last executing test programs: 3m12.518294704s ago: executing program 0 (id=277): mkdirat(0xffffffffffffff9c, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 3m11.482891726s ago: executing program 0 (id=283): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001a40)={[{@noinit_itable}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}, {@discard}, {@jqfmt_vfsv0}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000fedbdf2502001400fe01fd0900000000060015000400000014001680100008800c00028005"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0xd79) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbfd, {}, [{0x4}]}, 0x18}}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001980)={[], [{@uid_eq}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r11, &(0x7f0000000300)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1, 0x141, 0x8) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_route_sched(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x2c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m11.159519884s ago: executing program 0 (id=284): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0) socketpair(0x15, 0x4, 0xf34, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000040)={[{@map_acorn}, {@block={'block', 0x3d, 0x400}, 0x0}, {@map_acorn}, {@nocompress}, {@session={'session', 0x3d, 0x3b}}, {@uid={'uid', 0x3d, 0xee00}, 0x41}, {@showassoc}, {@map_off}]}, 0xfd, 0x645, &(0x7f0000001000)="$eJzs3U1v28gdx/EfZdlWXCAo2mIRBNlkNukCDpoqkrxxYKSHshQlcyuJAkkXNlBgkW7shRE52yYp0Piy8KUPwPYN9FLspYdeey/Qc99FjwUW7a1AD2VBUrJk69GJbLeb78dwOCL/nPkPqXBASyQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkOdVSqWyp4bW2ts14TjXwmxOWZ7Ut6m5WuDu1XclKflUo6Fo269q3+ovfSf65rRvZqxsqJJOCDr/2ztcffTOf660/IaHXobNW+OLV4dPHnc7u8zkncsEea7jnys2wYt1teaHvNe26a7zQNxvr66X7m7XQ1LyGG+6Ekds0TuDmIj8wq85dU97YWDNuccffatWrdsOVspkPv1spldbNh8vd3X//w2LobHqNhteqpysmi5OYh+bzH2chrt00Zm+/s7s2LckkqDxLUGVaUKVUqZTLlUp5/cHGg4elUn5oRukUDUXM/U2L/zPzO3gDbyiXjP9/s6SGCmppS9syI38cVRXIV3PM8q7e+P/+fXdiu4Pjf2+Uv9ZffF3p+H8ze3Vz3Pg/Jhcjk64waok1Zv7r/bzQKx3qqR6ro4529Xw+9d6aX4bn+JOT6lJe8hTKl6embNXlynTnGG1oXesq6SNtqqZQRjV5ashVqB2FiuSqme6TQK5sRfIVyGhVju7KqKwNbWhNRq6K2pGvLbVUV1W2/hXH8Z72k+0+6Z0gdYNUniWoMiFo3Pj/k8+y9ynj/9uud/yaJQa4dHH3/P+Mbp1PNgAAAAAA4DxY6V/frfSz+3clxap5Dbd02WkBAAAAAIA5Sj/5v5FMFpPSu7LGnP/HF58bAAAAAACYDyu9xs6StLLYnbWnff0n3tUsXwJYOOf0AAAAAADAHKSf/99ckuL03mu3ZB3fCYWLAAAAAAAA+Ir49cA99vO9e+zGvY/1c5LC9rL1538sK1i0jtrb37YO7GSJfdCNGfoGQFS7bl3t3qg3nSxJSl857qLVfzCAlf4Wshdf7k27178VnEpgaaH354uhBP4kaSCB9Xy3Ln2u97KY97rtPjnMKV2StbJS8xpu0fEbj8qy7au5yN2Ofv5s/xdScNzPvf3ObvHjTztP0lyOkllHB0ken51IJzd6Y/RzeZnebyG95mJUj6+o1mvyN63mipW2W+r1f0H2QW6woUk7oN/mL3U7i7m9kk1XDnt7IO1/Iel/uZjusn7v07tDWP0syqd7PmpHjMmikGZxJ4u5s3onm/Ty62bxnQWpUhzeB8FgFpXBLKZvC+ufQ9tiShbJtlhLsvhLUtGYLNbOlsXQHgGAy7LXH4XSm5gP32P/9Lj7Oke56aP790+28vJ3cXbB4YKU7342MbGVgpIj+moWs6T0wJq/PuKIXuqOKwWNOaKX3mB0S9r6Y/8ZSN20h7L4dxzHj8ppu789Nap+kazwxdh2w0ZlIdmE918e/DS9AX7ik91Pdp9VKmvrpQ9KpQcVLabd6E4YewAAI0x/xs7UCOuD47PqJ39/PyudGPG+cfyVgqI+1qfq6Inu9R4hcGt0rSsDX0O4N3zWmsRekU7F/n5R98ae1aVj6UC9lePY3oUPp88A+7Fr57wXAAC4WLenjMOzjP/3eufdq9dHnnefHMtPPyF4XGz5grcEAABvDzf40lqJfmUFgdf+qLyxUbajTdcEvvNDE3jVumu8VuQGzqbdqrumHfiR7/gN0w607FXd0IRb7bYfRKbmB6bth952+uR30330e+g27VbkOWG74dqhaxy/FdlOZKpe6Jj21g8aXrjpBunKYdt1vJrn2JHnt0zobwWOWzQmdN2BQK/qtiKv5iXFlmkHXtMOdsyP/MZW0zVVN3QCrx35WYW9trxWzQ+aabVFxWd+0CEAAF9FL14dPn3c6ew+n1A40vSYbmFpVIWX3UcAAHASozQAAAAAAAAAAAAAAAAAAAAAAP/7Zrn+70yFxVEXC0rHc352daZ6LM07sbMUcq+/+l8nxFw5ntPb/IMxR5fQU2WF/PxrviLNftnoHArf28u26NiYZOHIRcvH+yI///8OSeHZH8YsiuM4nrz68sltuDSpgycLeUnPl95gF1zO8QjAxflvAAAA///xwUUi") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 3m10.841362492s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, '%-5lx \x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x24040010) 3m10.41035007s ago: executing program 0 (id=290): open(0x0, 0x8400, 0x190) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioprio_set$pid(0x1, 0x0, 0x2007) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create(0x5) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x20400000) 3m10.031506444s ago: executing program 0 (id=293): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) timer_create(0x5, 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) lseek(r0, 0x5, 0x4) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r7, &(0x7f0000000000)={0x23, 0x0, 0x7d, 0x5}, 0x10) (async) r8 = dup(r6) write$P9_RLERROR(r8, &(0x7f0000001040)=ANY=[@ANYBLOB="09005ecd0e473c2100"], 0x9) (async) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21810b4, 0x0) (async) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121501) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4, 0x3ff, 0x6}) 2m54.86083002s ago: executing program 32 (id=293): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) timer_create(0x5, 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) lseek(r0, 0x5, 0x4) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r7, &(0x7f0000000000)={0x23, 0x0, 0x7d, 0x5}, 0x10) (async) r8 = dup(r6) write$P9_RLERROR(r8, &(0x7f0000001040)=ANY=[@ANYBLOB="09005ecd0e473c2100"], 0x9) (async) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21810b4, 0x0) (async) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121501) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4, 0x3ff, 0x6}) 10.754127893s ago: executing program 1 (id=1492): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107504e191568c04793fadcbefe933e900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 8.115236326s ago: executing program 1 (id=1499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x4, &(0x7f0000000940)=""/119, 0x77}, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmmsg$inet(r4, 0x0, 0x0, 0x8010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) 5.054202716s ago: executing program 5 (id=1518): r0 = syz_io_uring_setup(0x6225, &(0x7f0000000340)={0x0, 0x5cb1, 0x402, 0x80002, 0x17b}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000040)=0xfffd, 0x4) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r2, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r6, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0x8, 0x4) 4.251281166s ago: executing program 3 (id=1524): r0 = syz_io_uring_setup(0x6225, &(0x7f0000000340)={0x0, 0x5cb1, 0x402, 0x80002, 0x17b}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000040)=0xfffd, 0x4) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(0xffffffffffffffff, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r5, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0x8, 0x4) 4.036878485s ago: executing program 1 (id=1525): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005f00010000000000000000000c"], 0x1c}], 0x1}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000100)=""/14, 0xe) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000500e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x7, 0xfff2}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001040)) 3.970923531s ago: executing program 5 (id=1526): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x18}, 0x24, 0x0, 0x10000, 0x3, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x1, 0x2, 0x3, 0x4}}, 0x2e) 3.886264168s ago: executing program 5 (id=1528): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) poll(0x0, 0x0, 0x7fffffff) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x101, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@block_validity}, {@nogrpid}, {@nodioread_nolock}, {@inode_readahead_blks}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid={'resuid', 0x3d, r3}}, {@nogrpid}, {@noauto_da_alloc}, {@discard}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8e}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x28}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xd0}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x40000d0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3.86929077s ago: executing program 1 (id=1529): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x48, 0x6c, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0xf7a1b54ac622e07b, 0x80}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_PORT_ID={0x11, 0x22, "fb15228f21c6be28973f7e770f"}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000010, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.806649365s ago: executing program 2 (id=1530): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a0000000800000001000000400000", @ANYBLOB="f2ef"], 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a18100400000", 0x17}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x10, 0x1, 0xff, {{0x17, 0x4, 0x0, 0x3a, 0x5c, 0x64, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x20, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x7fff}, {@remote, 0x800}, {@remote, 0x7}, {@local, 0xffffffff}, {@multicast1, 0x2}, {@multicast1, 0x437f}, {@empty, 0x7ff}, {@loopback, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x0, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x64, 0x8, 0x2, 0x20, r1, 0x3, '\x00', r2, r3, 0x0, 0x0, 0x2, 0x2}, 0x50) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x10005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 3.772974078s ago: executing program 2 (id=1531): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107504e191568c04793fadcbefe933e900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 3.75740124s ago: executing program 4 (id=1532): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80, 0x40000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x4, 0xa1, &(0x7f00000000c0)="f3c4ec8dcc4b62f04aa53afc0c20e4f5be439498ab92827b3edc07ca4f5a60da330906000440c926791bab3a0b761ca33c75166d39a58dc56e422f8e907259fc4ba15dffeb8d5ce5541d925df2c2e815f05f57d6a524230acfe7546964b4f028298b0ec424c52ef57e0562a778ae6a706c019befbc137d4c584fabf34d880465c8887b97fefde6ab1dc9b300ebf62a19c3984c5beaaa77405825aa2c375a49ecb7"}) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="ab4d4f4281", 0x5, 0x0, 0x0, 0x2, r2}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 3.622871702s ago: executing program 4 (id=1533): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x101}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9d", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca", 0x46}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4", 0xc1}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.568985096s ago: executing program 4 (id=1534): prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) prctl$PR_SET_PDEATHSIG(0x1, 0xc619) prctl$PR_SET_PDEATHSIG(0x1, 0x3b) prctl$PR_SET_PDEATHSIG(0x1, 0xa) prctl$PR_SET_PDEATHSIG(0x1, 0x28) prctl$PR_SET_PDEATHSIG(0x1, 0x34) prctl$PR_SET_PDEATHSIG(0x1, 0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x21) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) prctl$PR_SET_PDEATHSIG(0x1, 0xd) prctl$PR_SET_PDEATHSIG(0x1, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0x26) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) prctl$PR_SET_PDEATHSIG(0x1, 0x8) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x21) prctl$PR_SET_PDEATHSIG(0x1, 0x39) prctl$PR_SET_PDEATHSIG(0x1, 0x12) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="64e0001774f7bad732bb880ce1953cc5c8c0e073a835e12754a6f93f1d642f9db9bc640e5f10c7e37096d72ebbfc6ad4d747b28b3c7a68b3c99cc98b5b45ec1d16a4e084d959d850bbed7550ba2ae261436c5d036fb7159e384946f080b06b4defa92ee0bbccb247aca70dfd10246ea2be85c6c70be5fe20f8030fa214402429fec524cb56a45ca7c5151537c6a4c5499f47639570c64671cde1c2953887436fe85eb011d3ccff24a8cbd255810c08c41489855ac448ad8d4190a35c4a", 0xbd}], 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x37) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) prctl$PR_SET_PDEATHSIG(0x1, 0x7) prctl$PR_SET_PDEATHSIG(0x1, 0x26) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000180)={0x7, 0x80, 0x2, 0x8001, 0x10}) prctl$PR_SET_PDEATHSIG(0x1, 0x34) prctl$PR_SET_PDEATHSIG(0x1, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x23) 3.553220357s ago: executing program 4 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmmsg$inet(r5, 0x0, 0x0, 0x8010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, 0x0, 0x0) 3.126874305s ago: executing program 3 (id=1536): r0 = syz_io_uring_setup(0x6225, &(0x7f0000000340)={0x0, 0x5cb1, 0x402, 0x80002, 0x17b}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000040)=0xfffd, 0x4) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r2, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r6, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0x8, 0x4) 2.877439357s ago: executing program 5 (id=1537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xa}]}}}}}}}, 0x0) 2.702249623s ago: executing program 1 (id=1538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, &(0x7f0000000c00)=ANY=[]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmmsg$inet(r5, 0x0, 0x0, 0x8010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) 2.494308881s ago: executing program 5 (id=1539): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x18}, 0x24, 0x0, 0x10000, 0x3, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) clock_adjtime(0x4, &(0x7f0000000000)={0x2, 0x0, 0x825, 0x5, 0xfffffffffffffc01, 0x800000000009, 0x80000001, 0x1ffffffff, 0x1, 0x2, 0x2, 0xd00, 0xfa13, 0xd, 0x3, 0x1, 0x10000, 0xffff, 0x7bb, 0xffffffbfffffffff, 0x7fff, 0x6, 0x4, 0x7d04, 0xfffffffffffffffc, 0x473}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x1, 0x2, 0x3, 0x4}}, 0x2e) 1.624339368s ago: executing program 4 (id=1540): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000200008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x13, 0x2001}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x10a220, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) get_robust_list(0x0, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) fallocate(r4, 0x0, 0xbf5, 0x2000402) 1.4774036s ago: executing program 2 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107504e191568c"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 1.380787769s ago: executing program 3 (id=1542): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbc3, &(0x7f0000003d80)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x48c0}, 0x810) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x2404c080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000003400000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 1.240804761s ago: executing program 5 (id=1543): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x400}, 0xfffffd01) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000001500)=""/237, 0xed}, {&(0x7f0000001600)=""/192, 0xc0}], 0x6, &(0x7f00000000c0)=""/11, 0xb}, 0x100) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)={0x2, 'pim6reg\x00', {0x4}, 0x3}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x24008046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x46a204, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000001900)={r8, 0x0, 0x2, 0x0, 0x7b97a3d4, 0x2, [0x4, 0x1, 0xffffffffffff7fff, 0x6, 0x10, 0x7]}) 1.03069278s ago: executing program 3 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0, 0x60}, 0xc) 930.341479ms ago: executing program 3 (id=1545): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x101}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca", 0x46}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4", 0xc1}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 872.458404ms ago: executing program 3 (id=1546): r0 = syz_io_uring_setup(0x6225, &(0x7f0000000340)={0x0, 0x5cb1, 0x402, 0x80002, 0x17b}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000040)=0xfffd, 0x4) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(0xffffffffffffffff, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r5, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0x8, 0x4) 323.036182ms ago: executing program 1 (id=1547): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009500"/28], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x600, 0x4000000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3c}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107504e191568c04793fadcbefe933e900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) close(0xffffffffffffffff) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) 251.288918ms ago: executing program 2 (id=1548): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27f", 0x88}], 0x1, 0x0, 0x0, 0x7}, 0x0) 205.548043ms ago: executing program 2 (id=1549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140d, 0x920, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xa}]}}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x5c, 0x64, 0x0, 0x4, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x4e23, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ad9d19e2d6cc6c40e5a7effb50d9cd03ae950ea24d34e3c7", "93f472fe42b31a88da3b514de88e68a15e012825d7c81fbb31c9e0049318d963"}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 98.276912ms ago: executing program 2 (id=1550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/146, 0x92}, {0x0}, {0x0}], 0x5, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmmsg$inet(r5, 0x0, 0x0, 0x8010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) 0s ago: executing program 4 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x58}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x4000000) r1 = socket(0x11, 0x3, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x3, 0x200}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_genetlink_get_family_id$team(&(0x7f0000000680), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0) kernel console output (not intermixed with test programs): ct_r:unlabeled_t tclass=dir permissive=1 [ 202.770541][ T6987] loop3: p2 size 591360 extends beyond EOD, truncated [ 202.803284][ T6999] loop5: detected capacity change from 0 to 512 [ 202.824508][ T6999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.866004][ T6999] EXT4-fs (loop5): 1 truncate cleaned up [ 202.872421][ T6999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.912317][ T6999] FAULT_INJECTION: forcing a failure. [ 202.912317][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.926259][ T6987] loop3: p5 size 591360 extends beyond EOD, truncated [ 202.974959][ T2999] loop3: p1 < > p2 p4 < p5 > [ 202.982129][ T2999] loop3: partition table partially beyond EOD, truncated [ 202.982560][ T6984] loop1: detected capacity change from 0 to 1024 [ 202.993826][ T2999] loop3: p1 start 134217728 is beyond EOD, truncated [ 203.013680][ T6999] CPU: 0 UID: 0 PID: 6999 Comm: syz.5.965 Not tainted syzkaller #0 PREEMPT(full) [ 203.013707][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.013801][ T6999] Call Trace: [ 203.013808][ T6999] [ 203.013818][ T6999] __dump_stack+0x1d/0x30 [ 203.013848][ T6999] dump_stack_lvl+0x95/0xd0 [ 203.013876][ T6999] dump_stack+0x15/0x1b [ 203.013966][ T6999] should_fail_ex+0x263/0x280 [ 203.013992][ T6999] should_fail+0xb/0x20 [ 203.014087][ T6999] should_fail_usercopy+0x1a/0x20 [ 203.014186][ T6999] _copy_to_user+0x20/0xa0 [ 203.014224][ T6999] ext4_ioctl+0x17bd/0x31b0 [ 203.014255][ T6999] ? ioctl_has_perm+0x27e/0x2d0 [ 203.014284][ T6999] ? do_vfs_ioctl+0x84f/0xe70 [ 203.014316][ T6999] ? selinux_file_ioctl+0x5f7/0xcb0 [ 203.014338][ T6999] ? __rcu_read_unlock+0x4e/0x70 [ 203.014358][ T6999] ? __rcu_read_unlock+0x4e/0x70 [ 203.014380][ T6999] ? __fget_files+0x184/0x1c0 [ 203.014406][ T6999] ? mutex_lock+0x57/0x90 [ 203.014531][ T6999] ? __pfx_ext4_ioctl+0x10/0x10 [ 203.014583][ T6999] __se_sys_ioctl+0xce/0x140 [ 203.014613][ T6999] __x64_sys_ioctl+0x43/0x50 [ 203.014724][ T6999] x64_sys_call+0x1563/0x3020 [ 203.014755][ T6999] do_syscall_64+0x12c/0x370 [ 203.014835][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.014916][ T6999] RIP: 0033:0x7f9317fbc629 [ 203.014935][ T6999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.014956][ T6999] RSP: 002b:00007f9316a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.014980][ T6999] RAX: ffffffffffffffda RBX: 00007f9318235fa0 RCX: 00007f9317fbc629 [ 203.014996][ T6999] RDX: 0000200000000200 RSI: 00000000c020662a RDI: 0000000000000004 [ 203.015035][ T6999] RBP: 00007f9316a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.015048][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.015061][ T6999] R13: 00007f9318236038 R14: 00007f9318235fa0 R15: 00007ffeaee6a048 [ 203.015090][ T6999] [ 203.034038][ T2999] loop3: p2 size 591360 extends beyond EOD, [ 203.128892][ T6984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.131034][ T2999] truncated [ 203.223730][ T6990] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.961: bit already cleared for inode 13 [ 203.225479][ T2999] loop3: p5 size 591360 extends beyond EOD, [ 203.228621][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.233718][ T2999] truncated [ 203.288071][ T7012] netlink: 'syz.5.967': attribute type 10 has an invalid length. [ 203.303781][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 203.315607][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 203.337476][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 203.371335][ T7018] No such timeout policy "syz1" [ 203.383717][ T7020] loop5: detected capacity change from 0 to 512 [ 203.393984][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 203.401356][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 203.406767][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 203.455150][ T7020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.473162][ T7025] loop4: detected capacity change from 0 to 512 [ 203.498687][ T7025] EXT4-fs: Ignoring removed i_version option [ 203.535423][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.536406][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.558847][ T7018] loop2: detected capacity change from 0 to 512 [ 203.590538][ T7018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.603457][ T7018] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.645169][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.667195][ T7037] loop5: detected capacity change from 0 to 2048 [ 203.692847][ T7039] loop2: detected capacity change from 0 to 512 [ 203.699838][ T7039] EXT4-fs: Ignoring removed nobh option [ 203.705871][ T7039] ext4: Bad value for 'max_dir_size_kb' [ 203.720361][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.010340][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.285027][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.311366][ T7058] futex_wake_op: syz.3.978 tries to shift op by 36; fix this program [ 205.357602][ T7075] loop4: detected capacity change from 0 to 8192 [ 205.439912][ T3279] loop4: p1 < > p2 p4 < p5 > [ 205.450673][ T3279] loop4: partition table partially beyond EOD, truncated [ 205.458614][ T3279] loop4: p1 start 134217728 is beyond EOD, truncated [ 205.463106][ T6984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.466967][ T3279] loop4: p2 size 591360 extends beyond EOD, truncated [ 205.526703][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.532812][ T3279] loop4: p5 size 591360 extends beyond EOD, truncated [ 205.577533][ T7075] loop4: p1 < > p2 p4 < p5 > [ 205.583556][ T7085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.603548][ T7075] loop4: partition table partially beyond EOD, truncated [ 205.614571][ T7075] loop4: p1 start 134217728 is beyond EOD, truncated [ 205.621605][ T7075] loop4: p2 size 591360 extends beyond EOD, [ 205.623937][ T7085] EXT4-fs (loop3): 1 truncate cleaned up [ 205.624052][ T7086] net_ratelimit: 5 callbacks suppressed [ 205.624076][ T7086] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 205.630689][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.704425][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.728128][ T3569] loop5: p1 < > p2 p4 < p5 > [ 205.732015][ T7075] truncated [ 205.732884][ T3569] loop5: partition table partially beyond EOD, [ 205.740937][ T7089] EXT4-fs: Ignoring removed i_version option [ 205.754243][ T7075] loop4: p5 size 591360 extends beyond EOD, truncated [ 205.760977][ T3569] truncated [ 205.775702][ T3569] loop5: p1 start 134217728 is beyond EOD, truncated [ 205.782980][ T3569] loop5: p2 size 591360 extends beyond EOD, truncated [ 205.800494][ T3569] loop5: p5 size 591360 extends beyond EOD, truncated [ 205.820517][ T7082] loop5: p1 < > p2 p4 < p5 > [ 205.826441][ T7082] loop5: partition table partially beyond EOD, truncated [ 205.843679][ T7082] loop5: p1 start 134217728 is beyond EOD, truncated [ 205.843868][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.850449][ T7082] loop5: p2 size 591360 extends beyond EOD, truncated [ 205.851518][ T7082] loop5: p5 size 591360 extends beyond EOD, truncated [ 206.556295][ T7116] futex_wake_op: syz.4.995 tries to shift op by 36; fix this program [ 206.614923][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.841689][ T7130] EXT4-fs: Ignoring removed i_version option [ 207.014161][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.600096][ T7128] set_capacity_and_notify: 4 callbacks suppressed [ 207.600113][ T7128] loop2: detected capacity change from 0 to 8192 [ 207.831447][ T7128] loop2: p1 < > p2 p4 < p5 > [ 207.874099][ T7128] loop2: partition table partially beyond EOD, truncated [ 207.892197][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.931766][ T7128] loop2: p1 start 134217728 is beyond EOD, truncated [ 207.959687][ T7128] loop2: p2 size 591360 extends beyond EOD, truncated [ 207.986406][ T7128] loop2: p5 size 591360 extends beyond EOD, truncated [ 208.337063][ T7143] loop5: detected capacity change from 0 to 8192 [ 208.574661][ T7147] loop4: detected capacity change from 0 to 512 [ 208.581324][ T7147] EXT4-fs: Ignoring removed i_version option [ 208.587134][ T7143] loop5: p1 < > p2 p4 < p5 > [ 208.609167][ T7147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.613694][ T7143] loop5: partition table partially beyond EOD, truncated [ 208.629714][ T7143] loop5: p1 start 134217728 is beyond EOD, truncated [ 208.636697][ T7143] loop5: p2 size 591360 extends beyond EOD, truncated [ 208.647377][ T7143] loop5: p5 size 591360 extends beyond EOD, truncated [ 208.688204][ T2999] loop5: p1 < > p2 p4 < p5 > [ 208.694807][ T2999] loop5: partition table partially beyond EOD, truncated [ 208.706177][ T2999] loop5: p1 start 134217728 is beyond EOD, truncated [ 208.713064][ T2999] loop5: p2 size 591360 extends beyond EOD, truncated [ 208.723387][ T2999] loop5: p5 size 591360 extends beyond EOD, truncated [ 208.727726][ T7154] syzkaller0: entered promiscuous mode [ 208.740921][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 208.750561][ T7154] syzkaller0: entered allmulticast mode [ 208.765734][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 208.779254][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 208.793531][ T28] audit: type=1326 audit(1771897966.197:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.797409][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 208.819136][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 208.841854][ T28] audit: type=1326 audit(1771897966.197:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.844226][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 208.869198][ T28] audit: type=1326 audit(1771897966.197:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.899716][ T28] audit: type=1326 audit(1771897966.197:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.923518][ T28] audit: type=1326 audit(1771897966.197:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.933453][ T7160] loop5: detected capacity change from 0 to 512 [ 208.953246][ T28] audit: type=1326 audit(1771897966.197:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 208.977735][ T7160] EXT4-fs: Ignoring removed i_version option [ 208.981609][ T28] audit: type=1326 audit(1771897966.197:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 209.007570][ T28] audit: type=1326 audit(1771897966.197:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 209.031482][ T28] audit: type=1326 audit(1771897966.197:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 209.057841][ T7160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.085064][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 209.101443][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 209.122986][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 209.183741][ T28] audit: type=1326 audit(1771897966.197:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7153 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953392c629 code=0x7ffc0000 [ 209.225326][ T7163] syzkaller0: entered promiscuous mode [ 209.231263][ T7163] syzkaller0: entered allmulticast mode [ 209.397417][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.476393][ T7168] loop4: detected capacity change from 0 to 4096 [ 209.483803][ T7168] EXT4-fs (loop4): unsupported descriptor size 0 [ 209.609518][ T7173] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 209.763359][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.945812][ T7180] loop1: detected capacity change from 0 to 512 [ 209.975601][ T7180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.988264][ T7180] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.081371][ T7180] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1015: iget: bad i_size value: 2533274857506816 [ 210.161060][ T7188] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1015: iget: bad i_size value: 2533274857506816 [ 210.254212][ T7180] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1015: iget: bad i_size value: 2533274857506816 [ 210.505006][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.615258][ T7197] loop4: detected capacity change from 0 to 512 [ 210.645708][ T7197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.652578][ T7198] futex_wake_op: syz.2.1018 tries to shift op by 36; fix this program [ 210.734060][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.890285][ T7203] loop1: detected capacity change from 0 to 8192 [ 210.913678][ T7209] loop3: detected capacity change from 0 to 4096 [ 210.929545][ T7209] EXT4-fs (loop3): unsupported descriptor size 0 [ 210.966513][ T7203] loop1: p1 < > p2 p4 < p5 > [ 211.015425][ T7203] loop1: partition table partially beyond EOD, truncated [ 211.073759][ T7203] loop1: p1 start 134217728 is beyond EOD, truncated [ 211.082755][ T7210] syzkaller0: entered promiscuous mode [ 211.092822][ T7210] syzkaller0: entered allmulticast mode [ 211.106628][ T7203] loop1: p2 size 591360 extends beyond EOD, truncated [ 211.135134][ T7203] loop1: p5 size 591360 extends beyond EOD, truncated [ 211.247571][ T7186] loop5: detected capacity change from 0 to 8192 [ 211.308004][ T7223] EXT4-fs: Ignoring removed i_version option [ 211.337458][ T7186] loop5: p1 < > p2 p4 < p5 > [ 211.349316][ T7186] loop5: partition table