770931720.238:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.201742][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.224230][ T28] audit: type=1326 audit(1770931720.266:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.256510][ T28] audit: type=1326 audit(1770931720.266:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.379661][ T28] audit: type=1326 audit(1770931720.266:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.438395][ T28] audit: type=1326 audit(1770931720.266:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.490645][ T28] audit: type=1326 audit(1770931720.266:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.517628][T29788] loop6: detected capacity change from 0 to 512 [ 824.544302][T29788] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 824.555654][ T28] audit: type=1326 audit(1770931720.266:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.594378][ T28] audit: type=1326 audit(1770931720.266:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.649812][T29651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 824.690273][T29788] EXT4-fs (loop6): 1 truncate cleaned up [ 824.728802][ T28] audit: type=1326 audit(1770931720.266:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.752384][T16656] hsr_slave_0: left promiscuous mode [ 824.780961][T29788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.781368][ T28] audit: type=1326 audit(1770931720.266:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29776 comm="syz.5.6143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd47856bf79 code=0x7ffc0000 [ 824.869270][T16656] hsr_slave_1: left promiscuous mode [ 824.889247][T16656] veth1_macvtap: left promiscuous mode [ 824.894816][T16656] veth0_macvtap: left promiscuous mode [ 824.906239][T16656] veth1_vlan: left promiscuous mode [ 824.917481][T16656] veth0_vlan: left promiscuous mode [ 825.046758][T29800] tmpfs: Bad value for 'mpol' [ 825.177688][T29805] loop5: detected capacity change from 0 to 736 [ 825.264668][T29810] loop5: detected capacity change from 0 to 2048 [ 825.303539][T29810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.374077][T29651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.381164][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.387177][T29651] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.402861][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.409938][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.432749][ T1825] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.439989][ T1825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.457216][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.458853][T29651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.476724][T29651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.523748][T16656] IPVS: stop unused estimator thread 0... [ 825.587880][T29651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.669852][T29651] veth0_vlan: entered promiscuous mode [ 825.679176][T29651] veth1_vlan: entered promiscuous mode [ 825.695699][T29651] veth0_macvtap: entered promiscuous mode [ 825.703745][T29651] veth1_macvtap: entered promiscuous mode [ 825.715393][T29651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.727162][T29651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.739869][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.749395][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.759054][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.770376][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.877051][T29850] FAULT_INJECTION: forcing a failure. [ 825.877051][T29850] name failslab, interval 1, probability 0, space 0, times 0 [ 825.890101][T29850] CPU: 0 UID: 0 PID: 29850 Comm: syz.6.6160 Tainted: G W syzkaller #0 PREEMPT(full) [ 825.890133][T29850] Tainted: [W]=WARN [ 825.890139][T29850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 825.890202][T29850] Call Trace: [ 825.890207][T29850] [ 825.890214][T29850] __dump_stack+0x1d/0x30 [ 825.890237][T29850] dump_stack_lvl+0x95/0xd0 [ 825.890255][T29850] dump_stack+0x15/0x1b [ 825.890271][T29850] should_fail_ex+0x263/0x280 [ 825.890399][T29850] should_failslab+0x8c/0xb0 [ 825.890422][T29850] kmem_cache_alloc_noprof+0x66/0x400 [ 825.890484][T29850] ? alloc_empty_file+0x76/0x200 [ 825.890506][T29850] alloc_empty_file+0x76/0x200 [ 825.890597][T29850] alloc_file_pseudo+0xf6/0x190 [ 825.890615][T29850] hugetlb_file_setup+0x2a6/0x3d0 [ 825.890633][T29850] ksys_mmap_pgoff+0x156/0x310 [ 825.890651][T29850] x64_sys_call+0x14df/0x3020 [ 825.890673][T29850] do_syscall_64+0x12c/0x370 [ 825.890718][T29850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.890801][T29850] RIP: 0033:0x7f5e71e5bf79 [ 825.890815][T29850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.890904][T29850] RSP: 002b:00007f5e708af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 825.890922][T29850] RAX: ffffffffffffffda RBX: 00007f5e720d5fa0 RCX: 00007f5e71e5bf79 [ 825.890981][T29850] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 825.890993][T29850] RBP: 00007f5e708af090 R08: ffffffffffffffff R09: 0000000001000000 [ 