last executing test programs: 1m31.304341126s ago: executing program 2 (id=262): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) io_uring_enter(r0, 0x45df, 0xcccf, 0xc, &(0x7f0000000040)={[0x8001]}, 0x8) getdents(0xffffffffffffffff, 0x0, 0x58) 1m31.242512384s ago: executing program 2 (id=263): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xffffffffffffffa0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x10003, 0xfffffbff, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0xb, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file1\x00', 0x1e) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0x401, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)='key_or_keyring:\xd8Ou\xed\xd7\x92\x83\f\xb9\r\xa8N\v\xeayK>\xe4r\xd3H\xf7\xda_\xaf\xb6K\xa0\xb6j\xb0Pc\xfd\x04\xf0\xc1\xf2\xc5\xf6\xe7~:X\xbb65\xa0\xa8\xe7\x01\x15\xe9<8+\xcf\xadF~\xc3o\x04\xf6<6-A\x9a1\xa3le\xafuU\x96?\xee-\x89Oq\x131j\x8f\xa4\x982\t\xe8\xb4\xea\xe1\x84Fk\xa4\x86~&Q\xda\xf6\x04\x1b\f\x90+\xff\xcf\x05u&>/]o\x9e\x91S\x85Nq:\xbc\x16>M\xd2_r\xeenTf\xde\x98\xb5\xe9<\x8f;\t\xf9=\x91\x14\x95\x97\xcdmG%\xed\t\xa7N\xb4\x85@\xe9\xeb,\"\xd1R\xcb\x03\xc0\xbe\xe2\x14\xe3\x84\xf3\xa2>Z\xa6\xc4\xfb2\xd2\xaa\x89\x12\xc3)m\xc5j\xaf\xe5n|\xfcD\xfc\xb5R\x1d\x87\xcfW5\xc7!\\\x11\x88\xa5\a\x0f\xcf\xa2q\x8eC') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000140)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a54a07"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x9) 1m31.06513687s ago: executing program 2 (id=264): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xc}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x10000, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x8001, @private0, 0x9}}, 0x0, 0x0, 0x26, 0x0, "bfc1eb0ef97f5751c4bfb9da9d3c4730fed3db7c696987a3814f7610e0fb4ad2b562f6a91df3fe55f63b8e12b750e52f982b3f8a6a23313025970c8e5fac17952d3651a9c8ccd63ddc4d9e42a6b39db0"}, 0xd8) 1m30.991485516s ago: executing program 2 (id=266): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x84000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/207, 0xcf}, {0x0}], 0x2}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x10001, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x18, 0x0, @fd_index=0x4, 0x8, 0x0, 0x763, 0x3, 0x0, {0x0, r10}}) preadv(r0, &(0x7f0000007dc0)=[{&(0x7f0000007d00)=""/120, 0x78}], 0x1, 0x8, 0x1) 1m30.53208431s ago: executing program 2 (id=270): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m29.257751649s ago: executing program 2 (id=278): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m29.257085319s ago: executing program 32 (id=278): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m22.842567997s ago: executing program 5 (id=280): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_format(r2, &(0x7f00000000c0)='1\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYRES8=r6], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r4, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 1m22.782497336s ago: executing program 5 (id=334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 1m22.704282802s ago: executing program 5 (id=337): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd25, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r4, &(0x7f0000000600)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="cd0f8e28bcfcc6da0da2c6939d81478a19b232d1f1ef2020f46d976ee2791e1e89dd7e33c709dbdc1d0b663b8b42a2c25d8b54f6aad883824062128c3b7cfc177e710765af1dbd9c2fef622482026330ebe47d3e537756da20840223ae2a0c9470353399914764f21cde404f9daf611de2a9b1098e8e6e0a091d0f4ece8fdbdaff94454bc36aec67b3263942", 0x8c}, {&(0x7f0000000180)="6c41c8", 0x3}], 0x2, &(0x7f0000000380)=[{0x88, 0x102, 0x4, "fdf8b8da18b70b2fb68f79efc409c501bb6591052daed96d7d232177dedfd55476c1ed4e010ba5098dec35938c407dc2ce97194b33932f9f25a6500083422416baef3d37624bde493081de732b22379c435bd05f047c87090e2bb63849c32336323fec28e58e9ce8f952216c376798452cf89991ab2a"}, {0xc0, 0x84, 0xff, "62c5b6315cb2071feaa86de719690245254a9f9c82029ddd5e046848cf4c430d00e3021229cf077317777eb59299973bcfbc35c183db6a11e5f5058277a81895c424d4aaeb2f4c1d199bb924017240bae2eda13326674bd126f40842f8bb8bba346904f81721d2523c71cb02704ca246b6a0e606de5c688b5554ee236aaa76911bdf84c11e56cfe5d4e76ec48dc99b1a9ec5264caede71517180d5e477cb0d7d0bc7b592cd45a53adb5ed72c85fcc5"}, {0xe8, 0x104, 0x4, "64eee7eb9d75059c7c25ac3218930cdcfe8173c76df692513fa6b0e1b7b73b71b5c2e3257d145ef1b2ee90e73c096a76e9aff461a26883dd20bc0030298b5d4cf1606d6820d04f702ff97042bfba24fc3a3ee6abfc924520bd83df6e71f90c6993c2eba096bb2e8197f6cb8da2529a9bdf85dd1d84e47548b5fc68cb19dee76f0113ac62192bc338dbbac949a9f2a7e9ee505d76428c9ff87f2aac918617d1dcd6a78fb61163f1c8370bb1b42584009cbf6238a35d09652db724c9f66d28fb0263278b9a18d713b80d375abdc9081bc23acbbead0303"}, {0x18, 0x113, 0x1, "ffd4e753ce63ca"}], 0x248}, 0x400c040) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x72d8, 0x0) syz_clone3(&(0x7f0000000380)={0x850200, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x21}, &(0x7f0000000180)=""/224, 0xe0, &(0x7f0000000740)=""/231, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, &(0x7f0000000300)='vfat\x00', 0x30000, &(0x7f0000000840)={@_ha_fsid={[0xff, 0x9]}, {0x1, 0xfffa, 0x7f, 0x4}}, 0xfffffffc, &(0x7f0000000880), &(0x7f00000008c0)=0x8}) kcmp(r3, r5, 0x6, r0, r6) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 1m22.657639952s ago: executing program 5 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018008000140e79a01020c00148008000140ac1414100c000280"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) (fail_nth: 2) 1m20.95093449s ago: executing program 5 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "7ca14e0bb42b00ca", "e393a639e1714663d647b57d50144087", "d5825cc3", "e35bb6550c4661d5"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3, 0x5, 0x5, 0x4}, {0x4, 0x7, 0x4, 0x2640}, {0x1, 0x8, 0x8a, 0x6}]}) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20000008}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = syz_io_uring_setup(0x2, 0x0, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, 0x0, 0x1) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r6 = syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) lsm_list_modules(0x0, 0x0, 0x10000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESDEC=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) unshare(0x0) 1m20.924933835s ago: executing program 33 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "7ca14e0bb42b00ca", "e393a639e1714663d647b57d50144087", "d5825cc3", "e35bb6550c4661d5"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3, 0x5, 0x5, 0x4}, {0x4, 0x7, 0x4, 0x2640}, {0x1, 0x8, 0x8a, 0x6}]}) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20000008}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = syz_io_uring_setup(0x2, 0x0, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, 0x0, 0x1) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r6 = syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) lsm_list_modules(0x0, 0x0, 0x10000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESDEC=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) unshare(0x0) 2.936001955s ago: executing program 1 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) recvmsg$can_bcm(r3, &(0x7f0000000740)={&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/78, 0x4e}, {&(0x7f0000000580)=""/227, 0xe3}], 0x3, &(0x7f00000006c0)=""/112, 0x70}, 0x100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x7800, 0x5, 0x4, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x66, 0x0, 0xfa, 0x2f, 0x0, @private=0xa010100, @empty, {[@rr={0x7, 0xf, 0x8a, [@remote, @multicast2, @multicast1]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0x9, [0x80]}, @timestamp_prespec={0x44, 0x1c, 0xc3, 0x3, 0x4, [{@broadcast, 0x7}, {@local, 0x8}, {@empty, 0xc}]}, @lsrr={0x83, 0x1f, 0x80, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @multicast2, @empty, @private=0xa010100]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3f, 0x70bd2e, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x0, 0x1000, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}}, 0x10) recvfrom$packet(r1, &(0x7f0000000000)=""/251, 0xfb, 0x10040, &(0x7f0000000200)={0x11, 0x19, r4, 0x1, 0xf, 0x6, @random="44a774272e74"}, 0x14) 2.848552958s ago: executing program 1 (id=1034): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x64) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0xfffe, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x200008c0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x3a]}}}, 0x4e}]}) 2.711612582s ago: executing program 4 (id=1037): syz_io_uring_setup(0x53ca, &(0x7f0000000000)={0x0, 0xa37f, 0x600, 0x1, 0x9}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r0 = syz_io_uring_setup(0x53ca, &(0x7f0000000000)={0x0, 0xa37f, 0x600, 0x1, 0x9}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x22c3, &(0x7f0000000100)={0x0, 0xf010, 0x8, 0x1, 0x26b}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = io_uring_setup(0x76, &(0x7f0000000200)={0x0, 0xca66, 0x400, 0x1, 0x314}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r4, 0x0, &(0x7f0000000280)="4dc646b1f24c3548bcf84c42e725db78ff3f477bf4cb47c0c12e603f6a0a248acfe8bb8fdec917ab3bad2dab8ccfc49606ba28f3579b65c5d1210e328207978e011955167d5bca8577ea35b06a396495bb6a6dda48c47b24cdb74a56bc11978f3a818bc5a51c1bfc5582fc0079014fba834cffff5b821a437ba89b95600ad2", 0x7f, 0x2, 0x1, {0x0, r5}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x4, 0x1}, &(0x7f0000000380)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x4, 0x1}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x1, 0x9, 0x1, 0x1, 0xa0, 0x3, 0x3}, &(0x7f0000000480)=0x9c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r9 = signalfd4(r8, &(0x7f0000000500)={[0x5]}, 0x8, 0x80000) close(r4) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000540)=0x0) process_vm_readv(r10, &(0x7f0000000940)=[{&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000000800)=""/106, 0x6a}, {&(0x7f0000000880)=""/128, 0x80}, {&(0x7f0000000900)=""/8, 0x8}], 0x6, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/24, 0x18}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/65, 0x41}], 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r9}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r9, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0xb49a, '\x00', 0x0, r9, 0x0, 0x4, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0xb49a, '\x00', 0x0, r9, 0x0, 0x4, 0x4}, 0x50) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000d00)={r13, r14+60000000}) openat$full(0xffffffffffffff9c, &(0x7f0000000d40), 0x4000, 0x0) (async) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40), 0x4000, 0x0) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000d80)) setpgid(r10, r10) (async) setpgid(r10, r10) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000dc0)={0xfffe, 0x7e0, 0xdf9e, 0x4, 0xb, 0x8}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000e00)={r15, 0x0, 0x9, 0xf2, 0x4, 0x4, [0x4, 0x998f, 0x3, 0x0, 0x9, 0x2]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000ec0)={0x6, &(0x7f0000000e80)=[{0xbd, 0x1, 0x7, 0x2}, {0x8, 0x5, 0x4, 0x7d16e0c2}, {0x1, 0x81, 0x40, 0x3}, {0x9, 0x3, 0x8, 0x9}, {0x7, 0x8, 0x4, 0x6}, {0x34, 0x8, 0x33, 0x3}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000008, 0x100010, r0, 0x0) (async) r16 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000008, 0x100010, r0, 0x0) syz_io_uring_submit(r16, r2, &(0x7f0000000f80)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000f00)="4b6c96d810b6d5f08e236fd73476339461994e0a2b6d81348130c47b5a679e5eaab99163e464767f07a90800e29f47750425fe0effe6025db7c2b52e3aaa851963e7142c8b282df825d35b2a4a45a039ca1bd6158d669abfc36c45d72759f65c18bdaaa353f60358e1e34d64f1526928774dbf9c5397d1550c9d3d", 0x7b, 0x24044000, 0x1, {0x0, r5}}) ioctl$BINDER_SET_MAX_THREADS(r15, 0x40046205, &(0x7f0000000fc0)=0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000001000)={{0x3a, @empty, 0x4e23, 0x1, 'dh\x00', 0x19, 0x0, 0x34}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x7fffffff, 0x0, 0x4fe}}, 0x44) close(r12) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000001080)={0x6}, 0x0) 1.908413981s ago: executing program 6 (id=1043): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.884318976s ago: executing program 4 (id=1044): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {}, 0xff}, 0x18) 1.855158701s ago: executing program 4 (id=1045): syz_emit_ethernet(0x232, &(0x7f0000019300)={@random="dbd0294daddf", @remote, @void, {@ipv4={0x800, @dccp={{0x48, 0x4, 0x3, 0x3, 0x224, 0x65, 0x0, 0x9, 0x21, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x34, 0x73, 0x1, 0x8, [{@local, 0x1}, {@empty, 0x1}, {@broadcast, 0x2}, {@remote, 0xf3}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}, {@loopback, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0x4, [{@private=0xa010100, 0x257}, {@private=0xa010100, 0x34d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@private=0xa010101, 0x3}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}]}, @lsrr={0x83, 0x17, 0x7c, [@empty, @loopback, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x70, [@broadcast, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @loopback]}, @ssrr={0x89, 0x23, 0x4f, [@broadcast, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @cipso={0x86, 0x22, 0x0, [{0x7, 0x12, "43e28f8c2e77706220fda2826e3594aa"}, {0xf, 0xa, "99afb634bba085ef"}]}, @timestamp_addr={0x44, 0x1c, 0x99, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x5}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0xd0, 0x5, "741a32"}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x4, 0x6, "e3290a", 0x86, "ef4977"}, "8f486ca116a8014a2a5ec329850bcafce2d828f1ced53866cb0f80a151bff87b2d35a35f39f6f28ff2938459dc5ea1b1290619b2985db638cadebd9fcc86fab3fdf5207d6ad5d9a4093c4e5ff77de0fab72c4b9784a9a3c87d8898aa9e74594eb3c798c819bc62b280db34ecd5f77fa5704ce8f537f5d4ab5adcc6b61d5c7ddebc2ec8661f2c3f2efa46e34da6491413ccc61b29e5f223e4b754e6b0db447eeaf44b96cfedc2ff65be879fd34f74cfb76e146c162e415e8bfd1bf12f807f580b24029d9674b249f3c4f76f985e72564a19283483b2178e583d77411508fec6c61cd4d6b457f811f55a25d4a09226646034ab714b"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='security.selinux\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000feffdfff0000000000000000850000005600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000ec0)=@in4={0x21, 0x1, 0x2, 0xf, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x24) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup2(r5, r5) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x'], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 1.633399789s ago: executing program 3 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c0002802800010024"], 0x58}}, 0x4000800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6a7", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r4, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x10, 0xe1e, 0xffff, 0x6, 0x3, 0x80]}, &(0x7f00000000c0)=0x78) 1.603071613s ago: executing program 1 (id=1048): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, 0x0, 0x6, 0x2) (async) timer_create(0x2, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x8532, 0x800005, 0x401, 0x2e69a, 0x7, "001221d608f5000004b5450080c90a808000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6e7) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9292, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @rand_addr=0xfffffc13}}) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0xfffffffffffffeab, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.541848461s ago: executing program 3 (id=1049): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d703", 0x4, r0) 1.501620953s ago: executing program 4 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x2}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x30, 0x5f, 0x0, 0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a74fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x316, &(0x7f0000001040)="$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") 1.48108441s ago: executing