partially beyond EOD, truncated [ 211.371066][ T7223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.398275][ T7186] loop5: p1 start 134217728 is beyond EOD, truncated [ 211.455713][ T7186] loop5: p2 size 591360 extends beyond EOD, truncated [ 211.471621][ T7186] loop5: p5 size 591360 extends beyond EOD, truncated [ 211.613498][ T3279] loop2: p1 < > p2 p4 < p5 > [ 211.618207][ T3279] loop2: partition table partially beyond EOD, truncated [ 211.634603][ T3279] loop2: p1 start 134217728 is beyond EOD, truncated [ 211.651585][ T3279] loop2: p2 size 591360 extends beyond EOD, truncated [ 211.661036][ T3279] loop2: p5 size 591360 extends beyond EOD, truncated [ 211.675115][ T7229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.719299][ T7224] loop2: p1 < > p2 p4 < p5 > [ 211.734511][ T7224] loop2: partition table partially beyond EOD, truncated [ 211.774319][ T7224] loop2: p1 start 134217728 is beyond EOD, truncated [ 211.792664][ T7224] loop2: p2 size 591360 extends beyond EOD, truncated [ 211.811677][ T7224] loop2: p5 size 591360 extends beyond EOD, truncated [ 212.203648][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.265379][ T7241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.300380][ T7241] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.315860][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.386080][ T7247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.406989][ T7241] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1027: iget: bad i_size value: 2533274857506816 [ 212.427596][ T7250] FAULT_INJECTION: forcing a failure. [ 212.427596][ T7250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.451944][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz.1.1029 Not tainted syzkaller #0 PREEMPT(full) [ 212.452076][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.452088][ T7250] Call Trace: [ 212.452094][ T7250] [ 212.452102][ T7250] __dump_stack+0x1d/0x30 [ 212.452195][ T7250] dump_stack_lvl+0x95/0xd0 [ 212.452249][ T7250] dump_stack+0x15/0x1b [ 212.452273][ T7250] should_fail_ex+0x263/0x280 [ 212.452307][ T7250] should_fail+0xb/0x20 [ 212.452328][ T7250] should_fail_usercopy+0x1a/0x20 [ 212.452353][ T7250] _copy_from_iter+0xcf/0xea0 [ 212.452422][ T7250] ? __alloc_skb+0x4f6/0x690 [ 212.452444][ T7250] ? __alloc_skb+0x200/0x690 [ 212.452470][ T7250] netlink_sendmsg+0x4ae/0x6f0 [ 212.452503][ T7250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.452573][ T7250] ____sys_sendmsg+0x5af/0x600 [ 212.452605][ T7250] ___sys_sendmsg+0x195/0x1e0 [ 212.452669][ T7250] __x64_sys_sendmsg+0xd4/0x160 [ 212.452702][ T7250] x64_sys_call+0x194c/0x3020 [ 212.452731][ T7250] do_syscall_64+0x12c/0x370 [ 212.452772][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.452863][ T7250] RIP: 0033:0x7f8236fdc629 [ 212.452882][ T7250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.452902][ T7250] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.452991][ T7250] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 212.453007][ T7250] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 212.453022][ T7250] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.453035][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.453080][ T7250] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 212.453148][ T7250] [ 212.453731][ T7241] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1027: iget: bad i_size value: 2533274857506816 [ 212.657451][ T7252] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1027: iget: bad i_size value: 2533274857506816 [ 212.690959][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.720344][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.814976][ T7263] set_capacity_and_notify: 5 callbacks suppressed [ 212.814994][ T7263] loop3: detected capacity change from 0 to 4096 [ 212.828899][ T7263] EXT4-fs (loop3): unsupported descriptor size 0 [ 212.959308][ T7266] loop1: detected capacity change from 0 to 512 [ 213.175276][ T7266] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1036: inode has both inline data and extents flags [ 213.316912][ T7266] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.317792][ T7266] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1036: couldn't read orphan inode 15 (err -117) [ 213.327364][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 213.327384][ C1] EXT4-fs (loop1): initial error at time 1771897970: ext4_orphan_get:1391: inode 15 [ 213.327416][ C1] EXT4-fs (loop1): last error at time 1771897970: ext4_orphan_get:1391: inode 15 [ 213.480271][ T7266] loop1: lost filesystem error report for type 5 error -117 [ 213.936865][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.014648][ T7289] loop5: detected capacity change from 0 to 512 [ 215.021347][ T7289] EXT4-fs: Ignoring removed i_version option [ 215.050653][ T7287] loop2: detected capacity change from 0 to 2048 [ 215.058413][ T7289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.203829][ T7286] syz_tun: entered allmulticast mode [ 215.209783][ T7266] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 215.218321][ T7266] mroute: pending queue full, dropping entries [ 215.235860][ T7287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.267344][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.608270][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.089247][ T7299] loop3: detected capacity change from 0 to 512 [ 216.100068][ T7305] loop2: detected capacity change from 0 to 512 [ 216.144379][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.145194][ T7300] FAULT_INJECTION: forcing a failure. [ 216.145194][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 216.161115][ T7299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.169657][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.1.1040 Not tainted syzkaller #0 PREEMPT(full) [ 216.169686][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.169698][ T7300] Call Trace: [ 216.169706][ T7300] [ 216.169714][ T7300] __dump_stack+0x1d/0x30 [ 216.169801][ T7300] dump_stack_lvl+0x95/0xd0 [ 216.169825][ T7300] dump_stack+0x15/0x1b [ 216.169847][ T7300] should_fail_ex+0x263/0x280 [ 216.169871][ T7300] should_failslab+0x8c/0xb0 [ 216.169891][ T7300] kmem_cache_alloc_noprof+0x66/0x400 [ 216.169986][ T7300] ? dst_alloc+0xbd/0x100 [ 216.170011][ T7300] dst_alloc+0xbd/0x100 [ 216.170036][ T7300] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 216.170073][ T7300] ip_route_output_flow+0x65/0x110 [ 216.170111][ T7300] udp_sendmsg+0x1383/0x1590 [ 216.170142][ T7300] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 216.170251][ T7300] ? avc_has_perm+0x101/0x190 [ 216.170279][ T7300] ? __pfx_udp_sendmsg+0x10/0x10 [ 216.170415][ T7300] inet_sendmsg+0xac/0xd0 [ 216.170484][ T7300] ____sys_sendmsg+0x53a/0x600 [ 216.170570][ T7300] ___sys_sendmsg+0x195/0x1e0 [ 216.170633][ T7300] ? path_openat+0x1b01/0x2050 [ 216.170674][ T7300] __sys_sendmmsg+0x185/0x320 [ 216.170709][ T7300] __x64_sys_sendmmsg+0x57/0x70 [ 216.170773][ T7300] x64_sys_call+0x27aa/0x3020 [ 216.170799][ T7300] do_syscall_64+0x12c/0x370 [ 216.170851][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.170873][ T7300] RIP: 0033:0x7f8236fdc629 [ 216.170892][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.170910][ T7300] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.170933][ T7300] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 216.170948][ T7300] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 216.171026][ T7300] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.171040][ T7300] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 216.171054][ T7300] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 216.171074][ T7300] [ 216.306750][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.318989][ T7299] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.333005][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.346831][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 216.346846][ T28] audit: type=1400 audit(1771897973.747:681): avc: denied { accept } for pid=7314 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.358848][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.370585][ T7299] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1043: iget: bad i_size value: 2533274857506816 [ 216.404688][ T70] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.412531][ T7299] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1043: iget: bad i_size value: 2533274857506816 [ 216.417684][ T70] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.518464][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.549371][ T7299] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1043: iget: bad i_size value: 2533274857506816 [ 216.851521][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.435037][ T28] audit: type=1400 audit(1771897974.857:682): avc: denied { watch watch_reads } for pid=7340 comm="syz.5.1051" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 218.397426][ T28] audit: type=1326 audit(1771897975.787:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.480065][ T7347] FAULT_INJECTION: forcing a failure. [ 218.480065][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 218.505116][ T28] audit: type=1326 audit(1771897975.787:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.533677][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.5.1053 Not tainted syzkaller #0 PREEMPT(full) [ 218.533713][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.533728][ T7347] Call Trace: [ 218.533736][ T7347] [ 218.533745][ T7347] __dump_stack+0x1d/0x30 [ 218.533774][ T7347] dump_stack_lvl+0x95/0xd0 [ 218.533826][ T7347] dump_stack+0x15/0x1b [ 218.533852][ T7347] should_fail_ex+0x263/0x280 [ 218.533877][ T7347] should_failslab+0x8c/0xb0 [ 218.533901][ T7347] kmem_cache_alloc_noprof+0x66/0x400 [ 218.533987][ T7347] ? audit_log_start+0x34c/0x730 [ 218.534010][ T7347] audit_log_start+0x34c/0x730 [ 218.534034][ T7347] ? kstrtouint_from_user+0xa8/0xf0 [ 218.534108][ T7347] audit_seccomp+0x47/0x100 [ 218.534163][ T7347] ? __seccomp_filter+0x8db/0x1350 [ 218.534197][ T7347] __seccomp_filter+0x8ec/0x1350 [ 218.534259][ T7347] ? __rcu_read_unlock+0x4e/0x70 [ 218.534283][ T7347] ? __fget_files+0x184/0x1c0 [ 218.534309][ T7347] ? mutex_lock+0x57/0x90 [ 218.534452][ T7347] ? mutex_unlock+0x4e/0x90 [ 218.534485][ T7347] __secure_computing+0x81/0x150 [ 218.534510][ T7347] do_syscall_64+0xd3/0x370 [ 218.534650][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.534675][ T7347] RIP: 0033:0x7f9317fbc629 [ 218.534712][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.534734][ T7347] RSP: 002b:00007f9316a0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 218.534756][ T7347] RAX: ffffffffffffffda RBX: 00007f9318235fa0 RCX: 00007f9317fbc629 [ 218.534769][ T7347] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 218.534785][ T7347] RBP: 00007f9316a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 218.534797][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.534809][ T7347] R13: 00007f9318236038 R14: 00007f9318235fa0 R15: 00007ffeaee6a048 [ 218.534857][ T7347] [ 218.534969][ T7347] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 218.628685][ T28] audit: type=1326 audit(1771897975.787:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.731423][ T7347] audit: out of memory in audit_log_start [ 218.774192][ T28] audit: type=1326 audit(1771897975.787:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.774229][ T28] audit: type=1326 audit(1771897975.797:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.774257][ T28] audit: type=1326 audit(1771897975.797:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9317fbc629 code=0x7ffc0000 [ 218.775237][ T7352] loop2: detected capacity change from 0 to 512 [ 218.775725][ T7352] EXT4-fs: Ignoring removed i_version option [ 218.904441][ T7355] loop1: detected capacity change from 0 to 512 [ 218.919594][ T7355] EXT4-fs: Ignoring removed nobh option [ 218.926006][ T7355] ext4: Bad value for 'max_dir_size_kb' [ 219.238503][ T7364] loop1: detected capacity change from 0 to 8192 [ 219.242832][ T7366] loop3: detected capacity change from 0 to 512 [ 219.297900][ T7364] loop1: p1 < > p2 p4 < p5 > [ 219.312740][ T7364] loop1: partition table partially beyond EOD, truncated [ 219.320263][ T7364] loop1: p1 start 134217728 is beyond EOD, truncated [ 219.327188][ T7364] loop1: p2 size 591360 extends beyond EOD, truncated [ 219.335636][ T7364] loop1: p5 size 591360 extends beyond EOD, truncated [ 219.460919][ T7369] loop3: detected capacity change from 0 to 2048 [ 219.507595][ T7371] netlink: 'syz.4.1061': attribute type 10 has an invalid length. [ 220.066908][ T7388] loop5: detected capacity change from 0 to 512 [ 220.075951][ T7388] EXT4-fs: Ignoring removed i_version option [ 220.106721][ T7375] loop4: detected capacity change from 0 to 1024 [ 220.205250][ T7393] loop1: detected capacity change from 0 to 4096 [ 220.216679][ T7393] EXT4-fs (loop1): unsupported descriptor size 0 [ 220.358130][ T7396] loop2: detected capacity change from 0 to 8192 [ 220.403737][ T3569] loop2: p1 < > p2 p4 < p5 > [ 220.408484][ T3569] loop2: partition table partially beyond EOD, truncated [ 220.431770][ T3569] loop2: p1 start 134217728 is beyond EOD, truncated [ 220.442488][ T7403] vlan3: entered allmulticast mode [ 220.447801][ T3569] loop2: p2 size 591360 extends beyond EOD, truncated [ 220.448415][ T7403] bond0: entered allmulticast mode [ 220.460055][ T7403] bond_slave_0: entered allmulticast mode [ 220.467239][ T7403] bond_slave_1: entered allmulticast mode [ 220.474088][ T3569] loop2: p5 size 591360 extends beyond EOD, truncated [ 220.494711][ T7396] loop2: p1 < > p2 p4 < p5 > [ 220.499947][ T7396] loop2: partition table partially beyond EOD, truncated [ 220.502118][ T7403] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1068'. [ 220.508160][ T7396] loop2: p1 start 134217728 is beyond EOD, truncated [ 220.526322][ T7396] loop2: p2 size 591360 extends beyond EOD, truncated [ 220.534949][ T7396] loop2: p5 size 591360 extends beyond EOD, truncated [ 220.581076][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.590557][ T7403] bond_slave_0: left allmulticast mode [ 220.601098][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.623016][ T7403] bond_slave_1: left allmulticast mode [ 220.637102][ T7403] bond0 (unregistering): Released all slaves [ 220.708292][ T7407] loop3: detected capacity change from 0 to 4096 [ 220.722493][ T7407] EXT4-fs (loop3): unsupported descriptor size 0 [ 221.019111][ T7417] netlink: 'syz.5.1072': attribute type 10 has an invalid length. [ 221.231202][ T7423] FAT-fs (loop2): Directory bread(block 414) failed [ 221.237979][ T7423] FAT-fs (loop2): Directory bread(block 415) failed [ 221.248775][ T7423] FAT-fs (loop2): Directory bread(block 416) failed [ 221.255551][ T7423] FAT-fs (loop2): Directory bread(block 417) failed [ 221.262230][ T7423] FAT-fs (loop2): Directory bread(block 418) failed [ 221.268933][ T7423] FAT-fs (loop2): Directory bread(block 419) failed [ 221.275570][ T7423] FAT-fs (loop2): Directory bread(block 420) failed [ 221.282281][ T7423] FAT-fs (loop2): Directory bread(block 421) failed [ 221.289808][ T7423] FAT-fs (loop2): Directory bread(block 414) failed [ 221.297201][ T7423] FAT-fs (loop2): Directory bread(block 415) failed [ 221.331054][ T7423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1075'. [ 