825.891005][T29850] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 825.891016][T29850] R13: 00007f5e720d6038 R14: 00007f5e720d5fa0 R15: 00007ffd488e35e8 [ 825.891086][T29850] [ 826.179014][T29857] netlink: 'syz.6.6163': attribute type 10 has an invalid length. [ 826.192136][T29861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.201209][T29861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.537159][T29868] loop4: detected capacity change from 0 to 512 [ 826.558293][T29868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.6166: corrupted in-inode xattr: overlapping e_value [ 826.598764][T29868] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 826.602532][T29868] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6166: couldn't read orphan inode 15 (err -117) [ 826.623860][T29868] loop4: lost filesystem error report for type 5 error -117 [ 826.626915][T29868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.660150][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.671859][T29874] loop5: detected capacity change from 0 to 128 [ 826.823011][T29874] syz.5.6167: attempt to access beyond end of device [ 826.823011][T29874] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 826.837423][T29874] syz.5.6167: attempt to access beyond end of device [ 826.837423][T29874] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 826.862034][T29874] syz.5.6167: attempt to access beyond end of device [ 826.862034][T29874] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 826.888040][T29874] syz.5.6167: attempt to access beyond end of device [ 826.888040][T29874] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 826.910211][T29887] loop1: detected capacity change from 0 to 8192 [ 826.916893][T29874] syz.5.6167: attempt to access beyond end of device [ 826.916893][T29874] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 826.962131][T29874] syz.5.6167: attempt to access beyond end of device [ 826.962131][T29874] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 826.986645][T29874] syz.5.6167: attempt to access beyond end of device [ 826.986645][T29874] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 827.006803][T29874] syz.5.6167: attempt to access beyond end of device [ 827.006803][T29874] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 827.048725][T29874] syz.5.6167: attempt to access beyond end of device [ 827.048725][T29874] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 827.048763][T29874] syz.5.6167: attempt to access beyond end of device [ 827.048763][T29874] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 827.114421][T29920] netlink: 'syz.1.6172': attribute type 10 has an invalid length. [ 827.118655][T29919] loop5: detected capacity change from 0 to 2048 [ 827.127819][T29920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.133840][T29919] EXT4-fs: quotafile must be on filesystem root [ 827.163372][T29920] team0: Port device bond0 added [ 827.210188][T29922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6174'. [ 827.226788][ T41] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 827.234624][ T41] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 827.262490][T25519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 827.296954][T29924] loop1: detected capacity change from 0 to 512 [ 827.320720][T29924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 827.338728][T29924] EXT4-fs (loop1): 1 truncate cleaned up [ 827.346480][T29924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.370741][T25519] IPVS: starting estimator thread 0... [ 827.476359][T29932] IPVS: using max 2352 ests per chain, 117600 per kthread [ 827.514825][T29934] loop5: detected capacity change from 0 to 8192 [ 827.572788][T26988] loop5: p1 p2 p4 [ 827.578059][T26988] loop5: p4 size 262144 extends beyond EOD, truncated [ 827.588660][T29934] loop5: p1 p2 p4 [ 827.593427][T29934] loop5: p4 size 262144 extends beyond EOD, truncated [ 827.630243][T29937] loop6: detected capacity change from 0 to 512 [ 827.651322][T29937] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 827.667743][T29937] EXT4-fs (loop6): 1 truncate cleaned up [ 827.676059][T29937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.803771][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.849337][T29942] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 827.891551][T29940] loop4: detected capacity change from 0 to 4096 [ 827.899409][T29940] EXT4-fs: Ignoring removed mblk_io_submit option [ 827.911433][T29940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.943198][T29945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6180'. [ 827.955583][T29940] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: block 80: comm syz.4.6179: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 827.978230][T29940] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz.4.6179: directory missing '..' [ 828.014338][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.053727][T25519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.128938][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.172504][T29949] tipc: Enabling of