last executing test programs: 3m39.126745889s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 3m38.930894728s ago: executing program 0 (id=15): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setpgid(0x0, r3) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800560000ff0000731142eb000000008510d0a8000000000000009500001220312b5520029cdbff0034f9b7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) close_range(r6, 0xffffffffffffffff, 0x0) recvfrom$inet_nvme(r6, &(0x7f0000000280)=""/222, 0xde, 0x22, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80) 3m38.594595984s ago: executing program 0 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0xd, 0x26, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = timerfd_create(0x9, 0x800) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbbfaae60080000000000001000000000000000000007efff10000400000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000008000", [0x8000000000008, 0xffffffff9673e35d]}}) timerfd_settime(r3, 0x2, &(0x7f0000000300), &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x4183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000040)={[{@huge_never}]}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 3m38.021387161s ago: executing program 0 (id=25): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xd}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) readv(r7, &(0x7f0000000080)=[{0x0}], 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 3m38.008956149s ago: executing program 32 (id=25): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xd}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) readv(r7, &(0x7f0000000080)=[{0x0}], 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 3m16.663779963s ago: executing program 3 (id=163): syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 3m16.616976346s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000200025a727bd7000fddbdf250a0000cdff0000010200010008000600000000000c001400"], 0x30}, 0x1, 0x0, 0x0, 0x4044890}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x130, 0x12, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x4}, [@generic="9abc14419291302082e55512ea6f653e78a6d64c0613da1690e14c77f5ae686b4acb12240e943720af6f7c8cc155c4bbab2afbf7ddb65ee021c3fb15fe17c1d110f18724bad69306363cabf06bb3a8325cdf451c0dcd5c3181bfef5eaa0e5fb18e96bcb071d492d6d0ff98bd3d0d2eb2bc9490a57fafcef476a1ad29d012ec8eadf6d77036a9774c479068d8bf9c4647b7da7cd4f74e6f66d84f53b00e8d908ba25d9c5bd2cd5c0da81e9d0efa937b07e6a7c0358e7cde20a7d1591bd14bfa2c6c57b605b1f4bb97d77297179b635a001bcc2da4", @nested={0x46, 0xe8, 0x0, 0x1, [@generic="81e1aa2be10d0f2d24687a9b83206a9cda2e2e99c228feaa45dbf9b2f342eb50ca4cd5136570dfdf325ef9a54b8be29d578f1debc3ada6cd9a00d9c5aa24b503925d"]}]}, 0x130}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x106f) 3m15.685705065s ago: executing program 3 (id=167): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0xd, &(0x7f00000000c0)={@rand_addr=0x64010102, @empty, @broadcast}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000035b000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x9, 0x88, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) 3m15.296449662s ago: executing program 3 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000a8a000/0x1000)=nil, 0x1000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0x5, 0x0, 0x1, 0x1524, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x8, 0x4}, 0x6020, 0xc, 0x2, 0x4, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r5, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="0e36bdb6f345539b2ae976358d36bb2574bf1712f5103292f8fb3b1c950124e181593bcbbe898fcf43bd77e9915c10041c009cc9518a683140780400", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001380)=""/121, 0x79}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028006000d00ff05000008000200ac1e010150ab42929e3b7ffb5fb6b12f257e17b18289def67617437639f08402f6e05d18230491e6de009acd5289dd89eed9ebcc3218902c3bc10f2829ebe4deb859cb005baeac2240737e0414"], 0x40}}, 0x4008040) 3m14.896728318s ago: executing program 3 (id=175): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000854}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0xf5, 0xd, 0x0, 0xff}, {0x0, 0x1b, 0x3, 0xab8b}, {0x11, 0x3, 0x4, 0x5}, {0x6, 0xf, 0x4, 0xb}, {0x6, 0xff, 0x1, 0x7}, {0x1, 0xff, 0x13, 0x10c7}, {0x8, 0xa5, 0xa, 0xf4}, {0x2, 0x9, 0x8f, 0x10000}, {0x32db, 0x4, 0x5, 0x600000}]}) 3m14.593454319s ago: executing program 3 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0200001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000003700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000000000000000000000000000000000000bb0000000100000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000200000000000000000100000000008401050020010000000000000000000000000002000000003300000000000000640101000000000000000000000000000000000000000000000000003b00000040000000ff020000000000000000000000000001000020003300000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000ffffffff0000000000000000000000ffe135000000000000000000000000000000000000e0000001"], 0x23c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sigaltstack(0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/173, 0xb1, 0xad, 0x0, 0x3, 0x10000}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x3be2b02884f95c63}]) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sk_msg, r2}, 0x94) 3m14.592829569s ago: executing program 33 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0200001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe80000000000000000000000000003700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000000000000000000000000000000000000bb0000000100000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000200000000000000000100000000008401050020010000000000000000000000000002000000003300000000000000640101000000000000000000000000000000000000000000000000003b00000040000000ff020000000000000000000000000001000020003300000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000ffffffff0000000000000000000000ffe135000000000000000000000000000000000000e0000001"], 0x23c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sigaltstack(0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/173, 0xb1, 0xad, 0x0, 0x3, 0x10000}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x3be2b02884f95c63}]) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sk_msg, r2}, 0x94) 1m50.838344527s ago: executing program 5 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) ptrace$peek(0x2, r0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000200025a727bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014006748a9152c"], 0x30}, 0x1, 0x0, 0x0, 0x4044890}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0xd4, 0x12, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x4}, [@generic="9abc14419291302082e55512ea6f653e78a6d64c0613da1690e14c77f5ae686b4acb12240e943720af6f7c8cc155c4bbab2afbf7ddb65ee021c3fb15fe17c1d110f18724bad69306363cabf06bb3a8325cdf451c0dcd5c3181bfef5eaa0e5fb18e96bcb071d492d6d0ff98bd3d0d2eb2bc9490a57fafcef476a1ad29d012ec8eadf6d77036a9774c479068d8bf9c4647b7da7cd4f74e6f66d84f53b00e8d908ba25d9c5bd2cd5c0da81e9d0efa937b07e6a7c0358e7cde20a7d1", @nested={0x4, 0xe8}]}, 0xd4}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x106f) 1m49.890517984s ago: executing program 5 (id=731): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x0, 0xffffffc0, {{0x12, 0x4, 0x1, 0xd, 0x48, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x68, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4a3}, {@multicast1, 0x4}, {@empty, 0x7}, {@broadcast, 0x1000}, {@loopback, 0x10000}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @generic={0x86, 0x2}]}}}}}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc858}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) socket$unix(0x1, 0x5, 0x0) 1m49.685552781s ago: executing program 5 (id=733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r1, r1, 0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={r2, 0x2, r3, 0x78e3}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010c80001002abd7000fedbdf2500000000bda3d19dcc367063c94a360fb83bae11cd4f4100000000000001ff8af51ba0772bddf615fc2b68188f386c55d0e75c", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c0012800c0001006d6163766c616e000c0002800600020000000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x40, @loopback, 0x7ff}], 0x1c) 1m49.339811285s ago: executing program 5 (id=736): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe30100021d080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) clock_nanosleep(0xfffffffffffffffd, 0x0, &(0x7f0000000080), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f0000000000)) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000d40)=""/4096, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "d4d17c8c1c35d1a23b9446d1bd3770b315047f374baed4f33256628e47e528468de83458e53e1fda8928e58fe85815204990e18fe655b0c1e6e9f8db1e02c1d99929becdb37f68b2dec91d635954dd5ecfdf85dac47a34595b1e7ed3bd9b4f3aefa933e27f408502665ac44b5adc5d2c99e393463a2f3f7ca4c7e2350f45640f8520329c9cc1704daf9c1fe8abc8a851ef5ab441b2e36625744e105e758fa5cb9ac62609bdfcb05b91d8e569548d9ef8249ac37c1970b46137ee52675a4ee67779e156fec70d2684d418d0f93a383ad3c80af0d182cbeb37cc9b9518c2e01c6903f6fef8e45a25b0e481621fc66758914c92419c5c2a9915665f08862aea8e3cc7a2f1c619ead5"}, 0x112) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000009c0), 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_register(r5, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r7 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000001c0), 0x5f) getuid() 1m48.853248946s ago: executing program 5 (id=742): unshare(0x22020600) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m48.07099255s ago: executing program 5 (id=745): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001740)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) sendto$unix(r0, &(0x7f0000000000)="4aa484050a9bd4d809b7b694277144fafae34015bb57cb0423f4ff5c955d72efc0060dcaf7026e28805e6779b4f980e1f476a6db29163829188ec004de4c715cbe5ff025503b4fcbc48b07b4752832adc2d2141863ef5d16dbadc7a007bfeb46bfd14556eb2362528d666b8bdb017be2bf3b65308003c0fe140af0ac65", 0x7d, 0x4040010, &(0x7f0000000080)=@abs={0x2, 0x0, 0x4e21}, 0x6e) 1m47.920342956s ago: executing program 34 (id=745): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001740)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) sendto$unix(r0, &(0x7f0000000000)="4aa484050a9bd4d809b7b694277144fafae34015bb57cb0423f4ff5c955d72efc0060dcaf7026e28805e6779b4f980e1f476a6db29163829188ec004de4c715cbe5ff025503b4fcbc48b07b4752832adc2d2141863ef5d16dbadc7a007bfeb46bfd14556eb2362528d666b8bdb017be2bf3b65308003c0fe140af0ac65", 0x7d, 0x4040010, &(0x7f0000000080)=@abs={0x2, 0x0, 0x4e21}, 0x6e) 6.137342165s ago: executing program 7 (id=1443): io_setup(0x10, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x8, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) io_destroy(r0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001cc0)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001800)={0x1, 0x8, 0x2, 0x3, {0x8, 0x6, 0x8000000000000000, 0x100000001, 0x3}, [0xfa, 0x8000000000000000, 0x5, 0xe07, 0x3, 0x9, 0x2, 0x800]}}, @devid}) 6.030912098s ago: executing program 2 (id=1448): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x6}, r4, 0x9}}, 0x48) r5 = socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x4e20, 0x7, @remote, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x202283, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ff881, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001300), 0x4) 5.888299546s ago: executing program 7 (id=1449): r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB='nodots,nodots,showexec,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c666c7573682c646f74732c636f6465706167653d3433372c6e6f646f74732c00969cc6e1e5b88a365ab2b0560fed3da4a80ff2a907a49b76b6cf045a2f531165"], 0x1, 0x11ab, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, r5, r6}, 0xc) setresgid(0xee00, r3, r6) 5.402433431s ago: executing program 7 (id=1452): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000180)={0xab000500, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) (fail_nth: 2) 5.130846919s ago: executing program 1 (id=1455): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r0, 0x0, 0x0, 0x80800) write(r0, &(0x7f0000000000)="f2b99f5869180128e0e2b7aa158f0ac737e4ccef70456d83aff84e43e99c0b9f3d35fcfe1b457aeac8d8d1fa3e36f8defc53a1db127b79fa17cec80008ec839c7e4cc5", 0x43) 5.120142168s ago: executing program 1 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) 5.00639626s ago: executing program 1 (id=1457): syz_open_dev$hidraw(0x0, 0x1, 0x803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f00000000c0)={[{@nobarrier}, {@quota}, {@norecovery}, {@block_validity}, {@nombcache}]}, 0x8, 0x611, &(0x7f0000000200)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 4.584566945s ago: executing program 7 (id=1459): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x7, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfeff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x10000, 0xfffd, 0x8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x4, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.542016709s ago: executing program 2 (id=1460): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x6, r0, 'id0\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x42, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0xb) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc_s\x00', 0x0, 0x0, 0x0, r4) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 4.35371293s ago: executing program 2 (id=1463): shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) perf_event_open(&(0x7f00000003c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9ec4, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 3.858204534s ago: executing program 7 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x7}, [], {0x4, 0x4}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe80000000000002c897f01d232f2e92c86000"/55, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000010003904000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="1000001900000000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file7\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa502) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file7\x00', 0x1020423, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 3.83302591s ago: executing program 6 (id=1467): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000c40)=0x60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x40086602, &(0x7f00000006c0)={'geneve0\x00', @dev}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r10, r10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="9cb7feffffffffffc48f25ff6b70"], &(0x7f00000007c0)='syzkaller\x00', 0xfffffffe, 0x64, &(0x7f0000000800)=""/100, 0x0, 0x88, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x6, 0xc4aa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x1, 0x5, 0x1, 0x1}], 0x10, 0xed}, 0x94) r12 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r12, &(0x7f00000000c0), 0x40000000, &(0x7f0000000100)) ptrace$cont(0x9, r12, 0x6, 0xdb4) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x4000) statx(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r15, 0x8, &(0x7f0000000240)=0x2) sendmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="6dfddc8c234ec55fe080dea60eeb7d4418308030838a7f62fd9007385396436f97742bc34c39dc1587a331e8abb89c3d97bef025424bd219a264fb59ad6b822cd5f6cde32c78458ed40b486ed16bc65e7dca31df0e0ae59e66b0d0f222806766c797e4d21022fdde4b2f04fd7ba43ac140e6", 