221.566705][ T3279] loop1: p1 < > p2 p4 < p5 > [ 221.575374][ T3279] loop1: partition table partially beyond EOD, truncated [ 221.583294][ T3279] loop1: p1 start 134217728 is beyond EOD, truncated [ 221.590448][ T3279] loop1: p2 size 591360 extends beyond EOD, truncated [ 221.598621][ T3279] loop1: p5 size 591360 extends beyond EOD, truncated [ 221.631782][ T7433] loop1: p1 < > p2 p4 < p5 > [ 221.636640][ T7433] loop1: partition table partially beyond EOD, truncated [ 221.646737][ T7433] loop1: p1 start 134217728 is beyond EOD, truncated [ 221.653484][ T7433] loop1: p2 size 591360 extends beyond EOD, truncated [ 221.666020][ T7433] loop1: p5 size 591360 extends beyond EOD, truncated [ 222.148669][ T7436] EXT4-fs (loop5): unsupported descriptor size 0 [ 222.242000][ T7439] FAULT_INJECTION: forcing a failure. [ 222.242000][ T7439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.255322][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 222.255386][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.255399][ T7439] Call Trace: [ 222.255407][ T7439] [ 222.255415][ T7439] __dump_stack+0x1d/0x30 [ 222.255467][ T7439] dump_stack_lvl+0x95/0xd0 [ 222.255493][ T7439] dump_stack+0x15/0x1b [ 222.255517][ T7439] should_fail_ex+0x263/0x280 [ 222.255617][ T7439] should_fail+0xb/0x20 [ 222.255703][ T7439] should_fail_usercopy+0x1a/0x20 [ 222.255729][ T7439] _copy_from_iter+0xcf/0xea0 [ 222.255755][ T7439] ? __alloc_skb+0x4f6/0x690 [ 222.255804][ T7439] ? __alloc_skb+0x200/0x690 [ 222.255829][ T7439] netlink_sendmsg+0x4ae/0x6f0 [ 222.255861][ T7439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.255938][ T7439] ____sys_sendmsg+0x5af/0x600 [ 222.255971][ T7439] ___sys_sendmsg+0x195/0x1e0 [ 222.256011][ T7439] __x64_sys_sendmsg+0xd4/0x160 [ 222.256041][ T7439] x64_sys_call+0x194c/0x3020 [ 222.256099][ T7439] do_syscall_64+0x12c/0x370 [ 222.256173][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.256257][ T7439] RIP: 0033:0x7f8236fdc629 [ 222.256276][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.256361][ T7439] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.256425][ T7439] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 222.256471][ T7439] RDX: 0000000004000044 RSI: 0000200000000180 RDI: 0000000000000003 [ 222.256486][ T7439] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.256501][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.256515][ T7439] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 222.256536][ T7439] [ 222.532040][ T7448] EXT4-fs: Ignoring removed i_version option [ 222.553534][ T7450] EXT4-fs: Ignoring removed i_version option [ 222.570744][ T7375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.613325][ T7455] netlink: 'syz.5.1084': attribute type 10 has an invalid length. [ 222.679347][ T7460] EXT4-fs: Ignoring removed i_version option [ 223.828850][ T7473] set_capacity_and_notify: 9 callbacks suppressed [ 223.828868][ T7473] loop2: detected capacity change from 0 to 512 [ 223.913175][ T7473] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.135738][ T7489] FAULT_INJECTION: forcing a failure. [ 224.135738][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 224.151811][ T7487] loop1: detected capacity change from 0 to 2048 [ 224.158295][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 224.158349][ T28] audit: type=1400 audit(1771897981.557:733): avc: denied { listen } for pid=7488 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.191398][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 224.191429][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.191484][ T7489] Call Trace: [ 224.191491][ T7489] [ 224.191498][ T7489] __dump_stack+0x1d/0x30 [ 224.191555][ T7489] dump_stack_lvl+0x95/0xd0 [ 224.191648][ T7489] dump_stack+0x15/0x1b [ 224.191669][ T7489] should_fail_ex+0x263/0x280 [ 224.191784][ T7489] should_failslab+0x8c/0xb0 [ 224.191804][ T7489] kmem_cache_alloc_noprof+0x66/0x400 [ 224.191829][ T7489] ? alloc_empty_file+0x76/0x200 [ 224.191864][ T7489] alloc_empty_file+0x76/0x200 [ 224.191943][ T7489] alloc_file_pseudo+0xf6/0x190 [ 224.191968][ T7489] sock_alloc_file+0x9c/0x1e0 [ 224.192004][ T7489] do_accept+0x1e3/0x390 [ 224.192108][ T7489] __sys_accept4+0xbe/0x170 [ 224.192141][ T7489] __x64_sys_accept4+0x51/0x60 [ 224.192187][ T7489] x64_sys_call+0x48d/0x3020 [ 224.192212][ T7489] do_syscall_64+0x12c/0x370 [ 224.192291][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.192312][ T7489] RIP: 0033:0x7faebed8c629 [ 224.192329][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.192353][ T7489] RSP: 002b:00007faebd7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 224.192378][ T7489] RAX: ffffffffffffffda RBX: 00007faebf005fa0 RCX: 00007faebed8c629 [ 224.192414][ T7489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 224.192426][ T7489] RBP: 00007faebd7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.192453][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.192467][ T7489] R13: 00007faebf006038 R14: 00007faebf005fa0 R15: 00007fffb21ac838 [ 224.192498][ T7489] [ 224.440033][ T7494] loop3: detected capacity change from 0 to 4096 [ 224.477955][ T7494] EXT4-fs (loop3): unsupported descriptor size 0 [ 224.481006][ T7497] netlink: 'syz.5.1097': attribute type 10 has an invalid length. [ 224.646803][ T7505] loop4: detected capacity change from 0 to 512 [ 224.650842][ T7503] loop5: detected capacity change from 0 to 512 [ 224.657191][ T7505] EXT4-fs: Ignoring removed i_version option [ 224.683511][ T7311] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 224.708502][ T7503] EXT4-fs: Ignoring removed i_version option [ 224.760177][ T28] audit: type=1400 audit(1771897982.177:734): avc: denied { execstack } for pid=7509 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 224.858078][ T7519] loop3: detected capacity change from 0 to 512 [ 224.905149][ T7523] SELinux: Context : is not valid (left unmapped). [ 224.912460][ T28] audit: type=1400 audit(1771897982.327:735): avc: denied { relabelto } for pid=7513 comm="syz.1.1104" name="rdma.current" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 224.940804][ T28] audit: type=1400 audit(1771897982.327:736): avc: denied { associate } for pid=7513 comm="syz.1.1104" name="rdma.current" dev="tmpfs" ino=1225 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 225.006938][ T28] audit: type=1400 audit(1771897982.427:737): avc: denied { unlink } for pid=3309 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 225.024216][ T3319] EXT4-fs unmount: 27 callbacks suppressed [ 225.024233][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.039631][ T7526] FAULT_INJECTION: forcing a failure. [ 225.039631][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 225.059632][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.1.1109 Not tainted syzkaller #0 PREEMPT(full) [ 225.059659][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.059673][ T7526] Call Trace: [ 225.059682][ T7526] [ 225.059691][ T7526] __dump_stack+0x1d/0x30 [ 225.059756][ T7526] dump_stack_lvl+0x95/0xd0 [ 225.059783][ T7526] dump_stack+0x15/0x1b [ 225.059805][ T7526] should_fail_ex+0x263/0x280 [ 225.059837][ T7526] should_failslab+0x8c/0xb0 [ 225.059886][ T7526] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 225.059910][ T7526] ? __alloc_skb+0x2d6/0x690 [ 225.059937][ T7526] __alloc_skb+0x2d6/0x690 [ 225.059961][ T7526] ? __alloc_skb+0x200/0x690 [ 225.060038][ T7526] netlink_alloc_large_skb+0xbf/0xf0 [ 225.060065][ T7526] netlink_sendmsg+0x40c/0x6f0 [ 225.060093][ T7526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.060184][ T7526] ____sys_sendmsg+0x5af/0x600 [ 225.060219][ T7526] ___sys_sendmsg+0x195/0x1e0 [ 225.060338][ T7526] __x64_sys_sendmsg+0xd4/0x160 [ 225.060498][ T7526] x64_sys_call+0x194c/0x3020 [ 225.060541][ T7526] do_syscall_64+0x12c/0x370 [ 225.060575][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.060596][ T7526] RIP: 0033:0x7f8236fdc629 [ 225.060617][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.060635][ T7526] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.060699][ T7526] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 225.060715][ T7526] RDX: 0000000000048040 RSI: 0000200000007580 RDI: 0000000000000003 [ 225.060730][ T7526] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.060773][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.060788][ T7526] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 225.060808][ T7526] [ 225.448995][ T7530] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 225.688875][ T7534] loop3: detected capacity change from 0 to 4096 [ 225.934835][ T7534] EXT4-fs (loop3): unsupported descriptor size 0 [ 226.012550][ T7538] loop1: detected capacity change from 0 to 4096 [ 226.040415][ T7538] EXT4-fs (loop1): unsupported descriptor size 0 [ 226.210107][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.244549][ T7545] FAULT_INJECTION: forcing a failure. [ 226.244549][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 226.257300][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.1.1116 Not tainted syzkaller #0 PREEMPT(full) [ 226.257326][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.257337][ T7545] Call Trace: [ 226.257344][ T7545] [ 226.257353][ T7545] __dump_stack+0x1d/0x30 [ 226.257416][ T7545] dump_stack_lvl+0x95/0xd0 [ 226.257440][ T7545] dump_stack+0x15/0x1b [ 226.257535][ T7545] should_fail_ex+0x263/0x280 [ 226.257562][ T7545] should_failslab+0x8c/0xb0 [ 226.257586][ T7545] kmem_cache_alloc_noprof+0x66/0x400 [ 226.257656][ T7545] ? radix_tree_node_alloc+0x8a/0x1f0 [ 226.257689][ T7545] ? __account_obj_stock+0x211/0x350 [ 226.257774][ T7545] radix_tree_node_alloc+0x8a/0x1f0 [ 226.257809][ T7545] idr_get_free+0x1fa/0x550 [ 226.257882][ T7545] idr_alloc_u32+0xf2/0x1a0 [ 226.257907][ T7545] idr_alloc_cyclic+0x7b/0x140 [ 226.257993][ T7545] bpf_map_alloc_id+0x41/0xf0 [ 226.258020][ T7545] map_create+0xcd5/0xda0 [ 226.258093][ T7545] ? security_bpf+0x2b/0x90 [ 226.258123][ T7545] __sys_bpf+0x5c8/0x7e0 [ 226.258147][ T7545] __x64_sys_bpf+0x41/0x50 [ 226.258178][ T7545] x64_sys_call+0x10cb/0x3020 [ 226.258256][ T7545] do_syscall_64+0x12c/0x370 [ 226.258287][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.258347][ T7545] RIP: 0033:0x7f8236fdc629 [ 226.258366][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.258389][ T7545] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.258412][ T7545] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 226.258455][ T7545] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 226.258468][ T7545] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.258481][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.258495][ T7545] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 226.258517][ T7545] [ 226.497531][ T7547] loop5: detected capacity change from 0 to 512 [ 226.562564][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.631514][ T7547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.654936][ T7547] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.701344][ T7547] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1115: iget: bad i_size value: 2533274857506816 [ 226.732276][ T7555] bond2: option fail_over_mac: invalid value (127) [ 226.748226][ T7547] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1115: iget: bad i_size value: 2533274857506816 [ 226.764540][ T7555] bond2 (unregistering): Released all slaves [ 226.793078][ T7547] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1115: iget: bad i_size value: 2533274857506816 [ 226.826918][ T7542] loop3: detected capacity change from 0 to 8192 [ 226.902989][ T7560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.973844][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.014628][ T7565] tipc: Enabling of bearer rejected, failed to enable media [ 227.072910][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.145707][ T7573] EXT4-fs (loop2): unsupported descriptor size 0 [ 227.216251][ T7575] EXT4-fs: Ignoring removed i_version option [ 227.251179][ T7575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.336200][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.777762][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.399164][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.451669][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.586086][ T7606] FAULT_INJECTION: forcing a failure. [ 228.586086][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.599525][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.2.1131 Not tainted syzkaller #0 PREEMPT(full) [ 228.599552][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.599564][ T7606] Call Trace: [ 228.599572][ T7606] [ 228.599580][ T7606] __dump_stack+0x1d/0x30 [ 228.599671][ T7606] dump_stack_lvl+0x95/0xd0 [ 228.599696][ T7606] dump_stack+0x15/0x1b [ 228.599727][ T7606] should_fail_ex+0x263/0x280 [ 228.599754][ T7606] should_fail+0xb/0x20 [ 228.599777][ T7606] should_fail_usercopy+0x1a/0x20 [ 228.599803][ T7606] _copy_from_user+0x1c/0xb0 [ 228.599843][ T7606] kstrtouint_from_user+0x69/0xf0 [ 228.599866][ T7606] proc_fail_nth_write+0x50/0x160 [ 228.599970][ T7606] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.600004][ T7606] vfs_write+0x269/0x9f0 [ 228.600085][ T7606] ? __rcu_read_unlock+0x4e/0x70 [ 228.600105][ T7606] ? __fget_files+0x184/0x1c0 [ 228.600133][ T7606] ? mutex_lock+0x57/0x90 [ 228.600186][ T7606] ksys_write+0xdc/0x1a0 [ 228.600251][ T7606] __x64_sys_write+0x40/0x50 [ 228.600285][ T7606] x64_sys_call+0x27e1/0x3020 [ 228.600312][ T7606] do_syscall_64+0x12c/0x370 [ 228.600389][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.600416][ T7606] RIP: 0033:0x7f95338ecece [ 228.600461][ T7606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.600479][ T7606] RSP: 002b:00007f953237efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.600500][ T7606] RAX: ffffffffffffffda RBX: 00007f953237f6c0 RCX: 00007f95338ecece [ 228.600522][ T7606] RDX: 0000000000000001 RSI: 00007f953237f0a0 RDI: 0000000000000005 [ 228.600538][ T7606] RBP: 00007f953237f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.600619][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.600634][ T7606] R13: 00007f9533ba6038 R14: 00007f9533ba5fa0 R15: 00007ffccb9a6018 [ 228.600653][ T7606] [ 228.860810][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.945231][ T7611] set_capacity_and_notify: 6 callbacks suppressed [ 228.945315][ T7611] loop2: detected capacity change from 0 to 512 [ 228.991018][ T7611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.151623][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.347945][ T7615] loop3: detected capacity change from 0 to 4096 [ 229.371864][ T28] audit: type=1400 audit(1771897986.787:738): avc: denied { mount } for pid=7614 comm="syz.4.1132" name="/" dev="rpc_pipefs" ino=20558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 229.399377][ T7615] EXT4-fs (loop3): unsupported descriptor size 0 [ 229.423030][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.486881][ T7623] loop3: detected capacity change from 0 to 128 [ 229.575654][ T7626] loop1: detected capacity change from 0 to 8192 [ 229.641520][ T7626] loop1: p1 < > p2 p4 < p5 > [ 229.651250][ T7626] loop1: partition table partially beyond EOD, truncated [ 229.667201][ T7626] loop1: p1 start 134217728 is beyond EOD, truncated [ 229.683550][ T7626] loop1: p2 size 591360 