bearer rejected, failed to enable media [ 828.306404][T29953] loop1: detected capacity change from 0 to 512 [ 828.315401][T29959] loop5: detected capacity change from 0 to 1024 [ 828.319566][T29960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6183'. [ 828.333230][T29959] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 828.344786][T29953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 828.355839][T29959] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 828.366852][T29959] EXT4-fs error (device loop5): ext4_get_journal_inode:5861: inode #32: comm syz.5.6186: iget: special inode unallocated [ 828.380791][T29960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 828.398037][T29959] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 828.407060][T25519] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.424853][T29951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6183'. [ 828.431513][T29959] EXT4-fs (loop5): Remounting filesystem read-only [ 828.454029][T29953] EXT4-fs (loop1): 1 truncate cleaned up [ 828.455014][T29959] EXT4-fs (loop5): no journal found [ 828.472527][T29953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.480357][T29959] EXT4-fs (loop5): can't get journal size [ 828.530704][T29959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 828.562181][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.959559][T29981] loop6: detected capacity change from 0 to 512 [ 829.144779][T29981] ext4: Unknown parameter 'fsname' [ 829.393716][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.425717][T29986] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 829.499659][T30001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.561703][T29986] EXT4-fs (loop6): 1 truncate cleaned up [ 829.583884][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.628737][T29986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.711051][T30013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6202'. [ 829.810587][T30014] dvmrp1: entered allmulticast mode [ 830.049924][T30025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.058491][T30025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.193451][T30023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 830.241704][T30023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6206: bg 0: block 248: padding at end of block bitmap is not set [ 830.419164][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.438844][T30023] loop1: lost filesystem error report for type 5 error -117 [ 830.452516][T30023] __quota_error: 85 callbacks suppressed [ 830.452533][T30023] Quota error (device loop1): write_blk: dquota write failed [ 830.490000][T30023] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 830.517024][T30032] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6210'. [ 830.525166][T30023] EXT4-fs error (device loop1): ext4_acquire_dquot:6998: comm syz.1.6206: Failed to acquire dquot type 1 [ 830.583299][T30023] loop1: lost filesystem error report for type 5 error -117 [ 830.590701][T30023] EXT4-fs (loop1): 1 truncate cleaned up [ 830.630597][T30023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 830.645810][T30035] team0 (unregistering): Port device team_slave_0 removed [ 830.659150][T30035] team0 (unregistering): Port device team_slave_1 removed [ 830.670272][T30035] team0 (unregistering): Port device bond0 removed [ 830.680381][T30023] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.6206: deleted inode referenced: 12 [ 830.705126][T30023] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.6206: deleted inode referenced: 12 [ 830.722415][ T28] audit: type=1400 audit(1770931726.374:3279): avc: denied { cmd } for pid=30036 comm="syz.5.6207" path="socket:[72819]" dev="sockfs" ino=72819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 830.770009][T30023] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.6206: deleted inode referenced: 12 [ 830.797241][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.810215][T30039] netlink: 'syz.6.6213': attribute type 27 has an invalid length. [ 830.845661][T30044] EXT4-fs: Ignoring removed orlov option [ 830.851734][T30044] EXT4-fs: Ignoring removed mblk_io_submit option [ 830.883551][T30044] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.6214: corrupted in-inode xattr: e_value size too large [ 830.911109][T30041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.918661][T30044] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 830.927827][T30045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 830.957338][T30044] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6214: couldn't read orphan inode 15 (err -117) [ 830.986539][T30045] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.999280][T30044] loop1: lost filesystem error report for type 5 error -117 [ 831.004536][T30044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.075454][T24029] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 831.094154][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.123560][T30044] team0: entered promiscuous mode [ 831.128822][T30044] team_slave_0: entered promiscuous mode [ 