program 3 (id=1051): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000000)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="642300001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 1.453537044s ago: executing program 1 (id=1052): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x40) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48) 1.348658425s ago: executing program 3 (id=1053): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x2, 0x574b940b860987d2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x72d8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.347865165s ago: executing program 4 (id=1054): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007104250000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x1}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000000079109000000003007b0ae8ff0000000095000000000000006141fc9a0cc14da1855a9b26fd58f16d73fb3fdf87bbe575cb25540060330fd924b3b4c115d7cadcb4544c7aa44514aab06b5845369fac9672dcac13f9e7a9901b76187c7b1e253da52655735310de0927e399b18536911ddf51b69dd3575fcaf162993f3cab5ec7f4d40f239089c8761527356d5fbab4df90fb80bfeba1919043baad9a9f439beddc825b61242b805a0ec45dd6fab1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c5a1745110ad399667426f5e431382928a60ed004ff7a77585141915bdab716d74261e920e19308bdfc146c80f2636f6138e155fa025bbcd92654d7e0ae86f162977c896e55acfac3fb55a914bb1dad573831932da995ec5f282848024cd14cf1e893b7cb53f5d021d77b10df21988912fc11ad8fcec510821f945c840a93510fc206fde9a8c50379d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) fchdir(0xffffffffffffffff) r9 = open(&(0x7f00000002c0)='./file0\x00', 0x100000, 0x0) flock(r9, 0x6) 1.347319654s ago: executing program 0 (id=1055): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x0, {}, 0xff}, 0x18) 1.314915008s ago: executing program 0 (id=1056): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffdfffe, {0x0, 0x9, 0x3, 0x0, {0x4e25, 0x100, [0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x4, 0x8001], 0x0, [0x101]}, 0xf0fffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "88000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) futex_waitv(&(0x7f0000002540)=[{0x10, &(0x7f0000000200)=0x6, 0x41f4722d928aef5b}, {0x4, &(0x7f0000000a00)=0x100000000, 0x2}, {0xf47, &(0x7f0000000480)=0x6, 0x82}, {0x0, &(0x7f0000000580)=0x2, 0x2}, {0xf, &(0x7f00000005c0)=0x7, 0x2}, {0x7, &(0x7f0000000680)=0xffffffffffff54d6, 0x2}, {0x2, &(0x7f00000006c0), 0x82}, {0x40, &(0x7f0000000700)=0x9, 0x82}, {0x3, &(0x7f0000000740)=0x7, 0x2}, {0x1, &(0x7f0000000800)=0x6, 0x2}, {0x4, &(0x7f0000000900)=0x4, 0x82}, {0x0, &(0x7f0000000940)=0xb, 0x82}, {0x8980, &(0x7f0000000980)=0x4, 0x82}, {0x4, &(0x7f00000009c0)=0x6, 0x82}, {0x9, &(0x7f0000002b00)=0x3, 0x2}, {0x6, &(0x7f0000000a40)=0x350, 0x2}, {0xffffffff, &(0x7f0000000a80)=0x5ed, 0x2}, {0x2, &(0x7f0000000ac0)=0xc9, 0x82}, {0x2, &(0x7f0000000b00)=0x6, 0x82}, {0x3, &(0x7f0000000b40)=0x80, 0x2}, {0x7, &(0x7f0000000b80)=0xb66, 0x82}, {0x3, &(0x7f0000000bc0)=0x6, 0x82}, {0x344800000000000, &(0x7f0000000c00)=0x2, 0x82}, {0xdea3, &(0x7f0000000c40)=0x4, 0x82}, {0xffffffffffffffff, &(0x7f0000000c80)=0xffffffffffff377d, 0x2}, {0x1, &(0x7f0000000cc0)=0x9, 0x82}, {0x4, &(0x7f0000000d00)=0x7fff, 0x2}, {0x5, &(0x7f0000000d40), 0x2}, {0x8, &(0x7f0000000d80)=0xcb8, 0x2}, {0x3, &(0x7f0000000dc0)=0xba, 0x2}, {0x7ff80000, &(0x7f0000000e00)=0x6, 0x2}, {0x1200000000, &(0x7f0000000e40)=0x8}, {0x800, &(0x7f0000000e80)=0x10001, 0x2}, {0x6, &(0x7f0000000ec0)=0x3, 0x2}, {0x7, &(0x7f0000000f00), 0x2}, {0x5, &(0x7f0000000f40)=0x80000001, 0x82}, {0x4, &(0x7f0000000f80)=0xf, 0x2}, {0x9, &(0x7f0000000fc0), 0x82}, {0x0, &(0x7f0000001000), 0x80}, {0x6, &(0x7f0000001040)=0x2, 0x82}, {0x4, &(0x7f0000001080)=0x9, 0x2}, {0x0, &(0x7f00000010c0)=0x9, 0x86}, {0xe1ea, &(0x7f0000001100)=0x7, 0x82}, {0x100000000, &(0x7f0000001140)=0x5, 0x2}, {0x8, &(0x7f0000001180)=0x25, 0x2}, {0x6, &(0x7f00000011c0)=0x3a87, 0x2}, {0x5, &(0x7f0000002200)=0x8, 0x82}, {0xcf, &(0x7f0000002240)=0xc, 0x2}, {0x8, &(0x7f0000002280)=0xbf12, 0x82}, {0xfffffffffffffff7, &(0x7f00000022c0)=0x7, 0x82}, {0x6, &(0x7f0000002300)=0x7fff, 0x2}, {0x11, &(0x7f0000002340)=0x4, 0x2}, {0xfffffffffffffffe, &(0x7f0000002380)=0x3eed, 0x2}, {0x6, &(0x7f00000023c0)=0xd, 0x2}, {0x7, &(0x7f0000002400)=0x1, 0x82}, {0x1900000000000000, &(0x7f0000002440)=0x8000000000000001, 0x80}, {0x80000001, &(0x7f0000002480)=0x9, 0x2}, {0x3489, &(0x7f00000024c0)=0x2, 0x2}, {0x2, &(0x7f0000002500), 0x2}], 0x3b, 0x0, 0x0, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$unix(0x1, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000}, [@tail_call, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x8, 0x401, 0xfffffff9}, 0x10, 0x0, r2, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800), 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4083, 0xfe0a) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x4bfa, 0x10000000000004) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f1762b55bd1142e3563cb2b4a6557712de80e5d0ce43bf88d41b6268b0308d2bd51efc12db1e2eb44ea4acbd61c38045655e5"], 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYRES64=r3], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r9, &(0x7f0000000180)}, 0x20) 1.223296891s ago: executing program 0 (id=1057): msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x3, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3d96, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$l2tp(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x2a020480) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0xee01, 0xee01]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) r9 = syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000680)=""/203, 0xcb, &(0x7f00000003c0)=""/119, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r5}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, r6, 0x0, r7, 0xc2, 0x87}, 0x0, 0x0, 0x20000000000, 0x5, 0x2, 0xfffffffffffffffc, 0x76cd02eb, 0xfff, 0x4, 0x3, r8, r9}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 1.176165612s ago: executing program 3 (id=1058): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x5c1002, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911048000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1.172650831s ago: executing program 4 (id=1059): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x5e}, 0x3) (fail_nth: 1) 1.139509365s ago: executing program 1 (id=1060): syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x103202) openat(0xffffffffffffff9c, 0x0, 0x100, 0x62) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf4bf, 0x400, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.096456407s ago: executing program 6 (id=1061): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x4800, 0x4) r1 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000000c0)="ff2cfeb23f17f6ddc5eaf675e888d1be528e1996ab3996c68b3b7e7c07b4ea914e602c2ad69bbc0688845a6dd293ada0dd430e8daa80f23f415839bc1fb106738a812e04cba97b1efaccc8e3fdfcbb3c6664e0f755bc325b1abb3578f14d0972cba4863c8ed1807faf4fcc8c6bd07a60ecf16b32c933e3facefd5dae33b125a0ffc601669e8f281e1039f53e69f79f518effb49ff5dba01e528ea5d026fa2813ed155224e53e73241c9dcc26466a", 0xae) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x400000) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 1.05652776s ago: executing program 3 (id=1062): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x5e}, 0x3) 927.850715ms ago: executing program 6 (id=1063): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2401, 0x10) getdents64(r0, &(0x7f0000000040)=""/191, 0xbf) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5000, 0x0) (rerun: 64) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x1000, &(0x7f0000000280)={0x200074, 0x8, 0x0, {r4}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000300)=0xd09f24588aa20169, 0x2) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000440)) (async) write$P9_RRENAME(r5, &(0x7f0000000480)={0x7, 0x15, 0x1}, 0x7) (async) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r6, 0x0) (async) r8 = mq_open(&(0x7f00000004c0)='(!\x00', 0x800, 0x21, &(0x7f0000000500)={0x0, 0x8, 0x41, 0x2}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r9, 0x0, {0x1, 0xf0, 0x2}, 0xfd}, 0x18, &(0x7f0000000680)={&(0x7f00000005c0)="9c4e5b12fd57dd0ebbf329d40116c419846c0dda34dc9a5179d57501a676d428892433cfdb527d1b355ddf4079db8714bd2be052c76d6cb8a3025671b974fb5159d7d095d7a432d2cea188917410d66fcd267cc8036bd88417728ad3c5ed779e2a72bf7db6168b99dd4840aa0ea96e9519212b49b0c3bddd312af2b45cebe1d27f6a5d123e72458e9275d7fb0027e6441bafde47f3d2c99f1cb662fdb8a2480b3b13deff4c5c9a8b3d", 0xa9}, 0x1, 0x0, 0x0, 0x4040004}, 0x48850) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000700)=0xffffffffffffffff, 0x4) mq_timedsend(r8, &(0x7f0000000740)="2e6c68dd9dd63905d9f8eb2850fddd8c60456c89af29074c1cd993dada788def90a11242caf5cccf31b8c5288e7577dfdf19442a4a81d181697f4c49f3fa41c0bea3599af3cfa0204cc47bf088d09213e496285aee708d2497f91b57babccf0b0acb2fce", 0x64, 0x2, &(0x7f00000007c0)) (async) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x100010, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0xc0, &(0x7f0000000800)=0x5, 0x0, 0x4) (async) mount$9p_tcp(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x40, &(0x7f0000000900)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@ignoreqv}, {@access_uid={'access', 0x3d, r6}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_lt={'euid<', r6}}, {@euid_eq={'euid', 0x3d, r6}}, {@dont_appraise}]}}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r5) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80022000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r12, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x80000001}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) ioperm(0xe92, 0x4, 0x100000001) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r13, 0x322, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xe, 0x1e}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2df}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 927.073305ms ago: executing program 6 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x0) 317.23281ms ago: executing program 0 (id=1065): r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) close_range(r2, r1, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) preadv(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000980)=""/28, 0x1c}], 0x3, 0x163, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x4212, r7, &(0x7f0000000140), 0x200000000001) futex(&(0x7f0000000500), 0x100, 0x1, &(0x7f0000000540)={0x77359400}, &(0x7f0000000640)=0x2, 0x2) perf_event_open(0x0, r7, 0xe, r0, 0x2) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101030000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_SET_DEBUG(r8, 0x227e, &(0x7f0000000140)=0x1) 277.231312ms ago: executing program 1 (id=1066): r0 = io_uring_setup(0x6572, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x2, 0xfffff7ff}) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 43.882328ms ago: executing program 6 (id=1067): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 42.695238ms ago: executing program 0 (id=1068): unshare(0x6020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r0) 37.471327ms ago: executing program 6 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000600)=@ieee802154, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/250, 0xfa}], 0x3, &(0x7f0000000840)=""/94, 0x5e}, 0x2}], 0x1, 0x10100, &(0x7f00000008c0)) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x1a0) write$bt_hci(r6, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r6, r3, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x80047210, 0x0) linkat(r7, &(0x7f00000000c0)='./bus\x00', r3, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=1070): syz_emit_ethernet(0x232, &(0x7f0000019300)={@random="dbd0294daddf", @remote, @void, {@ipv4={0x800, @dccp={{0x48, 0x4, 0x3, 0x3, 0x224, 0x65, 0x0, 0x9, 0x21, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x34, 0x73, 0x1, 0x8, [{@local, 0x1}, {@empty, 0x1}, {@broadcast, 0x2}, {@remote, 0xf3}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}, {@loopback, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0x4, [{@private=0xa010100, 0x257}, {@private=0xa010100, 0x34d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@private=0xa010101, 0x3}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}]}, @lsrr={0x83, 0x17, 0x7c, [@empty, @loopback, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x70, [@broadcast, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @loopback]}, @ssrr={0x89, 0x23, 0x4f, [@broadcast, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @cipso={0x86, 0x22, 0x0, [{0x7, 0x12, "43e28f8c2e77706220fda2826e3594aa"}, {0xf, 0xa, "99afb634bba085ef"}]}, @timestamp_addr={0x44, 0x1c, 0x99, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x5}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0xd0, 0x5, "741a32"}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x4, 0x6, "e3290a", 0x86, "ef4977"}, "8f486ca116a8014a2a5ec329850bcafce2d828f1ced53866cb0f80a151bff87b2d35a35f39f6f28ff2938459dc5ea1b1290619b2985db638cadebd9fcc86fab3fdf5207d6ad5d9a4093c4e5ff77de0fab72c4b9784a9a3c87d8898aa9e74594eb3c798c819bc62b280db34ecd5f77fa5704ce8f537f5d4ab5adcc6b61d5c7ddebc2ec8661f2c3f2efa46e34da6491413ccc61b29e5f223e4b754e6b0db447eeaf44b96cfedc2ff65be879fd34f74cfb76e146c162e415e8bfd1bf12f807f580b24029d9674b249f3c4f76f985e72564a19283483b2178e583d77411508fec6c61cd4d6b457f811f55a25d4a09226646034ab714b"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='security.selinux\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000feffdfff0000000000000000850000005600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000ec0)=@in4={0x21, 0x1, 0x2, 0xf, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x24) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x'], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) kernel console output (not intermixed with test programs): ][ T5335] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.523494][ T5335] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.476: mark_inode_dirty error [ 80.547100][ T5335] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.547842][ T5335] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.476: Failed to acquire dquot type 0 [ 80.571467][ T5335] loop4: lost filesystem error report for type 5 error -117 [ 80.572154][ T5335] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.476: corrupted inode contents [ 80.594641][ T5335] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.594872][ T5335] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.476: mark_inode_dirty error [ 80.625586][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 80.627276][ T5335] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.643308][ T5334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.477'. [ 80.659832][ T5335] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.476: corrupted inode contents [ 80.689986][ T5335] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.476: mark_inode_dirty error [ 80.708808][ T5335] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.476: corrupted inode contents [ 80.721860][ T5335] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 80.731587][ T5335] loop4: lost filesystem error report for type 5 error -117 [ 80.731934][ T5335] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.476: corrupted inode contents [ 80.754464][ T5335] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.476: mark_inode_dirty error [ 80.766697][ T5335] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 80.779379][ T5335] loop4: lost filesystem error report for type 5 error -117 [ 80.779939][ T5335] EXT4-fs (loop4): 1 truncate cleaned up [ 80.794663][ T5357] loop3: detected capacity change from 0 to 512 [ 80.813339][ T5335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.826932][ T5335] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.840073][ T5357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.906423][ T5357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 80.915459][ T5357] System zones: 1-2, 4-12, 8-8 [ 80.930973][ T5357] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.485: iget: bad i_size value: 38620345925642 [ 80.986965][ T5357] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.485: couldn't read orphan inode 15 (err -117) [ 81.001240][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 81.001266][ C0] EXT4-fs (loop3): initial error at time 1772034852: ext4_orphan_get:1391: inode 15 [ 81.001295][ C0] EXT4-fs (loop3): last error at time 1772034852: ext4_orphan_get:1391: inode 15 [ 81.101155][ T5357] loop3: lost filesystem error report for type 5 error -117 [ 81.101892][ T5357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.195428][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 81.195447][ T28] audit: type=1326 audit(1772034852.565:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.258609][ T28] audit: type=1326 audit(1772034852.565:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.296019][ T28] audit: type=1326 audit(1772034852.565:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.350129][ T28] audit: type=1326 audit(1772034852.565:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.384658][ T5335] syz.4.476 (5335) used greatest stack depth: 8760 bytes left [ 81.385736][ T28] audit: type=1326 audit(1772034852.595:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.432854][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.455394][ T5375] loop6: detected capacity change from 0 to 512 [ 81.472611][ T28] audit: type=1326 audit(1772034852.595:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.502644][ T5375] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 81.550378][ T5386] batman_adv: batadv0: Adding interface: dummy0 [ 81.557398][ T5386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.577283][ T5387] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.592454][ T28] audit: type=1326 audit(1772034852.595:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.632401][ T5386] batman_adv: batadv0: Interface activated: dummy0 [ 81.642869][ T5378] batadv0: mtu less than device minimum [ 81.649992][ T28] audit: type=1326 audit(1772034852.595:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.650518][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.686160][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.699204][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.710771][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.712396][ T28] audit: type=1326 audit(1772034852.595:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.722859][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.759188][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.771678][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.784456][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.795840][ T5378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.797783][ T28] audit: type=1326 audit(1772034852.595:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 81.835500][ T36] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 81.862434][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 81.880167][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.880167][ T36] [ 81.919494][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 81.941963][ T36] EXT4-fs (loop3): Free/Dirty block details [ 81.955299][ T36] EXT4-fs (loop3): free_blocks=0 [ 82.060675][ T36] EXT4-fs (loop3): dirty_blocks=7468 [ 82.066703][ T36] EXT4-fs (loop3): Block reservation details [ 82.073638][ T36] EXT4-fs (loop3): i_reserved_data_blocks=7468 [ 82.089233][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 82.656846][ T5396] loop0: detected capacity change from 0 to 1024 [ 82.787384][ T5396] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.953446][ T5396] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #3: block 1: comm syz.0.500: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.008660][ T5396] fserror_report: 6 callbacks suppressed [ 83.008678][ T5396] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.032669][ T5396] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.500: Failed to acquire dquot type 0 [ 83.053652][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 83.053687][ C0] EXT4-fs (loop0): initial error at time 1772034854: ext4_map_blocks:818: inode 3: block 1 [ 83.053724][ C0] EXT4-fs (loop0): last error at time 1772034854: ext4_map_blocks:818: inode 3: block 1 [ 83.139094][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.503'. [ 83.164373][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.503'. [ 83.219885][ T5409] xt_hashlimit: size too large, truncated to 1048576 [ 83.231226][ T5408] loop4: detected capacity change from 0 to 512 [ 83.247357][ T5396] loop0: lost filesystem error report for type 5 error -117 [ 83.247684][ T5396] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.500: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.290225][ T5408] EXT4-fs: Ignoring removed nobh option [ 83.320551][ T5408] EXT4-fs (loop4): unsupported inode size: 4 [ 83.368397][ T5408] EXT4-fs (loop4): blocksize: 1024 [ 83.375825][ T5406] loop3: detected capacity change from 0 to 512 [ 83.403094][ T5396] loop0: lost filesystem error report for type 5 error -117 [ 83.403334][ T5396] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.500: Invalid inode bitmap blk 0 in block_group 0 [ 83.426440][ T4239] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.506223][ T4239] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.506397][ T4239] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 83.544177][ T5406] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 83.565731][ T5396] loop0: lost filesystem error report for type 5 error -117 [ 83.565933][ T5396] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 83.626641][ T4239] loop0: lost filesystem error report for type 5 error -117 [ 83.632556][ T5396] loop0: lost filesystem error report for type 5 error -117 [ 83.666469][ T5396] EXT4-fs (loop0): 1 orphan inode deleted [ 83.675061][ T5406] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.497: bg 0: block 255: padding at end of block bitmap is not set [ 83.702610][ T5396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.795627][ T5406] loop3: lost filesystem error report for type 5 error -117 [ 83.802423][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 83.816369][ C0] EXT4-fs (loop3): initial error at time 1772034855: ext4_validate_block_bitmap:441 [ 83.825977][ C0] EXT4-fs (loop3): last error at time 1772034855: ext4_validate_block_bitmap:441 [ 83.845596][ T5406] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 83.856676][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.872016][ T5423] loop4: detected capacity change from 0 to 4096 [ 83.897236][ T5406] loop3: lost filesystem error report for type 5 error -117 [ 83.938010][ T5406] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.497: invalid indirect mapped block 1 (level 1) [ 83.973231][ T5429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'. [ 83.983481][ T5423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.033535][ T5406] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.036544][ T5406] EXT4-fs (loop3): 1 truncate cleaned up [ 84.108042][ T5406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.219694][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.331853][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 84.511805][ T5442] loop6: detected capacity change from 0 to 512 [ 84.522886][ T5442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.551971][ T5442] EXT4-fs (loop6): 1 truncate cleaned up [ 84.558993][ T5442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.626668][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.735464][ T5451] dummy0: entered promiscuous mode [ 84.747794][ T5453] netlink: 'syz.0.517': attribute type 83 has an invalid length. [ 84.762749][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.516'. [ 84.820141][ T5451] dummy0 (unregistering): left promiscuous mode [ 84.892329][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.056222][ T5460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.075383][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.075635][ T5460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.194472][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.425973][ T5478] lo speed is unknown, defaulting to 1000 [ 85.602853][ T5484] bridge0: left allmulticast mode [ 85.620842][ T5484] batman_adv: batadv0: Interface deactivated: dummy0 [ 85.699889][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.779291][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.987014][ T3386] lo speed is unknown, defaulting to 1000 [ 85.996180][ T3386] syz2: Port: 1 Link DOWN [ 86.001121][ T1688] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.020797][ T1688] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.032882][ T5491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5491 comm=syz.6.523 [ 86.074065][ T1688] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.093473][ T1688] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.203568][ T5497] netlink: 68 bytes leftover after parsing attributes in process `syz.3.526'. [ 86.232274][ T5497] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 86.240260][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.526'. [ 86.541296][ T5457] lo speed is unknown, defaulting to 1000 [ 86.629882][ T5506] loop3: detected capacity change from 0 to 512 [ 86.680513][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.529: corrupted inode contents [ 86.702516][ T5506] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.702803][ T5506] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.529: mark_inode_dirty error [ 86.713497][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 86.713521][ C0] EXT4-fs (loop3): initial error at time 1772034858: ext4_do_update_inode:5569: inode 3 [ 86.713567][ C0] EXT4-fs (loop3): last error at time 1772034858: ext4_do_update_inode:5569: inode 3 [ 86.832878][ T5514] netlink: 'syz.1.531': attribute type 23 has an invalid length. [ 86.841087][ T5514] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.866790][ T5506] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.867359][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.529: corrupted inode contents [ 86.912005][ T5506] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.912201][ T5506] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.529: mark_inode_dirty error [ 86.953851][ T5506] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.954365][ T5506] __quota_error: 16 callbacks suppressed [ 86.954381][ T5506] Quota error (device loop3): write_blk: dquota write failed [ 87.013626][ T5516] loop6: detected capacity change from 0 to 256 [ 87.022655][ T5506] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 87.034475][ T5516] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.070395][ T5506] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.529: Failed to acquire dquot type 0 [ 87.116198][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 87.116888][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.529: corrupted inode contents [ 87.150136][ T5506] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 87.151462][ T5506] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.529: mark_inode_dirty error [ 87.174854][ T5517] FAT-fs (loop6): error, corrupted file size (i_pos 196, 60330) [ 87.204415][ T5506] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 87.204879][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.529: corrupted inode contents [ 87.225358][ T5517] FAT-fs (loop6): Filesystem has been set read-only [ 87.238414][ T5506] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 87.243588][ T5506] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.529: mark_inode_dirty error [ 87.255518][ T5517] FAT-fs (loop6): error, corrupted file size (i_pos 196, 60330) [ 87.293551][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.529: corrupted inode contents [ 87.321943][ T5515] FAT-fs (loop6): error, corrupted file size (i_pos 196, 60330) [ 87.356217][ T5506] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 87.382496][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 87.382822][ T5506] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.529: corrupted inode contents [ 87.472422][ T5506] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.529: mark_inode_dirty error [ 87.498990][ T5506] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 87.508685][ T5506] loop3: lost filesystem error report for type 5 error -117 [ 87.509368][ T5506] EXT4-fs (loop3): 1 truncate cleaned up [ 87.553147][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.576181][ T5521] netlink: 'syz.6.534': attribute type 1 has an invalid length. [ 87.603778][ T5506] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.623003][ T5521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.664284][ T5521] bond1: (slave geneve2): making interface the new active one [ 87.674258][ T5521] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 87.748133][ T28] audit: type=1400 audit(1772034859.095:797): avc: denied { read } for pid=5523 comm="syz.1.535" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.772998][ T28] audit: type=1400 audit(1772034859.115:798): avc: denied { open } for pid=5523 comm="syz.1.535" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.801014][ T28] audit: type=1400 audit(1772034859.155:799): avc: denied { ioctl } for pid=5523 comm="syz.1.535" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.865453][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.6.536'. [ 88.165494][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.262308][ T28] audit: type=1400 audit(1772034859.625:800): avc: denied { accept } for pid=5523 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.888895][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.932613][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.039765][ T5540] loop3: detected capacity change from 0 to 512 [ 89.107015][ T5540] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 89.390016][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.399317][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.522963][ T5581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.660875][ T5581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.679647][ T28] audit: type=1326 audit(1772034861.045:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 89.785692][ T5603] loop3: detected capacity change from 0 to 512 [ 89.795582][ T5603] EXT4-fs: Ignoring removed orlov option [ 89.876428][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.997287][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.043480][ T5603] EXT4-fs (loop3): 1 truncate cleaned up [ 90.051759][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.069658][ T5603] audit: audit_backlog=66 > audit_backlog_limit=64 [ 90.076900][ T5603] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 90.086241][ T5603] audit: backlog limit exceeded [ 90.151693][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.261458][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.474097][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.625535][ T5600] ieee802154 phy0 wpan0: encryption failed: -90 [ 91.167036][ T5631] lo speed is unknown, defaulting to 1000 [ 91.761222][ T5647] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 91.803937][ T5647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.830900][ T5649] bond2: (slave geneve2): making interface the new active one [ 91.913684][ T5649] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 91.942660][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.989125][ T5651] loop3: detected capacity change from 0 to 1024 [ 92.008687][ T5651] EXT4-fs: inline encryption not supported [ 92.078927][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.100649][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.102756][ T5651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.129625][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 92.129641][ T28] audit: type=1400 audit(1772034863.495:1004): avc: denied { read write } for pid=5650 comm="syz.3.558" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.146632][ T5651] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 92.159527][ T28] audit: type=1400 audit(1772034863.515:1005): avc: denied { open } for pid=5650 comm="syz.3.558" path="/111/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.174578][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226614][ T5651] EXT4-fs (loop3): Remounting filesystem read-only [ 92.248354][ T5656] loop6: detected capacity change from 0 to 1024 [ 92.310501][ T5656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.521277][ T28] audit: type=1400 audit(1772034863.885:1006): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.584261][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.622635][ T28] audit: type=1400 audit(1772034863.885:1007): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 92.684011][ T5661] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.707943][ T210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.737517][ T5671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.563'. [ 92.747430][ T5671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5671 comm=syz.6.563 [ 92.762108][ T5671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5671 comm=syz.6.563 [ 92.775600][ T5675] loop4: detected capacity change from 0 to 512 [ 92.784297][ T210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.834002][ T210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.854668][ T5675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.888907][ T28] audit: type=1400 audit(1772034864.255:1008): avc: denied { open } for pid=5678 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.925021][ T210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.944599][ T28] audit: type=1400 audit(1772034864.255:1009): avc: denied { kernel } for pid=5678 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.966838][ T28] audit: type=1400 audit(1772034864.285:1010): avc: denied { write } for pid=5678 comm="syz.6.