0x72}, {&(0x7f00000000c0)="cae98d812e38fe05d4a008ab424fc5907ae022651a3571709773b5dd86b5bb9b8938", 0x22}, {&(0x7f0000000240)="f955387d04b6916ac9f3a9b45cf1cebf86c093e1f56d65369cb7f6e58b789a8fe81c6d73f526eab441c1c652d226aea53e0721e8040d8c1479a32bc06e663412b19f248ba67d392fe9b07097a89ba485bc5ffcd0aaeecd732b38f61350183cd44a006414a5e5365128716636e3af352164f55fea3129e2946cd383ee8f6ed2791883760e853efee40de274dff279a06c6b4346a3589b0cea6edcfbf46c3660854f0b093fb499fb88fc37f070cb7d8c9158d1aa4e29bee34d0e2a935052c1e164ff56e31488a02a71f5a534b2972b3c134c78487ed794880cad51594a3363e850e17da9773419cb21798d187c85c456626c5c8436f1", 0xf5}, {&(0x7f0000000340)="40932d35abad6d8e4767971ebb0c78ca7cc62fdb681c9b57c7ce37d1fdb9ae26f623549f47c8210c060bc3759230d18119192d0c706e7b106c0f2cfd3a62052c50befb9e8ed603f3f40ab230dec49108dfdf7e0be6ffa7bb397a36a967a4effed05266de2917d004b4b90da7f78252b656cd61f6ecadc8c6505f9c57fa4ef9a7486f0c1f2d1ce07ac10229ed832acb86502282b23d4e82bacfac4881ee48ee73cb22e8769027ee0722b82ad3d14727fad9ef20805b4b56013cb1757b8a46968ee6e462cdfbeeb77e349dca23c096bcbfd9317958af3241c00a", 0xd9}, {&(0x7f0000000440)="58a1d1aaa2792fb41595bc434c9f0e8bee6e09b3d0f98b3560ba0619388d3545b4cbd7bb46bbd9ea96272851bb19c70763c7fb3fbd6d0b73c37fb9b5fc19d25e7d39d7aaaa8ad0157acfcd6c4ae94e9f37c55092f90645517d93f7250981affe36", 0x61}, {&(0x7f00000004c0)="d83ce3179af19cb40e71e3cc06e6a555f2e138dbc1f3f0386464a125e6bb4b47c37a68b7d5fdf5a01072f73a5ff80eb8f27a06c3d0f8d757c4489b02155cb8ef6e4db2ec6e873cb1e3bdd2917ee4023a690ec2df46dcc11f81e2ea2dfa0f3f442a7be2f01972613359f338eeff2778d7233bb9901135adab671e88d4c29eba5332d0027099971fa002a0c61b60c097beff4d1b457d30101b749388fc4da22b28935c2008c682ac5943811cc69f5685de8d1658222db501278793426726fb587790cbeef86cc13f552442cce9dfaf54d4f2372ba56822b881236667f0c546", 0xde}, {&(0x7f00000005c0)="50be5e34a4e4b90ce02d5bffa8aacc4fdf3d6740b6e319e492682633bfd1fee4535178b466e4d9a3b3f8e31701f48f6bf1b869dbf153081092a8d5d278bfe6e81f16e3892f8138a0fc835d325e86c70ef255d1d37054bd6f4843f5f30d1f05db46194e8cf104dd6388", 0x69}], 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r11, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000008e1f8f61000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32], 0x168, 0x40840}}, {{&(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001340)="21eab3424d15db30954ef7f92b915c9ffd3a404b67e3c12d5a9afe4e7c95dba425b103b7bc5b3f305d0d945b7fac10028780f503e2a3045cd772e57c4f5feec3e0675e7398c4558f5d8ac9d3b8e5f947ac4948b39a8d1cb4bba25065e2f14b4e94e5bc533771c6c3fcc221f51f01cc481a3eff12a5da4b6b45c300dded45a988c694509255cfb65b76", 0x89}, {&(0x7f0000001400)="360cdfeb4ffe0131b11045851fd0cc1ecd134b56a3bd613bc0e045420c4eafb671e9ee5c5f453d44f56d024514a839d3bdf80aaf0d9eaa63d155c0e71c208e6ad7082accbe63f9dcc4b9870f578a6c6ffdc628cfb0ab7c8f7e086fa68836e0", 0x5f}, {&(0x7f0000001480)="6cb9c79c65660f0a39822fe040f895f04f83f30dfe205ed625b74d520b2b44eb5a1a8e0452a81a2bf83e9287d685e6e3990100eda2ec24a1", 0x38}, {&(0x7f00000014c0)="8653965c039db847d0398d63051c4efaede9ba60720d6b430cc4ad32e326572232e80dd880061c441c5e3a4841eae80d6cafe5009134d997ace309605d58858049c8ffa2b86ebcf68cc8d9a1e7bff84a00043b2800cebbcb6226b69eded22b73d66a27bcb13db92e030bf5362d4f650a87dfa9c1c8c6ed7340871cead1c59de66bee33db931c28272d2f044df3e11160d1f20bffed29457c88a2b9442f5b6ca8e79cffaa1763533bdc7e2d448b5f2081aadec53c814d5e8c10098eb21c84c7b1", 0xc0}, {&(0x7f0000001580)}, {&(0x7f00000015c0)="ee546e92a351ff014cc65a4d07e1cc17db9a2a43dd1535916f808630e981f42bd3b7b4424a112e24a8dbf8c0fab72cc33918734513ce7ddf5e02c7fe23831e6bdb097560821cab10642594ffc1fda46764698bd8312254421061acd8030bc6ccc5847eeabd3c140d271e185e84577f0a2706f85fab4f237280370466da775d303113d7f74aed218ab3207f9845947d5c936df9448534e0181d06df5c83e73803553bc065095aa23aa99e5852ba86aa751d208d77a3b98cbdacefd35b978ebb107237bbf321aa07858140", 0xca}, {&(0x7f00000016c0)="2427e2b00de380667513b6ddd481c7120ccc3643837b9a4793909aa030a8c5894453a029e88c6ed4fcfae7d5e8140915d11b6c9d5d8e41ba9ef7a2a3987eae4150ea646eacb6aa538396410d9a7611bef0cf297721d76f384a177ba518b959ede18ba33972611813a0d11541c86a629703e2f9829c125009cd558d36e86e37fceaabed1b868604de8a8c51999a06cc4df96a5d2e01cff2e73b5bd772f1a1a46ef45a4ac0d2839f499362cb5b7a2a43a370b19a982c59a079d6486204070e8a4cbd105e311fb6c41ceb64134b397315f549", 0xd1}, {&(0x7f00000017c0)="64a686a88b502e120aef99bdf6f4a34761006e98ec81fa5cdc86652b3a8cc7b93a7ec7c0e5a475ca199fb95c29c294a71e1ac5547e038c06cb0935738993e3d83dd6bd214d350b00ded9bdef12db8801a5aa32382566bb0e779bcf813b820dcf2df381a5024b60f15dc7bdcbde9708e0dee4ab2c8c6495880f87b189d56c128b9bdbbbf74665a8a1df8d8111ac1a15a5ffc390b367a584238cb4b8040545dfdf15f18e5c", 0xa4}], 0x8, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r13}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}], 0x60, 0x10}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r16 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r16, 0x10e, 0x5, &(0x7f0000000000)=0x5, 0x4) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 3.605538725s ago: executing program 2 (id=1469): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.834673416s ago: executing program 2 (id=1470): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0xc0800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @local}, 0x80000008, r2}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r2, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010102}, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 2.199599629s ago: executing program 1 (id=1471): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = timerfd_create(0x7, 0x800) r9 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r8, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r8, 0x0) io_uring_enter(r9, 0x1f82, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x292, 0x0, 0x0, 0x0) 1.797661487s ago: executing program 2 (id=1472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r3}, 0x38) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r9, 0x107, 0x12, &(0x7f0000000080), 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4", 0xe}], 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r11, 0x1, 0x5}, &(0x7f0000000280)=0x8) 1.23702291s ago: executing program 7 (id=1473): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioprio_set$pid(0x2, 0x0, 0x4007) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x4ce1, 0x0, 0x0, 0x0, 0x0) 1.23242553s ago: executing program 4 (id=1474): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x4, 0x70bd22, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000100)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000001680)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0xd, r2, 0x1, 0xff}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x93c, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0x3500}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x1}]}]}, 0x23c}}, 0x14000) 883.325026ms ago: executing program 6 (id=1475): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b00), 0x40000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x13, 0x9, 0x3, 0x80, 0x20004, r1, 0x400, '\x00', 0x0, r1, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)='X', 0x1}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r0}, 0x18) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0xfcef}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1a, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x43fb, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func, @call={0x85, 0x0, 0x0, 0x3}, @generic={0xfc, 0x5, 0x0, 0xe, 0x64c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x89, &(0x7f0000000500)=""/137, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x10, 0x6, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r5, r6, r7, r8, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x700, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x3, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r9 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r9, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 881.838186ms ago: executing program 1 (id=1476): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x3}, 0x5}}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x13, 0x0, r0, 0x80, &(0x7f0000000700)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) getpgid(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 875.744115ms ago: executing program 4 (id=1477): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 2) 521.36377ms ago: executing program 4 (id=1478): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 473.219283ms ago: executing program 6 (id=1479): shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) perf_event_open(&(0x7f00000003c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9ec4, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 400.651082ms ago: executing program 6 (id=1480): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 379.033619ms ago: executing program 4 (id=1481): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x9, 0xff, 0xffffffff, 0x20b, 0x4, "03f07f0900", 0x10000, 0x2}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 262.121811ms ago: executing program 1 (id=1482): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x9, 0xff, 0xffffffff, 0x20b, 0x4, "03f07f0900", 0x10000, 0x2}) writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3961", 0xfe8e}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000600), 0x5}, 0x0, 0x400001, 0x300, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 253.82413ms ago: executing program 6 (id=1483): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x404c0d1) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 73.011382ms ago: executing program 4 (id=1484): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x8, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x3, 0x200004, 0xce1, 0x800400}]}, 0x58) r1 = inotify_init1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x52000a11) r8 = accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000000180)=0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x88, 0x2, 0x1, 0x0, 0x0, 0x0, {0xe6ca4a6b32b78062}, [@CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x77}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x140}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa54}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x901}, 0x20008090) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.852051ms ago: executing program 4 (id=1485): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000340)="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", 0x1000, r0}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000225bd946ab88bc7785f9b2f3769940000", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff00000a0006000802110000000000"], 0x34}}, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20005}, 0x20000000) 0s ago: executing program 6 (id=1486): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x3}, 0x5}}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x13, 0x0, r0, 0x80, &(0x7f0000000700)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) getpgid(0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') kernel console output (not intermixed with test programs): batadv0: Removing interface: batadv_slave_1 [ 197.620883][ T7664] loop1: detected capacity change from 0 to 1024 [ 197.677174][ T7664] EXT4-fs: Ignoring removed orlov option [ 197.701173][ T7664] EXT4-fs (loop1): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 197.752481][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.798892][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.881613][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1006'. [ 198.074348][ T28] audit: type=1400 audit(1772075942.115:2480): avc: denied { getopt } for pid=7683 comm="syz.7.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.104883][ T7685] siw: device registration error -23 [ 198.119598][ T7685] loop4: detected capacity change from 0 to 512 [ 198.212082][ T7685] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1008: corrupted in-inode xattr: bad e_name length [ 198.225945][ T7685] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.226414][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 198.242004][ C1] EXT4-fs (loop4): initial error at time 1772075942: ext4_iget_extra_inode:5025: inode 15 [ 198.252025][ C1] EXT4-fs (loop4): last error at time 1772075942: ext4_iget_extra_inode:5025: inode 15 [ 198.281310][ T7685] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1008: couldn't read orphan inode 15 (err -117) [ 198.293334][ T7685] loop4: lost filesystem error report for type 5 error -117 [ 198.301146][ T7685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.323561][ T7685] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #2: comm syz.4.1008: corrupted xattr entries [ 198.368393][ T7685] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1008: dx entry: limit 0 != root limit 125 [ 198.380317][ T7685] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1008: Corrupt directory, running e2fsck is recommended [ 198.430996][ T7685] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1008: dx entry: limit 0 != root limit 125 [ 198.442862][ T7685] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1008: Corrupt directory, running e2fsck is recommended [ 198.456073][ T7685] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.1008: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 198.608163][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1011'. [ 198.681496][ T7690] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 198.738322][ T7690] bond1 (unregistering): Released all slaves [ 199.140354][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.252020][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.343705][ T7704] loop1: detected capacity change from 0 to 764 [ 199.354934][ T7704] Symlink component flag not implemented [ 199.368907][ T7704] Symlink component flag not implemented (116) [ 199.522516][ T7708] loop1: detected capacity change from 0 to 1024 [ 199.531910][ T7708] EXT4-fs: inline encryption not supported [ 199.550920][ T28] audit: type=1400 audit(1772075943.615:2481): avc: denied { create } for pid=7709 comm="syz.7.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 199.577736][ T28] audit: type=1400 audit(1772075943.645:2482): avc: denied { bind } for pid=7709 comm="syz.7.