831.135514][T30044] team_slave_1: entered promiscuous mode [ 831.141563][T30044] bond0: entered promiscuous mode [ 831.148995][T30044] bond_slave_0: entered promiscuous mode [ 831.155236][T30044] bond_slave_1: entered promiscuous mode [ 831.163122][T30042] team0: left promiscuous mode [ 831.168246][T30042] team_slave_0: left promiscuous mode [ 831.198018][T30042] team_slave_1: left promiscuous mode [ 831.209534][T30042] bond0: left promiscuous mode [ 831.220051][T30042] bond_slave_0: left promiscuous mode [ 831.248097][T30042] bond_slave_1: left promiscuous mode [ 831.298239][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.319483][T30066] cgroup: Name too long [ 831.476733][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.542486][ T28] audit: type=1400 audit(1770931727.123:3280): avc: denied { setopt } for pid=30076 comm="syz.4.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 831.658696][T30068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 831.735538][ T28] audit: type=1326 audit(1770931727.329:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 831.752229][T30089] FAULT_INJECTION: forcing a failure. [ 831.752229][T30089] name failslab, interval 1, probability 0, space 0, times 0 [ 831.819312][ T28] audit: type=1326 audit(1770931727.329:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 831.865463][T30089] CPU: 1 UID: 0 PID: 30089 Comm: syz.6.6228 Tainted: G W syzkaller #0 PREEMPT(full) [ 831.865550][T30089] Tainted: [W]=WARN [ 831.865558][T30089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 831.865572][T30089] Call Trace: [ 831.865579][T30089] [ 831.865588][T30089] __dump_stack+0x1d/0x30 [ 831.865612][T30089] dump_stack_lvl+0x95/0xd0 [ 831.865682][T30089] dump_stack+0x15/0x1b [ 831.865703][T30089] should_fail_ex+0x263/0x280 [ 831.865732][T30089] ? audit_log_d_path+0x8d/0x150 [ 831.865788][T30089] should_failslab+0x8c/0xb0 [ 831.865854][T30089] __kmalloc_cache_noprof+0x5f/0x400 [ 831.865887][T30089] audit_log_d_path+0x8d/0x150 [ 831.866027][T30089] audit_log_d_path_exe+0x42/0x70 [ 831.866059][T30089] audit_log_task+0x1e8/0x250 [ 831.866208][T30089] audit_seccomp+0x60/0x100 [ 831.866235][T30089] ? __seccomp_filter+0x8db/0x1350 [ 831.866260][T30089] __seccomp_filter+0x8ec/0x1350 [ 831.866410][T30089] ? __rcu_read_unlock+0x4e/0x70 [ 831.866443][T30089] ? __fget_files+0x184/0x1c0 [ 831.866475][T30089] ? mutex_lock+0x57/0x90 [ 831.866498][T30089] ? mutex_unlock+0x4e/0x90 [ 831.866522][T30089] ? xfd_validate_state+0x45/0xf0 [ 831.866615][T30089] __secure_computing+0x81/0x150 [ 831.866639][T30089] do_syscall_64+0xd3/0x370 [ 831.866666][T30089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.866740][T30089] RIP: 0033:0x7f5e71e1c84e [ 831.866758][T30089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 831.866835][T30089] RSP: 002b:00007f5e708aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 831.866863][T30089] RAX: ffffffffffffffda RBX: 00007f5e708af6c0 RCX: 00007f5e71e1c84e [ 831.866877][T30089] RDX: 000000000000000f RSI: 00007f5e708af0a0 RDI: 0000000000000003 [ 831.866889][T30089] RBP: 00007f5e708af090 R08: 0000000000000000 R09: 0000000000000000 [ 831.866902][T30089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.866946][T30089] R13: 00007f5e720d6038 R14: 00007f5e720d5fa0 R15: 00007ffd488e35e8 [ 831.866973][T30089] [ 831.887149][T30068] EXT4-fs (loop1): 1 truncate cleaned up [ 831.912846][ T28] audit: type=1326 audit(1770931727.329:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 831.944190][T30068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.998404][ T28] audit: type=1326 audit(1770931727.329:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e71e1c84e code=0x7ffc0000 [ 831.998616][ T28] audit: type=1326 audit(1770931727.329:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e71e1c84e code=0x7ffc0000 [ 831.998648][ T28] audit: type=1326 audit(1770931727.329:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30087 comm="syz.6.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 832.128115][T30081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846e01c, mo2=0002] [ 832.258231][T30081] System zones: 1-12 [ 832.269729][T30081] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.6225: Directory hole found for htree index block 0 [ 832.284324][T30081] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 832.285897][T30081] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 832.307568][T30081] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.6225: Directory hole found for htree index block 0 [ 832.325021][T30081] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 832.326888][T30081] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 832.357777][T30081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.420629][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.444819][T30098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6233'. [ 832.472206][T30100] delete_channel: no stack [ 832.483520][T30100] delete_channel: no stack [ 832.625921][T30118] team_slave_0: entered promiscuous mode [ 832.631780][T30118] team_slave_1: entered promiscuous mode [ 