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.075282][ T210] bridge_slave_1: left allmulticast mode [ 93.087002][ T210] bridge_slave_1: left promiscuous mode [ 93.107433][ T210] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.117310][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.203175][ T210] bridge_slave_0: left allmulticast mode [ 93.209260][ T210] bridge_slave_0: left promiscuous mode [ 93.217159][ T210] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.273560][ T210] bond2 (unregistering): (slave geneve2): Releasing active interface [ 93.383765][ T210] bond1 (unregistering): (slave bridge2): Releasing active interface [ 93.392787][ T210] bridge2 (unregistering): left promiscuous mode [ 93.400017][ T210] bridge2 (unregistering): left allmulticast mode [ 93.467611][ T210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.478072][ T210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.493968][ T210] bond0 (unregistering): Released all slaves [ 93.515325][ T210] bond1 (unregistering): Released all slaves [ 93.546179][ T210] bond2 (unregistering): Released all slaves [ 93.625426][ T210] hsr_slave_0: left promiscuous mode [ 93.647538][ T210] hsr_slave_1: left promiscuous mode [ 93.668169][ T210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.775435][ T210] team0 (unregistering): Port device team_slave_1 removed [ 93.802877][ T210] team0 (unregistering): Port device team_slave_0 removed [ 93.939110][ T5720] FAULT_INJECTION: forcing a failure. [ 93.939110][ T5720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.023378][ T5720] CPU: 1 UID: 0 PID: 5720 Comm: syz.1.572 Not tainted syzkaller #0 PREEMPT(full) [ 94.023406][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.023417][ T5720] Call Trace: [ 94.023424][ T5720] [ 94.023432][ T5720] __dump_stack+0x1d/0x30 [ 94.023499][ T5720] dump_stack_lvl+0x95/0xd0 [ 94.023523][ T5720] dump_stack+0x15/0x1b [ 94.023548][ T5720] should_fail_ex+0x263/0x280 [ 94.023572][ T5720] should_fail+0xb/0x20 [ 94.023590][ T5720] should_fail_usercopy+0x1a/0x20 [ 94.023632][ T5720] _copy_to_user+0x20/0xa0 [ 94.023724][ T5720] copy_siginfo_to_user+0x22/0xb0 [ 94.023744][ T5720] x64_setup_rt_frame+0x2b4/0x4e0 [ 94.023778][ T5720] arch_do_signal_or_restart+0x24b/0x450 [ 94.023856][ T5720] exit_to_user_mode_loop+0x6a/0x6f0 [ 94.023880][ T5720] ? __x64_sys_ioctl+0x44/0x50 [ 94.023914][ T5720] do_syscall_64+0x249/0x370 [ 94.023992][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.024016][ T5720] RIP: 0033:0x7f61f740c629 [ 94.024034][ T5720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.024128][ T5720] RSP: 002b:00007f61f5e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.024149][ T5720] RAX: ffffffffffffffea RBX: 00007f61f7685fa0 RCX: 00007f61f740c629 [ 94.024163][ T5720] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000006 [ 94.024178][ T5720] RBP: 00007f61f5e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.024193][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.024207][ T5720] R13: 00007f61f7686038 R14: 00007f61f7685fa0 R15: 00007ffe3a84d688 [ 94.024299][ T5720] [ 94.034178][ T5681] lo speed is unknown, defaulting to 1000 [ 94.684908][ T5732] lo speed is unknown, defaulting to 1000 [ 94.924843][ T5737] loop0: detected capacity change from 0 to 1024 [ 94.951639][ T5737] EXT4-fs: Ignoring removed orlov option [ 94.996993][ T210] IPVS: stop unused estimator thread 0... [ 95.063774][ T5737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.103875][ T28] audit: type=1400 audit(1772034866.455:1011): avc: denied { setattr } for pid=5736 comm="syz.0.574" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.141041][ T5741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.574'. [ 95.151008][ T5741] netlink: 43 bytes leftover after parsing attributes in process `syz.0.574'. [ 95.160792][ T5741] netlink: 'syz.0.574': attribute type 5 has an invalid length. [ 95.169790][ T5741] netlink: 43 bytes leftover after parsing attributes in process `syz.0.574'. [ 95.313133][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.348128][ T5681] chnl_net:caif_netlink_parms(): no params data found [ 95.506321][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.525750][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.548925][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.583191][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.618581][ T5681] bridge_slave_0: entered allmulticast mode [ 95.625429][ T5681] bridge_slave_0: entered promiscuous mode [ 95.633221][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.640845][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.651417][ T28] audit: type=1400 audit(1772034867.005:1012): avc: denied { tracepoint } for pid=5775 comm="syz.6.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.651455][ T5681] bridge_slave_1: entered allmulticast mode [ 95.652039][ T5681] bridge_slave_1: entered promiscuous mode [ 95.729867][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.740739][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.775740][ T5777] lo speed is unknown, defaulting to 1000 [ 95.782972][ T5776] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 95.797413][ T5681] team0: Port device team_slave_0 added [ 95.812883][ T5681] team0: Port device team_slave_1 added [ 95.849335][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.858096][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.920002][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.943770][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.951062][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.982103][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.065260][ T5681] hsr_slave_0: entered promiscuous mode [ 96.082907][ T5681] hsr_slave_1: entered promiscuous mode [ 96.091849][ T5681] debugfs: 'hsr0' already exists in 'hsr' [ 96.099275][ T5681] Cannot create hsr debugfs directory [ 96.230841][ T28] audit: type=1400 audit(1772034867.595:1013): avc: denied { watch_reads } for pid=5801 comm="syz.6.592" path="/" dev="mqueue" ino=9516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.237079][ T5802] loop4: detected capacity change from 0 to 1024 [ 96.275817][ T5802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.398027][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.494681][ T5681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.518630][ T5681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.530702][ T5681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.551662][ T5681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.685792][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.720925][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.742905][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.750281][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.778315][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.787749][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.959028][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 97.004400][ T5854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5854 comm=syz.1.584 [ 97.029576][ T5854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5854 comm=syz.1.584 [ 97.124460][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.181593][ T5898] lo speed is unknown, defaulting to 1000 [ 97.191007][ T5894] lo speed is unknown, defaulting to 1000 [ 97.489124][ T5681] veth0_vlan: entered promiscuous mode [ 97.524748][ T5681] veth1_vlan: entered promiscuous mode [ 97.571334][ T5681] veth0_macvtap: entered promiscuous mode [ 97.590873][ T5681] veth1_macvtap: entered promiscuous mode [ 97.629630][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.655548][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.686193][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.706981][ T5894] pim6reg: entered allmulticast mode [ 97.713578][ T5894] pim6reg: left allmulticast mode [ 97.724576][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.739195][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.771846][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.848398][ T5992] netlink: 164 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.870104][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.912765][ T5992] netlink: 48 bytes leftover after parsing attributes in process `syz.3.569'. [ 98.149846][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 99.554963][ T6015] lo speed is unknown, defaulting to 1000 [ 99.702920][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 99.702937][ T28] audit: type=1400 audit(1772034871.065:1016): avc: denied { associate } for pid=6035 comm="syz.1.604" name="rdma.current" dev="tmpfs" ino=784 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 99.782313][ T6040] loop0: detected capacity change from 0 to 1024 [ 99.816892][ T28] audit: type=1400 audit(1772034871.165:1017): avc: denied { unlink } for pid=3311 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 99.896155][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.955537][ T6061] loop4: detected capacity change from 0 to 512 [ 100.045565][ T6061] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.250816][ T6067] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.605: Allocating blocks 449-513 which overlap fs metadata [ 100.280858][ T3314] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 100.400874][ T6079] loop6: detected capacity change from 0 to 512 [ 100.427637][ T6079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 100.452386][ T28] audit: type=1400 audit(1772034871.815:1018): avc: denied { relabelfrom } for pid=6080 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.490173][ T6083] syzkaller1: entered promiscuous mode [ 100.493392][ T6079] EXT4-fs (loop6): 1 truncate cleaned up [ 100.500367][ T6083] syzkaller1: entered allmulticast mode [ 100.502121][ T6079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.527222][ T28] audit: type=1400 audit(1772034871.815:1019): avc: denied { relabelto } for pid=6080 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.550448][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 100.563467][ T6040] EXT4-fs (loop0): pa ffff888107dd9b60: logic 48, phys. 177, len 21 [ 100.572459][ T6040] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 4 [ 100.609422][ T6079] geneve3: entered promiscuous mode [ 100.616549][ T28] audit: type=1400 audit(1772034871.895:1020): avc: denied { append } for pid=6082 comm="syz.4.620" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.647134][ T1688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.669579][ T1688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.683583][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.704407][ T1688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.715389][ T28] audit: type=1400 audit(1772034871.895:1021): avc: denied { open } for pid=6082 comm="syz.4.620" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.744783][ T1688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 100.755134][ T28] audit: type=1400 audit(1772034871.895:1022): avc: denied { ioctl } for pid=6082 comm="syz.4.620" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.784114][ T28] audit: type=1400 audit(1772034872.025:1023): avc: denied { getopt } for pid=6078 comm="syz.6.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.803453][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.805327][ T6079] lo speed is unknown, defaulting to 1000 [ 100.822207][ T6090] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 100.857514][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.882110][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.894684][ T6090] bond1: (slave geneve2): making interface the new active one [ 100.938020][ T6090] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.955541][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 100.966293][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 101.031588][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 101.047431][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 101.079938][ T6087] lo speed is unknown, defaulting to 1000 [ 101.118640][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 101.136486][ T6117] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 101.224618][ T6117] loop4: detected capacity change from 0 to 512 [ 101.273300][ T6117] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 101.286642][ T6117] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.631: iget: bad i_size value: 12154757448730 [ 101.305058][ T6117] fserror_report: 4 callbacks suppressed [ 101.305075][ T6117] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 101.314024][ T6117] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.631: couldn't read orphan inode 13 (err -117) [ 101.326652][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 101.326676][ C0] EXT4-fs (loop4): initial error at time 1772034872: ext4_orphan_get:1391: inode 13 [ 101.326713][ C0] EXT4-fs (loop4): last error at time 1772034872: ext4_orphan_get:1391: inode 13 [ 101.340905][ T6128] loop6: detected capacity change from 0 to 1024 [ 101.350200][ T6117] loop4: lost filesystem error report for type 5 error -117 [ 101.387226][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.399309][ T6128] EXT4-fs: Ignoring removed orlov option [ 101.427870][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.443951][ T6128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.673456][ T28] audit: type=1400 audit(1772034873.035:1024): avc: denied { setattr } for pid=6122 comm="syz.6.633" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.779924][ T6145] lo speed is unknown, defaulting to 1000 [ 101.817608][ T6147] loop4: detected capacity change from 0 to 164 [ 102.643838][ T6147] ISOFS: unable to