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 199.613302][ T7708] loop1: detected capacity change from 0 to 512 [ 199.657039][ T7712] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7712 comm=syz.7.1018 [ 199.706885][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.733879][ T7708] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.353653][ T7723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.363338][ T7723] block device autoloading is deprecated and will be removed. [ 200.410345][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'. [ 200.432516][ T7722] syzkaller0: entered promiscuous mode [ 200.497315][ T7722] syzkaller0: entered allmulticast mode [ 200.510027][ T7727] tipc: Started in network mode [ 200.520715][ T7727] tipc: Node identity 3253e388526b, cluster identity 4711 [ 200.537592][ T7727] tipc: Enabled bearer , priority 0 [ 200.587375][ T7721] tipc: Resetting bearer [ 200.598045][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.608809][ T7721] tipc: Disabling bearer [ 200.686081][ T7730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.920846][ T7746] siw: device registration error -23 [ 200.936462][ T7746] loop7: detected capacity change from 0 to 512 [ 200.951399][ T7745] loop2: detected capacity change from 0 to 128 [ 201.021493][ T7746] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1024: corrupted in-inode xattr: bad e_name length [ 201.035324][ T7746] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.035885][ T7746] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1024: couldn't read orphan inode 15 (err -117) [ 201.045148][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 201.045168][ C1] EXT4-fs (loop7): initial error at time 1772075945: ext4_iget_extra_inode:5025: inode 15 [ 201.045219][ C1] EXT4-fs (loop7): last error at time 1772075945: ext4_iget_extra_inode:5025: inode 15 [ 201.083620][ T7746] loop7: lost filesystem error report for type 5 error -117 [ 201.085150][ T7746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.107738][ T7746] EXT4-fs error (device loop7): ext4_xattr_set_entry:1670: inode #2: comm syz.7.1024: corrupted xattr entries [ 201.136220][ T7746] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1024: dx entry: limit 0 != root limit 125 [ 201.148137][ T7746] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1024: Corrupt directory, running e2fsck is recommended [ 201.198092][ T7746] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1024: dx entry: limit 0 != root limit 125 [ 201.210275][ T7746] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1024: Corrupt directory, running e2fsck is recommended [ 201.223339][ T7746] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 3: comm syz.7.1024: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 201.433425][ T28] audit: type=1400 audit(1772075945.495:2483): avc: denied { ioctl } for pid=7749 comm="syz.1.1027" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.452192][ T7750] loop1: detected capacity change from 0 to 128 [ 201.499772][ T7750] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.579602][ T7750] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.645635][ T7752] loop4: detected capacity change from 0 to 1024 [ 201.727429][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.747031][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.801750][ T7752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.003638][ T7752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 202.116945][ T7752] System zones: 0-1, 3-36 [ 202.311780][ T7752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.330711][ T7765] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 202.407108][ T7765] lo speed is unknown, defaulting to 1000 [ 202.547200][ T7768] lo speed is unknown, defaulting to 1000 [ 203.019566][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 203.039735][ T7771] vlan3: entered promiscuous mode [ 203.044827][ T7771] batadv0: entered promiscuous mode [ 203.824756][ T7792] program syz.6.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.087139][ T7822] loop6: detected capacity change from 0 to 2048 [ 204.097895][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.141429][ T3305] Alternate GPT is invalid, using primary GPT. [ 204.162796][ T3305] loop6: p1 p2 p3 [ 204.179025][ T3305] loop6: partition table partially beyond EOD, truncated [ 204.330325][ T7822] Alternate GPT is invalid, using primary GPT. [ 204.336945][ T7822] loop6: p1 p2 p3 [ 204.340888][ T7822] loop6: partition table partially beyond EOD, truncated [ 204.431396][ T7840] siw: device registration error -23 [ 204.447902][ T7840] loop1: detected capacity change from 0 to 512 [ 204.656879][ T7840] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1043: corrupted in-inode xattr: bad e_name length [ 204.657006][ T7840] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.657265][ T7840] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1043: couldn't read orphan inode 15 (err -117) [ 204.657302][ T7840] loop1: lost filesystem error report for type 5 error -117 [ 204.658345][ T7840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.664248][ T7840] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #2: comm syz.1.1043: corrupted xattr entries [ 204.684618][ T7840] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1043: dx entry: limit 0 != root limit 125 [ 204.684735][ T7840] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1043: Corrupt directory, running e2fsck is recommended [ 204.721887][ T7840] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1043: dx entry: limit 0 != root limit 125 [ 204.721946][ T7840] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1043: Corrupt directory, running e2fsck is recommended [ 204.722178][ T7840] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.1043: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 204.773395][ T7842] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 205.011683][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1041'. [ 205.014837][ T7835] vlan2: entered promiscuous mode [ 205.014861][ T7835] batadv0: entered promiscuous mode [ 205.193378][ T28] audit: type=1326 audit(1772075949.245:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193539][ T28] audit: type=1326 audit(1772075949.245:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193678][ T28] audit: type=1326 audit(1772075949.245:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193706][ T28] audit: type=1326 audit(1772075949.245:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fea9acece code=0x7ffc0000 [ 205.193808][ T28] audit: type=1326 audit(1772075949.245:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193838][ T28] audit: type=1326 audit(1772075949.245:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193868][ T28] audit: type=1326 audit(1772075949.245:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193913][ T28] audit: type=1326 audit(1772075949.245:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193947][ T28] audit: type=1326 audit(1772075949.245:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.193996][ T28] audit: type=1326 audit(1772075949.245:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fea9ec629 code=0x7ffc0000 [ 205.195183][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.592600][ T7903] FAULT_INJECTION: forcing a failure. [ 205.592600][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.772252][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 205.783790][ T7903] CPU: 1 UID: 0 PID: 7903 Comm: syz.2.1051 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.783889][ T7903] Tainted: [W]=WARN [ 205.783911][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.783974][ T7903] Call Trace: [ 205.783996][ T7903] [ 205.784103][ T7903] __dump_stack+0x1d/0x30 [ 205.784242][ T7903] dump_stack_lvl+0x95/0xd0 [ 205.784318][ T7903] dump_stack+0x15/0x1b [ 205.784386][ T7903] should_fail_ex+0x263/0x280 [ 205.784460][ T7903] should_fail+0xb/0x20 [ 205.784626][ T7903] should_fail_usercopy+0x1a/0x20 [ 205.784721][ T7903] _copy_to_user+0x20/0xa0 [ 205.784809][ T7903] simple_read_from_buffer+0xb5/0x130 [ 205.784885][ T7903] proc_fail_nth_read+0x10e/0x150 [ 205.784981][ T7903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.785075][ T7903] vfs_read+0x1ab/0x7f0 [ 205.785182][ T7903] ? __rcu_read_unlock+0x4e/0x70 [ 205.785279][ T7903] ? __fget_files+0x184/0x1c0 [ 205.785376][ T7903] ? mutex_lock+0x57/0x90 [ 205.785464][ T7903] ksys_read+0xdc/0x1a0 [ 205.785583][ T7903] __x64_sys_read+0x40/0x50 [ 205.785702][ T7903] x64_sys_call+0x2886/0x3020 [ 205.785809][ T7903] do_syscall_64+0x12c/0x370 [ 205.785928][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.786032][ T7903] RIP: 0033:0x7f1fea9acece [ 205.786228][ T7903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.786328][ T7903] RSP: 002b:00007f1fe9425fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.786398][ T7903] RAX: ffffffffffffffda RBX: 00007f1fe94266c0 RCX: 00007f1fea9acece [ 205.786442][ T7903] RDX: 000000000000000f RSI: 00007f1fe94260a0 RDI: 0000000000000004 [ 205.786484][ T7903] RBP: 00007f1fe9426090 R08: 0000000000000000 R09: 0000000000000000 [ 205.786526][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.786567][ T7903] R13: 00007f1feac66128 R14: 00007f1feac66090 R15: 00007ffff5d04c08 [ 205.786654][ T7903] [ 206.776999][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1061'. [ 206.807259][ T7957] FAULT_INJECTION: forcing a failure. [ 206.807259][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 206.837483][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.6.1062 Tainted: G W syzkaller #0 PREEMPT(full) [ 206.837526][ T7957] Tainted: [W]=WARN [ 206.837533][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.837548][ T7957] Call Trace: [ 206.837556][ T7957] [ 206.837567][ T7957] __dump_stack+0x1d/0x30 [ 206.837601][ T7957] dump_stack_lvl+0x95/0xd0 [ 206.837630][ T7957] dump_stack+0x15/0x1b [ 206.837677][ T7957] should_fail_ex+0x263/0x280 [ 206.837706][ T7957] should_failslab+0x8c/0xb0 [ 206.837788][ T7957] __kmalloc_noprof+0xb8/0x4e0 [ 206.837849][ T7957] ? fib_trie_table+0x2f/0xf0 [ 206.837923][ T7957] fib_trie_table+0x2f/0xf0 [ 206.837966][ T7957] fib_new_table+0xd7/0x1c0 [ 206.838041][ T7957] inet_rtm_newroute+0x9f/0x160 [ 206.838106][ T7957] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 206.838140][ T7957] rtnetlink_rcv_msg+0x64b/0x720 [ 206.838320][ T7957] ? avc_has_perm_noaudit+0xab/0x130 [ 206.838356][ T7957] netlink_rcv_skb+0x123/0x220 [ 206.838462][ T7957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.838511][ T7957] rtnetlink_rcv+0x1c/0x30 [ 206.838544][ T7957] netlink_unicast+0x5c0/0x690 [ 206.838583][ T7957] netlink_sendmsg+0x5c8/0x6f0 [ 206.838620][ T7957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.838703][ T7957] ____sys_sendmsg+0x5af/0x600 [ 206.838746][ T7957] ___sys_sendmsg+0x195/0x1e0 [ 206.838791][ T7957] __x64_sys_sendmsg+0xd4/0x160 [ 206.838880][ T7957] x64_sys_call+0x194c/0x3020 [ 206.838916][ T7957] do_syscall_64+0x12c/0x370 [ 206.838964][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.838989][ T7957] RIP: 0033:0x7f278cf1c629 [ 206.839041][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.839065][ T7957] RSP: 002b:00007f278b977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.839096][ T7957] RAX: ffffffffffffffda RBX: 00007f278d195fa0 RCX: 00007f278cf1c629 [ 206.839111][ T7957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 206.839124][ T7957] RBP: 00007f278b977090 R08: 0000000000000000 R09: 0000000000000000 [ 206.839136][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.839179][ T7957] R13: 00007f278d196038 R14: 00007f278d195fa0 R15: 00007ffce16aabe8 [ 206.839246][ T7957] [ 207.543502][ T7975] lo speed is unknown, defaulting to 1000 [ 208.023828][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 208.094962][ T8022] loop4: detected capacity change from 0 to 512 [ 208.119143][ T8025] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967286. macoff=82 [ 208.129580][ T8025] 9pnet_fd: Insufficient options for proto=fd [ 208.162656][ T8022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.177203][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop4 [ 208.200524][ T8022] EXT4-fs: dax option not supported [ 208.220217][ T8030] loop1: detected capacity change from 0 to 512 [ 208.220971][ T3305] udevd[3305]: incorrect ext4 checksum on /dev/loop4 [ 208.251899][ T8030] EXT4-fs: Ignoring removed bh option [ 208.258128][ T8022] loop4: detected capacity change from 0 to 2048 [ 208.276426][ T8030] EXT4-fs: inline encryption not supported [ 208.293114][ T8030] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.306424][ T8022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.365067][ T8030] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 208.389108][ T8041] loop2: detected capacity change from 0 to 1024 [ 208.409099][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.419858][ T8030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1069: bg 0: block 248: padding at end of block bitmap is not set [ 208.478544][ T8041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.494741][ T8030] loop1: lost filesystem error report for type 5 error -117 [ 208.495259][ T8030] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1069: Failed to acquire dquot type 1 [ 208.502715][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 208.502738][ C1] EXT4-fs (loop1): last error at time 1772075952: ext4_validate_block_bitmap:441 [ 208.531854][ T8030] loop1: lost filesystem error report for type 5 error -117 [ 208.532556][ T8030] EXT4-fs (loop1): 1 truncate cleaned up [ 208.546221][ T8030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 208.747305][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.766992][ T3417] IPVS: starting estimator thread 0... [ 208.821481][ T8055] loop2: detected capacity change from 0 to 8192 [ 208.856355][ T8053] IPVS: using max 1824 ests per chain, 91200 per kthread [ 208.904921][ T8059] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 208.962868][ T8059] FAT-fs (loop2): Filesystem has been set read-only [ 209.018628][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 209.036816][ T8059] binfmt_misc: register: failed to install interpreter file ./file0 [ 209.066923][ T8062] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 209.324845][ T8071] loop1: detected capacity change from 0 to 1024 [ 209.340820][ T8069] lo speed is unknown, defaulting to 1000 [ 209.368001][ T8071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.399047][ T8071] ext4 filesystem being mounted at /212/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.425661][ T8071] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.1081: lblock 0 mapped to illegal pblock 0 (length 6) [ 209.486593][ T8071] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 209.499821][ T8071] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.499821][ T8071] [ 209.622177][ T8083] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm syz.1.1081: lblock 8 mapped to illegal pblock 8 (length 8) [ 209.651539][ T8083] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 209.664390][ T8083] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.664390][ T8083] [ 209.680435][ T8083] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1081: bg 0: block 112: padding at end of block bitmap is not set [ 209.743464][ T8082] loop2: detected capacity change from 0 to 1024 [ 209.780090][ T8082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.839960][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.866939][ T8086] FAULT_INJECTION: forcing a failure. [ 209.866939][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 209.884215][ T8082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 209.916856][ T8082] System zones: 0-1, 3-36 [ 209.922892][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.1.1086 Tainted: G W syzkaller #0 PREEMPT(full) [ 209.923020][ T8086] Tainted: [W]=WARN [ 209.923026][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.923037][ T8086] Call Trace: [ 209.923042][ T8086] [ 209.923095][ T8086] __dump_stack+0x1d/0x30 [ 209.923120][ T8086] dump_stack_lvl+0x95/0xd0 [ 209.923218][ T8086] dump_stack+0x15/0x1b [ 209.923238][ T8086] should_fail_ex+0x263/0x280 [ 209.923270][ T8086] should_failslab+0x8c/0xb0 [ 209.923328][ T8086] kmem_cache_alloc_noprof+0x66/0x400 [ 209.923347][ T8086] ? skb_clone+0x151/0x1f0 [ 209.923373][ T8086] skb_clone+0x151/0x1f0 [ 209.923397][ T8086] nfnetlink_rcv+0x316/0x1720 [ 209.923425][ T8086] ? xas_load+0x413/0x430 [ 209.923453][ T8086] ? xas_load+0x413/0x430 [ 209.923501][ T8086] ? __rcu_read_unlock+0x4e/0x70 [ 209.923519][ T8086] ? xa_load+0xb1/0xe0 [ 209.923605][ T8086] ? obj_cgroup_charge_account+0x122/0x1a0 [ 209.923630][ T8086] ? should_fail_ex+0x30/0x280 [ 209.923648][ T8086] ? __rcu_read_unlock+0x4e/0x70 [ 209.923667][ T8086] ? avc_has_perm_noaudit+0xab/0x130 [ 209.923699][ T8086] netlink_unicast+0x5c0/0x690 [ 209.923912][ T8086] netlink_sendmsg+0x5c8/0x6f0 [ 209.923941][ T8086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.924058][ T8086] ____sys_sendmsg+0x5af/0x600 [ 209.924171][ T8086] ___sys_sendmsg+0x195/0x1e0 [ 209.924210][ T8086] __x64_sys_sendmsg+0xd4/0x160 [ 209.924279][ T8086] x64_sys_call+0x194c/0x3020 [ 209.924308][ T8086] do_syscall_64+0x12c/0x370 [ 209.924385][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.924405][ T8086] RIP: 0033:0x7faa0d13c629 [ 209.924488][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.924504][ T8086] RSP: 002b:00007faa0bb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.924521][ T8086] RAX: ffffffffffffffda RBX: 00007faa0d3b5fa0 RCX: 00007faa0d13c629 [ 209.924534][ T8086] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 209.924545][ T8086] RBP: 00007faa0bb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.924557][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.924619][ T8086] R13: 00007faa0d3b6038 R14: 00007faa0d3b5fa0 R15: 00007ffee4270668 [ 209.924638][ T8086] [ 210.192515][ T8082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.193583][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 211.382238][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1099'. [ 211.545944][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 211.545967][ T28] audit: type=1400 audit(1772075955.605:2676): avc: denied { getopt } for pid=8125 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.627842][ T28] audit: type=1400 audit(1772075955.655:2677): avc: denied { bind } for pid=8125 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.649120][ T28] audit: type=1400 audit(1772075955.655:2678): avc: denied { name_bind } for pid=8125 comm="syz.1.1103" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 211.671902][ T28] audit: type=1400 audit(1772075955.655:2679): avc: denied { node_bind } for pid=8125 comm="syz.1.1103" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 211.974017][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.274780][ T28] audit: type=1400 audit(1772075956.335:2680): avc: denied { setopt } for pid=8142 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.566077][ T8154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22809 sclass=netlink_route_socket pid=8154 comm=syz.7.1109 [ 213.010662][ T8164] loop7: detected capacity change from 0 to 512 [ 213.094553][ T8164] loop7: detected capacity change from 0 to 2048 [ 213.166547][ T3305] loop7: p1 p3 p4 [ 213.171756][ T3305] loop7: p4 size 589824 extends beyond EOD, truncated [ 213.197937][ T8168] loop6: detected capacity change from 0 to 256 [ 213.205128][ T8168] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.234139][ T8168] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.264722][ T8170] FAULT_INJECTION: forcing a failure. [ 213.264722][ T8170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.281189][ T8164] loop7: p1 p3 p4 [ 213.286389][ T8164] loop7: p4 size 589824 extends beyond EOD, truncated [ 213.293635][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.1.1115 Tainted: G W syzkaller #0 PREEMPT(full) [ 213.293733][ T8170] Tainted: [W]=WARN [ 213.293739][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.293751][ T8170] Call Trace: [ 213.293758][ T8170] [ 213.293765][ T8170] __dump_stack+0x1d/0x30 [ 213.293792][ T8170] dump_stack_lvl+0x95/0xd0 [ 213.293891][ T8170] dump_stack+0x15/0x1b [ 213.293910][ T8170] should_fail_ex+0x263/0x280 [ 213.293931][ T8170] should_fail+0xb/0x20 [ 213.294007][ T8170] should_fail_usercopy+0x1a/0x20 [ 213.294029][ T8170] _copy_to_user+0x20/0xa0 [ 213.294052][ T8170] simple_read_from_buffer+0xb5/0x130 [ 213.294082][ T8170] proc_fail_nth_read+0x10e/0x150 [ 213.294133][ T8170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.294157][ T8170] vfs_read+0x1ab/0x7f0 [ 213.294183][ T8170] ? __rcu_read_unlock+0x4e/0x70 [ 213.294272][ T8170] ? __fget_files+0x184/0x1c0 [ 213.294292][ T8170] ? mutex_lock+0x57/0x90 [ 213.294388][ T8170] ksys_read+0xdc/0x1a0 [ 213.294417][ T8170] __x64_sys_read+0x40/0x50 [ 213.294446][ T8170] x64_sys_call+0x2886/0x3020 [ 213.294523][ T8170] do_syscall_64+0x12c/0x370 [ 213.294555][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.294575][ T8170] RIP: 0033:0x7faa0d0fcece [ 213.294636][ T8170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.294653][ T8170] RSP: 002b:00007faa0bb8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.294670][ T8170] RAX: ffffffffffffffda RBX: 00007faa0bb8f6c0 RCX: 00007faa0d0fcece [ 213.294683][ T8170] RDX: 000000000000000f RSI: 00007faa0bb8f0a0 RDI: 0000000000000005 [ 213.294694][ T8170] RBP: 00007faa0bb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.294809][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.294820][ T8170] R13: 00007faa0d3b6038 R14: 00007faa0d3b5fa0 R15: 00007ffee4270668 [ 213.294839][ T8170] [ 213.499957][ T8164] xt_hashlimit: max too large, truncated to 1048576 [ 213.742982][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 213.769161][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 213.783461][ T8189] loop7: detected capacity change from 0 to 512 [ 213.794853][ T8189] EXT4-fs (loop7): 1 truncate cleaned up [ 213.802524][ T8189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.883714][ T8180] loop1: detected capacity change from 0 to 1024 [ 213.898479][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1119'. [ 213.945097][ T8193] loop4: detected capacity change from 0 to 128 [ 213.953722][ T8193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.966663][ T8193] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.985876][ T8180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.060603][ T8180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 214.108057][ T28] audit: type=1400 audit(1772076214.153:2681): avc: denied { create } for pid=8192 comm="syz.4.1120" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 214.134486][ T8180] System zones: 0-1, 3-36 [ 214.230532][ T28] audit: type=1400 audit(1772076214.153:2682): avc: denied { rename } for pid=8192 comm="syz.4.1120" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.276344][ T28] audit: type=1400 audit(1772076214.153:2683): avc: denied { unlink } for pid=8192 comm="syz.4.1120" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.408418][ T8180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.408929][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.588688][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.679976][ T8199] loop2: detected capacity change from 0 to 1024 [ 214.695635][ T8199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.733394][ T8199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 214.743470][ T8199] System zones: 0-1, 3-36 [ 214.804909][ T8199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.807608][ T8212] siw: device registration error -23 [ 214.837107][ T8212] loop4: detected capacity change from 0 to 512 [ 214.987485][ T8212] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1122: corrupted in-inode xattr: bad e_name length [ 215.001907][ T8212] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.004743][ T8212] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1122: couldn't read orphan inode 15 (err -117) [ 215.014091][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 215.014114][ C1] EXT4-fs (loop4): initial error at time 1772076215: ext4_iget_extra_inode:5025: inode 15 [ 215.014162][ C1] EXT4-fs (loop4): last error at time 1772076215: ext4_iget_extra_inode:5025: inode 15 [ 215.052568][ T8212] loop4: lost filesystem error report for type 5 error -117 [ 215.056151][ T8212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.103859][ T8212] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1122: dx entry: limit 0 != root limit 125 [ 215.115802][ T8212] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1122: Corrupt directory, running e2fsck is recommended [ 215.167063][ T8212] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1122: dx entry: limit 0 != root limit 125 [ 215.178966][ T8212] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1122: Corrupt directory, running e2fsck is recommended [ 215.192186][ T8212] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.1122: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 215.356606][ T28] audit: type=1326 audit(1772076215.413:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.7.1125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97f757c629 code=0x0 [ 215.467024][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.531248][ T8221] netlink: 'syz.4.1126': attribute type 3 has an invalid length. [ 215.548732][ T8221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1126'. [ 216.144949][ T8227] lo speed is unknown, defaulting to 1000 [ 216.829285][ T8235] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1132'. [ 216.994453][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.106436][ T28] audit: type=1400 audit(1772076217.153:2685): avc: denied { read } for pid=8234 comm="syz.4.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.609627][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.797648][ T8258] wireguard0: entered promiscuous mode [ 217.807274][ T8258] wireguard0: entered allmulticast mode [ 217.933285][ T8256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.964113][ T8261] batadv_slave_1: entered promiscuous mode [ 217.998450][ T8254] lo speed is unknown, defaulting to 1000 [ 218.105412][ T8256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.291458][ T8256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.433316][ T8256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.596478][ T8255] batadv_slave_1: left promiscuous mode [ 218.705060][ T6711] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.747254][ T6711] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.747302][ T6711] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.760778][ T6711] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.884325][ T8282] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 218.884325][ T8282] The task syz.7.1146 (8282) triggered the difference, watch for misbehavior. [ 218.920803][ T8282] lo speed is unknown, defaulting to 1000 [ 219.138749][ T8294] netlink: 'syz.1.1149': attribute type 2 has an invalid length. [ 219.156356][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1149'. [ 219.449353][ T8310] loop6: detected capacity change from 0 to 512 [ 219.579631][ T8310] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1152: corrupted in-inode xattr: bad e_name length [ 219.593809][ T8310] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.595490][ T8310] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1152: couldn't read orphan inode 15 (err -117) [ 219.604790][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 219.604809][ C1] EXT4-fs (loop6): initial error at time 1772076219: ext4_iget_extra_inode:5025: inode 15 [ 219.604848][ C1] EXT4-fs (loop6): last error at time 1772076219: ext4_iget_extra_inode:5025: inode 15 [ 219.643351][ T8310] loop6: lost filesystem error report for type 5 error -117 [ 219.645272][ T8310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.691430][ T8310] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1152: dx entry: limit 0 != root limit 125 [ 219.703330][ T8310] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1152: Corrupt directory, running e2fsck is recommended [ 219.750723][ T8310] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1152: dx entry: limit 0 != root limit 125 [ 219.762671][ T8310] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1152: Corrupt directory, running e2fsck is recommended [ 219.775838][ T8310] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.1152: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 220.118961][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.146595][ T8316] loop4: detected capacity change from 0 to 1024 [ 220.153500][ T8316] EXT4-fs: Ignoring removed bh option [ 220.165496][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1155'. [ 220.179103][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1156'. [ 220.205064][ T28] audit: type=1400 audit(1772076220.263:2686): avc: denied { bind } for pid=8317 comm="syz.6.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 220.216936][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1156'. [ 220.262677][ T8316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 220.328346][ T8328] netlink: 'syz.7.1158': attribute type 9 has an invalid length. [ 220.449545][ T28] audit: type=1400 audit(1772076220.503:2687): avc: denied { write } for pid=8332 comm="syz.2.1160" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 220.572541][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 220.626571][ T28] audit: type=1400 audit(1772076220.683:2688): avc: denied { mounton } for pid=8307 comm="syz.1.1153" path="/proc/701/task" dev="proc" ino=21227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.673746][ T8346] loop4: detected capacity change from 0 to 128 [ 220.698148][ T8346] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.745047][ T8349] loop7: detected capacity change from 0 to 2048 [ 220.755588][ T8346] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.773493][ T8309] loop1: detected capacity change from 0 to 32768 [ 220.818671][ T3306] loop1: p1 p3 < > [ 220.825785][ T8309] loop1: p1 p3 < > [ 220.848432][ T28] audit: type=1400 audit(1772076220.913:2689): avc: denied { mounton } for pid=8345 comm="syz.4.1163" path="/217/file1/file0" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.888763][ T3305] Alternate GPT is invalid, using primary GPT. [ 220.900308][ T3305] loop7: p2 p3 p7 [ 220.959539][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.976726][ T8349] Alternate GPT is invalid, using primary GPT. [ 220.983321][ T8349] loop7: p2 p3 p7 [ 221.047371][ T3001] Alternate GPT is invalid, using primary GPT. [ 221.053928][ T3001] loop7: p2 p3 p7 [ 221.094920][ T8369] x_tables: duplicate underflow at hook 1 [ 221.118919][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 221.147207][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 221.160517][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 221.189691][ T8359] loop7: detected capacity change from 0 to 128 [ 221.199359][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 221.210906][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 221.222208][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 221.233240][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1172'. [ 221.273886][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 221.292479][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1172'. [ 221.303992][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 221.318103][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 221.360795][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 221.372286][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 221.436475][ T28] audit: type=1400 audit(1772076221.493:2690): avc: denied { create } for pid=8384 comm="syz.6.