832.637614][T30118] bond_slave_0: entered promiscuous mode [ 832.643358][T30118] bond_slave_1: entered promiscuous mode [ 832.649556][T30118] macvtap1: entered promiscuous mode [ 832.655850][T30118] team0: entered promiscuous mode [ 832.664293][T30118] bond0: entered promiscuous mode [ 832.670791][T30118] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 832.681320][T30119] set_capacity_and_notify: 9 callbacks suppressed [ 832.681338][T30119] loop1: detected capacity change from 0 to 512 [ 832.697466][T30118] team0: Device macvtap1 is already an upper device of the team interface [ 832.715304][T30118] team0: left promiscuous mode [ 832.720336][T30118] bond0: left promiscuous mode [ 832.726049][T30118] team_slave_0: left promiscuous mode [ 832.731625][T30118] team_slave_1: left promiscuous mode [ 832.737062][T30118] bond_slave_0: left promiscuous mode [ 832.742539][T30118] bond_slave_1: left promiscuous mode [ 832.790568][T30119] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 833.274604][T30119] EXT4-fs (loop1): orphan cleanup on readonly fs [ 833.288166][T30119] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.6239: corrupted inode contents [ 833.300339][T30119] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 833.300505][T30119] EXT4-fs (loop1): Remounting filesystem read-only [ 833.316685][T30119] EXT4-fs (loop1): 1 truncate cleaned up [ 833.762632][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 833.797968][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 833.811444][T30131] loop5: detected capacity change from 0 to 8192 [ 833.828833][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 834.195948][T30146] netlink: 'syz.4.6247': attribute type 1 has an invalid length. [ 834.207970][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6246'. [ 834.231413][T30146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.276511][T30146] bond3: (slave veth5): Enslaving as an active interface with a down link [ 834.300762][T30146] bond3: (slave dummy0): making interface the new active one [ 834.309767][T30146] dummy0: entered promiscuous mode [ 834.315151][T30146] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 834.332621][T30146] bond3 (unregistering): (slave veth5): Releasing active interface [ 834.354462][T30146] bond3 (unregistering): (slave dummy0): Releasing active interface [ 834.368890][T30146] bond3 (unregistering): Released all slaves [ 834.379666][T30159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6247'. [ 834.501490][T30174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6259'. [ 834.534966][T30176] IPVS: dh: FWM 3 0x00000003 - no destination available [ 834.573728][T30178] loop4: detected capacity change from 0 to 1024 [ 834.606155][T30182] loop6: detected capacity change from 0 to 1024 [ 834.617856][T30178] EXT4-fs: inline encryption not supported [ 834.626529][T30182] EXT4-fs: inline encryption not supported [ 834.773329][T30205] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 834.806033][T30205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6268'. [ 834.861400][T30219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.937145][T30226] loop4: detected capacity change from 0 to 2048 [ 835.170800][T30254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6281'. [ 835.190434][T30254] netlink: 'syz.4.6281': attribute type 10 has an invalid length. [ 835.240429][T30254] team0 (unregistering): Port device team_slave_0 removed [ 835.280567][T30254] team0 (unregistering): Port device team_slave_1 removed [ 835.535564][T25515] IPVS: starting estimator thread 0... [ 835.542754][T30290] loop5: detected capacity change from 0 to 4096 [ 835.561628][T30292] loop1: detected capacity change from 0 to 8192 [ 835.561754][T30290] FAULT_INJECTION: forcing a failure. [ 835.561754][T30290] name failslab, interval 1, probability 0, space 0, times 0 [ 835.593180][T30290] CPU: 1 UID: 0 PID: 30290 Comm: syz.5.6294 Tainted: G W syzkaller #0 PREEMPT(full) [ 835.593279][T30290] Tainted: [W]=WARN [ 835.593286][T30290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 835.593299][T30290] Call Trace: [ 835.593307][T30290] [ 835.593315][T30290] __dump_stack+0x1d/0x30 [ 835.593338][T30290] dump_stack_lvl+0x95/0xd0 [ 835.593433][T30290] dump_stack+0x15/0x1b [ 835.593450][T30290] should_fail_ex+0x263/0x280 [ 835.593538][T30290] ? __iomap_dio_rw+0x194/0x14a0 [ 835.593567][T30290] should_failslab+0x8c/0xb0 [ 835.593637][T30290] __kmalloc_cache_noprof+0x5f/0x400 [ 835.593671][T30290] __iomap_dio_rw+0x194/0x14a0 [ 835.593704][T30290] ? avc_has_perm_noaudit+0xab/0x130 [ 835.593836][T30290] ? percpu_counter_add_batch+0xb6/0x130 [ 835.593868][T30290] iomap_dio_rw+0x40/0x90 [ 835.593898][T30290] ext4_file_write_iter+0xae5/0xf70 [ 835.593946][T30290] do_iter_readv_writev+0x4fd/0x5a0 [ 835.593973][T30290] vfs_writev+0x2e1/0x900 [ 835.594005][T30290] __se_sys_pwritev2+0xfc/0x1c0 [ 835.594049][T30290] __x64_sys_pwritev2+0x67/0x80 [ 835.594238][T30290] x64_sys_call+0xe07/0x3020 [ 835.594264][T30290] do_syscall_64+0x12c/0x370 [ 835.594329][T30290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.594352][T30290] RIP: 