read i-node block [ 102.650128][ T6147] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.676729][ T6150] vlan2: entered allmulticast mode [ 102.787511][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.820021][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.905924][ T6156] lo speed is unknown, defaulting to 1000 [ 103.015601][ T28] audit: type=1400 audit(1772034874.375:1025): avc: denied { map } for pid=6152 comm="syz.3.639" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 103.180208][ T6162] delete_channel: no stack [ 103.185563][ T6162] delete_channel: no stack [ 103.202896][ T6162] loop4: detected capacity change from 0 to 128 [ 103.218252][ T6162] netlink: 68 bytes leftover after parsing attributes in process `syz.4.640'. [ 103.256875][ T6164] loop4: detected capacity change from 0 to 128 [ 103.269137][ T6164] FAT-fs (loop4): bogus logical sector size 759 [ 103.279103][ T6164] FAT-fs (loop4): Can't find a valid FAT filesystem [ 103.346068][ T6168] loop4: detected capacity change from 0 to 128 [ 103.353802][ T6168] vfat: Unknown parameter '' [ 103.379473][ T6170] FAULT_INJECTION: forcing a failure. [ 103.379473][ T6170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.395765][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.4.644 Not tainted syzkaller #0 PREEMPT(full) [ 103.395794][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.395807][ T6170] Call Trace: [ 103.395813][ T6170] [ 103.395821][ T6170] __dump_stack+0x1d/0x30 [ 103.395850][ T6170] dump_stack_lvl+0x95/0xd0 [ 103.395935][ T6170] dump_stack+0x15/0x1b [ 103.395958][ T6170] should_fail_ex+0x263/0x280 [ 103.395979][ T6170] should_fail+0xb/0x20 [ 103.395997][ T6170] should_fail_usercopy+0x1a/0x20 [ 103.396036][ T6170] _copy_from_user+0x1c/0xb0 [ 103.396066][ T6170] kstrtouint_from_user+0x69/0xf0 [ 103.396092][ T6170] proc_fail_nth_write+0x50/0x160 [ 103.396128][ T6170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.396159][ T6170] vfs_write+0x269/0x9f0 [ 103.396197][ T6170] ? __rcu_read_unlock+0x4e/0x70 [ 103.396221][ T6170] ? __fget_files+0x184/0x1c0 [ 103.396326][ T6170] ? mutex_lock+0x57/0x90 [ 103.396363][ T6170] ksys_write+0xdc/0x1a0 [ 103.396397][ T6170] __x64_sys_write+0x40/0x50 [ 103.396474][ T6170] x64_sys_call+0x27e1/0x3020 [ 103.396505][ T6170] do_syscall_64+0x12c/0x370 [ 103.396543][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.396566][ T6170] RIP: 0033:0x7f1aeba6cece [ 103.396669][ T6170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.396762][ T6170] RSP: 002b:00007f1aea506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.396788][ T6170] RAX: ffffffffffffffda RBX: 00007f1aea5076c0 RCX: 00007f1aeba6cece [ 103.396854][ T6170] RDX: 0000000000000001 RSI: 00007f1aea5070a0 RDI: 0000000000000003 [ 103.396870][ T6170] RBP: 00007f1aea507090 R08: 0000000000000000 R09: 0000000000000000 [ 103.396886][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.396901][ T6170] R13: 00007f1aebd26038 R14: 00007f1aebd25fa0 R15: 00007ffcd07f9748 [ 103.396989][ T6170] [ 103.628427][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 103.644956][ T6172] loop4: detected capacity change from 0 to 512 [ 103.652958][ T6172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.665465][ T6172] EXT4-fs (loop4): 1 truncate cleaned up [ 103.671955][ T6172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.695944][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.101449][ T6113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.185989][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.249849][ T6192] netlink: 'syz.6.654': attribute type 21 has an invalid length. [ 104.293665][ T6193] lo speed is unknown, defaulting to 1000 [ 104.697908][ T6197] loop6: detected capacity change from 0 to 164 [ 104.736262][ T6197] iso9660: Unknown parameter '' [ 104.826195][ T6199] net_ratelimit: 10 callbacks suppressed [ 104.826218][ T6199] Set syz1 is full, maxelem 65536 reached [ 104.905261][ T6208] FAT-fs (loop6): Directory bread(block 64) failed [ 104.913535][ T6208] FAT-fs (loop6): Directory bread(block 65) failed [ 104.923225][ T6208] FAT-fs (loop6): Directory bread(block 66) failed [ 104.932103][ T6208] FAT-fs (loop6): Directory bread(block 67) failed [ 104.940642][ T6208] FAT-fs (loop6): Directory bread(block 68) failed [ 104.950328][ T6208] FAT-fs (loop6): Directory bread(block 69) failed [ 104.958432][ T6208] FAT-fs (loop6): Directory bread(block 70) failed [ 104.967778][ T6208] FAT-fs (loop6): Directory bread(block 71) failed [ 104.975570][ T6208] FAT-fs (loop6): Directory bread(block 72) failed [ 104.983989][ T6208] FAT-fs (loop6): Directory bread(block 73) failed [ 105.351732][ T6218] set_capacity_and_notify: 1 callbacks suppressed [ 105.351753][ T6218] loop0: detected capacity change from 0 to 512 [ 105.527960][ T6218] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.560335][ T6228] batadv_slave_1: entered promiscuous mode [ 105.696832][ T28] audit: type=1400 audit(1772034877.065:1026): avc: denied { setopt } for pid=6239 comm="syz.4.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.734349][ T6237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6237 comm=syz.1.668 [ 105.747779][ T3319] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 105.769365][ T6221] batadv_slave_1: left promiscuous mode [ 105.936800][ T6255] loop4: detected capacity change from 0 to 512 [ 105.987282][ T6269] loop0: detected capacity change from 0 to 512 [ 106.004984][ T6255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.029396][ T6255] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.059757][ T6271] netlink: 80 bytes leftover after parsing attributes in process `syz.6.682'. [ 106.074232][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.095799][ T28] audit: type=1400 audit(1772034877.465:1027): avc: denied { listen } for pid=6270 comm="syz.6.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.105631][ T6273] lo speed is unknown, defaulting to 1000 [ 106.118875][ T28] audit: type=1400 audit(1772034877.465:1028): avc: denied { map } for pid=6254 comm="syz.4.678" path="/125/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.150405][ T6269] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.204826][ T6279] loop6: detected capacity change from 0 to 512 [ 106.214609][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.235465][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.247319][ T6279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.264759][ T6279] EXT4-fs (loop6): 1 truncate cleaned up [ 106.274383][ T6279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.312252][ T6285] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 106.357703][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.6.683'. [ 106.377110][ T28] audit: type=1400 audit(1772034877.745:1029): avc: denied { override_creds } for pid=6284 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.397236][ T6279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 106.441112][ T6295] netlink: 80 bytes leftover after parsing attributes in process `syz.0.686'. [ 106.450905][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 106.589736][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.670224][ T28] audit: type=1400 audit(1772034878.035:1030): avc: denied { mount } for pid=6304 comm="syz.3.694" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.731143][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 106.764732][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 107.278023][ T6306] macvlan2: entered promiscuous mode [ 107.307911][ T6306] macvlan2: entered allmulticast mode [ 107.352508][ T28] audit: type=1326 audit(1772034878.715:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 107.379698][ T6306] veth0_virt_wifi: entered allmulticast mode [ 107.436873][ T28] audit: type=1326 audit(1772034878.715:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 107.467747][ T28] audit: type=1326 audit(1772034878.715:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 107.494218][ T28] audit: type=1326 audit(1772034878.715:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 107.525731][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.533842][ T6311] bridge_slave_1: left allmulticast mode [ 107.539779][ T6311] bridge_slave_1: left promiscuous mode [ 107.546117][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.570827][ T28] audit: type=1326 audit(1772034878.715:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 107.573282][ T6311] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 107.610369][ T6325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.697'. [ 107.635869][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.644574][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.654228][ T6316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.676235][ T6327] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 107.759649][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 108.046213][ T6360] lo speed is unknown, defaulting to 1000 [ 108.052470][ T6360] lo speed is unknown, defaulting to 1000 [ 108.059711][ T6360] lo speed is unknown, defaulting to 1000 [ 108.067818][ T6360] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.081941][ T6360] lo speed is unknown, defaulting to 1000 [ 108.089824][ T6360] lo speed is unknown, defaulting to 1000 [ 108.097329][ T6360] lo speed is unknown, defaulting to 1000 [ 108.105118][ T6360] lo speed is unknown, defaulting to 1000 [ 108.112752][ T6360] lo speed is unknown, defaulting to 1000 [ 108.127664][ T6360] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 108.175527][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.192121][ T6356] veth1_vlan: left promiscuous mode [ 108.371635][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.865143][ T6370] lo speed is unknown, defaulting to 1000 [ 108.881179][ T6370] lo speed is unknown, defaulting to 1000 [ 108.966044][ T6379] __nla_validate_parse: 1 callbacks suppressed [ 108.966129][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'. [ 110.052250][ T6399] loop3: detected capacity change from 0 to 512 [ 110.074580][ T6388] loop4: detected capacity change from 0 to 128 [ 110.102455][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=356 sclass=netlink_route_socket pid=6388 comm=syz.4.716 [ 110.117443][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.136848][ T6357] lo speed is unknown, defaulting to 1000 [ 110.150647][ T6399] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.203724][ T6357] lo speed is unknown, defaulting to 1000 [ 110.250602][ T5681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.449187][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'. [ 111.483199][ T28] kauditd_printk_skb: 634 callbacks suppressed [ 111.483215][ T28] audit: type=1400 audit(1772034882.855:1670): avc: denied { unmount } for pid=5681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.634313][ T6424] loop0: detected capacity change from 0 to 1024 [ 111.642675][ T6424] EXT4-fs: inline encryption not supported [ 111.707514][ T6424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.805360][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 111.899352][ T6420] bridge0: entered allmulticast mode [ 112.239198][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 112.275716][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 112.300627][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.400370][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.415390][ T6447] loop4: detected capacity change from 0 to 512 [ 112.465733][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.528191][ T6447] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.618947][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.942608][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.042674][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 113.054411][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 113.235720][ T6476] delete_channel: no stack [ 113.249729][ T6476] delete_channel: no stack [ 113.257454][ T28] audit: type=1400 audit(1772034884.625:1671): avc: denied { lock } for pid=6470 comm="syz.4.738" path="socket:[15228]" dev="sockfs" ino=15228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.305824][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 113.374149][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.744'. [ 113.380011][ T28] audit: type=1400 audit(1772034884.735:1672): avc: denied { setopt } for pid=6483 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.494023][ T6490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.746'. [ 113.553875][ T6492] kernel profiling enabled (shift: 0) [ 113.642102][ T28] audit: type=1400 audit(1772034884.995:1673): avc: denied { bind } for pid=6493 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.890287][ T6509] lo speed is unknown, defaulting to 1000 [ 113.903011][ T6509] lo speed is unknown, defaulting to 1000 [ 113.942890][ T28] audit: type=1326 audit(1772034885.305:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 113.992524][ T28] audit: type=1326 audit(1772034885.305:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 114.033701][ T28] audit: type=1326 audit(1772034885.315:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 114.111226][ T28] audit: type=1326 audit(1772034885.315:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 114.185194][ T28] audit: type=1326 audit(1772034885.315:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 114.231889][ T28] audit: type=1326 audit(1772034885.315:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6515 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 114.488290][ T6535] loop6: detected capacity change from 0 to 128 [ 114.519846][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.550336][ T6535] bio_check_eod: 66 callbacks suppressed [ 114.550356][ T6535] syz.6.762: attempt to access beyond end of device [ 114.550356][ T6535] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 114.568519][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.603209][ T5936] kworker/u8:11: attempt to access beyond end of device [ 114.603209][ T5936] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 114.718727][ T6541] lo speed is unknown, defaulting to 1000 [ 114.767724][ T6521] ieee802154 phy0 wpan0: encryption failed: -90 [ 114.776449][ T6541] lo speed is unknown, defaulting to 1000 [ 115.081099][ T6532] loop4: detected capacity change from 0 to 256 [ 115.247440][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 115.467440][ T6532] FAT-fs (loop4): Directory bread(block 64) failed [ 115.494778][ T6532] FAT-fs (loop4): Directory bread(block 65) failed [ 115.550967][ T6532] FAT-fs (loop4): Directory bread(block 66) failed [ 115.579803][ T6532] FAT-fs (loop4): Directory bread(block 67) failed [ 115.589235][ T6532] FAT-fs (loop4): Directory bread(block 68) failed [ 115.597078][ T6532] FAT-fs (loop4): Directory bread(block 69) failed [ 115.607828][ T6532] FAT-fs (loop4): Directory bread(block 70) failed [ 115.626608][ T6532] FAT-fs (loop4): Directory bread(block 71) failed [ 115.637744][ T6532] FAT-fs (loop4): Directory bread(block 72) failed [ 115.646785][ T6532] FAT-fs (loop4): Directory bread(block 73) failed [ 115.687456][ T6560] delete_channel: no stack [ 115.692926][ T6560] delete_channel: no stack [ 116.677916][ T28] kauditd_printk_skb: 311 callbacks suppressed [ 116.677936][ T28] audit: type=1326 audit(1772034888.045:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.721549][ T6567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6567 comm=syz.3.772 [ 116.744247][ T6572] loop4: detected capacity change from 0 to 512 [ 116.778642][ T28] audit: type=1326 audit(1772034888.075:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.805949][ T28] audit: type=1326 audit(1772034888.075:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.812976][ T6572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.831381][ T28] audit: type=1326 audit(1772034888.075:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.849962][ T6568] infiniband syz1: set active [ 116.877564][ T28] audit: type=1326 audit(1772034888.075:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.906266][ T28] audit: type=1326 audit(1772034888.075:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.925947][ T6568] infiniband syz1: added syz_tun [ 116.935412][ T6572] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.949767][ T28] audit: type=1326 audit(1772034888.075:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 116.974856][ T28] audit: type=1326 audit(1772034888.075:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 117.003461][ T28] audit: type=1326 audit(1772034888.085:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 117.029952][ T28] audit: type=1326 audit(1772034888.085:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.6.