extends beyond EOD, truncated [ 229.701054][ T7626] loop1: p5 size 591360 extends beyond EOD, truncated [ 230.348050][ T7632] loop1: detected capacity change from 0 to 1024 [ 230.354920][ T7632] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.377092][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.389380][ T7632] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.403078][ T28] audit: type=1400 audit(1771897987.817:739): avc: denied { append } for pid=7631 comm="syz.1.1140" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.439391][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.448637][ T7588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.527502][ T7641] loop1: detected capacity change from 0 to 512 [ 230.570538][ T7641] EXT4-fs: Ignoring removed i_version option [ 230.613354][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.630335][ T7641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.825619][ T7656] loop5: detected capacity change from 0 to 2048 [ 230.908564][ T7656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.264703][ T7650] loop4: detected capacity change from 0 to 8192 [ 231.637422][ T7650] loop4: p1 < > p2 p4 < p5 > [ 231.647533][ T7650] loop4: partition table partially beyond EOD, truncated [ 231.681340][ T7650] loop4: p1 start 134217728 is beyond EOD, truncated [ 231.715394][ T7650] loop4: p2 size 591360 extends beyond EOD, truncated [ 231.816735][ T7650] loop4: p5 size 591360 extends beyond EOD, truncated [ 231.836039][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.374897][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.417965][ T7671] loop1: detected capacity change from 0 to 512 [ 232.440498][ T7671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.484890][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.782604][ T7692] loop1: detected capacity change from 0 to 8192 [ 232.834760][ T7692] loop1: p1 < > p2 p4 < p5 > [ 232.839676][ T7692] loop1: partition table partially beyond EOD, truncated [ 232.847388][ T7692] loop1: p1 start 134217728 is beyond EOD, truncated [ 232.855948][ T7692] loop1: p2 size 591360 extends beyond EOD, truncated [ 232.864683][ T7692] loop1: p5 size 591360 extends beyond EOD, truncated [ 232.877835][ T2999] loop1: p1 < > p2 p4 < p5 > [ 232.885015][ T2999] loop1: partition table partially beyond EOD, truncated [ 232.901983][ T2999] loop1: p1 start 134217728 is beyond EOD, truncated [ 232.915597][ T2999] loop1: p2 size 591360 extends beyond EOD, truncated [ 232.932325][ T2999] loop1: p5 size 591360 extends beyond EOD, truncated [ 233.594395][ T7697] EXT4-fs (loop1): unsupported descriptor size 0 [ 233.618298][ T7651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.259907][ T7717] set_capacity_and_notify: 2 callbacks suppressed [ 234.259947][ T7717] loop4: detected capacity change from 0 to 512 [ 234.277255][ T7710] loop2: detected capacity change from 0 to 8192 [ 234.308200][ T7717] EXT4-fs: Ignoring removed i_version option [ 234.386097][ T7717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.414542][ T3569] loop2: p1 < > p2 p4 < p5 > [ 234.441246][ T3569] loop2: partition table partially beyond EOD, truncated [ 234.484574][ T3569] loop2: p1 start 134217728 is beyond EOD, truncated [ 234.539202][ T3569] loop2: p2 size 591360 extends beyond EOD, truncated [ 234.612746][ T3569] loop2: p5 size 591360 extends beyond EOD, truncated [ 234.684358][ T7710] loop2: p1 < > p2 p4 < p5 > [ 234.692748][ T7710] loop2: partition table partially beyond EOD, truncated [ 234.728389][ T7710] loop2: p1 start 134217728 is beyond EOD, truncated [ 234.759574][ T7710] loop2: p2 size 591360 extends beyond EOD, truncated [ 234.781050][ T7710] loop2: p5 size 591360 extends beyond EOD, truncated [ 234.885515][ T7724] loop5: detected capacity change from 0 to 512 [ 234.980066][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.026159][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 235.028223][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 235.029923][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 235.034472][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 235.036420][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 235.038027][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 235.153804][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.315796][ T7738] futex_wake_op: syz.3.1166 tries to shift op by 36; fix this program [ 235.514705][ T7743] loop5: detected capacity change from 0 to 512 [ 235.533886][ T7743] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1164: iget: bad i_size value: 38620345925642 [ 235.547449][ T7743] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.553436][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 235.563048][ T7743] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1164: couldn't read orphan inode 15 (err -117) [ 235.569099][ C1] EXT4-fs (loop5): initial error at time 1771897992: ext4_orphan_get:1391: inode 15 [ 235.569136][ C1] EXT4-fs (loop5): last error at time 1771897992: ext4_orphan_get:1391 [ 235.581412][ T7743] loop5: lost filesystem error report for type 5 error -117 [ 235.590333][ C1] : inode 15 [ 235.613926][ T7743] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.619577][ T7746] futex_wake_op: syz.1.1167 tries to shift op by 36; fix this program [ 235.650554][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.673516][ T28] audit: type=1400 audit(1771897993.087:740): avc: denied { bind } for pid=7741 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.700697][ T7749] loop3: detected capacity change from 0 to 4096 [ 235.703215][ T28] audit: type=1400 audit(1771897993.117:741): avc: denied { listen } for pid=7741 comm="syz.5.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.727676][ T7749] EXT4-fs (loop3): unsupported descriptor size 0 [ 235.800857][ T7749] loop3: detected capacity change from 0 to 128 [ 235.812522][ T7743] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1164: bg 0: block 5: invalid block bitmap [ 235.824196][ T7756] loop4: detected capacity change from 0 to 128 [ 235.859484][ T7752] netlink: 'syz.5.1164': attribute type 16 has an invalid length. [ 235.859504][ T7752] netlink: 'syz.5.1164': attribute type 17 has an invalid length. [ 235.870072][ T7743] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 235.870114][ T7743] EXT4-fs (loop5): This should not happen!! Data will be lost [ 235.870114][ T7743] [ 235.870574][ T7743] EXT4-fs (loop5): Total free blocks count 0 [ 235.870604][ T7743] EXT4-fs (loop5): Free/Dirty block details [ 235.870632][ T7743] EXT4-fs (loop5): free_blocks=0 [ 235.870904][ T7743] EXT4-fs (loop5): dirty_blocks=1 [ 235.870934][ T7743] EXT4-fs (loop5): Block reservation details [ 235.871044][ T7743] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 235.897227][ T7759] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1172'. [ 236.004736][ T7752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.035461][ T28] audit: type=1400 audit(1771897993.447:742): avc: denied { setopt } for pid=7754 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.065385][ T7763] loop1: detected capacity change from 0 to 2048 [ 236.083920][ T7763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.096476][ T30] bio_check_eod: 92 callbacks suppressed [ 236.096493][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.096493][ T30] loop4: rw=1, sector=129, nr_sectors = 8 limit=128 [ 236.117699][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.117699][ T30] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 236.133120][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.133120][ T30] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 236.146564][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.146564][ T30] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 236.160026][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.160026][ T30] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 236.160300][ T7743] syz.5.1164 (7743) used greatest stack depth: 8264 bytes left [ 236.173989][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.173989][ T30] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 236.195260][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.195260][ T30] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 236.208722][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.208722][ T30] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 236.222243][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.222243][ T30] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 236.235767][ T30] kworker/u8:1: attempt to access beyond end of device [ 236.235767][ T30] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 236.293069][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 236.312044][ T7770] loop2: detected capacity change from 0 to 128 [ 236.335655][ T7772] loop5: detected capacity change from 0 to 2048 [ 236.374305][ T7772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.501977][ T7780] EXT4-fs: Ignoring removed i_version option [ 236.517601][ T7770] FAULT_INJECTION: forcing a failure. [ 236.517601][ T7770] name failslab, interval 1, probability 0, space 0, times 0 [ 236.550042][ T7770] CPU: 1 UID: 0 PID: 7770 Comm: syz.2.1177 Not tainted syzkaller #0 PREEMPT(full) [ 236.550072][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.550087][ T7770] Call Trace: [ 236.550094][ T7770] [ 236.550102][ T7770] __dump_stack+0x1d/0x30 [ 236.550130][ T7770] dump_stack_lvl+0x95/0xd0 [ 236.550154][ T7770] dump_stack+0x15/0x1b [ 236.550178][ T7770] should_fail_ex+0x263/0x280 [ 236.550203][ T7770] should_failslab+0x8c/0xb0 [ 236.550224][ T7770] kmem_cache_alloc_noprof+0x66/0x400 [ 236.550247][ T7770] ? vm_area_alloc+0x2c/0xb0 [ 236.550272][ T7770] vm_area_alloc+0x2c/0xb0 [ 236.550292][ T7770] mmap_region+0x11ce/0x2050 [ 236.550351][ T7770] do_mmap+0x9b2/0xbd0 [ 236.550377][ T7770] vm_mmap_pgoff+0x183/0x2d0 [ 236.550402][ T7770] ksys_mmap_pgoff+0x267/0x310 [ 236.550431][ T7770] x64_sys_call+0x14df/0x3020 [ 236.550459][ T7770] do_syscall_64+0x12c/0x370 [ 236.550495][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.550514][ T7770] RIP: 0033:0x7f953392c629 [ 236.550530][ T7770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.550547][ T7770] RSP: 002b:00007f953237f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 236.550571][ T7770] RAX: ffffffffffffffda RBX: 00007f9533ba5fa0 RCX: 00007f953392c629 [ 236.550587][ T7770] RDX: 000000000100000b RSI: 0000000000002000 RDI: 0000200000000000 [ 236.550601][ T7770] RBP: 00007f953237f090 R08: 0000000000000008 R09: 0000000000000000 [ 236.550615][ T7770] R10: 0000000000002013 R11: 0000000000000246 R12: 0000000000000001 [ 236.550629][ T7770] R13: 00007f9533ba6038 R14: 00007f9533ba5fa0 R15: 00007ffccb9a6018 [ 236.550649][ T7770] [ 236.795754][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.824426][ T3279] loop3: p1 < > p2 p4 < p5 > [ 236.829223][ T3279] loop3: partition table partially beyond EOD, truncated [ 236.836644][ T3279] loop3: p1 start 134217728 is beyond EOD, truncated [ 236.866444][ T3279] loop3: p2 size 591360 extends beyond EOD, truncated [ 236.909041][ T3279] loop3: p5 size 591360 extends beyond EOD, truncated [ 236.930536][ T7781] loop3: p1 < > p2 p4 < p5 > [ 236.964232][ T7781] loop3: partition table partially beyond EOD, truncated [ 236.976463][ T7781] loop3: p1 start 134217728 is beyond EOD, truncated [ 236.983673][ T7781] loop3: p2 size 591360 extends beyond EOD, truncated [ 236.993063][ T7781] loop3: p5 size 591360 extends beyond EOD, truncated [ 237.274359][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.298187][ T7798] EXT4-fs (loop2): unsupported descriptor size 0 [ 237.370265][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.401572][ T7803] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1185'. [ 237.497494][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 237.510223][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 237.515303][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 237.537003][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.830517][ T7816] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 237.901630][ T7818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.944733][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.529409][ T7843] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 238.657863][ T7841] EXT4-fs (loop1): unsupported descriptor size 0 [ 238.747515][ T7845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.865321][ T7850] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1199'. [ 238.883009][ T7845] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.990648][ T7845] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1198: iget: bad i_size value: 2533274857506816 [ 239.039234][ T7845] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1198: iget: bad i_size value: 2533274857506816 [ 239.039829][ T7845] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1198: iget: bad i_size value: 2533274857506816 [ 239.223365][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.460000][ T7864] set_capacity_and_notify: 8 callbacks suppressed [ 239.460021][ T7864] loop3: detected capacity change from 0 to 512 [ 239.496894][ T7864] EXT4-fs: Ignoring removed i_version option [ 240.055835][ T7864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.095603][ T7872] futex_wake_op: syz.4.1204 tries to shift op by 36; fix this program [ 240.117301][ T7868] loop1: detected capacity change from 0 to 4096 [ 240.211856][ T7868] EXT4-fs (loop1): unsupported descriptor size 0 [ 240.500176][ T7884] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1211'. [ 241.925603][ T7904] FAULT_INJECTION: forcing a failure. [ 241.925603][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 241.973521][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.4.1215 Not tainted syzkaller #0 PREEMPT(full) [ 241.973556][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.973648][ T7904] Call Trace: [ 241.973654][ T7904] [ 241.973661][ T7904] __dump_stack+0x1d/0x30 [ 241.973687][ T7904] dump_stack_lvl+0x95/0xd0 [ 241.973715][ T7904] dump_stack+0x15/0x1b [ 241.973800][ T7904] should_fail_ex+0x263/0x280 [ 241.973826][ T7904] should_failslab+0x8c/0xb0 [ 241.973850][ T7904] kmem_cache_alloc_noprof+0x66/0x400 [ 241.973869][ T7904] ? alloc_empty_file+0x76/0x200 [ 241.973939][ T7904] alloc_empty_file+0x76/0x200 [ 241.973965][ T7904] alloc_file_pseudo+0xf6/0x190 [ 241.973997][ T7904] sock_alloc_file+0x9c/0x1e0 [ 241.974074][ T7904] do_accept+0x1e3/0x390 [ 241.974104][ T7904] __sys_accept4+0xbe/0x170 [ 241.974132][ T7904] __x64_sys_accept4+0x51/0x60 [ 241.974154][ T7904] x64_sys_call+0x48d/0x3020 [ 241.974192][ T7904] do_syscall_64+0x12c/0x370 [ 241.974299][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.974320][ T7904] RIP: 0033:0x7f9ff154c629 [ 241.974337][ T7904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.974408][ T7904] RSP: 002b:00007f9feff7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 241.974428][ T7904] RAX: ffffffffffffffda RBX: 00007f9ff17c6090 RCX: 00007f9ff154c629 [ 241.974444][ T7904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 241.974456][ T7904] RBP: 00007f9feff7e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.974469][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.974515][ T7904] R13: 00007f9ff17c6128 R14: 