0033:0x7fd47856bf79 [ 835.594366][T30290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.594434][T30290] RSP: 002b:00007fd476fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 835.594453][T30290] RAX: ffffffffffffffda RBX: 00007fd4787e5fa0 RCX: 00007fd47856bf79 [ 835.594465][T30290] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 835.594528][T30290] RBP: 00007fd476fbf090 R08: 0000000000000000 R09: 0000000000000003 [ 835.594540][T30290] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 835.594554][T30290] R13: 00007fd4787e6038 R14: 00007fd4787e5fa0 R15: 00007fff6b31cd68 [ 835.594575][T30290] [ 835.834125][T30300] loop4: detected capacity change from 0 to 8192 [ 835.857706][T30296] IPVS: using max 2352 ests per chain, 117600 per kthread [ 835.883098][T26988] loop4: p1 p2 p4 [ 835.890498][T26988] loop4: p4 size 262144 extends beyond EOD, truncated [ 835.890588][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 835.890618][ T28] audit: type=1326 audit(1770931731.220:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fbcbf79 code=0x7ffc0000 [ 835.934680][ T28] audit: type=1326 audit(1770931731.248:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fbcbf79 code=0x7ffc0000 [ 835.961723][T30300] loop4: p1 p2 p4 [ 835.966702][T30300] loop4: p4 size 262144 extends beyond EOD, truncated [ 835.978843][ T28] audit: type=1326 audit(1770931731.295:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f768fbcbf79 code=0x7ffc0000 [ 836.006801][ T28] audit: type=1326 audit(1770931731.295:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fbcbf79 code=0x7ffc0000 [ 836.106622][ T28] audit: type=1326 audit(1770931731.295:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fbcbf79 code=0x7ffc0000 [ 836.145188][ T28] audit: type=1326 audit(1770931731.295:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f768fb8c84e code=0x7ffc0000 [ 836.189025][ T28] audit: type=1326 audit(1770931731.295:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f768fbcbce2 code=0x7ffc0000 [ 836.235827][ T28] audit: type=1326 audit(1770931731.295:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f768fbcbda7 code=0x7ffc0000 [ 836.313365][ T28] audit: type=1326 audit(1770931731.295:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f768fbcbda7 code=0x7ffc0000 [ 836.380455][ T28] audit: type=1326 audit(1770931731.295:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.4.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f768fbcbd77 code=0x7ffc0000 [ 836.486885][T26706] udevd[26706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 836.486922][T26988] udevd[26988]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 836.513920][T26989] udevd[26989]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 836.557443][T30337] loop4: detected capacity change from 0 to 512 [ 836.570501][T30337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 836.590717][T26706] udevd[26706]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 836.590742][T26988] udevd[26988]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 836.612325][T26989] udevd[26989]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 836.644860][T30337] EXT4-fs (loop4): 1 truncate cleaned up [ 836.781019][T30355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6317'. [ 836.931148][T30371] loop6: detected capacity change from 0 to 512 [ 836.940810][T30371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 836.962342][T30371] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 837.215632][T30385] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 837.807085][T30406] xt_socket: unknown flags 0x4c [ 837.947844][T30415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6336'. [ 838.062012][T30421] set_capacity_and_notify: 2 callbacks suppressed [ 838.062031][T30421] loop1: detected capacity change from 0 to 512 [ 838.109240][T30421] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.201629][T30436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30436 comm=syz.4.6344 [ 838.286499][T30442] loop6: detected capacity change from 0 to 512 [ 838.334481][T30442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 838.382743][T30442] EXT4-fs (loop6): 1 truncate cleaned up [ 838.718410][T30474] loop1: detected capacity change from 0 to 4096 [ 838.732891][T30480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6358'. [ 838.768857][T30482] loop5: detected capacity change from 0 to 1024 [ 838.778565][T30474] EXT4-fs: Ignoring removed mblk_io_submit option [ 838.884524][T30474] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: block 80: comm syz.1.6356: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 838.937854][T30474] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #12: comm syz.1.6356: directory missing '..' [ 838.982099][T30489] loop4: detected capacity change from 0 to 512 [ 839.045129][T30489] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.133577][T30506] loop1: detected capacity change from 0 to 128 [ 839.134888][T30486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 839.168902][T30506] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.252767][T30518] 