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.499269][ T28] audit: type=1400 audit(1772076221.533:2691): avc: denied { ioctl } for pid=8384 comm="syz.6.1174" path="socket:[21710]" dev="sockfs" ino=21710 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.885867][ T8409] loop7: detected capacity change from 0 to 1024 [ 221.909614][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.003636][ T8443] siw: device registration error -23 [ 222.019172][ T8443] loop1: detected capacity change from 0 to 512 [ 222.118926][ T8443] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1178: corrupted in-inode xattr: bad e_name length [ 222.133105][ T8443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.133964][ T8443] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1178: couldn't read orphan inode 15 (err -117) [ 222.143315][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 222.143338][ C1] EXT4-fs (loop1): initial error at time 1772076222: ext4_iget_extra_inode:5025: inode 15 [ 222.143367][ C1] EXT4-fs (loop1): last error at time 1772076222: ext4_iget_extra_inode:5025: inode 15 [ 222.181333][ T8443] loop1: lost filesystem error report for type 5 error -117 [ 222.183546][ T8443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.227180][ T8443] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1178: dx entry: limit 0 != root limit 125 [ 222.239326][ T8443] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1178: Corrupt directory, running e2fsck is recommended [ 222.285018][ T8443] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1178: dx entry: limit 0 != root limit 125 [ 222.297107][ T8443] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1178: Corrupt directory, running e2fsck is recommended [ 222.310075][ T8443] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.1178: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 222.390211][ T8409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 222.551482][ T8409] System zones: 0-1, 3-36 [ 222.613650][ T8397] loop6: detected capacity change from 0 to 1024 [ 222.655062][ T8448] sctp: [Deprecated]: syz.2.1179 (pid 8448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.655062][ T8448] Use struct sctp_sack_info instead [ 222.691288][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.711217][ T8448] FAULT_INJECTION: forcing a failure. [ 222.711217][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.715084][ T8397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.738125][ T8452] loop4: detected capacity change from 0 to 512 [ 222.738684][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.2.1179 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.738790][ T8448] Tainted: [W]=WARN [ 222.738812][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.738867][ T8448] Call Trace: [ 222.738889][ T8448] [ 222.738912][ T8448] __dump_stack+0x1d/0x30 [ 222.739003][ T8448] dump_stack_lvl+0x95/0xd0 [ 222.739100][ T8448] dump_stack+0x15/0x1b [ 222.739180][ T8448] should_fail_ex+0x263/0x280 [ 222.739256][ T8448] should_fail+0xb/0x20 [ 222.739322][ T8448] should_fail_usercopy+0x1a/0x20 [ 222.739441][ T8448] _copy_from_user+0x1c/0xb0 [ 222.739597][ T8448] sctp_getsockopt_delayed_ack+0xd2/0x500 [ 222.739735][ T8448] ? selinux_socket_getsockopt+0x192/0x1c0 [ 222.739891][ T8448] sctp_getsockopt+0x749/0xaa0 [ 222.740018][ T8448] sock_common_getsockopt+0x60/0x70 [ 222.740145][ T8448] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 222.740329][ T8448] do_sock_getsockopt+0x1c4/0x210 [ 222.740494][ T8448] __x64_sys_getsockopt+0x11d/0x1a0 [ 222.740598][ T8448] x64_sys_call+0x2dcf/0x3020 [ 222.740710][ T8448] do_syscall_64+0x12c/0x370 [ 222.740838][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.740941][ T8448] RIP: 0033:0x7f1fea9ec629 [ 222.740996][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.741076][ T8448] RSP: 002b:00007f1fe9447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.741143][ T8448] RAX: ffffffffffffffda RBX: 00007f1feac65fa0 RCX: 00007f1fea9ec629 [ 222.741158][ T8448] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 222.741170][ T8448] RBP: 00007f1fe9447090 R08: 0000200000000080 R09: 0000000000000000 [ 222.741204][ T8448] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 222.741241][ T8448] R13: 00007f1feac66038 R14: 00007f1feac65fa0 R15: 00007ffff5d04c08 [ 222.741315][ T8448] [ 222.784104][ T8409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.805307][ T8452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.974891][ T8452] EXT4-fs (loop4): 1 truncate cleaned up [ 222.981318][ T8452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.009584][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.079426][ T8397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 223.107886][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1185'. [ 223.112110][ T8397] System zones: 0-1, 3-36 [ 223.137062][ T28] audit: type=1400 audit(1772076223.203:2692): avc: denied { mounton } for pid=8470 comm="syz.2.1186" path="/260/file0" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 223.170026][ T8397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.866022][ T8490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.878806][ T8490] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.950929][ T8493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1190: bg 0: block 345: padding at end of block bitmap is not set [ 223.966703][ T8493] EXT4-fs (loop1): Remounting filesystem read-only [ 223.973366][ T324] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 224.002807][ T28] audit: type=1400 audit(1772076224.063:2693): avc: denied { setattr } for pid=8489 comm="syz.1.1190" path="pipe:[521]" dev="pipefs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 224.037653][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.138903][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.226974][ T8505] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 224.402667][ T8510] 9p: Bad value for 'rfdno' [ 224.578057][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.652636][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 225.332352][ T8536] set_capacity_and_notify: 2 callbacks suppressed [ 225.332504][ T8536] loop2: detected capacity change from 0 to 8192 [ 225.353333][ T8536] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.411898][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.444704][ T8536] FAT-fs (loop2): Filesystem has been set read-only [ 225.470839][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.480059][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.489192][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.498664][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.508145][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.517690][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.529280][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.538380][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.547847][ T8536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 225.649943][ T28] audit: type=1400 audit(1772076225.713:2694): avc: denied { write } for pid=8540 comm="syz.6.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.918911][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1209'. [ 225.931992][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1209'. [ 225.941887][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1209'. [ 225.954432][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1209'. [ 226.017611][ T28] audit: type=1400 audit(1772076226.083:2695): avc: denied { connect } for pid=8553 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.092076][ T8563] program syz.7.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.101811][ T8563] FAULT_INJECTION: forcing a failure. [ 226.101811][ T8563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.116152][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.7.1212 Tainted: G W syzkaller #0 PREEMPT(full) [ 226.116266][ T8563] Tainted: [W]=WARN [ 226.116347][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.116364][ T8563] Call Trace: [ 226.116373][ T8563] [ 226.116383][ T8563] __dump_stack+0x1d/0x30 [ 226.116420][ T8563] dump_stack_lvl+0x95/0xd0 [ 226.116453][ T8563] dump_stack+0x15/0x1b [ 226.116518][ T8563] should_fail_ex+0x263/0x280 [ 226.116547][ T8563] should_fail+0xb/0x20 [ 226.116585][ T8563] should_fail_usercopy+0x1a/0x20 [ 226.116633][ T8563] _copy_from_user+0x1c/0xb0 [ 226.116672][ T8563] scsi_ioctl+0x1402/0x1750 [ 226.116746][ T8563] ? __rcu_read_unlock+0x4e/0x70 [ 226.116814][ T8563] ? avc_has_perm_noaudit+0xab/0x130 [ 226.116843][ T8563] ? avc_has_perm+0x101/0x190 [ 226.116870][ T8563] ? do_vfs_ioctl+0x84f/0xe70 [ 226.116971][ T8563] sg_ioctl+0xebf/0x1350 [ 226.117005][ T8563] ? __pfx_sg_ioctl+0x10/0x10 [ 226.117109][ T8563] __se_sys_ioctl+0xce/0x140 [ 226.117156][ T8563] __x64_sys_ioctl+0x43/0x50 [ 226.117274][ T8563] x64_sys_call+0x1563/0x3020 [ 226.117356][ T8563] do_syscall_64+0x12c/0x370 [ 226.117459][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.117491][ T8563] RIP: 0033:0x7f97f757c629 [ 226.117548][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.117595][ T8563] RSP: 002b:00007f97f5fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.117630][ T8563] RAX: ffffffffffffffda RBX: 00007f97f77f5fa0 RCX: 00007f97f757c629 [ 226.117647][ T8563] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 226.117662][ T8563] RBP: 00007f97f5fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.117677][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.117730][ T8563] R13: 00007f97f77f6038 R14: 00007f97f77f5fa0 R15: 00007ffeb6e66798 [ 226.117757][ T8563] [ 226.386471][ T8567] bond_slave_0: entered promiscuous mode [ 226.392396][ T8567] bond_slave_1: entered promiscuous mode [ 226.407110][ T8565] loop2: detected capacity change from 0 to 1024 [ 226.414338][ T8567] macvlan0: entered promiscuous mode [ 226.420756][ T8567] bond0: entered promiscuous mode [ 226.427506][ T8567] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.441874][ T8567] macvlan1: entered promiscuous mode [ 226.449190][ T8565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.489585][ T8577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8577 comm=syz.4.1215 [ 226.578719][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.673384][ T8584] FAULT_INJECTION: forcing a failure. [ 226.673384][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 226.725403][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.4.1216 Tainted: G W syzkaller #0 PREEMPT(full) [ 226.725445][ T8584] Tainted: [W]=WARN [ 226.725453][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.725516][ T8584] Call Trace: [ 226.725524][ T8584] [ 226.725533][ T8584] __dump_stack+0x1d/0x30 [ 226.725583][ T8584] dump_stack_lvl+0x95/0xd0 [ 226.725610][ T8584] dump_stack+0x15/0x1b [ 226.725640][ T8584] should_fail_ex+0x263/0x280 [ 226.725730][ T8584] should_failslab+0x8c/0xb0 [ 226.725752][ T8584] __kmalloc_node_noprof+0xc8/0x560 [ 226.725776][ T8584] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 226.725816][ T8584] __vmalloc_node_range_noprof+0x428/0x12b0 [ 226.725890][ T8584] ? irqentry_exit+0x91/0x520 [ 226.725929][ T8584] ? __rcu_read_unlock+0x4e/0x70 [ 226.726054][ T8584] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 226.726095][ T8584] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 226.726141][ T8584] __vmalloc_noprof+0xa4/0xf0 [ 226.726174][ T8584] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 226.726221][ T8584] bpf_prog_alloc_no_stats+0x47/0x390 [ 226.726256][ T8584] ? bpf_prog_alloc+0x2a/0x150 [ 226.726362][ T8584] bpf_prog_alloc+0x3c/0x150 [ 226.726434][ T8584] bpf_prog_load+0x506/0x1140 [ 226.726465][ T8584] ? security_bpf+0x2b/0x90 [ 226.726535][ T8584] __sys_bpf+0x505/0x7e0 [ 226.726578][ T8584] __x64_sys_bpf+0x41/0x50 [ 226.726621][ T8584] x64_sys_call+0x10cb/0x3020 [ 226.726714][ T8584] do_syscall_64+0x12c/0x370 [ 226.726835][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.726919][ T8584] RIP: 0033:0x7fed6efec629 [ 226.726940][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.726961][ T8584] RSP: 002b:00007fed6da3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.726987][ T8584] RAX: ffffffffffffffda RBX: 00007fed6f265fa0 RCX: 00007fed6efec629 [ 226.727010][ T8584] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 226.727027][ T8584] RBP: 00007fed6da3f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.727043][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.727059][ T8584] R13: 00007fed6f266038 R14: 00007fed6f265fa0 R15: 00007ffe8e208b78 [ 226.727082][ T8584] [ 226.996724][ T8584] syz.4.1216: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 227.018381][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.4.1216 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.018452][ T8584] Tainted: [W]=WARN [ 227.018459][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.018472][ T8584] Call Trace: [ 227.018478][ T8584] [ 227.018485][ T8584] __dump_stack+0x1d/0x30 [ 227.018513][ T8584] dump_stack_lvl+0x95/0xd0 [ 227.018582][ T8584] dump_stack+0x15/0x1b [ 227.018610][ T8584] warn_alloc+0x145/0x1c0 [ 227.018639][ T8584] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 227.018744][ T8584] ? irqentry_exit+0x91/0x520 [ 227.018826][ T8584] ? __rcu_read_unlock+0x4e/0x70 [ 227.018854][ T8584] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 227.018887][ T8584] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 227.019036][ T8584] __vmalloc_noprof+0xa4/0xf0 [ 227.019067][ T8584] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 227.019148][ T8584] bpf_prog_alloc_no_stats+0x47/0x390 [ 227.019200][ T8584] ? bpf_prog_alloc+0x2a/0x150 [ 227.019223][ T8584] bpf_prog_alloc+0x3c/0x150 [ 227.019242][ T8584] bpf_prog_load+0x506/0x1140 [ 227.019359][ T8584] ? security_bpf+0x2b/0x90 [ 227.019400][ T8584] __sys_bpf+0x505/0x7e0 [ 227.019433][ T8584] __x64_sys_bpf+0x41/0x50 [ 227.019520][ T8584] x64_sys_call+0x10cb/0x3020 [ 227.019680][ T8584] do_syscall_64+0x12c/0x370 [ 227.019721][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.019743][ T8584] RIP: 0033:0x7fed6efec629 [ 227.019782][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.019845][ T8584] RSP: 002b:00007fed6da3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.019947][ T8584] RAX: ffffffffffffffda RBX: 00007fed6f265fa0 RCX: 00007fed6efec629 [ 227.019966][ T8584] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 227.019983][ T8584] RBP: 00007fed6da3f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.020000][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.020032][ T8584] R13: 00007fed6f266038 R14: 00007fed6f265fa0 R15: 00007ffe8e208b78 [ 227.020053][ T8584] [ 227.023207][ T8596] 9p: Bad value for 'rfdno' [ 227.037333][ T8584] Mem-Info: [ 227.038284][ T28] audit: type=1400 audit(1772076228.082:2696): avc: denied { read write } for pid=8595 comm="syz.2.1217" dev="sockfs" ino=21920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.049111][ T28] audit: type=1400 audit(1772076228.102:2697): avc: denied { ioctl } for pid=8595 comm="syz.2.1217" path="socket:[21920]" dev="sockfs" ino=21920 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.340873][ T28] audit: type=1400 audit(1772076228.402:2698): avc: denied { getopt } for pid=8598 comm="syz.6.