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 117.070645][ T6579] loop3: detected capacity change from 0 to 512 [ 117.083292][ T6568] RDS/IB: syz1: added [ 117.089136][ T6568] smc: adding ib device syz1 with port count 1 [ 117.096999][ T6568] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 117.135309][ T6572] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.149963][ T6579] EXT4-fs (loop3): 1 truncate cleaned up [ 117.157269][ T6579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.388393][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.785516][ T6595] loop4: detected capacity change from 0 to 512 [ 117.808448][ T6595] ------------[ cut here ]------------ [ 117.814916][ T6595] EA inode 11 i_nlink=2 [ 117.814935][ T6595] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.778/6595 [ 117.831347][ T6595] Modules linked in: [ 117.835680][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.4.778 Not tainted syzkaller #0 PREEMPT(full) [ 117.845919][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.856867][ T6595] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 117.863930][ T6595] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 117.888167][ T6595] RSP: 0018:ffffc90000f8f778 EFLAGS: 00010246 [ 117.896040][ T6595] RAX: ffff888101caab78 RBX: ffff88811b403628 RCX: ffffffff81bff418 [ 117.905508][ T6595] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de420 [ 117.916737][ T6595] RBP: 000000000000000b R08: 000188811b4035db R09: 0000000000000000 [ 117.928101][ T6595] R10: 0001c90000fcf5fc R11: 0001c90000f8f6a8 R12: ffff88811b4035d8 [ 117.938697][ T6595] R13: ffffffff871de420 R14: ffff88811b403590 R15: 0000000000000001 [ 117.948846][ T6595] FS: 00007f1aea5076c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 117.959438][ T6595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.967951][ T6595] CR2: 00007f80712f2000 CR3: 0000000122e78000 CR4: 00000000003506f0 [ 117.976848][ T6595] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 117.986953][ T6595] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 117.997920][ T6595] Call Trace: [ 118.001823][ T6595] [ 118.004923][ T6595] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 118.011363][ T6595] ? errseq_check+0x2c/0x50 [ 118.015992][ T6595] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 118.022290][ T6595] ? ext4_truncate+0x92b/0xb00 [ 118.027812][ T6595] ext4_evict_inode+0xa1f/0xd60 [ 118.033058][ T6595] ? __pfx_ext4_evict_inode+0x10/0x10 [ 118.035620][ T6599] IPv4: Oversized IP packet from 127.202.26.0 [ 118.038667][ T6595] evict+0x2af/0x510 [ 118.050212][ T6595] ? __dquot_initialize+0x146/0x7c0 [ 118.056074][ T6595] iput+0x41a/0x580 [ 118.060063][ T6595] ext4_process_orphan+0x1a9/0x1c0 [ 118.065613][ T6595] ext4_orphan_cleanup+0x6a8/0xa00 [ 118.071919][ T6595] ext4_fill_super+0x3408/0x37c0 [ 118.077808][ T6595] ? set_blocksize+0x14c/0x270 [ 118.084224][ T6595] ? setup_bdev_super+0x30e/0x370 [ 118.091746][ T6595] ? __pfx_ext4_fill_super+0x10/0x10 [ 118.098490][ T6595] get_tree_bdev_flags+0x291/0x300 [ 118.105079][ T6595] ? __pfx_ext4_fill_super+0x10/0x10 [ 118.110775][ T6595] get_tree_bdev+0x1f/0x30 [ 118.115554][ T6595] ext4_get_tree+0x1c/0x30 [ 118.120471][ T6595] vfs_get_tree+0x57/0x1d0 [ 118.126122][ T6595] do_new_mount+0x288/0x8d0 [ 118.130936][ T6595] path_mount+0x4d0/0xbc0 [ 118.135411][ T6595] __se_sys_mount+0x28c/0x2e0 [ 118.140298][ T6595] __x64_sys_mount+0x67/0x80 [ 118.145520][ T6595] x64_sys_call+0x2d61/0x3020 [ 118.150727][ T6595] do_syscall_64+0x12c/0x370 [ 118.155562][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.163563][ T6595] RIP: 0033:0x7f1aebaad8ca [ 118.168446][ T6595] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.189992][ T6595] RSP: 002b:00007f1aea506e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.198639][ T6595] RAX: ffffffffffffffda RBX: 00007f1aea506ee0 RCX: 00007f1aebaad8ca [ 118.207632][ T6595] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1aea506ea0 [ 118.216119][ T6595] RBP: 00002000000009c0 R08: 00007f1aea506ee0 R09: 0000000000800718 [ 118.224705][ T6595] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 118.233693][ T6595] R13: 00007f1aea506ea0 R14: 000000000000048d R15: 00002000000002c0 [ 118.242449][ T6595] [ 118.245605][ T6595] ---[ end trace 0000000000000000 ]--- [ 118.251669][ T6595] EXT4-fs (loop4): 1 orphan inode deleted [ 118.258578][ T6595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.292115][ T210] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 465: padding at end of block bitmap is not set [ 118.333139][ T210] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 6 with error 28 [ 118.347458][ T210] EXT4-fs (loop3): This should not happen!! Data will be lost [ 118.347458][ T210] [ 118.361201][ T210] EXT4-fs (loop3): Total free blocks count 0 [ 118.368468][ T210] EXT4-fs (loop3): Free/Dirty block details [ 118.377507][ T210] EXT4-fs (loop3): free_blocks=0 [ 118.384130][ T210] EXT4-fs (loop3): dirty_blocks=6 [ 118.391285][ T210] EXT4-fs (loop3): Block reservation details [ 118.399173][ T210] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 118.409764][ T5681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.553491][ T6612] loop3: detected capacity change from 0 to 512 [ 118.613758][ T6612] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.658056][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.748799][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.766779][ T6614] ieee802154 phy0 wpan0: encryption failed: -90 [ 118.867031][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.881546][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.931617][ T6619] openvswitch: netlink: Key type 192 is out of range max 32 [ 118.941129][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.956694][ T5681] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 119.042198][ T6623] tipc: Started in network mode [ 119.053228][ T6623] tipc: Node identity da347b8eea6a, cluster identity 4711 [ 119.088001][ T6623] tipc: Enabled bearer , priority 0 [ 119.147037][ T6623] syzkaller0: entered promiscuous mode [ 119.159547][ T6623] syzkaller0: entered allmulticast mode [ 119.179895][ T6623] tipc: Resetting bearer [ 119.195359][ T6624] lo speed is unknown, defaulting to 1000 [ 119.210299][ T6632] loop0: detected capacity change from 0 to 128 [ 119.233295][ T6632] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.247518][ T6624] lo speed is unknown, defaulting to 1000 [ 119.258001][ T6632] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.268840][ T6622] tipc: Resetting bearer [ 119.278888][ T6633] loop4: detected capacity change from 0 to 128 [ 119.302554][ T6633] FAT-fs (loop4): Directory bread(block 162) failed [ 119.303722][ T6622] tipc: Disabling bearer [ 119.320600][ T6633] FAT-fs (loop4): Directory bread(block 163) failed [ 119.334777][ T6633] FAT-fs (loop4): Directory bread(block 164) failed [ 119.342157][ T6633] FAT-fs (loop4): Directory bread(block 165) failed [ 119.349517][ T6633] FAT-fs (loop4): Directory bread(block 166) failed [ 119.357372][ T6633] FAT-fs (loop4): Directory bread(block 167) failed [ 119.364435][ T6633] FAT-fs (loop4): Directory bread(block 168) failed [ 119.413413][ T6633] FAT-fs (loop4): Directory bread(block 169) failed [ 119.421615][ T6633] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.522669][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.789'. [ 119.632898][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.931272][ T6651] loop3: detected capacity change from 0 to 512 [ 119.955359][ T6651] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.104392][ T6605] lo speed is unknown, defaulting to 1000 [ 120.126910][ T6605] lo speed is unknown, defaulting to 1000 [ 120.143613][ T5681] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 120.166102][ T6664] FAULT_INJECTION: forcing a failure. [ 120.166102][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.180331][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.3.801 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.180492][ T6664] Tainted: [W]=WARN [ 120.180500][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.180514][ T6664] Call Trace: [ 120.180522][ T6664] [ 120.180574][ T6664] __dump_stack+0x1d/0x30 [ 120.180614][ T6664] dump_stack_lvl+0x95/0xd0 [ 120.180650][ T6664] dump_stack+0x15/0x1b [ 120.180676][ T6664] should_fail_ex+0x263/0x280 [ 120.180728][ T6664] should_fail+0xb/0x20 [ 120.180808][ T6664] should_fail_usercopy+0x1a/0x20 [ 120.180836][ T6664] _copy_from_user+0x1c/0xb0 [ 120.180866][ T6664] sock_do_ioctl+0xe5/0x230 [ 120.180911][ T6664] sock_ioctl+0x41b/0x610 [ 120.180982][ T6664] ? mutex_lock+0x57/0x90 [ 120.181013][ T6664] ? __pfx_sock_ioctl+0x10/0x10 [ 120.181048][ T6664] __se_sys_ioctl+0xce/0x140 [ 120.181187][ T6664] __x64_sys_ioctl+0x43/0x50 [ 120.181230][ T6664] x64_sys_call+0x1563/0x3020 [ 120.181262][ T6664] do_syscall_64+0x12c/0x370 [ 120.181368][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.181396][ T6664] RIP: 0033:0x7f908838c629 [ 120.181415][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.181435][ T6664] RSP: 002b:00007f9086ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.181471][ T6664] RAX: ffffffffffffffda RBX: 00007f9088605fa0 RCX: 00007f908838c629 [ 120.181488][ T6664] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 120.181533][ T6664] RBP: 00007f9086ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.181548][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.181562][ T6664] R13: 00007f9088606038 R14: 00007f9088605fa0 R15: 00007ffd98b593b8 [ 120.181602][ T6664] [ 120.543152][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.614761][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.804'. [ 120.645170][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.701042][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.808338][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.447807][ T6684] lo speed is unknown, defaulting to 1000 [ 121.459671][ T6703] FAULT_INJECTION: forcing a failure. [ 121.459671][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.474806][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.3.817 Tainted: G W syzkaller #0 PREEMPT(full) [ 121.474890][ T6703] Tainted: [W]=WARN [ 121.474909][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.474923][ T6703] Call Trace: [ 121.474931][ T6703] [ 121.474939][ T6703] __dump_stack+0x1d/0x30 [ 121.474970][ T6703] dump_stack_lvl+0x95/0xd0 [ 121.475012][ T6703] dump_stack+0x15/0x1b [ 121.475037][ T6703] should_fail_ex+0x263/0x280 [ 121.475114][ T6703] should_fail+0xb/0x20 [ 121.475136][ T6703] should_fail_usercopy+0x1a/0x20 [ 121.475175][ T6703] _copy_from_iter+0xcf/0xea0 [ 121.475204][ T6703] ? alloc_pages_mpol+0x217/0x260 [ 121.475256][ T6703] copy_page_from_iter+0x178/0x2a0 [ 121.475285][ T6703] tun_get_user+0xbbd/0x27c0 [ 121.475314][ T6703] ? ref_tracker_alloc+0x1eb/0x2f0 [ 121.475415][ T6703] tun_chr_write_iter+0x15e/0x210 [ 121.475528][ T6703] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 121.475568][ T6703] vfs_write+0x5a6/0x9f0 [ 121.475606][ T6703] ksys_write+0xdc/0x1a0 [ 121.475641][ T6703] __x64_sys_write+0x40/0x50 [ 121.475730][ T6703] x64_sys_call+0x27e1/0x3020 [ 121.475837][ T6703] do_syscall_64+0x12c/0x370 [ 121.475874][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.475896][ T6703] RIP: 0033:0x7f908834cece [ 121.475948][ T6703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.475968][ T6703] RSP: 002b:00007f9086ddefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.476011][ T6703] RAX: ffffffffffffffda RBX: 00007f9086ddf6c0 RCX: 00007f908834cece [ 121.476028][ T6703] RDX: 0000000000000042 RSI: 0000200000000740 RDI: 00000000000000c8 [ 121.476044][ T6703] RBP: 00007f9086ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 121.476060][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.476075][ T6703] R13: 00007f9088606038 R14: 00007f9088605fa0 R15: 00007ffd98b593b8 [ 121.476097][ T6703] [ 121.503403][ T6684] lo speed is unknown, defaulting to 1000 [ 121.885772][ T28] kauditd_printk_skb: 380 callbacks suppressed [ 121.885811][ T28] audit: type=1326 audit(1772034893.255:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f61f73ccece code=0x7ffc0000 [ 122.018090][ T28] audit: type=1326 audit(1772034893.385:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f61f740c457 code=0x7ffc0000 [ 122.052040][ T28] audit: type=1326 audit(1772034893.415:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f73ccece code=0x7ffc0000 [ 122.174149][ T6717] loop3: detected capacity change from 0 to 1024 [ 122.183539][ T6717] EXT4-fs: inline encryption not supported [ 122.316554][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.936482][ T6724] loop0: detected capacity change from 0 to 512 [ 122.964303][ T6724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.015059][ T6724] EXT4-fs (loop0): 1 truncate cleaned up [ 123.030761][ T28] audit: type=1326 audit(1772034893.445:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61f73ccece code=0x7ffc0000 [ 123.047904][ T6724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.055087][ T28] audit: type=1326 audit(1772034893.615:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.098639][ T28] audit: type=1326 audit(1772034893.625:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.133806][ T28] audit: type=1326 audit(1772034893.775:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.159566][ T28] audit: type=1326 audit(1772034893.835:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.205379][ T28] audit: type=1326 audit(1772034893.845:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.258525][ T28] audit: type=1326 audit(1772034893.865:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 123.930620][ T5681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.961813][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.078710][ T6732] loop3: detected capacity change from 0 to 1024 [ 124.103387][ T6732] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.118362][ T6732] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.137362][ T6732] EXT4-fs (loop3): invalid journal inode [ 124.170715][ T6732] EXT4-fs (loop3): can't get journal size [ 124.180311][ T6732] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 124.187252][ T6732] EXT4-fs (loop3): mount failed [ 124.229086][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.244505][ T6733] smc: net device hsr0 applied user defined pnetid SYZ2 [ 124.313615][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.399140][ T6734] netlink: 766 bytes leftover after parsing attributes in process `syz.1.827'. [ 124.436461][ T6736] lo speed is unknown, defaulting to 1000 [ 124.752127][ T6749] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 125.167119][ T6736] lo speed is unknown, defaulting to 1000 [ 125.324751][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.346406][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.911662][ T6754] lo speed is unknown, defaulting to 1000 [ 126.095918][ T6754] lo speed is unknown, defaulting to 1000 [ 126.910765][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 126.910815][ T28] audit: type=1326 audit(1772034898.275:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 126.962445][ T28] audit: type=1326 audit(1772034898.325:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61f740c392 code=0x7ffc0000 [ 127.012671][ T28] audit: type=1326 audit(1772034898.325:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f61f740c427 code=0x7ffc0000 [ 127.076900][ T28] audit: type=1326 audit(1772034898.325:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f61f73c9391 code=0x7ffc0000 [ 127.090112][ T6770] ieee802154 phy0 wpan0: encryption failed: -90 [ 127.147845][ T28] audit: type=1326 audit(1772034898.325:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f61f740d449 code=0x7ffc0000 [ 127.184989][ T28] audit: type=1326 audit(1772034898.325:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f61f73c93fb code=0x7ffc0000 [ 127.230334][ T28] audit: type=1326 audit(1772034898.325:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 127.257368][ T28] audit: type=1326 audit(1772034898.325:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 127.286448][ T28] audit: type=1326 audit(1772034898.325:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f61f73c8aec code=0x7ffc0000 [ 127.317335][ T28] audit: type=1326 audit(1772034898.325:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.1.