9pnet_fd: Insufficient options for proto=fd [ 839.520241][T30535] loop6: detected capacity change from 0 to 512 [ 839.546340][T30535] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 839.607477][T30535] EXT4-fs (loop6): 1 truncate cleaned up [ 839.616108][T30516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6371'. [ 839.627776][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6371'. [ 839.651224][T30516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6371'. [ 840.016349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.163941][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.186005][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.226680][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.269079][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.315725][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.374019][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.403530][T30556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'. [ 840.602977][T30576] loop4: detected capacity change from 0 to 512 [ 840.623799][T30576] ext4: Unknown parameter 'obj_user' [ 841.699751][T30590] loop6: detected capacity change from 0 to 1024 [ 841.716568][T30590] EXT4-fs: Ignoring removed orlov option [ 842.810232][T30610] loop5: detected capacity change from 0 to 128 [ 842.834926][T30610] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 842.940497][ T1825] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 843.280763][T25518] IPVS: starting estimator thread 0... [ 843.929160][T30631] IPVS: using max 2448 ests per chain, 122400 per kthread [ 845.023627][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 845.023641][ T28] audit: type=1326 audit(1770931995.758:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.066202][ T28] audit: type=1326 audit(1770931995.786:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.090009][ T28] audit: type=1326 audit(1770931995.786:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.114222][ T28] audit: type=1326 audit(1770931995.786:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.138361][ T28] audit: type=1326 audit(1770931995.786:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.163269][ T28] audit: type=1326 audit(1770931995.786:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.199705][T30665] 8021q: VLANs not supported on ipvlan1 [ 845.202922][ T28] audit: type=1326 audit(1770931995.786:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.248791][T25533] IPVS: starting estimator thread 0... [ 845.260623][ T28] audit: type=1326 audit(1770931995.786:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.286401][ T28] audit: type=1326 audit(1770931995.786:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.328265][T30670] IPv6: Can't replace route, no match found [ 845.352053][T30668] IPVS: using max 2592 ests per chain, 129600 per kthread [ 845.375190][ T28] audit: type=1326 audit(1770931995.796:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30656 comm="syz.6.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e71e5bf79 code=0x7ffc0000 [ 845.428718][T30670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30670 comm=syz.4.6427 [ 845.486091][T30685] __nla_validate_parse: 5 callbacks suppressed [ 845.486166][T30685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6435'. [ 846.593131][T30714] loop5: detected capacity change from 0 to 1024 [ 846.610818][T30714] EXT4-fs: Ignoring removed orlov option [ 846.619042][T30714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 846.639302][T30714] EXT4-fs mount: 33 callbacks suppressed [ 846.639317][T30714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.903453][T30734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.306306][T28576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.352335][T30748] Invalid ELF header magic: != ELF [ 847.384348][T30752] Invalid ELF header magic: != ELF [ 847.391563][T30750] netlink: 'syz.4.6455': attribute type 10 has an invalid length. [ 847.546446][T30768] loop1: detected capacity change from 0 to 4096 [ 847.557635][T30768] EXT4-fs: Ignoring removed mblk_io_submit option [ 847.580054][T30768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.601527][T30768] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: block 80: comm syz.1.6462: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 847.621473][T30768] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #12: comm syz.1.6462: directory missing '..' [ 847.665987][T30773] loop4: detected capacity change from 0 to 4096 [ 847.673551][T30773] EXT4-fs: Ignoring removed mblk_io_submit option [ 847.674000][T29037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.694639][T30773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.729316][T30773] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: block 80: comm syz.4.6463: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 847.754411][T30773] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz.4.6463: directory missing '..' [ 847.779215][T30780] hub 3-0:1.0: USB hub found [ 847.784274][T30780] hub 3-0:1.0: 8 ports detected [ 