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.371322][ T8584] active_anon:10160 inactive_anon:0 isolated_anon:0 [ 227.371322][ T8584] active_file:26195 inactive_file:2485 isolated_file:0 [ 227.371322][ T8584] unevictable:103 dirty:319 writeback:0 [ 227.371322][ T8584] slab_reclaimable:3696 slab_unreclaimable:53194 [ 227.371322][ T8584] mapped:29593 shmem:1446 pagetables:3537 [ 227.371322][ T8584] sec_pagetables:0 bounce:0 [ 227.371322][ T8584] kernel_misc_reclaimable:0 [ 227.371322][ T8584] free:1832385 free_pcp:11021 free_cma:0 [ 227.596802][ T8584] Node 0 active_anon:42496kB inactive_anon:0kB active_file:104780kB inactive_file:9940kB unevictable:412kB isolated(anon):0kB isolated(file):0kB mapped:119996kB dirty:1276kB writeback:0kB shmem:7640kB kernel_stack:4368kB pagetables:14848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.637588][ T8599] loop6: detected capacity change from 0 to 8192 [ 227.670248][ T8584] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.700972][ T8584] lowmem_reserve[]: 0 2879 7857 7857 [ 227.709220][ T8584] Node 0 DMA32 free:2944568kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948196kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 227.709568][ T3306] loop6: p1 < > p2 p4 < p5 > [ 227.709660][ T3306] loop6: partition table partially beyond EOD, truncated [ 227.709729][ T3306] loop6: p1 start 134217728 is beyond EOD, truncated [ 227.709752][ T3306] loop6: p2 size 591360 extends beyond EOD, truncated [ 227.711574][ T3306] loop6: p5 size 591360 extends beyond EOD, [ 227.744032][ T8584] lowmem_reserve[]: [ 227.785901][ T3306] truncated [ 227.801478][ T8584] 0 0 4978 4978 [ 227.805275][ T8584] Node 0 Normal free:4366920kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43076kB inactive_anon:0kB active_file:104780kB inactive_file:9900kB unevictable:404kB writepending:1280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:38132kB local_pcp:24740kB free_cma:0kB [ 227.814150][ T28] audit: type=1400 audit(1772076228.872:2699): avc: denied { create } for pid=8644 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.842334][ T8584] lowmem_reserve[]: [ 227.872917][ T8599] loop6: p1 < > p2 p4 < p5 > [ 227.881625][ T8599] loop6: partition table partially beyond EOD, truncated [ 227.896587][ T8599] loop6: p1 start 134217728 is beyond EOD, truncated [ 227.916345][ T8599] loop6: p2 size 591360 extends beyond EOD, truncated [ 227.923558][ T28] audit: type=1400 audit(1772076228.982:2700): avc: denied { ioctl } for pid=8644 comm="syz.1.1223" path="socket:[21996]" dev="sockfs" ino=21996 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.934568][ T8584] 0 [ 227.960054][ T8599] loop6: p5 size 591360 extends beyond EOD, truncated [ 227.974891][ T8656] loop7: detected capacity change from 0 to 1024 [ 227.983869][ T8584] 0 0 0 [ 227.995694][ T8584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.023127][ T8584] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) [ 228.026674][ T8656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.026800][ T8584] 1*128kB [ 228.081835][ T28] audit: type=1400 audit(1772076229.142:2701): avc: denied { open } for pid=8653 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 228.145112][ T8584] (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB [ 228.158092][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.185055][ T8584] (M) 716*4096kB (M) = 2944568kB [ 228.197119][ T8584] Node 0 Normal: 1692*4kB (UM) 853*8kB (UM) 269*16kB (UME) 475*32kB (UME) 236*64kB (UME) 212*128kB (UME) 103*256kB (UME) 74*512kB (UME) 51*1024kB (UM) 49*2048kB (UM) 995*4096kB (UME) = 4367688kB [ 228.226064][ T28] audit: type=1400 audit(1772076229.142:2702): avc: denied { kernel } for pid=8653 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 228.247303][ T8584] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 228.276728][ T28] audit: type=1400 audit(1772076229.142:2703): avc: denied { write } for pid=8653 comm="syz.2.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 228.305891][ T8584] 30786 total pagecache pages [ 228.315175][ T8584] 0 pages in swap cache [ 228.320534][ T8584] Free swap = 124996kB [ 228.325669][ T8584] Total swap = 124996kB [ 228.331960][ T8584] 2097051 pages RAM [ 228.332913][ T8668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.388702][ T8584] 0 pages HighMem/MovableOnly [ 228.399532][ T8584] 81602 pages reserved [ 228.414981][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 228.420672][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 228.428573][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 228.531396][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1234'. [ 228.551801][ T8678] netlink: 'syz.6.1234': attribute type 5 has an invalid length. [ 228.561964][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'. [ 228.580393][ T28] audit: type=1400 audit(1772076229.642:2704): avc: denied { create } for pid=8675 comm="syz.7.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.604562][ T28] audit: type=1400 audit(1772076229.662:2705): avc: denied { write } for pid=8675 comm="syz.7.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.677831][ T28] audit: type=1326 audit(1772076229.742:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.7.1233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97f757c629 code=0x0 [ 228.845491][ T8689] loop6: detected capacity change from 0 to 1024 [ 228.930655][ T8689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.986312][ T28] audit: type=1400 audit(1772076230.032:2707): avc: denied { create } for pid=8707 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 229.036620][ T8689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 229.045558][ T8689] System zones: 0-1, 3-36 [ 229.088528][ T8716] loop4: detected capacity change from 0 to 1024 [ 229.138345][ T8716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.153276][ T8689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.254169][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.367946][ T28] audit: type=1400 audit(1772076230.432:2708): avc: denied { tracepoint } for pid=8745 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 229.471265][ T8759] loop4: detected capacity change from 0 to 512 [ 229.520028][ T28] audit: type=1400 audit(1772076230.582:2709): avc: denied { sys_module } for pid=8756 comm="syz.4.1244" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.135748][ T8778] lo speed is unknown, defaulting to 1000 [ 230.180287][ T8794] loop1: detected capacity change from 0 to 512 [ 230.207271][ T8794] EXT4-fs: old and new quota format mixing [ 230.260177][ T8794] SELinux: failed to load policy [ 231.091129][ T28] audit: type=1400 audit(1772076232.152:2710): avc: denied { accept } for pid=8848 comm="syz.1.1253" path="socket:[23562]" dev="sockfs" ino=23562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.229708][ T8858] loop1: detected capacity change from 0 to 2048 [ 231.288418][ T8858] Alternate GPT is invalid, using primary GPT. [ 231.295021][ T8858] loop1: p1 p2 p3 [ 231.299109][ T8858] loop1: partition table partially beyond EOD, truncated [ 231.532339][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.748304][ T8870] FAULT_INJECTION: forcing a failure. [ 231.748304][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.776591][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.1.1261 Tainted: G W syzkaller #0 PREEMPT(full) [ 231.776629][ T8870] Tainted: [W]=WARN [ 231.776636][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.776652][ T8870] Call Trace: [ 231.776661][ T8870] [ 231.776671][ T8870] __dump_stack+0x1d/0x30 [ 231.776750][ T8870] dump_stack_lvl+0x95/0xd0 [ 231.776781][ T8870] dump_stack+0x15/0x1b [ 231.776807][ T8870] should_fail_ex+0x263/0x280 [ 231.776837][ T8870] should_fail+0xb/0x20 [ 231.776916][ T8870] should_fail_usercopy+0x1a/0x20 [ 231.776939][ T8870] _copy_from_user+0x1c/0xb0 [ 231.776974][ T8870] ___sys_sendmsg+0xc1/0x1e0 [ 231.777043][ T8870] __x64_sys_sendmsg+0xd4/0x160 [ 231.777085][ T8870] x64_sys_call+0x194c/0x3020 [ 231.777121][ T8870] do_syscall_64+0x12c/0x370 [ 231.777207][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.777232][ T8870] RIP: 0033:0x7faa0d13c629 [ 231.777293][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.777316][ T8870] RSP: 002b:00007faa0bb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.777447][ T8870] RAX: ffffffffffffffda RBX: 00007faa0d3b5fa0 RCX: 00007faa0d13c629 [ 231.777462][ T8870] RDX: 0000000008040800 RSI: 0000200000000180 RDI: 0000000000000004 [ 231.777479][ T8870] RBP: 00007faa0bb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.777496][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.777513][ T8870] R13: 00007faa0d3b6038 R14: 00007faa0d3b5fa0 R15: 00007ffee4270668 [ 231.777540][ T8870] [ 231.960750][ T8871] loop6: detected capacity change from 0 to 512 [ 232.185190][ T8874] loop1: detected capacity change from 0 to 256 [ 232.203384][ T8871] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1259: corrupted in-inode xattr: bad e_name length [ 232.217411][ T8871] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.226309][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 232.241983][ C1] EXT4-fs (loop6): initial error at time 1772076233: ext4_iget_extra_inode:5025: inode 15 [ 232.251934][ C1] EXT4-fs (loop6): last error at time 1772076233: ext4_iget_extra_inode:5025: inode 15 [ 232.286920][ T8871] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1259: couldn't read orphan inode 15 (err -117) [ 232.299022][ T8871] loop6: lost filesystem error report for type 5 error -117 [ 232.300836][ T8871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.344015][ T8874] vfat: Deprecated parameter 'posix' [ 232.351315][ T8866] EXT4-fs error (device loop6): ext4_xattr_set_entry:1670: inode #2: comm syz.6.1259: corrupted xattr entries [ 232.371824][ T8866] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1259: dx entry: limit 0 != root limit 125 [ 232.383858][ T8866] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1259: Corrupt directory, running e2fsck is recommended [ 232.412844][ T8866] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1259: dx entry: limit 0 != root limit 125 [ 232.424803][ T8866] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1259: Corrupt directory, running e2fsck is recommended [ 232.437796][ T8866] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.1259: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 232.451119][ T8874] FAT-fs: "posix" option is obsolete, not supported now [ 232.535548][ T8883] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 232.628531][ T8884] loop1: detected capacity change from 0 to 8192 [ 232.662840][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.683349][ T28] audit: type=1400 audit(1772076233.732:2711): avc: denied { cpu } for pid=8885 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 232.715886][ T8890] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 232.756423][ T8890] FAT-fs (loop1): Filesystem has been set read-only [ 232.781745][ T8897] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 232.792821][ T8890] binfmt_misc: register: failed to install interpreter file ./file0 [ 232.950811][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1267'. [ 233.032680][ T8899] ip6gre1: entered allmulticast mode [ 233.041828][ T8905] siw: device registration error -23 [ 233.110154][ T8905] loop7: detected capacity change from 0 to 512 [ 233.517210][ T28] audit: type=1400 audit(1772076234.572:2712): avc: denied { mount } for pid=8907 comm="syz.1.1271" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 233.777665][ T8915] loop7: detected capacity change from 0 to 1024 [ 233.803564][ T8915] EXT4-fs: Ignoring removed nobh option [ 233.826550][ T8915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.883109][ T8915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.910899][ T8915] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1273'. [ 234.010703][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.037941][ T8922] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1276'. [ 234.062690][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1277'. [ 234.095965][ T28] audit: type=1400 audit(1772076235.152:2713): avc: denied { mount } for pid=8921 comm="syz.4.1276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 234.194186][ T28] audit: type=1400 audit(1772076235.152:2714): avc: denied { remount } for pid=8921 comm="syz.4.1276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 234.229490][ T28] audit: type=1400 audit(1772076235.252:2715): avc: denied { append } for pid=8928 comm="syz.6.1279" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.296402][ T28] audit: type=1400 audit(1772076235.342:2716): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 234.369041][ T8920] lo speed is unknown, defaulting to 1000 [ 234.489384][ T28] audit: type=1400 audit(1772076235.542:2717): avc: denied { write } for pid=8948 comm="syz.7.1284" path="socket:[23737]" dev="sockfs" ino=23737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.850908][ T8963] siw: device registration error -23 [ 234.867100][ T8963] loop1: detected capacity change from 0 to 512 [ 235.057784][ T8963] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1283: corrupted in-inode xattr: bad e_name length [ 235.071671][ T8963] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.072211][ T8963] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1283: couldn't read orphan inode 15 (err -117) [ 235.081508][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 235.081528][ C1] EXT4-fs (loop1): initial error at time 1772076236: ext4_iget_extra_inode:5025: inode 15 [ 235.081553][ C1] EXT4-fs (loop1): last error at time 1772076236: ext4_iget_extra_inode:5025: inode 15 [ 235.120129][ T8963] loop1: lost filesystem error report for type 5 error -117 [ 235.130163][ T8963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.157861][ T8963] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #2: comm syz.1.1283: corrupted xattr entries [ 235.188242][ T8963] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1283: dx entry: limit 0 != root limit 125 [ 235.200282][ T8963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1283: Corrupt directory, running e2fsck is recommended [ 235.248765][ T8963] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1283: dx entry: limit 0 != root limit 125 [ 235.260835][ T8963] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1283: Corrupt directory, running e2fsck is recommended [ 235.273793][ T8963] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.1283: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 235.536863][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.705412][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1289'. [ 235.898892][ T9018] loop6: detected capacity change from 0 to 256 [ 235.961972][ T9022] loop4: detected capacity change from 0 to 512 [ 235.979795][ T9021] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 236.033309][ T9018] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.034726][ T9022] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 236.083819][ T9021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.090824][ T9022] EXT4-fs (loop4): orphan cleanup on readonly fs [ 236.104105][ T9018] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 236.122319][ T9018] FAT-fs (loop6): Filesystem has been set read-only [ 236.147870][ T9021] bond2: (slave bond3): making interface the new active one [ 236.155298][ T9022] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1293: corrupted inode contents [ 236.186847][ T9018] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 236.186859][ T9021] bond2: (slave bond3): Enslaving as an active interface with an up link [ 236.204910][ T9022] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 236.205122][ T9022] EXT4-fs (loop4): Remounting filesystem read-only [ 236.214322][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 236.214344][ C1] EXT4-fs (loop4): initial error at time 1772076237: ext4_do_update_inode:5569: inode 16 [ 236.214387][ C1] EXT4-fs (loop4): last error at time 1772076237: ext4_do_update_inode:5569: inode 16 [ 236.256749][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 236.336506][ T9022] EXT4-fs (loop4): 1 truncate cleaned up [ 236.350379][ T9018] team0: Port device team_slave_0 removed [ 236.356657][ T417] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.377216][ T417] Quota error (device loop4): write_blk: dquota write failed [ 236.396290][ T417] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 236.418620][ T417] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.439609][ T417] Quota error (device loop4): write_blk: dquota write failed [ 236.478148][ T417] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 236.516342][ T417] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 236.536968][ T9022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.537191][ T9029] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 236.593120][ T9035] loop1: detected capacity change from 0 to 2048 [ 236.612812][ T9029] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 236.637628][ T9036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.637693][ T9036] IPv6: NLM_F_CREATE should be set when creating new route [ 236.639860][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 236.673457][ T9035] Alternate GPT is invalid, using primary GPT. [ 236.673591][ T9035] loop1: p1 p2 p3 [ 236.673601][ T9035] loop1: partition table partially beyond EOD, truncated [ 236.691480][ T3001] Alternate GPT is invalid, using primary GPT. [ 236.691607][ T3001] loop1: p1 p2 p3 [ 236.691618][ T3001] loop1: partition table partially beyond EOD, truncated [ 236.886595][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.121076][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 237.296551][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'. [ 237.436129][ T9060] loop2: detected capacity change from 0 to 1024 [ 237.527371][ T9060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.754197][ T9060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 237.824918][ T9060] System zones: 0-1, 3-36 [ 238.030272][ T9060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.058471][ T9079] loop4: detected capacity change from 0 to 2048 [ 238.145077][ T9082] loop1: detected capacity change from 0 to 512 [ 238.154073][ T9079] Alternate GPT is invalid, using primary GPT. [ 238.160880][ T9079] loop4: p1 p2 p3 [ 238.164646][ T9079] loop4: partition table partially beyond EOD, truncated [ 238.291078][ T9087] team0: Device vlan1 is already an upper device of the team interface [ 238.491932][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 238.513620][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 238.632391][ T9103] FAULT_INJECTION: forcing a failure. [ 238.632391][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 238.666377][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.4.1316 Tainted: G W syzkaller #0 PREEMPT(full) [ 238.666432][ T9103] Tainted: [W]=WARN [ 238.666522][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.666552][ T9103] Call Trace: [ 238.666559][ T9103] [ 238.666575][ T9103] __dump_stack+0x1d/0x30 [ 238.666610][ T9103] dump_stack_lvl+0x95/0xd0 [ 238.666718][ T9103] dump_stack+0x15/0x1b [ 238.666745][ T9103] should_fail_ex+0x263/0x280 [ 238.666802][ T9103] should_failslab+0x8c/0xb0 [ 238.666831][ T9103] kmem_cache_alloc_noprof+0x66/0x400 [ 238.666858][ T9103] ? skb_clone+0x151/0x1f0 [ 238.666990][ T9103] skb_clone+0x151/0x1f0 [ 238.667024][ T9103] __netlink_deliver_tap+0x2c9/0x500 [ 238.667089][ T9103] netlink_unicast+0x66b/0x690 [ 238.667123][ T9103] netlink_sendmsg+0x5c8/0x6f0 [ 238.667165][ T9103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.667205][ T9103] ____sys_sendmsg+0x5af/0x600 [ 238.667296][ T9103] ___sys_sendmsg+0x195/0x1e0 [ 238.667411][ T9103] __x64_sys_sendmsg+0xd4/0x160 [ 238.667455][ T9103] x64_sys_call+0x194c/0x3020 [ 238.667537][ T9103] do_syscall_64+0x12c/0x370 [ 238.667593][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.667623][ T9103] RIP: 0033:0x7fed6efec629 [ 238.667644][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.667669][ T9103] RSP: 002b:00007fed6da3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.667764][ T9103] RAX: ffffffffffffffda RBX: 00007fed6f265fa0 RCX: 00007fed6efec629 [ 238.667856][ T9103] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 238.667874][ T9103] RBP: 00007fed6da3f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.667891][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.667908][ T9103] R13: 00007fed6f266038 R14: 00007fed6f265fa0 R15: 00007ffe8e208b78 [ 238.667935][ T9103] [ 239.845891][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.935807][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1326'. [ 239.968929][ T9125] loop6: detected capacity change from 0 to 2048 [ 240.068160][ T9125] Alternate GPT is invalid, using primary GPT. [ 240.076601][ T9125] loop6: p1 p2 p3 [ 240.080727][ T9125] loop6: partition table partially beyond EOD, truncated [ 240.106094][ T9134] loop7: detected capacity change from 0 to 2048 [ 240.113026][ T9134] EXT4-fs: Ignoring removed i_version option [ 240.139144][ T9134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.319006][ T9143] loop6: detected capacity change from 0 to 512 [ 240.358961][ T9143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.378581][ T9143] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.451820][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1330'. [ 240.831346][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'. [ 240.924877][ T9149] loop2: detected capacity change from 0 to 1024 [ 240.987953][ T9149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.002759][ T6689] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 241.032532][ T6689] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 241.048902][ T6689] EXT4-fs (loop7): This should not happen!! Data will be lost [ 241.048902][ T6689] [ 241.069947][ T6689] EXT4-fs (loop7): Total free blocks count 0 [ 241.075987][ T6689] EXT4-fs (loop7): Free/Dirty block details [ 241.089260][ T6689] EXT4-fs (loop7): free_blocks=2415919504 [ 241.095218][ T6689] EXT4-fs (loop7): dirty_blocks=8208 [ 241.098756][ T9149] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 241.101110][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.143897][ T6689] EXT4-fs (loop7): Block reservation details [ 241.150024][ T6689] EXT4-fs (loop7): i_reserved_data_blocks=513 [ 241.152925][ T9149] System zones: [ 241.160257][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 241.177092][ T9149] 0-1, 3-36 [ 241.184803][ T6689] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 241.214060][ T9149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.357958][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 241.357978][ T28] audit: type=1400 audit(1772076242.422:2720): avc: denied { mounton } for pid=9158 comm="syz.1.1336" path="/280/file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.409863][ T9167] netlink: 'syz.1.1336': attribute type 8 has an invalid length. [ 241.474861][ T9164] lo speed is unknown, defaulting to 1000 [ 241.568278][ T9171] loop7: detected capacity change from 0 to 2048 [ 241.638471][ T3305] Alternate GPT is invalid, using primary GPT. [ 241.856930][ T3305] loop7: p1 p2 p3 [ 241.856946][ T3305] loop7: partition table partially beyond EOD, truncated [ 241.879118][ T9171] Alternate GPT is invalid, using primary GPT. [ 241.879231][ T9171] loop7: p1 p2 p3 [ 241.879241][ T9171] loop7: partition table partially beyond EOD, truncated [ 242.323889][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 242.594399][ T9193] netlink: 'syz.7.1347': attribute type 1 has an invalid length. [ 242.610261][ T9193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.625577][ T9193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=9193 comm=syz.7.1347 [ 243.240093][ T9200] loop7: detected capacity change from 0 to 512 [ 243.365509][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1349'. [ 243.373720][ T9200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.389641][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.390174][ T9200] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.444027][ T9200] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.510257][ T9200] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 243.748574][ T9207] lo speed is unknown, defaulting to 1000 [ 243.880983][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.014372][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.066340][ T28] audit: type=1400 audit(1772076245.122:2721): avc: denied { ioctl } for pid=9228 comm="syz.7.1354" path="socket:[24837]" dev="sockfs" ino=24837 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.116855][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 244.132043][ T28] audit: type=1400 audit(1772076245.162:2722): avc: denied { getopt } for pid=9228 comm="syz.7.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.348368][ T9208] lo speed is unknown, defaulting to 1000 [ 245.264753][ T28] audit: type=1400 audit(1772076245.782:2723): avc: denied { accept } for pid=9249 comm="syz.2.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.445594][ T9293] loop6: detected capacity change from 0 to 512 [ 246.538744][ T9293] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1360: corrupted in-inode xattr: bad e_name length [ 246.552750][ T9293] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.553527][ T9293] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1360: couldn't read orphan inode 15 (err -117) [ 246.562758][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 246.562775][ C1] EXT4-fs (loop6): initial error at time 1772076247: ext4_iget_extra_inode:5025: inode 15 [ 246.562808][ C1] EXT4-fs (loop6): last error at time 1772076247: ext4_iget_extra_inode:5025: inode 15 [ 246.601173][ T9293] loop6: lost filesystem error report for type 5 error -117 [ 246.616725][ T9293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.644851][ T9293] EXT4-fs error (device loop6): ext4_xattr_set_entry:1670: inode #2: comm syz.6.1360: corrupted xattr entries [ 246.675082][ T9293] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1360: dx entry: limit 0 != root limit 125 [ 246.686988][ T9293] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1360: Corrupt directory, running e2fsck is recommended [ 246.736617][ T9293] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.1360: dx entry: limit 0 != root limit 125 [ 246.748617][ T9293] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1360: Corrupt directory, running e2fsck is recommended [ 246.761642][ T9293] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.1360: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 246.875448][ T9296] loop4: detected capacity change from 0 to 1024 [ 246.918115][ T9296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.015423][ T9296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 247.035860][ T9296] System zones: 0-1, 3-36 [ 247.036745][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.051849][ T9308] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1365'. [ 247.058104][ T9296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.277995][ T9317] SELinux: ebitmap: truncated map [ 247.283478][ T9317] SELinux: failed to load policy [ 247.444930][ T9323] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 247.454112][ T9324] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 247.834842][ T9329] loop1: detected capacity change from 0 to 4096 [ 247.860799][ T9329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.969838][ T28] audit: type=1400 audit(1772076249.032:2724): avc: denied { setattr } for pid=9328 comm="syz.1.1372" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.016672][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.138502][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 248.161511][ T9342] loop1: detected capacity change from 0 to 512 [ 248.203050][ T9342] ext2: Unknown parameter 'subj_type' [ 248.429040][ T28] audit: type=1400 audit(1772076249.492:2725): avc: denied { shutdown } for pid=9357 comm="syz.7.1384" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.516300][ T28] audit: type=1400 audit(1772076249.522:2726): avc: denied { write } for pid=9357 comm="syz.7.1384" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.789894][ T9367] loop7: detected capacity change from 0 to 128 [ 248.817340][ T9367] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.896665][ T9367] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.570139][ T9375] loop2: detected capacity change from 0 to 8192 [ 249.589987][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 249.608011][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.635147][ T9375] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 249.644238][ T9375] FAT-fs (loop2): Filesystem has been set read-only [ 249.665992][ T9375] binfmt_misc: register: failed to install interpreter file ./file0 [ 249.686187][ T9380] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 249.797220][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'. [ 250.021095][ T9398] loop4: detected capacity change from 0 to 1024 [ 250.098421][ T9401] loop2: detected capacity change from 0 to 128 [ 250.208359][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1397'. [ 250.241279][ T9398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.453919][ T9412] FAULT_INJECTION: forcing a failure. [ 250.453919][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.549435][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.1.1399 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.549506][ T9412] Tainted: [W]=WARN [ 250.549515][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.549549][ T9412] Call Trace: [ 250.549558][ T9412] [ 250.549566][ T9412] __dump_stack+0x1d/0x30 [ 250.549601][ T9412] dump_stack_lvl+0x95/0xd0 [ 250.549651][ T9412] dump_stack+0x15/0x1b [ 250.549673][ T9412] should_fail_ex+0x263/0x280 [ 250.549772][ T9412] should_fail+0xb/0x20 [ 250.549793][ T9412] should_fail_usercopy+0x1a/0x20 [ 250.549820][ T9412] _copy_from_iter+0xcf/0xea0 [ 250.549899][ T9412] ? __alloc_skb+0x4f6/0x690 [ 250.549922][ T9412] ? __alloc_skb+0x200/0x690 [ 250.549988][ T9412] netlink_sendmsg+0x4ae/0x6f0 [ 250.550025][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.550056][ T9412] ____sys_sendmsg+0x5af/0x600 [ 250.550099][ T9412] ___sys_sendmsg+0x195/0x1e0 [ 250.550138][ T9412] __x64_sys_sendmsg+0xd4/0x160 [ 250.550175][ T9412] x64_sys_call+0x194c/0x3020 [ 250.550210][ T9412] do_syscall_64+0x12c/0x370 [ 250.550272][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.550354][ T9412] RIP: 0033:0x7faa0d13c629 [ 250.550386][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.550405][ T9412] RSP: 002b:00007faa0bb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.550425][ T9412] RAX: ffffffffffffffda RBX: 00007faa0d3b5fa0 RCX: 00007faa0d13c629 [ 250.550439][ T9412] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 250.550455][ T9412] RBP: 00007faa0bb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.550468][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.550506][ T9412] R13: 00007faa0d3b6038 R14: 00007faa0d3b5fa0 R15: 00007ffee4270668 [ 250.550532][ T9412] [ 250.842193][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.866806][ T9419] loop1: detected capacity change from 0 to 8192 [ 250.941225][ T9419] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 250.950214][ T9419] FAT-fs (loop1): Filesystem has been set read-only [ 250.990856][ T9432] loop6: detected capacity change from 0 to 512 [ 251.011465][ T9433] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.042705][ T9432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.065952][ T9419] binfmt_misc: register: failed to install interpreter file ./file0 [ 251.138683][ T9432] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.194502][ T9432] EXT4-fs error (device loop6): ext4_lookup:1785: inode #16: comm syz.6.1406: iget: checksum invalid [ 251.236770][ T9432] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 251.314368][ T9454] loop2: detected capacity change from 0 to 2048 [ 251.354290][ T3305] Alternate GPT is invalid, using primary GPT. [ 251.360732][ T3305] loop2: p1 p2 p3 [ 251.371109][ T3305] loop2: partition table partially beyond EOD, truncated [ 251.402834][ T9454] Alternate GPT is invalid, using primary GPT. [ 251.410861][ T9454] loop2: p1 p2 p3 [ 251.414645][ T9454] loop2: partition table partially beyond EOD, truncated [ 251.739337][ T28] audit: type=1400 audit(1772076252.802:2727): avc: denied { shutdown } for pid=9484 comm="syz.7.