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f61f73c8b4e code=0x7ffc0000 [ 127.471282][ T6784] FAULT_INJECTION: forcing a failure. [ 127.471282][ T6784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.487412][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.0.845 Tainted: G W syzkaller #0 PREEMPT(full) [ 127.487451][ T6784] Tainted: [W]=WARN [ 127.487460][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.487475][ T6784] Call Trace: [ 127.487482][ T6784] [ 127.487490][ T6784] __dump_stack+0x1d/0x30 [ 127.487521][ T6784] dump_stack_lvl+0x95/0xd0 [ 127.487579][ T6784] dump_stack+0x15/0x1b [ 127.487604][ T6784] should_fail_ex+0x263/0x280 [ 127.487630][ T6784] should_fail+0xb/0x20 [ 127.487678][ T6784] should_fail_usercopy+0x1a/0x20 [ 127.487725][ T6784] _copy_to_user+0x20/0xa0 [ 127.487750][ T6784] simple_read_from_buffer+0xb5/0x130 [ 127.487814][ T6784] proc_fail_nth_read+0x10e/0x150 [ 127.487845][ T6784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.487878][ T6784] vfs_read+0x1ab/0x7f0 [ 127.487932][ T6784] ? __rcu_read_unlock+0x4e/0x70 [ 127.487957][ T6784] ? __fget_files+0x184/0x1c0 [ 127.488052][ T6784] ? mutex_lock+0x57/0x90 [ 127.488081][ T6784] ksys_read+0xdc/0x1a0 [ 127.488197][ T6784] __x64_sys_read+0x40/0x50 [ 127.488260][ T6784] x64_sys_call+0x2886/0x3020 [ 127.488321][ T6784] do_syscall_64+0x12c/0x370 [ 127.488359][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.488384][ T6784] RIP: 0033:0x7fb19da9cece [ 127.488403][ T6784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.488435][ T6784] RSP: 002b:00007fb19c52efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.488460][ T6784] RAX: ffffffffffffffda RBX: 00007fb19c52f6c0 RCX: 00007fb19da9cece [ 127.488477][ T6784] RDX: 000000000000000f RSI: 00007fb19c52f0a0 RDI: 0000000000000005 [ 127.488491][ T6784] RBP: 00007fb19c52f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.488514][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.488529][ T6784] R13: 00007fb19dd56038 R14: 00007fb19dd55fa0 R15: 00007fff7cb43fa8 [ 127.488550][ T6784] [ 127.771255][ T6788] netlink: 104 bytes leftover after parsing attributes in process `syz.1.847'. [ 128.207493][ T6796] lo speed is unknown, defaulting to 1000 [ 128.278116][ T6796] lo speed is unknown, defaulting to 1000 [ 128.297777][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.356113][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.583587][ T6805] lo speed is unknown, defaulting to 1000 [ 128.603354][ T6805] lo speed is unknown, defaulting to 1000 [ 129.616335][ T6819] loop0: detected capacity change from 0 to 512 [ 129.640838][ T6819] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.733394][ T6836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6836 comm=syz.6.862 [ 130.802509][ T3319] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 131.048114][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.218629][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.426931][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.718398][ T6847] lo speed is unknown, defaulting to 1000 [ 131.742747][ T6847] lo speed is unknown, defaulting to 1000 [ 131.917636][ T28] kauditd_printk_skb: 538 callbacks suppressed [ 131.917656][ T28] audit: type=1326 audit(1772034903.285:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 131.966292][ T28] audit: type=1326 audit(1772034903.315:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 132.002629][ T28] audit: type=1326 audit(1772034903.315:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 132.028444][ T28] audit: type=1326 audit(1772034903.315:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb19dadc392 code=0x7ffc0000 [ 132.092817][ T28] audit: type=1326 audit(1772034903.315:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb19dadc427 code=0x7ffc0000 [ 132.141385][ T28] audit: type=1326 audit(1772034903.315:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb19da99391 code=0x7ffc0000 [ 132.170888][ T28] audit: type=1326 audit(1772034903.315:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb19dadd449 code=0x7ffc0000 [ 132.197071][ T28] audit: type=1326 audit(1772034903.315:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb19da993fb code=0x7ffc0000 [ 132.225211][ T28] audit: type=1326 audit(1772034903.315:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 132.250192][ T28] audit: type=1326 audit(1772034903.315:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 132.279269][ T6850] ieee802154 phy0 wpan0: encryption failed: -90 [ 132.318155][ T6861] loop0: detected capacity change from 0 to 1024 [ 132.320482][ T6863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6863 comm=syz.4.869 [ 132.341934][ T6861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.376537][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.976998][ T6878] Cannot find add_set index 0 as target [ 133.009882][ T6873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.052799][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 133.059619][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.231787][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.879'. [ 133.243675][ T6892] vlan2: entered promiscuous mode [ 133.249014][ T6892] batadv0: entered promiscuous mode [ 133.356992][ T6902] lo speed is unknown, defaulting to 1000 [ 133.390865][ T6902] lo speed is unknown, defaulting to 1000 [ 133.407110][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 133.425253][ T6906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.885'. [ 133.448289][ T6908] netlink: 92 bytes leftover after parsing attributes in process `syz.6.886'. [ 133.480708][ T6913] FAULT_INJECTION: forcing a failure. [ 133.480708][ T6913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.494716][ T6913] CPU: 0 UID: 0 PID: 6913 Comm: syz.1.887 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.494824][ T6913] Tainted: [W]=WARN [ 133.494830][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.494844][ T6913] Call Trace: [ 133.494851][ T6913] [ 133.494861][ T6913] __dump_stack+0x1d/0x30 [ 133.494936][ T6913] dump_stack_lvl+0x95/0xd0 [ 133.494970][ T6913] dump_stack+0x15/0x1b [ 133.495004][ T6913] should_fail_ex+0x263/0x280 [ 133.495090][ T6913] should_fail+0xb/0x20 [ 133.495117][ T6913] should_fail_usercopy+0x1a/0x20 [ 133.495145][ T6913] _copy_to_user+0x20/0xa0 [ 133.495176][ T6913] __se_sys_newfstatat+0x37f/0x3e0 [ 133.495281][ T6913] __x64_sys_newfstatat+0x55/0x70 [ 133.495327][ T6913] x64_sys_call+0x2c64/0x3020 [ 133.495397][ T6913] do_syscall_64+0x12c/0x370 [ 133.495433][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.495455][ T6913] RIP: 0033:0x7f61f740c629 [ 133.495471][ T6913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.495492][ T6913] RSP: 002b:00007f61f5e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 133.495518][ T6913] RAX: ffffffffffffffda RBX: 00007f61f7685fa0 RCX: 00007f61f740c629 [ 133.495615][ T6913] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 133.495632][ T6913] RBP: 00007f61f5e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.495692][ T6913] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 133.495705][ T6913] R13: 00007f61f7686038 R14: 00007f61f7685fa0 R15: 00007ffe3a84d688 [ 133.495724][ T6913] [ 133.725792][ T6922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6922 comm=syz.6.890 [ 133.758286][ T6922] netlink: 'syz.6.890': attribute type 13 has an invalid length. [ 133.775189][ T6924] loop0: detected capacity change from 0 to 8192 [ 133.776103][ T6922] netlink: 164 bytes leftover after parsing attributes in process `syz.6.890'. [ 133.816617][ T6922] syz_tun: refused to change device tx_queue_len [ 133.965936][ T6931] lo speed is unknown, defaulting to 1000 [ 133.975003][ T6931] lo speed is unknown, defaulting to 1000 [ 134.021330][ T6932] loop0: detected capacity change from 0 to 1024 [ 134.035771][ T6932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.061383][ T6932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.199378][ T6932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 134.301660][ T6932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 134.343343][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 134.393768][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.898'. [ 134.393808][ T6932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 134.486862][ T6932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 134.572996][ T5941] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.602880][ T5941] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.614519][ T5941] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.638135][ T5941] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 135.328314][ T6961] loop6: detected capacity change from 0 to 128 [ 135.382292][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.385227][ T6961] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.473392][ T6961] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.627149][ T6960] netlink: 112 bytes leftover after parsing attributes in process `syz.6.903'. [ 135.704940][ T1688] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.753516][ T6976] xt_hashlimit: size too large, truncated to 1048576 [ 135.820131][ T6981] loop6: detected capacity change from 0 to 512 [ 135.838653][ T6981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.861216][ T6981] EXT4-fs: quotafile must be on filesystem root [ 136.009613][ T6981] loop6: detected capacity change from 0 to 8192 [ 136.064160][ T6981] loop6: p1 p3 p4 [ 136.072515][ T6981] loop6: p1 start 16777216 is beyond EOD, truncated [ 136.090630][ T6981] loop6: p4 start 16777223 is beyond EOD, truncated [ 136.208362][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 136.218200][ T6996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 136.293575][ T7008] program syz.1.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.306078][ T7010] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.334850][ T7012] lo speed is unknown, defaulting to 1000 [ 136.350013][ T7012] lo speed is unknown, defaulting to 1000 [ 136.514004][ T7014] loop6: detected capacity change from 0 to 8192 [ 136.534723][ T7014] FAT-fs (loop6): bogus sectors per cluster 0 [ 136.542619][ T7014] FAT-fs (loop6): Can't find a valid FAT filesystem [ 136.558408][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.591562][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.775493][ T7030] lo speed is unknown, defaulting to 1000 [ 136.799071][ T7030] lo speed is unknown, defaulting to 1000 [ 136.806813][ T7035] Cannot find set identified by id 65535 to match [ 136.891727][ T7044] loop4: detected capacity change from 0 to 2048 [ 136.985482][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 136.985500][ T28] audit: type=1400 audit(1772034908.355:3552): avc: denied { write } for pid=7049 comm="syz.6.934" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.035640][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.082445][ T28] audit: type=1400 audit(1772034908.395:3553): avc: denied { open } for pid=7049 comm="syz.6.934" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.112843][ T28] audit: type=1400 audit(1772034908.395:3554): avc: denied { ioctl } for pid=7049 comm="syz.6.934" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.113545][ T7044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.162442][ T28] audit: type=1326 audit(1772034908.525:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.218776][ T28] audit: type=1326 audit(1772034908.525:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.251480][ T28] audit: type=1326 audit(1772034908.525:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.280243][ T28] audit: type=1326 audit(1772034908.525:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.371497][ T28] audit: type=1326 audit(1772034908.525:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.428195][ T28] audit: type=1326 audit(1772034908.525:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.479079][ T28] audit: type=1326 audit(1772034908.525:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.6.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4002c629 code=0x7ffc0000 [ 137.493068][ T7063] loop4: detected capacity change from 0 to 512 [ 137.543283][ T7063] EXT4-fs: Ignoring removed bh option [ 137.555341][ T7063] EXT4-fs: Ignoring removed oldalloc option [ 137.564498][ T7063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.594351][ T7063] EXT4-fs (loop4): 1 truncate cleaned up [ 137.599707][ T7053] ieee802154 phy0 wpan0: encryption failed: -90 [ 137.601918][ T7063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.669650][ T7068] loop6: detected capacity change from 0 to 512 [ 137.688334][ T7068] EXT4-fs: Ignoring removed bh option [ 137.702525][ T7068] EXT4-fs: Ignoring removed oldalloc option [ 137.729953][ T7068] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.750322][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.762173][ T7068] EXT4-fs (loop6): 1 truncate cleaned up [ 137.791170][ T7068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.826371][ T7068] FAULT_INJECTION: forcing a failure. [ 137.826371][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 137.859155][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.6.939 Tainted: G W syzkaller #0 PREEMPT(full) [ 137.859195][ T7068] Tainted: [W]=WARN [ 137.859203][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.859233][ T7068] Call Trace: [ 137.859240][ T7068] [ 137.859247][ T7068] __dump_stack+0x1d/0x30 [ 137.859278][ T7068] dump_stack_lvl+0x95/0xd0 [ 137.859306][ T7068] dump_stack+0x15/0x1b [ 137.859482][ T7068] should_fail_ex+0x263/0x280 [ 137.859530][ T7068] should_failslab+0x8c/0xb0 [ 137.859558][ T7068] kmem_cache_alloc_noprof+0x66/0x400 [ 137.859584][ T7068] ? mb_cache_entry_create+0xf0/0x540 [ 137.859631][ T7068] mb_cache_entry_create+0xf0/0x540 [ 137.859709][ T7068] ext4_xattr_get+0x298/0x470 [ 137.859775][ T7068] ext4_xattr_security_get+0x32/0x40 [ 137.859822][ T7068] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 137.859862][ T7068] __vfs_getxattr+0x2ad/0x2c0 [ 137.859891][ T7068] cap_inode_need_killpriv+0x2e/0x50 [ 137.859945][ T7068] security_inode_need_killpriv+0x32/0x60 [ 137.860010][ T7068] file_remove_privs_flags+0x11f/0x320 [ 137.860048][ T7068] ? generic_write_checks_count+0x275/0x2c0 [ 137.860145][ T7068] file_modified+0x18/0x50 [ 137.860208][ T7068] ext4_buffered_write_iter+0x1d0/0x3c0 [ 137.860242][ T7068] ext4_file_write_iter+0x380/0xfa0 [ 137.860316][ T7068] ? kstrtouint+0x76/0xc0 [ 137.860481][ T7068] ? selinux_file_permission+0x1f2/0x690 [ 137.860510][ T7068] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 137.860547][ T7068] vfs_write+0x5a6/0x9f0 [ 137.860605][ T7068] ksys_write+0xdc/0x1a0 [ 137.860637][ T7068] __x64_sys_write+0x40/0x50 [ 137.860729][ T7068] x64_sys_call+0x27e1/0x3020 [ 137.860807][ T7068] do_syscall_64+0x12c/0x370 [ 137.860848][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.860876][ T7068] RIP: 0033:0x7fec4002c629 [ 137.860950][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.861016][ T7068] RSP: 002b:00007fec3ea87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.861043][ T7068] RAX: ffffffffffffffda RBX: 00007fec402a5fa0 RCX: 00007fec4002c629 [ 137.861060][ T7068] RDX: 00000000fffffd26 RSI: 0000200000000000 RDI: 0000000000000005 [ 137.861076][ T7068] RBP: 00007fec3ea87090 R08: 0000000000000000 R09: 0000000000000000 [ 137.861091][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.861104][ T7068] R13: 00007fec402a6038 R14: 00007fec402a5fa0 R15: 00007ffca2e50928 [ 137.861124][ T7068] [ 138.239060][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.038810][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.107951][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.268096][ T7129] lo speed is unknown, defaulting to 1000 [ 140.275291][ T7129] lo speed is unknown, defaulting to 1000 [ 140.327582][ T7131] loop4: detected capacity change from 0 to 1024 [ 140.334749][ T7133] loop0: detected capacity change from 0 to 128 [ 140.365639][ T7133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.391194][ T7131] EXT4-fs: Ignoring removed nobh option [ 140.412604][ T7131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.441474][ T7133] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.454342][ T7133] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 140.463014][ T7133] IPVS: set_ctl: invalid protocol: 768 0.32.0.0:0 [ 140.475305][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.552858][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.608250][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.668820][ T7143] netlink: 'syz.4.967': attribute type 21 has an invalid length. [ 140.712443][ T7143] __nla_validate_parse: 7 callbacks suppressed [ 140.712463][ T7143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.967'. [ 140.831309][ T7154] lo speed is unknown, defaulting to 1000 [ 140.853241][ T7154] lo speed is unknown, defaulting to 1000 [ 141.276600][ T7161] loop0: detected capacity change from 0 to 1024 [ 141.310080][ T7161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.334135][ T7161] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 141.562998][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.598885][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.636727][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.645444][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.740197][ T7187] lo speed is unknown, defaulting to 1000 [ 141.752837][ T7187] lo speed is unknown, defaulting to 1000 [ 141.752980][ T7186] lo speed is unknown, defaulting to 1000 [ 141.804292][ T7186] lo speed is unknown, defaulting to 1000 [ 141.823120][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.981355][ T7198] vlan2: entered allmulticast mode [ 142.000411][ T7198] team0: entered allmulticast mode [ 142.010911][ T7198] team_slave_0: entered allmulticast mode [ 142.017510][ T7198] team_slave_1: entered allmulticast mode [ 142.033741][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 142.063475][ T7196] vlan2: entered promiscuous mode [ 142.074370][ T7196] bond0: entered promiscuous mode [ 142.122679][ T7203] wireguard0: entered promiscuous mode [ 142.132446][ T7203] wireguard0: entered allmulticast mode [ 142.166814][ T7200] sock: sock_set_timeout: `syz.3.986' (pid 7200) tries to set negative timeout [ 142.186149][ T28] kauditd_printk_skb: 523 callbacks suppressed [ 142.186168][ T28] audit: type=1400 audit(1772034913.555:4085): avc: denied { read } for pid=7199 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.467678][ T7219] netlink: 32 bytes leftover after parsing attributes in process `syz.6.991'. [ 142.676626][ T7228] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 142.685955][ T28] audit: type=1400 audit(1772034914.055:4086): avc: denied { mount } for pid=7229 comm="syz.6.996" name="/" dev="hugetlbfs" ino=18040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 142.691147][ T7230] loop6: detected capacity change from 0 to 512 [ 142.741577][ T7232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.997'. [ 142.798101][ T7237] xt_cgroup: xt_cgroup: no path or classid specified [ 142.816268][ T28] audit: type=1400 audit(1772034914.175:4087): avc: denied { execute } for pid=7238 comm="syz.3.999" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.834296][ T7237] lo speed is unknown, defaulting to 1000 [ 142.849960][ T7237] lo speed is unknown, defaulting to 1000 [ 143.130959][ T28] audit: type=1400 audit(1772034914.495:4088): avc: denied { listen } for pid=7250 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 143.599598][ T28] audit: type=1326 audit(1772034914.965:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 143.679796][ T28] audit: type=1326 audit(1772034914.995:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 143.765069][ T28] audit: type=1326 audit(1772034914.995:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 143.815363][ T28] audit: type=1326 audit(1772034914.995:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 143.866312][ T28] audit: type=1326 audit(1772034914.995:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 143.931150][ T28] audit: type=1326 audit(1772034914.995:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f740c629 code=0x7ffc0000 [ 144.077291][ T7257] team0: Port device vlan2 added [ 144.089901][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1004'. [ 144.152910][ T7257] syz.0.1003 (7257) used greatest stack depth: 8648 bytes left [ 144.267744][ T7286] loop0: detected capacity change from 0 to 128 [ 144.276936][ T7284] lo speed is unknown, defaulting to 1000 [ 144.316612][ T7284] lo speed is unknown, defaulting to 1000 [ 144.344465][ T7286] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.410676][ T7286] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.425757][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.465157][ T7295] loop4: detected capacity change from 0 to 512 [ 144.511935][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.522798][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.553755][ T7295] EXT4-fs (loop4): 1 truncate cleaned up [ 144.560299][ T7295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.625325][ T7294] loop6: detected capacity change from 0 to 512 [ 144.641034][ T7281] lo speed is unknown, defaulting to 1000 [ 144.663162][ T7294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.691961][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 144.715810][ T7281] lo speed is unknown, defaulting to 1000 [ 144.772947][ T7294] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.879997][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.032369][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.099585][ T7325] 8021q: VLANs not supported on vxcan1 [ 145.387370][ T7344] FAULT_INJECTION: forcing a failure. [ 145.387370][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.403605][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.1.1028 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.403643][ T7344] Tainted: [W]=WARN [ 145.403650][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.403683][ T7344] Call Trace: [ 145.403691][ T7344] [ 145.403699][ T7344] __dump_stack+0x1d/0x30 [ 145.403730][ T7344] dump_stack_lvl+0x95/0xd0 [ 145.403800][ T7344] dump_stack+0x15/0x1b [ 145.403826][ T7344] should_fail_ex+0x263/0x280 [ 145.403902][ T7344] should_fail+0xb/0x20 [ 145.403921][ T7344] should_fail_usercopy+0x1a/0x20 [ 145.403972][ T7344] _copy_from_user+0x1c/0xb0 [ 145.404003][ T7344] __sys_bpf+0x183/0x7e0 [ 145.404031][ T7344] __x64_sys_bpf+0x41/0x50 [ 145.404097][ T7344] x64_sys_call+0x10cb/0x3020 [ 145.404132][ T7344] do_syscall_64+0x12c/0x370 [ 145.404168][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.404192][ T7344] RIP: 0033:0x7f61f740c629 [ 145.404212][ T7344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.404231][ T7344] RSP: 002b:00007f61f5e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.404294][ T7344] RAX: ffffffffffffffda RBX: 00007f61f7685fa0 RCX: 00007f61f740c629 [ 145.404310][ T7344] RDX: 0000000000000094 RSI: 0000200000001080 RDI: 0000000000000005 [ 145.404348][ T7344] RBP: 00007f61f5e5f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.404363][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.404377][ T7344] R13: 00007f61f7686038 R14: 00007f61f7685fa0 R15: 00007ffe3a84d688 [ 145.404516][ T7344] [ 145.464170][ T7348] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 145.576564][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 145.647687][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 145.668964][ T7347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.778804][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 145.850081][ T7369] wireguard0: entered promiscuous mode [ 145.859553][ T7369] wireguard0: entered allmulticast mode [ 146.065453][ T7384] tmpfs: Bad value for 'mpol' [ 146.116757][ T7383] lo speed is unknown, defaulting to 1000 [ 146.143823][ T7383] lo speed is unknown, defaulting to 1000 [ 146.766099][ T7391] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.901286][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1047'. [ 146.906991][ T7402] loop0: detected capacity change from 0 to 512 [ 146.934049][ T7402] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 146.959620][ T7398] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.960701][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1048'. [ 146.966217][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 146.982221][ C0] EXT4-fs (loop0): initial error at time 1772034918: ext4_mb_generate_buddy:1315 [ 146.990784][ T7402] EXT4-fs (loop0): Remounting filesystem read-only [ 146.992353][ C0] EXT4-fs (loop0): last error at time 1772034918: ext4_mb_generate_buddy:1315 [ 146.999381][ T7402] EXT4-fs (loop0): 1 truncate cleaned up [ 147.015594][ T7402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.090695][ T7418] loop4: detected capacity change from 0 to 128 [ 147.111852][ T7418] FAT-fs (loop4): bogus number of reserved sectors [ 147.120860][ T7418] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 147.130852][ T7418] FAT-fs (loop4): Can't find a valid FAT filesystem [ 147.180875][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.196223][ T7423] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1053'. [ 147.253665][ T28] kauditd_printk_skb: 287 callbacks suppressed [ 147.253684][ T28] audit: type=1400 audit(1772034918.625:4382): avc: denied { write } for pid=7429 comm="syz.0.1056" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.309177][ T28] audit: type=1400 audit(1772034918.655:4383): avc: denied { setopt } for pid=7429 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.420772][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.467052][ T7445] loop6: detected capacity change from 0 to 128 [ 147.470400][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.508561][ T7445] FAT-fs (loop6): Directory bread(block 524322) failed [ 147.516002][ T7445] FAT-fs (loop6): Directory bread(block 524323) failed [ 147.523604][ T7445] FAT-fs (loop6): Directory bread(block 524324) failed [ 147.530952][ T7445] FAT-fs (loop6): Directory bread(block 524325) failed [ 147.538421][ T7445] FAT-fs (loop6): Directory bread(block 524326) failed [ 147.545978][ T7445] FAT-fs (loop6): Directory bread(block 524327) failed [ 147.553336][ T7445] FAT-fs (loop6): Directory bread(block 524328) failed [ 147.561250][ T7445] FAT-fs (loop6): Directory bread(block 524329) failed [ 147.607981][ T7450] lo speed is unknown, defaulting to 1000 [ 147.627441][ T7450] lo speed is unknown, defaulting to 1000 [ 147.830013][ T7459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.498821][ T7469] 9p: Bad value for 'rfdno' [ 148.571254][ T28] audit: type=1326 audit(1772034919.935:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.596176][ T28] audit: type=1326 audit(1772034919.935:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.629060][ T28] audit: type=1326 audit(1772034919.935:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.655127][ T28] audit: type=1326 audit(1772034919.935:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.679977][ T28] audit: type=1326 audit(1772034919.935:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.705323][ T28] audit: type=1326 audit(1772034919.935:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.732175][ T28] audit: type=1326 audit(1772034919.935:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.756290][ T7473] loop6: detected capacity change from 0 to 1024 [ 148.756485][ T28] audit: type=1326 audit(1772034919.935:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19dadc629 code=0x7ffc0000 [ 148.763272][ T7473] EXT4-fs: Ignoring removed oldalloc option [ 148.793711][ T7473] EXT4-fs: Ignoring removed bh option [ 148.821244][ T7473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.893305][ T7475] ieee802154 phy0 wpan0: encryption failed: -90 [ 148.939368][ T7473] ================================================================== [ 148.948052][ T7473] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 148.956637][ T7473] [ 148.959166][ T7473] write to 0xffff88811b40258c of 4 bytes by task 7477 on cpu 1: [ 148.967077][ T7473] xas_set_mark+0x12b/0x140 [ 148.971802][ T7473] tag_pages_for_writeback+0xe3/0x2e0 [ 148.977559][ T7473] ext4_do_writepages+0x6b9/0x2840 [ 148.983409][ T7473] ext4_writepages+0x18f/0x320 [ 148.988378][ T7473] do_writepages+0x1c6/0x310 [ 148.993256][ T7473] file_write_and_wait_range+0x178/0x2f0 [ 148.999015][ T7473] generic_buffers_fsync_noflush+0x45/0x130 [ 149.005281][ T7473] ext4_sync_file+0x1aa/0x6b0 [ 149.010252][ T7473] vfs_fsync_range+0xc5/0xe0 [ 149.015052][ T7473] ext4_buffered_write_iter+0x34f/0x3c0 [ 149.020737][ T7473] ext4_file_write_iter+0x380/0xfa0 [ 149.026163][ T7473] iter_file_splice_write+0x6c4/0xa80 [ 149.031746][ T7473] direct_splice_actor+0x156/0x2a0 [ 149.037427][ T7473] splice_direct_to_actor+0x311/0x670 [ 149.042832][ T7473] do_splice_direct+0x119/0x1a0 [ 149.048376][ T7473] do_sendfile+0x382/0x650 [ 149.053009][ T7473] __x64_sys_sendfile64+0x105/0x150 [ 149.058331][ T7473] x64_sys_call+0x2dc4/0x3020 [ 149.063227][ T7473] do_syscall_64+0x12c/0x370 [ 149.068110][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.074533][ T7473] [ 149.076874][ T7473] read to 0xffff88811b40258c of 4 bytes by task 7473 on cpu 0: [ 149.084803][ T7473] file_write_and_wait_range+0x130/0x2f0 [ 149.090749][ T7473] generic_buffers_fsync_noflush+0x45/0x130 [ 149.096677][ T7473] ext4_sync_file+0x1aa/0x6b0 [ 149.101574][ T7473] vfs_fsync_range+0xc5/0xe0 [ 149.106919][ T7473] ext4_buffered_write_iter+0x34f/0x3c0 [ 149.113122][ T7473] ext4_file_write_iter+0x380/0xfa0 [ 149.118595][ T7473] iter_file_splice_write+0x6c4/0xa80 [ 149.125393][ T7473] direct_splice_actor+0x156/0x2a0 [ 149.130730][ T7473] splice_direct_to_actor+0x311/0x670 [ 149.136528][ T7473] do_splice_direct+0x119/0x1a0 [ 149.141482][ T7473] do_sendfile+0x382/0x650 [ 149.146008][ T7473] __x64_sys_sendfile64+0x105/0x150 [ 149.151666][ T7473] x64_sys_call+0x2dc4/0x3020 [ 149.156555][ T7473] do_syscall_64+0x12c/0x370 [ 149.161362][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.167384][ T7473] [ 149.169861][ T7473] value changed: 0x02000021 -> 0x04000021 [ 149.176197][ T7473] [ 149.178636][ T7473] Reported by Kernel Concurrency Sanitizer on: [ 149.185301][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.6.1069 Tainted: G W syzkaller #0 PREEMPT(full) [ 149.196617][ T7473] Tainted: [W]=WARN [ 149.200433][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.211113][ T7473] ================================================================== [ 149.485401][ T4791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.388519][ T7436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512