00007f9ff17c6090 R15: 00007ffd7b63c9b8 [ 241.974537][ T7904] [ 242.161238][ T7906] loop2: detected capacity change from 0 to 4096 [ 242.177398][ T7906] EXT4-fs (loop2): unsupported descriptor size 0 [ 242.261270][ T7908] loop1: detected capacity change from 0 to 512 [ 242.314317][ T7908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.334767][ T7908] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.353070][ T7908] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 242.702491][ T7906] loop2: detected capacity change from 0 to 128 [ 242.714200][ T7912] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 242.730344][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.811747][ T7924] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1222'. [ 242.981623][ T7929] loop2: detected capacity change from 0 to 2048 [ 243.004278][ T28] audit: type=1400 audit(1771898000.417:743): avc: denied { ioctl } for pid=7907 comm="syz.1.1217" path="socket:[21024]" dev="sockfs" ino=21024 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 243.053688][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.061304][ T28] audit: type=1400 audit(1771898000.457:744): avc: denied { create } for pid=7907 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 243.184707][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.211674][ T7932] loop3: detected capacity change from 0 to 1024 [ 243.274485][ T7932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.304056][ T7938] futex_wake_op: syz.1.1225 tries to shift op by 36; fix this program [ 243.351702][ T7932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.601963][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.652231][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.830848][ T7969] loop3: detected capacity change from 0 to 4096 [ 243.863458][ T7969] EXT4-fs (loop3): unsupported descriptor size 0 [ 243.875211][ T7972] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1234'. [ 243.892981][ T7974] loop5: detected capacity change from 0 to 512 [ 243.918383][ T7969] loop3: detected capacity change from 0 to 128 [ 243.926604][ T7974] EXT4-fs: Ignoring removed i_version option [ 243.964227][ T7974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.015884][ T7977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.062037][ T7977] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.079319][ T7980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.098672][ T28] audit: type=1400 audit(1771898001.517:745): avc: denied { write } for pid=7976 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.099823][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1236'. [ 244.180797][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.204549][ T28] audit: type=1400 audit(1771898001.627:746): avc: denied { egress } for pid=7950 comm="syz.1.1227" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 244.263452][ T28] audit: type=1400 audit(1771898001.627:747): avc: denied { sendto } for pid=7950 comm="syz.1.1227" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 244.340329][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.993344][ T7989] set_capacity_and_notify: 2 callbacks suppressed [ 244.993363][ T7989] loop2: detected capacity change from 0 to 2048 [ 245.100061][ T7989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.150910][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.097088][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.469101][ T8017] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1246'. [ 247.481672][ T8015] FAULT_INJECTION: forcing a failure. [ 247.481672][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 247.583912][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.2.1244 Not tainted syzkaller #0 PREEMPT(full) [ 247.583938][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.583951][ T8015] Call Trace: [ 247.583957][ T8015] [ 247.583995][ T8015] __dump_stack+0x1d/0x30 [ 247.584021][ T8015] dump_stack_lvl+0x95/0xd0 [ 247.584044][ T8015] dump_stack+0x15/0x1b [ 247.584120][ T8015] should_fail_ex+0x263/0x280 [ 247.584143][ T8015] should_failslab+0x8c/0xb0 [ 247.584238][ T8015] kmem_cache_alloc_noprof+0x66/0x400 [ 247.584262][ T8015] ? alloc_empty_file+0x76/0x200 [ 247.584292][ T8015] alloc_empty_file+0x76/0x200 [ 247.584314][ T8015] path_openat+0x65/0x2050 [ 247.584363][ T8015] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 247.584388][ T8015] ? irqentry_exit+0x91/0x520 [ 247.584493][ T8015] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 247.584522][ T8015] ? do_file_open+0xa6/0x290 [ 247.584553][ T8015] do_file_open+0x16c/0x290 [ 247.584598][ T8015] io_openat2+0x2d8/0x470 [ 247.584621][ T8015] io_openat+0x1b/0x30 [ 247.584644][ T8015] __io_issue_sqe+0xfd/0x2d0 [ 247.584676][ T8015] io_issue_sqe+0x206/0xc00 [ 247.584714][ T8015] ? io_openat_prep+0x252/0x2a0 [ 247.584742][ T8015] io_submit_sqes+0x7fb/0x1270 [ 247.584819][ T8015] __se_sys_io_uring_enter+0x1c9/0xf50 [ 247.584852][ T8015] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 247.584948][ T8015] __x64_sys_io_uring_enter+0x78/0x90 [ 247.584982][ T8015] x64_sys_call+0x1e16/0x3020 [ 247.585037][ T8015] do_syscall_64+0x12c/0x370 [ 247.585150][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.585175][ T8015] RIP: 0033:0x7f953392c629 [ 247.585195][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.585267][ T8015] RSP: 002b:00007f953237f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 247.585365][ T8015] RAX: ffffffffffffffda RBX: 00007f9533ba5fa0 RCX: 00007f953392c629 [ 247.585380][ T8015] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000007 [ 247.585397][ T8015] RBP: 00007f953237f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.585412][ T8015] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 247.585427][ T8015] R13: 00007f9533ba6038 R14: 00007f9533ba5fa0 R15: 00007ffccb9a6018 [ 247.585450][ T8015] [ 248.002786][ T8022] loop5: detected capacity change from 0 to 512 [ 248.170731][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.222901][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.333320][ T8029] loop2: detected capacity change from 0 to 2048 [ 248.356247][ T8031] loop5: detected capacity change from 0 to 512 [ 248.372552][ T8029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.385351][ T8031] EXT4-fs: Ignoring removed i_version option [ 248.399607][ T8031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.705922][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.291718][ T8051] loop4: detected capacity change from 0 to 8192 [ 249.385588][ T3279] loop4: p1 < > p2 p4 < p5 > [ 249.420861][ T3279] loop4: partition table partially beyond EOD, truncated [ 249.428170][ T3279] loop4: p1 start 134217728 is beyond EOD, truncated [ 249.434933][ T3279] loop4: p2 size 591360 extends beyond EOD, truncated [ 249.452019][ T3279] loop4: p5 size 591360 extends beyond EOD, truncated [ 249.480845][ T8051] loop4: p1 < > p2 p4 < p5 > [ 249.486657][ T8051] loop4: partition table partially beyond EOD, truncated [ 249.494800][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.506460][ T8051] loop4: p1 start 134217728 is beyond EOD, truncated [ 249.521009][ T8062] loop3: detected capacity change from 0 to 512 [ 249.529772][ T8051] loop4: p2 size 591360 extends beyond EOD, truncated [ 249.672301][ T8062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.683547][ T8051] loop4: p5 size 591360 extends beyond EOD, truncated [ 249.716486][ T8068] loop2: detected capacity change from 0 to 128 [ 250.159320][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 250.172634][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 250.188512][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 250.350674][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 250.362510][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 250.602352][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 250.893016][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 250.930285][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1267'. [ 250.941089][ T8074] FAT-fs (loop2): Filesystem has been set read-only [ 250.957958][ T8074] bio_check_eod: 85 callbacks suppressed [ 250.957974][ T8074] syz.2.1261: attempt to access beyond end of device [ 250.957974][ T8074] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 251.056302][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 251.079100][ T8096] loop3: detected capacity change from 0 to 512 [ 251.094746][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 251.123255][ T8096] EXT4-fs: Ignoring removed i_version option [ 251.138710][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 251.167592][ T8074] syz.2.1261: attempt to access beyond end of device [ 251.167592][ T8074] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 251.201897][ T8068] syz.2.1261: attempt to access beyond end of device [ 251.201897][ T8068] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 251.226503][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 251.267257][ T8074] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 251.317194][ T8074] syz.2.1261: attempt to access beyond end of device [ 251.317194][ T8074] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 251.488899][ T8108] FAULT_INJECTION: forcing a failure. [ 251.488899][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 251.511392][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.1.1273 Not tainted syzkaller #0 PREEMPT(full) [ 251.511504][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.511518][ T8108] Call Trace: [ 251.511527][ T8108] [ 251.511536][ T8108] __dump_stack+0x1d/0x30 [ 251.511564][ T8108] dump_stack_lvl+0x95/0xd0 [ 251.511650][ T8108] dump_stack+0x15/0x1b [ 251.511706][ T8108] should_fail_ex+0x263/0x280 [ 251.511727][ T8108] should_failslab+0x8c/0xb0 [ 251.511750][ T8108] kmem_cache_alloc_noprof+0x66/0x400 [ 251.511784][ T8108] ? prepare_creds+0x38/0x540 [ 251.511814][ T8108] prepare_creds+0x38/0x540 [ 251.511842][ T8108] __sys_setreuid+0xdb/0x520 [ 251.511891][ T8108] ? ksys_write+0x194/0x1a0 [ 251.511927][ T8108] __x64_sys_setreuid+0x2d/0x40 [ 251.511961][ T8108] x64_sys_call+0x205e/0x3020 [ 251.512045][ T8108] do_syscall_64+0x12c/0x370 [ 251.512101][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.512172][ T8108] RIP: 0033:0x7f8236fdc629 [ 251.512192][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.512215][ T8108] RSP: 002b:00007f8235a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 251.512235][ T8108] RAX: ffffffffffffffda RBX: 00007f8237255fa0 RCX: 00007f8236fdc629 [ 251.512250][ T8108] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 251.512265][ T8108] RBP: 00007f8235a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.512281][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.512340][ T8108] R13: 00007f8237256038 R14: 00007f8237255fa0 R15: 00007ffd73c44908 [ 251.512358][ T8108] [ 251.886452][ T8116] loop1: detected capacity change from 0 to 2048 [ 252.206693][ T8120] loop5: detected capacity change from 0 to 2048 [ 252.403909][ T8137] FAULT_INJECTION: forcing a failure. [ 252.403909][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 252.420266][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT(full) [ 252.420298][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.420384][ T8137] Call Trace: [ 252.420390][ T8137] [ 252.420399][ T8137] __dump_stack+0x1d/0x30 [ 252.420465][ T8137] dump_stack_lvl+0x95/0xd0 [ 252.420491][ T8137] dump_stack+0x15/0x1b [ 252.420516][ T8137] should_fail_ex+0x263/0x280 [ 252.420539][ T8137] ? dev_ethtool+0x96/0x16a0 [ 252.420592][ T8137] should_failslab+0x8c/0xb0 [ 252.420615][ T8137] __kmalloc_cache_noprof+0x5f/0x410 [ 252.420691][ T8137] dev_ethtool+0x96/0x16a0 [ 252.420732][ T8137] ? full_name_hash+0x92/0xe0 [ 252.420822][ T8137] ? strcmp+0x22/0x50 [ 252.420845][ T8137] dev_ioctl+0x2e0/0x960 [ 252.420877][ T8137] sock_do_ioctl+0x1aa/0x230 [ 252.420915][ T8137] sock_ioctl+0x41b/0x610 [ 252.421065][ T8137] ? mutex_lock+0x57/0x90 [ 252.421097][ T8137] ? __pfx_sock_ioctl+0x10/0x10 [ 252.421139][ T8137] __se_sys_ioctl+0xce/0x140 [ 252.421246][ T8137] __x64_sys_ioctl+0x43/0x50 [ 252.421289][ T8137] x64_sys_call+0x1563/0x3020 [ 252.421319][ T8137] do_syscall_64+0x12c/0x370 [ 252.421355][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.421434][ T8137] RIP: 0033:0x7f953392c629 [ 252.421453][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.421474][ T8137] RSP: 002b:00007f953237f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.421550][ T8137] RAX: ffffffffffffffda RBX: 00007f9533ba5fa0 RCX: 00007f953392c629 [ 252.421566][ T8137] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 252.421653][ T8137] RBP: 00007f953237f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.421668][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.421683][ T8137] R13: 00007f9533ba6038 R14: 00007f9533ba5fa0 R15: 00007ffccb9a6018 [ 252.421712][ T8137] [ 252.426185][ T28] audit: type=1400 audit(1771898009.847:748): avc: denied { bind } for pid=8139 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.591979][ T8149] loop1: detected capacity change from 0 to 512 [ 252.594875][ T8147] loop2: detected capacity change from 0 to 512 [ 252.641808][ T8141] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.665679][ T28] audit: type=1400 audit(1771898009.917:749): avc: denied { name_bind } for pid=8139 comm="syz.4.1284" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 252.665746][ T28] audit: type=1400 audit(1771898009.917:750): avc: denied { create } for pid=8139 comm="syz.4.1284" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.665773][ T28] audit: type=1400 audit(1771898009.917:751): avc: denied { map } for pid=8139 comm="syz.4.1284" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.686926][ T8149] EXT4-fs: Ignoring removed i_version option [ 252.709801][ T28] audit: type=1400 audit(1771898009.917:752): avc: denied { read write } for pid=8139 comm="syz.4.1284" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.735529][ T8147] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.836130][ T8157] loop5: detected capacity change from 0 to 512 [ 252.852432][ T8157] EXT4-fs: Ignoring removed i_version option [ 252.889753][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.319830][ T8173] loop4: detected capacity change from 0 to 2048 [ 253.608171][ T8171] loop3: detected capacity change from 0 to 1024 [ 253.847934][ T8195] futex_wake_op: syz.4.1299 tries to shift op by 36; fix this program [ 253.877025][ T8188] loop1: detected capacity change from 0 to 1024 [ 254.005146][ T8215] loop3: detected capacity change from 0 to 512 [ 254.011899][ T8215] EXT4-fs: Ignoring removed nobh option [ 254.018192][ T8215] ext4: Bad value for 'max_dir_size_kb' [ 254.071927][ T8223] EXT4-fs: Ignoring removed i_version option [ 254.201732][ T8197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.479916][ T8241] EXT4-fs: Ignoring removed i_version option [ 254.839998][ T8254] EXT4-fs: Ignoring removed i_version option [ 255.007454][ T8263] EXT4-fs: Ignoring removed nobh option [ 255.013266][ T8263] ext4: Bad value for 'max_dir_size_kb' [ 255.046716][ T8267] 9p: Bad value for 'rfdno' [ 255.056945][ T8267] tipc: Started in network mode [ 255.061886][ T8267] tipc: Node identity ac1414aa, cluster identity 4711 [ 255.068878][ T8267] tipc: New replicast peer: 255.255.255.255 [ 255.075050][ T8267] tipc: Enabled bearer , priority 10 [ 255.154359][ T8271] EXT4-fs (loop2): unsupported descriptor size 0 [ 255.242319][ T8261] EXT4-fs mount: 29 callbacks suppressed [ 255.242350][ T8261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.263489][ T28] audit: type=1400 audit(1771898012.657:753): avc: denied { ioctl } for pid=8276 comm="syz.2.1318" path="socket:[21476]" dev="sockfs" ino=21476 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.318600][ T28] audit: type=1400 audit(1771898012.667:754): avc: denied { getopt } for pid=8276 comm="syz.2.