847.806749][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.933050][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6472'. [ 847.942645][T30798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6472'. [ 847.946039][T30797] syzkaller1: entered promiscuous mode [ 847.957649][T30797] syzkaller1: entered allmulticast mode [ 847.974526][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6472'. [ 847.975082][T16656] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.994387][T30798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6472'. [ 848.016744][T16656] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.023665][T30801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=30801 comm=syz.4.6472 [ 848.034295][T16656] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.060314][T30798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=30798 comm=syz.4.6472 [ 848.077087][T16656] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.134040][T30809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6475'. [ 848.147786][T30809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6475'. [ 848.222539][T30802] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 848.292459][T30820] netlink: 'syz.1.6480': attribute type 10 has an invalid length. [ 848.352338][T30823] loop4: detected capacity change from 0 to 256 [ 848.700554][T30829] loop4: detected capacity change from 0 to 512 [ 848.760269][T30829] EXT4-fs: inline encryption not supported [ 848.808305][T30829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.850434][T30829] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 848.888542][T30829] EXT4-fs (loop4): orphan cleanup on readonly fs [ 848.932051][T30829] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6482: Allocating blocks 41-42 which overlap fs metadata [ 848.966041][T30829] loop4: lost filesystem error report for type 5 error -117 [ 848.966155][T30829] EXT4-fs (loop4): Remounting filesystem read-only [ 849.001002][T30829] EXT4-fs (loop4): 1 truncate cleaned up [ 849.019831][T30829] EXT4-fs (loop4): pa ffff8881081da070: logic 1, phys. 41, len 23 [ 849.069825][T30844] loop1: detected capacity change from 0 to 8192 [ 849.080794][T30829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 849.110360][T30845] loop6: detected capacity change from 0 to 8192 [ 849.141605][T28394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.157512][T26988] loop1: p1 p2 p4 [ 849.166211][T26988] loop1: p4 size 262144 extends beyond EOD, truncated [ 849.187410][T26706] loop6: p1 p2 p4 [ 849.194755][T26706] loop6: p4 size 262144 extends beyond EOD, truncated [ 849.202279][T30849] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6488'. [ 849.212350][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6488'. [ 849.222692][T30844] loop1: p1 p2 p4 [ 849.229050][T30844] loop1: p4 size 262144 extends beyond EOD, truncated [ 849.238945][T30845] loop6: p1 p2 p4 [ 849.246767][T30845] loop6: p4 size 262144 extends beyond EOD, truncated [ 849.400102][T30858] netlink: 'syz.2.6490': attribute type 21 has an invalid length. [ 849.408596][T30858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6490'. [ 849.421753][T30858] netlink: 'syz.2.6490': attribute type 5 has an invalid length. [ 849.551806][T30867] ================================================================== [ 849.560019][T30867] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 849.567330][T30867] [ 849.569660][T30867] write to 0xffff8881056c0700 of 8 bytes by task 30865 on cpu 1: [ 849.577374][T30867] mas_wmb_replace+0x20d/0x1610 [ 849.582434][T30867] mas_wr_store_entry+0x16b6/0x2e70 [ 849.588221][T30867] mas_store_prealloc+0x72e/0xa60 [ 849.593609][T30867] vma_complete+0x3f7/0x820 [ 849.598243][T30867] __split_vma+0x5e3/0x660 [ 849.603727][T30867] vma_modify+0xbcb/0xd30 [ 849.608215][T30867] vma_modify_flags+0x182/0x210 [ 849.613372][T30867] mprotect_fixup+0x30e/0x5e0 [ 849.618516][T30867] do_mprotect_pkey+0x67b/0x920 [ 849.623650][T30867] __x64_sys_mprotect+0x48/0x60 [ 849.628683][T30867] x64_sys_call+0x2768/0x3020 [ 849.633368][T30867] do_syscall_64+0x12c/0x370 [ 849.638827][T30867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.644746][T30867] [ 849.647255][T30867] read to 0xffff8881056c0700 of 8 bytes by task 30867 on cpu 0: [ 849.657948][T30867] mas_state_walk+0x119/0x650 [ 849.663091][T30867] mas_walk+0x60/0x150 [ 849.668226][T30867] lock_vma_under_rcu+0xc9/0x210 [ 849.673870][T30867] do_user_addr_fault+0x232/0x1050 [ 849.680323][T30867] exc_page_fault+0x62/0xa0 [ 849.687525][T30867] asm_exc_page_fault+0x26/0x30 [ 849.692737][T30867] [ 849.695236][T30867] value changed: 0xffff88811f043d01 -> 0xffff8881056c0700 [ 849.702610][T30867] [ 849.705892][T30867] Reported by Kernel Concurrency Sanitizer on: [ 849.713995][T30867] CPU: 0 UID: 0 PID: 30867 Comm: syz.2.6493 Tainted: G W syzkaller #0 PREEMPT(full) [ 849.726587][T30867] Tainted: [W]=WARN [ 849.730614][T30867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 849.741282][T30867] ================================================================== [ 857.121404][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!