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.367848][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.406475][ T8287] tipc: Started in network mode [ 255.411520][ T8287] tipc: Node identity 8232cb7db17a, cluster identity 4711 [ 255.419027][ T8287] tipc: Enabled bearer , priority 0 [ 255.427944][ T8287] syzkaller0: entered promiscuous mode [ 255.433858][ T8287] syzkaller0: entered allmulticast mode [ 255.457956][ T8287] tipc: Resetting bearer [ 255.650874][ T8286] tipc: Resetting bearer [ 255.677470][ T8286] tipc: Disabling bearer [ 255.721194][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.944087][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.959446][ T8294] EXT4-fs: Ignoring removed i_version option [ 255.987955][ T8297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.003925][ T8294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.047364][ T28] audit: type=1400 audit(1771898013.467:755): avc: denied { unlink } for pid=8296 comm="syz.5.1322" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.072668][ T28] audit: type=1400 audit(1771898013.467:756): avc: denied { rename } for pid=8296 comm="syz.5.1322" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.095230][ T3391] tipc: Node number set to 2886997162 [ 256.114199][ T8307] set_capacity_and_notify: 11 callbacks suppressed [ 256.114217][ T8307] loop4: detected capacity change from 0 to 512 [ 256.161428][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.172641][ T8307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.185682][ T8307] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.278368][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.331351][ T8319] loop4: detected capacity change from 0 to 512 [ 256.358006][ T8319] EXT4-fs: Ignoring removed i_version option [ 256.371961][ T8319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.423492][ T8320] loop2: detected capacity change from 0 to 8192 [ 256.464740][ T3569] loop2: p1 < > p2 p4 < p5 > [ 256.464752][ T3569] loop2: partition table partially beyond EOD, truncated [ 256.464883][ T3569] loop2: p1 start 134217728 is beyond EOD, truncated [ 256.464903][ T3569] loop2: p2 size 591360 extends beyond EOD, truncated [ 256.466183][ T3569] loop2: p5 size 591360 extends beyond EOD, truncated [ 256.495208][ T8320] loop2: p1 < > p2 p4 < p5 > [ 256.495222][ T8320] loop2: partition table partially beyond EOD, truncated [ 256.495414][ T8320] loop2: p1 start 134217728 is beyond EOD, truncated [ 256.495437][ T8320] loop2: p2 size 591360 extends beyond EOD, truncated [ 256.501109][ T8320] loop2: p5 size 591360 extends beyond EOD, truncated [ 256.734445][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.780498][ T8340] tipc: Enabled bearer , priority 0 [ 256.813642][ T8340] syzkaller0: entered promiscuous mode [ 256.819702][ T8340] syzkaller0: entered allmulticast mode [ 256.830754][ T8340] tipc: Resetting bearer [ 256.839090][ T8339] tipc: Resetting bearer [ 256.866440][ T8339] tipc: Disabling bearer [ 257.001640][ T8348] loop3: detected capacity change from 0 to 512 [ 257.082866][ T8348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.174512][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.184468][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.186608][ T8342] loop1: detected capacity change from 0 to 1024 [ 257.360728][ T8342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 257.382515][ T8342] System zones: 0-1, 3-36 [ 257.626897][ T8342] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1334: bad orphan inode 134217728 [ 257.961059][ T8342] loop1: lost filesystem error report for type 5 error -117 [ 257.963440][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 257.977226][ C1] EXT4-fs (loop1): initial error at time 1771898015: ext4_orphan_get:1417 [ 257.985754][ C1] EXT4-fs (loop1): last error at time 1771898015: ext4_orphan_get:1417 [ 258.040188][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.913635][ T28] audit: type=1400 audit(1771898016.307:757): avc: denied { mounton } for pid=8341 comm="syz.1.1334" path="/262/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.960983][ T8342] netlink: 'syz.1.1334': attribute type 5 has an invalid length. [ 259.166872][ T28] audit: type=1400 audit(1771898016.587:758): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.207639][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.271772][ T8386] loop1: detected capacity change from 0 to 2048 [ 259.306330][ T8386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.482959][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.594401][ T8392] loop3: detected capacity change from 0 to 8192 [ 259.602913][ T28] audit: type=1400 audit(1771898017.007:759): avc: denied { map } for pid=8395 comm="syz.1.1350" path="socket:[22211]" dev="sockfs" ino=22211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.632828][ T8400] loop4: detected capacity change from 0 to 512 [ 259.643939][ T8398] futex_wake_op: syz.5.1352 tries to shift op by 36; fix this program [ 259.665536][ T8402] loop1: detected capacity change from 0 to 512 [ 259.672209][ T8402] EXT4-fs: Ignoring removed i_version option [ 259.702988][ T8402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.716016][ T8392] loop3: p1 < > p2 p4 < p5 > [ 259.720735][ T8392] loop3: partition table partially beyond EOD, truncated [ 259.730288][ T8400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.747498][ T8392] loop3: p1 start 134217728 is beyond EOD, truncated [ 259.754264][ T8392] loop3: p2 size 591360 extends beyond EOD, truncated [ 259.765872][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.774905][ T8392] loop3: p5 size 591360 extends beyond EOD, truncated [ 259.883857][ T8411] loop4: detected capacity change from 0 to 2048 [ 259.905720][ T8411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.076837][ T8415] EXT4-fs (loop5): unsupported descriptor size 0 [ 260.207490][ T8420] futex_wake_op: syz.5.1357 tries to shift op by 36; fix this program [ 260.479189][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.743677][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.783184][ T28] audit: type=1400 audit(1771898018.197:760): avc: denied { read } for pid=8431 comm="syz.1.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 260.819455][ T28] audit: type=1400 audit(1771898018.197:761): avc: denied { ioctl } for pid=8431 comm="syz.1.1360" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.848153][ T8433] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 260.867052][ T8435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.945392][ T8436] EXT4-fs: Ignoring removed nobh option [ 260.957449][ T8436] ext4: Bad value for 'max_dir_size_kb' [ 261.112656][ T8428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.257407][ T8456] set_capacity_and_notify: 4 callbacks suppressed [ 261.257426][ T8456] loop3: detected capacity change from 0 to 512 [ 261.276307][ T8456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.277375][ T8429] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.1358: bit already cleared for inode 13 [ 261.318899][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.485587][ T8461] syzkaller0: entered promiscuous mode [ 261.491373][ T8461] syzkaller0: entered allmulticast mode [ 261.522707][ T28] audit: type=1326 audit(1771898018.937:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebed8c629 code=0x7ffc0000 [ 261.574043][ T28] audit: type=1326 audit(1771898018.937:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebed8c629 code=0x7ffc0000 [ 261.617976][ T28] audit: type=1326 audit(1771898018.937:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7faebed8c629 code=0x7ffc0000 [ 261.667090][ T28] audit: type=1326 audit(1771898018.937:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebed8c629 code=0x7ffc0000 [ 261.723341][ T28] audit: type=1326 audit(1771898018.937:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faebed8c629 code=0x7ffc0000 [ 261.988149][ T8466] loop4: detected capacity change from 0 to 8192 [ 262.107279][ T3569] loop4: p1 < > p2 p4 < p5 > [ 262.112151][ T3569] loop4: partition table partially beyond EOD, truncated [ 262.122326][ T3569] loop4: p1 start 134217728 is beyond EOD, truncated [ 262.160352][ T3569] loop4: p2 size 591360 extends beyond EOD, truncated [ 262.175218][ T3569] loop4: p5 size 591360 extends beyond EOD, truncated [ 262.204834][ T8466] loop4: p1 < > p2 p4 < p5 > [ 262.229494][ T8466] loop4: partition table partially beyond EOD, truncated [ 262.258675][ T8466] loop4: p1 start 134217728 is beyond EOD, truncated [ 262.258753][ T8466] loop4: p2 size 591360 extends beyond EOD, truncated [ 262.478992][ T8481] loop3: detected capacity change from 0 to 2048 [ 262.615287][ T8466] loop4: p5 size 591360 extends beyond EOD, truncated [ 262.776950][ T8485] loop2: detected capacity change from 0 to 512 [ 262.806200][ T8481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.179475][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.202804][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.245902][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.283702][ T8428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.318220][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.748567][ T8517] futex_wake_op: syz.3.1382 tries to shift op by 36; fix this program [ 263.782016][ T8514] futex_wake_op: syz.1.1381 tries to shift op by 36; fix this program [ 264.523212][ T8528] loop3: detected capacity change from 0 to 512 [ 264.536563][ T8528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.587640][ T8527] loop1: detected capacity change from 0 to 2048 [ 264.613271][ T8528] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.646595][ T8527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.673229][ T8523] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1384'. [ 264.778728][ T8534] loop5: detected capacity change from 0 to 512 [ 264.818575][ T8534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.890623][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.910953][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.362099][ T8550] loop5: detected capacity change from 0 to 8192 [ 265.400667][ T8555] loop2: detected capacity change from 0 to 2048 [ 265.413288][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.423234][ T3279] loop5: p1 < > p2 p4 < p5 > [ 265.429575][ T3279] loop5: partition table partially beyond EOD, truncated [ 265.463740][ T3279] loop5: p1 start 134217728 is beyond EOD, truncated [ 265.470829][ T3279] loop5: p2 size 591360 extends beyond EOD, truncated [ 265.503022][ T8560] loop3: detected capacity change from 0 to 1024 [ 265.514864][ T3279] loop5: p5 size 591360 extends beyond EOD, truncated [ 265.522430][ T8555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.555592][ T8550] loop5: p1 < > p2 p4 < p5 > [ 265.583662][ T8560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.595832][ T8550] loop5: partition table partially beyond EOD, truncated [ 265.595906][ T8550] loop5: p1 start 134217728 is beyond EOD, [ 265.604635][ T8562] EXT4-fs: Ignoring removed nobh option [ 265.606829][ T8550] truncated [ 265.610615][ T8562] ext4: Bad value for 'max_dir_size_kb' [ 265.616409][ T8550] loop5: p2 size 591360 extends beyond EOD, truncated [ 265.657249][ T8550] loop5: p5 size 591360 extends beyond EOD, truncated [ 265.846134][ T8552] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.1392: bit already cleared for inode 13 [ 266.102612][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.249574][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.881352][ T8584] set_capacity_and_notify: 1 callbacks suppressed [ 266.881371][ T8584] loop3: detected capacity change from 0 to 512 [ 266.900605][ T8588] loop2: detected capacity change from 0 to 512 [ 266.969298][ T8588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.053681][ T8588] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.294226][ T8584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.699427][ T8584] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.729880][ T8584] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1400: iget: bad i_size value: 2533274857506816 [ 267.730676][ T8584] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1400: iget: bad i_size value: 2533274857506816 [ 267.736236][ T8584] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1400: iget: bad i_size value: 2533274857506816 [ 268.547320][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.557667][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.616026][ T8604] loop1: detected capacity change from 0 to 512 [ 268.707453][ T8610] loop3: detected capacity change from 0 to 2048 [ 268.745688][ T8608] loop2: detected capacity change from 0 to 4096 [ 268.752713][ T8610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.791539][ T8608] EXT4-fs (loop2): unsupported descriptor size 0 [ 268.864711][ T8604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.923369][ T8604] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.983945][ T8604] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 269.147800][ T8617] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 269.218754][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.342603][ T8604] syz.1.1406 (8604) used greatest stack depth: 8136 bytes left [ 269.368727][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.430547][ T8633] loop5: detected capacity change from 0 to 8192 [ 269.487361][ T8632] loop2: detected capacity change from 0 to 1024 [ 269.503822][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.560682][ T3569] loop5: p1 < > p2 p4 < p5 > [ 269.566618][ T3569] loop5: partition table partially beyond EOD, truncated [ 269.581356][ T8632] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.1410: bit already cleared for inode 13 [ 269.602900][ T3569] loop5: p1 start 134217728 is beyond EOD, truncated [ 269.621333][ T3569] loop5: p2 size 591360 extends beyond EOD, truncated [ 269.629981][ T3569] loop5: p5 size 591360 extends beyond EOD, truncated [ 269.651237][ T8633] loop5: p1 < > p2 p4 < p5 > [ 269.661665][ T8633] loop5: partition table partially beyond EOD, truncated [ 269.677628][ T8633] loop5: p1 start 134217728 is beyond EOD, truncated [ 269.691718][ T8633] loop5: p2 size 591360 extends beyond EOD, truncated [ 269.752613][ T8645] loop1: detected capacity change from 0 to 8192 [ 269.761750][ T8633] loop5: p5 size 591360 extends beyond EOD, truncated [ 270.098636][ T3279] loop1: p1 < > p2 p4 < p5 > [ 270.111725][ T3279] loop1: partition table partially beyond EOD, truncated [ 270.129215][ T3279] loop1: p1 start 134217728 is beyond EOD, truncated [ 270.173020][ T3279] loop1: p2 size 591360 extends beyond EOD, truncated [ 270.198945][ T3279] loop1: p5 size 591360 extends beyond EOD, truncated [ 270.227340][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.291730][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 270.304637][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 270.355828][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 270.373238][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 270.384653][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 270.396002][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 270.756382][ T8645] loop1: p1 < > p2 p4 < p5 > [ 270.780103][ T8645] loop1: partition table partially beyond EOD, truncated [ 270.813572][ T8645] loop1: p1 start 134217728 is beyond EOD, truncated [ 270.841363][ T8645] loop1: p2 size 591360 extends beyond EOD, truncated [ 270.872868][ T8645] loop1: p5 size 591360 extends beyond EOD, truncated [ 270.989439][ T8662] loop2: detected capacity change from 0 to 2048 [ 271.044491][ T8666] loop1: detected capacity change from 0 to 512 [ 271.051044][ T8666] EXT4-fs: Ignoring removed i_version option [ 271.083188][ T8662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.139930][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.167569][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 271.184630][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 271.196190][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 271.357644][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 272.222216][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.464640][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.523057][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 272.523075][ T28] audit: type=1400 audit(1771898029.937:773): avc: denied { getopt } for pid=8692 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.849352][ T8713] xt_hashlimit: size too large, truncated to 1048576 [ 274.811971][ T8729] loop5: detected capacity change from 0 to 512 [ 274.854460][ T8729] EXT4-fs: Ignoring removed i_version option [ 274.910485][ T8729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.714180][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.756317][ T8745] loop4: detected capacity change from 0 to 8192 [ 275.878967][ T8745] loop4: p1 < > p2 p4 < p5 > [ 275.889130][ T8745] loop4: partition table partially beyond EOD, truncated [ 275.901761][ T8750] futex_wake_op: syz.3.1440 tries to shift op by 36; fix this program [ 275.985028][ T8745] loop4: p1 start 134217728 is beyond EOD, truncated [ 275.991900][ T8745] loop4: p2 size 591360 extends beyond EOD, truncated [ 276.008961][ T8759] loop3: detected capacity change from 0 to 512 [ 276.019875][ T8754] loop5: detected capacity change from 0 to 4096 [ 276.057580][ T8754] EXT4-fs (loop5): unsupported descriptor size 0 [ 276.072762][ T8745] loop4: p5 size 591360 extends beyond EOD, truncated [ 276.097802][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.133226][ T8759] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.149477][ T2999] loop4: p1 < > p2 p4 < p5 > [ 276.164670][ T2999] loop4: partition table partially beyond EOD, truncated [ 276.171879][ T2999] loop4: p1 start 134217728 is beyond EOD, truncated [ 276.213171][ T8759] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1443: iget: bad i_size value: 2533274857506816 [ 276.225776][ T2999] loop4: p2 size 591360 extends beyond EOD, truncated [ 276.234139][ T2999] loop4: p5 size 591360 extends beyond EOD, truncated [ 276.252133][ T8759] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1443: iget: bad i_size value: 2533274857506816 [ 276.346154][ T8767] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1443: iget: bad i_size value: 2533274857506816 [ 276.367906][ T8757] loop1: detected capacity change from 0 to 1024 [ 276.414834][ T8757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.435651][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.592350][ T8787] loop4: detected capacity change from 0 to 512 [ 276.600159][ T8787] EXT4-fs: Ignoring removed i_version option [ 276.630659][ T8787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.697939][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.755400][ T8794] loop1: detected capacity change from 0 to 512 [ 276.810709][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.856441][ T8794] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.870943][ T8782] loop3: detected capacity change from 0 to 1024 [ 276.900297][ T8794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1451'. [ 277.060412][ T8803] loop1: detected capacity change from 0 to 512 [ 277.092805][ T8803] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.109471][ T8803] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1452: iget: bad i_size value: 2533274857506816 [ 277.125015][ T8803] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1452: iget: bad i_size value: 2533274857506816 [ 277.140501][ T8803] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1452: iget: bad i_size value: 2533274857506816 [ 277.380246][ T8814] loop5: detected capacity change from 0 to 512 [ 277.513003][ T8817] EXT4-fs: Ignoring removed i_version option [ 277.591704][ T8814] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.682496][ T8814] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1456: iget: bad i_size value: 2533274857506816 [ 277.744975][ T8825] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1456: iget: bad i_size value: 2533274857506816 [ 277.798092][ T8814] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1456: iget: bad i_size value: 2533274857506816 [ 278.547313][ T8835] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.629196][ T8835] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1462'. [ 278.987130][ T8829] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.030905][ T8829] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 279.154424][ T8857] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 279.209648][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 279.333251][ T8874] EXT4-fs: Ignoring removed i_version option [ 281.778973][ T8911] set_capacity_and_notify: 5 callbacks suppressed [ 281.779027][ T8911] loop4: detected capacity change from 0 to 128 [ 282.989025][ T8924] loop3: detected capacity change from 0 to 512 [ 283.025017][ T8924] EXT4-fs: Ignoring removed nobh option [ 283.049720][ T8913] loop1: detected capacity change from 0 to 8192 [ 283.067406][ T8924] ext4: Bad value for 'max_dir_size_kb' [ 283.220587][ T3279] loop1: p1 < > p2 p4 < p5 > [ 283.239257][ T3279] loop1: partition table partially beyond EOD, truncated [ 283.285865][ T3279] loop1: p1 start 134217728 is beyond EOD, truncated [ 283.317543][ T3279] loop1: p2 size 591360 extends beyond EOD, truncated [ 283.406518][ T3279] loop1: p5 size 591360 extends beyond EOD, truncated [ 283.461393][ T8913] loop1: p1 < > p2 p4 < p5 > [ 283.507784][ T8913] loop1: partition table partially beyond EOD, truncated [ 283.579682][ T8913] loop1: p1 start 134217728 is beyond EOD, truncated [ 283.651033][ T8913] loop1: p2 size 591360 extends beyond EOD, truncated [ 283.751237][ T8913] loop1: p5 size 591360 extends beyond EOD, truncated [ 283.934555][ T8934] loop3: detected capacity change from 0 to 1024 [ 284.123199][ T8945] loop2: detected capacity change from 0 to 2048 [ 284.232232][ T8934] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.1488: bit already cleared for inode 13 [ 285.655042][ T3315] EXT4-fs unmount: 21 callbacks suppressed [ 285.655069][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.536207][ T8978] loop3: detected capacity change from 0 to 512 [ 286.595990][ T8978] EXT4-fs: Ignoring removed nobh option [ 286.926287][ T8978] ext4: Bad value for 'max_dir_size_kb' [ 287.128249][ T8986] loop3: detected capacity change from 0 to 4096 [ 287.167694][ T8986] EXT4-fs (loop3): unsupported descriptor size 0 [ 287.230872][ T8986] loop3: detected capacity change from 0 to 128 [ 287.658826][ T8988] loop2: detected capacity change from 0 to 8192 [ 287.859917][ T8988] loop2: p1 < > p2 p4 < p5 > [ 287.886367][ T8988] loop2: partition table partially beyond EOD, truncated [ 287.918132][ T8988] loop2: p1 start 134217728 is beyond EOD, truncated [ 287.925987][ T8988] loop2: p2 size 591360 extends beyond EOD, truncated [ 287.935156][ T8988] loop2: p5 size 591360 extends beyond EOD, truncated [ 288.150167][ T9009] loop2: detected capacity change from 0 to 4096 [ 288.164495][ T9009] EXT4-fs (loop2): unsupported descriptor size 0 [ 288.277258][ T9010] loop4: detected capacity change from 0 to 8192 [ 288.364122][ T3279] loop4: p1 < > p2 p4 < p5 > [ 288.376126][ T3279] loop4: partition table partially beyond EOD, truncated [ 288.499872][ T3279] loop4: p1 start 134217728 is beyond EOD, truncated [ 288.524325][ T3279] loop4: p2 size 591360 extends beyond EOD, truncated [ 288.539153][ T3279] loop4: p5 size 591360 extends beyond EOD, truncated [ 288.552023][ T9010] loop4: p1 < > p2 p4 < p5 > [ 288.558055][ T9010] loop4: partition table partially beyond EOD, truncated [ 288.565491][ T9010] loop4: p1 start 134217728 is beyond EOD, truncated [ 288.572646][ T9010] loop4: p2 size 591360 extends beyond EOD, truncated [ 288.580978][ T9010] loop4: p5 size 591360 extends beyond EOD, truncated [ 288.941049][ T9030] loop5: detected capacity change from 0 to 512 [ 288.951630][ T9030] EXT4-fs: Ignoring removed nobh option [ 288.959237][ T9030] ext4: Bad value for 'max_dir_size_kb' [ 289.306562][ T9040] loop5: detected capacity change from 0 to 8192 [ 289.386687][ T9040] loop5: p1 < > p2 p4 < p5 > [ 289.391563][ T9040] loop5: partition table partially beyond EOD, truncated [ 289.400387][ T9040] loop5: p1 start 134217728 is beyond EOD, truncated [ 289.407889][ T9040] loop5: p2 size 591360 extends beyond EOD, truncated [ 289.420345][ T9040] loop5: p5 size 591360 extends beyond EOD, truncated [ 289.591221][ T9049] loop3: detected capacity change from 0 to 4096 [ 289.629599][ T9049] EXT4-fs (loop3): unsupported descriptor size 0 [ 289.668514][ T9045] loop2: detected capacity change from 0 to 8192 [ 289.711501][ T3569] loop2: p1 < > p2 p4 < p5 > [ 289.737159][ T3569] loop2: partition table partially beyond EOD, truncated [ 289.749697][ T3569] loop2: p1 start 134217728 is beyond EOD, truncated [ 289.758194][ T3569] loop2: p2 size 591360 extends beyond EOD, truncated [ 289.766618][ T3569] loop2: p5 size 591360 extends beyond EOD, truncated [ 289.776553][ T9045] loop2: p1 < > p2 p4 < p5 > [ 289.782764][ T9045] loop2: partition table partially beyond EOD, truncated [ 289.790347][ T9045] loop2: p1 start 134217728 is beyond EOD, truncated [ 289.798227][ T9045] loop2: p2 size 591360 extends beyond EOD, truncated [ 289.813095][ T9045] loop2: p5 size 591360 extends beyond EOD, truncated [ 290.226737][ T9066] loop4: detected capacity change from 0 to 512 [ 290.233474][ T9066] EXT4-fs: Ignoring removed i_version option [ 290.241663][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 290.262438][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 290.286864][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 290.299818][ T9066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.040914][ T9086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.054017][ T9086] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.098996][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.186593][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.213287][ T9093] EXT4-fs (loop4): unsupported descriptor size 0 [ 291.330200][ T28] audit: type=1400 audit(1771898048.747:774): avc: denied { load_policy } for pid=9102 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 291.330521][ T9103] SELinux: failed to load policy [ 291.456513][ T9097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.658728][ T9097] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.1528: bit already cleared for inode 13 [ 291.699679][ T3279] loop2: p1 < > p2 p4 < p5 > [ 291.705993][ T3279] loop2: partition table partially beyond EOD, truncated [ 291.721057][ T3279] loop2: p1 start 134217728 is beyond EOD, truncated [ 291.729100][ T3279] loop2: p2 size 591360 extends beyond EOD, truncated [ 291.751145][ T3279] loop2: p5 size 591360 extends beyond EOD, truncated [ 291.776327][ T9108] loop2: p1 < > p2 p4 < p5 > [ 291.784965][ T9108] loop2: partition table partially beyond EOD, truncated [ 291.793773][ T9108] loop2: p1 start 134217728 is beyond EOD, truncated [ 291.800629][ T9108] loop2: p2 size 591360 extends beyond EOD, truncated [ 291.816404][ T9108] loop2: p5 size 591360 extends beyond EOD, truncated [ 292.184912][ T5112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.618341][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 293.631198][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 293.728761][ T9137] syzkaller0: entered promiscuous mode [ 293.751582][ T9143] set_capacity_and_notify: 4 callbacks suppressed [ 293.751602][ T9143] loop3: detected capacity change from 0 to 4096 [ 293.775777][ T9137] syzkaller0: entered allmulticast mode [ 293.830243][ T9143] EXT4-fs (loop3): unsupported descriptor size 0 [ 294.874682][ T9170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=9170 comm=syz.2.1549 [ 295.021246][ T9171] loop1: detected capacity change from 0 to 8192 [ 295.095790][ T8331] ================================================================== [ 295.103935][ T8331] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 295.111267][ T8331] [ 295.111277][ T8331] read to 0xffff888103a06f70 of 4 bytes by task 352 on cpu 0: [ 295.111297][ T8331] atime_needs_update+0x25f/0x3e0 [ 295.126178][ T8331] touch_atime+0x4a/0x330 [ 295.130608][ T8331] shmem_file_read_iter+0x477/0x540 [ 295.135836][ T8331] lo_rw_aio+0x67d/0x730 [ 295.140104][ T8331] loop_process_work+0x56c/0xac0 [ 295.145157][ T8331] loop_rootcg_workfn+0x22/0x30 [ 295.150036][ T8331] process_scheduled_works+0x4de/0x9e0 [ 295.155527][ T8331] worker_thread+0x581/0x770 [ 295.160148][ T8331] kthread+0x22a/0x280 [ 295.164253][ T8331] ret_from_fork+0x150/0x360 [ 295.168952][ T8331] ret_from_fork_asm+0x1a/0x30 [ 295.173732][ T8331] [ 295.176086][ T8331] write to 0xffff888103a06f70 of 4 bytes by task 8331 on cpu 1: [ 295.183731][ T8331] touch_atime+0x1d7/0x330 [ 295.188180][ T8331] shmem_file_read_iter+0x477/0x540 [ 295.193404][ T8331] lo_rw_aio+0x67d/0x730 [ 295.197679][ T8331] loop_process_work+0x56c/0xac0 [ 295.202632][ T8331] loop_workfn+0x31/0x40 [ 295.207076][ T8331] process_scheduled_works+0x4de/0x9e0 [ 295.212736][ T8331] worker_thread+0x581/0x770 [ 295.217349][ T8331] kthread+0x22a/0x280 [ 295.221605][ T8331] ret_from_fork+0x150/0x360 [ 295.226224][ T8331] ret_from_fork_asm+0x1a/0x30 [ 295.231010][ T8331] [ 295.233339][ T8331] value changed: 0x1aac4d01 -> 0x1ed86a82 [ 295.239059][ T8331] [ 295.241392][ T8331] Reported by Kernel Concurrency Sanitizer on: [ 295.247550][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 295.257106][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.267190][ T8331] Workqueue: loop1 loop_workfn [ 295.271992][ T8331] ================================================================== [ 295.294944][ T9171] loop1: p1 < > p2 p4 < p5 > [ 295.299943][ T9171] loop1: partition table partially beyond EOD, truncated [ 295.324290][ T9171] loop1: p1 start 134217728 is beyond EOD, truncated [ 295.361949][ T9171] loop1: p2 size 591360 extends beyond EOD, truncated [ 295.410078][ T9171] loop1: p5 size 591360 extends beyond EOD, truncated