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 251.849602][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.049463][ T9526] sctp: [Deprecated]: syz.4.1416 (pid 9526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.049463][ T9526] Use struct sctp_sack_info instead [ 252.749147][ T9542] lo speed is unknown, defaulting to 1000 [ 253.140840][ T9538] lo speed is unknown, defaulting to 1000 [ 253.406520][ T9548] loop2: detected capacity change from 0 to 8192 [ 253.462853][ T9554] loop7: detected capacity change from 0 to 2048 [ 253.470329][ T9552] loop6: detected capacity change from 0 to 2048 [ 253.479788][ T9548] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 253.496995][ T9548] FAT-fs (loop2): Filesystem has been set read-only [ 253.531340][ T9554] Alternate GPT is invalid, using primary GPT. [ 253.538451][ T3306] Alternate GPT is invalid, using primary GPT. [ 253.544751][ T3306] loop6: p1 p2 p3 [ 253.551557][ T9554] loop7: p1 p2 p3 [ 253.555510][ T3306] loop6: partition table partially beyond EOD, truncated [ 253.562958][ T9554] loop7: partition table partially beyond EOD, truncated [ 253.612787][ T9552] Alternate GPT is invalid, using primary GPT. [ 253.612879][ T9552] loop6: p1 p2 p3 [ 253.612890][ T9552] loop6: partition table partially beyond EOD, truncated [ 253.652946][ T3001] Alternate GPT is invalid, using primary GPT. [ 253.653066][ T3001] loop6: p1 p2 p3 [ 253.653075][ T3001] loop6: partition table partially beyond EOD, truncated [ 253.767106][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 253.769147][ T9085] udevd[9085]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 253.771326][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 253.797788][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 253.800555][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 253.828356][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 253.943105][ T9557] loop2: detected capacity change from 0 to 1024 [ 253.987709][ T9557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.002998][ T9566] loop6: detected capacity change from 0 to 512 [ 254.068722][ T9568] loop7: detected capacity change from 0 to 2048 [ 254.085892][ T9557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 254.097240][ T9557] System zones: 0-1, 3-36 [ 254.128170][ T9557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.157859][ T9566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.168196][ T3305] Alternate GPT is invalid, using primary GPT. [ 254.174535][ T3305] loop7: p1 p2 p3 [ 254.179810][ T3305] loop7: partition table partially beyond EOD, truncated [ 254.195124][ T9568] Alternate GPT is invalid, using primary GPT. [ 254.208061][ T9568] loop7: p1 p2 p3 [ 254.212019][ T9568] loop7: partition table partially beyond EOD, truncated [ 254.257082][ T3001] Alternate GPT is invalid, using primary GPT. [ 254.263457][ T3001] loop7: p1 p2 p3 [ 254.270905][ T3001] loop7: partition table partially beyond EOD, truncated [ 254.486016][ T9566] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1428: invalid block [ 254.575139][ T9566] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 254.576281][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 254.592037][ C0] EXT4-fs (loop6): initial error at time 1772076255: ext4_get_branch:178: inode 11: block 4294967295 [ 254.603004][ C0] EXT4-fs (loop6): last error at time 1772076255: ext4_get_branch:178: inode 11: block 4294967295 [ 254.620782][ T9566] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1428: invalid indirect mapped block 4294967295 (level 1) [ 254.634249][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 254.648413][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 254.707006][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1432'. [ 254.717030][ T9566] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 254.746460][ T28] audit: type=1400 audit(1772076255.782:2728): avc: denied { nlmsg_read } for pid=9574 comm="syz.7.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 254.780187][ T9566] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1428: invalid indirect mapped block 4294967295 (level 1) [ 254.850732][ T9580] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 254.858707][ T28] audit: type=1400 audit(1772076255.912:2729): avc: denied { map } for pid=9579 comm="syz.1.1433" path="pipe:[25322]" dev="pipefs" ino=25322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 254.884266][ T9566] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 254.887070][ T28] audit: type=1400 audit(1772076255.912:2730): avc: denied { execute } for pid=9579 comm="syz.1.1433" path="pipe:[25322]" dev="pipefs" ino=25322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 254.946371][ T28] audit: type=1400 audit(1772076255.922:2731): avc: denied { getopt } for pid=9574 comm="syz.7.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.985340][ T9566] EXT4-fs (loop6): 2 truncates cleaned up [ 255.030448][ T9566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.477615][ T4246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.646717][ T9586] loop6: detected capacity change from 0 to 8192 [ 255.715381][ T9586] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 255.725254][ T9586] FAT-fs (loop6): Filesystem has been set read-only [ 255.885669][ T9590] lo speed is unknown, defaulting to 1000 [ 255.927993][ T9601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.026691][ T9603] netlink: 'syz.1.1438': attribute type 8 has an invalid length. [ 256.124190][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.286343][ T28] audit: type=1400 audit(1772076257.342:2732): avc: denied { name_connect } for pid=9611 comm="syz.1.1446" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 256.310528][ T28] audit: type=1400 audit(1772076257.342:2733): avc: denied { listen } for pid=9611 comm="syz.1.1446" lport=60157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.377703][ T9622] loop7: detected capacity change from 0 to 8192 [ 256.497900][ T9622] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 256.640647][ T9622] FAT-fs (loop7): Filesystem has been set read-only [ 257.047068][ T9636] lo speed is unknown, defaulting to 1000 [ 257.077169][ T28] audit: type=1400 audit(1772076258.142:2734): avc: denied { create } for pid=9639 comm="syz.1.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.116447][ T9638] netlink: 'syz.4.1454': attribute type 8 has an invalid length. [ 257.126318][ T28] audit: type=1400 audit(1772076258.162:2735): avc: denied { accept } for pid=9639 comm="syz.1.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.149961][ T9643] loop1: detected capacity change from 0 to 764 [ 257.166300][ T28] audit: type=1400 audit(1772076258.162:2736): avc: denied { write } for pid=9639 comm="syz.1.1455" path="socket:[25449]" dev="sockfs" ino=25449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.202840][ T9643] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.231250][ T9635] FAULT_INJECTION: forcing a failure. [ 257.231250][ T9635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.245381][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.7.1452 Tainted: G W syzkaller #0 PREEMPT(full) [ 257.245465][ T9635] Tainted: [W]=WARN [ 257.245474][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.245489][ T9635] Call Trace: [ 257.245499][ T9635] [ 257.245509][ T9635] __dump_stack+0x1d/0x30 [ 257.245545][ T9635] dump_stack_lvl+0x95/0xd0 [ 257.245641][ T9635] dump_stack+0x15/0x1b [ 257.245667][ T9635] should_fail_ex+0x263/0x280 [ 257.245775][ T9635] should_fail+0xb/0x20 [ 257.245800][ T9635] should_fail_usercopy+0x1a/0x20 [ 257.245831][ T9635] _copy_to_iter+0x251/0xea0 [ 257.245908][ T9635] ? traverse+0x379/0x3a0 [ 257.245955][ T9635] seq_read_iter+0x1d5/0x940 [ 257.245985][ T9635] ? _parse_integer+0x27/0x40 [ 257.246040][ T9635] seq_read+0x279/0x2c0 [ 257.246092][ T9635] ? __pfx_seq_read+0x10/0x10 [ 257.246123][ T9635] vfs_readv+0x432/0x6e0 [ 257.246220][ T9635] __x64_sys_preadv+0xfd/0x1c0 [ 257.246241][ T9635] x64_sys_call+0x2915/0x3020 [ 257.246338][ T9635] do_syscall_64+0x12c/0x370 [ 257.246386][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.246435][ T9635] RIP: 0033:0x7f97f757c629 [ 257.246456][ T9635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.246495][ T9635] RSP: 002b:00007f97f5fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.246567][ T9635] RAX: ffffffffffffffda RBX: 00007f97f77f6090 RCX: 00007f97f757c629 [ 257.246653][ T9635] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 257.246699][ T9635] RBP: 00007f97f5fb6090 R08: 00000000000000ca R09: 0000000000000000 [ 257.246716][ T9635] R10: 00000000000002c2 R11: 0000000000000246 R12: 0000000000000001 [ 257.246732][ T9635] R13: 00007f97f77f6128 R14: 00007f97f77f6090 R15: 00007ffeb6e66798 [ 257.246758][ T9635] [ 257.438836][ T9648] loop1: detected capacity change from 0 to 1024 [ 257.456423][ T9648] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 257.466137][ T9648] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 257.477162][ T9648] EXT4-fs (loop1): invalid journal inode [ 257.482853][ T9648] EXT4-fs (loop1): can't get journal size [ 257.496487][ T9648] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 17104912: comm syz.1.1457: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 257.511866][ T9648] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 257.512078][ T9648] EXT4-fs (loop1): failed to initialize system zone (-117) [ 257.521186][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 257.521211][ C0] EXT4-fs (loop1): initial error at time 1772076258: ext4_map_blocks:776: inode 3: block 17104912 [ 257.521262][ C0] EXT4-fs (loop1): last error at time 1772076258: ext4_map_blocks:776: inode 3: block 17104912 [ 257.556086][ T9648] EXT4-fs (loop1): mount failed [ 257.792009][ T28] audit: type=1400 audit(1772076258.852:2737): avc: denied { append } for pid=9653 comm="syz.7.1459" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.015618][ T9675] FAULT_INJECTION: forcing a failure. [ 258.015618][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.129954][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.6.1464 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.130003][ T9675] Tainted: [W]=WARN [ 258.130013][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.130037][ T9675] Call Trace: [ 258.130047][ T9675] [ 258.130058][ T9675] __dump_stack+0x1d/0x30 [ 258.130088][ T9675] dump_stack_lvl+0x95/0xd0 [ 258.130114][ T9675] dump_stack+0x15/0x1b [ 258.130157][ T9675] should_fail_ex+0x263/0x280 [ 258.130254][ T9675] should_fail+0xb/0x20 [ 258.130281][ T9675] should_fail_usercopy+0x1a/0x20 [ 258.130393][ T9675] _copy_from_user+0x1c/0xb0 [ 258.130447][ T9675] ___sys_sendmsg+0xc1/0x1e0 [ 258.130508][ T9675] __x64_sys_sendmsg+0xd4/0x160 [ 258.130578][ T9675] x64_sys_call+0x194c/0x3020 [ 258.130610][ T9675] do_syscall_64+0x12c/0x370 [ 258.130712][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.130742][ T9675] RIP: 0033:0x7f278cf1c629 [ 258.130764][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.130789][ T9675] RSP: 002b:00007f278b977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.130811][ T9675] RAX: ffffffffffffffda RBX: 00007f278d195fa0 RCX: 00007f278cf1c629 [ 258.130897][ T9675] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 258.130916][ T9675] RBP: 00007f278b977090 R08: 0000000000000000 R09: 0000000000000000 [ 258.130932][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.130945][ T9675] R13: 00007f278d196038 R14: 00007f278d195fa0 R15: 00007ffce16aabe8 [ 258.130967][ T9675] [ 259.677854][ T9689] siw: device registration error -23 [ 259.926959][ T9690] siw: device registration error -23 [ 259.947418][ T9690] loop4: detected capacity change from 0 to 512 [ 259.964711][ T9687] loop7: detected capacity change from 0 to 512 [ 260.061631][ T9687] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1466: corrupted in-inode xattr: bad e_name length [ 260.075860][ T9687] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.076267][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 260.092575][ C1] EXT4-fs (loop7): initial error at time 1772076261: ext4_iget_extra_inode:5025: inode 15 [ 260.102811][ C1] EXT4-fs (loop7): last error at time 1772076261: ext4_iget_extra_inode:5025: inode 15 [ 260.112943][ T9690] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1468: corrupted in-inode xattr: bad e_name length [ 260.126772][ T9690] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.136296][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 260.151972][ C1] EXT4-fs (loop4): initial error at time 1772076261: ext4_iget_extra_inode:5025: inode 15 [ 260.161916][ C1] EXT4-fs (loop4): last error at time 1772076261: ext4_iget_extra_inode:5025: inode 15 [ 260.176917][ T9687] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1466: couldn't read orphan inode 15 (err -117) [ 260.189078][ T9687] loop7: lost filesystem error report for type 5 error -117 [ 260.190462][ T9687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.219087][ T9687] EXT4-fs error (device loop7): ext4_xattr_set_entry:1670: inode #2: comm syz.7.1466: corrupted xattr entries [ 260.239461][ T9690] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1468: couldn't read orphan inode 15 (err -117) [ 260.251442][ T9690] loop4: lost filesystem error report for type 5 error -117 [ 260.254922][ T9690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.286904][ T28] audit: type=1400 audit(1772076261.352:2738): avc: denied { write } for pid=9695 comm="syz.2.1470" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 260.322517][ T9688] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #2: comm syz.4.1468: corrupted xattr entries [ 260.339354][ T9687] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1466: dx entry: limit 0 != root limit 125 [ 260.351277][ T9687] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1466: Corrupt directory, running e2fsck is recommended [ 260.374723][ T9698] lo speed is unknown, defaulting to 1000 [ 260.383544][ T9687] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1466: dx entry: limit 0 != root limit 125 [ 260.395540][ T9687] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1466: Corrupt directory, running e2fsck is recommended [ 260.409276][ T9687] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 3: comm syz.7.1466: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 260.411555][ T9688] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1468: dx entry: limit 0 != root limit 125 [ 260.443806][ T9688] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1468: Corrupt directory, running e2fsck is recommended [ 260.473363][ T9688] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1468: dx entry: limit 0 != root limit 125 [ 260.485322][ T9688] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1468: Corrupt directory, running e2fsck is recommended [ 260.498500][ T9688] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.1468: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 260.609916][ T28] audit: type=1400 audit(1772076261.672:2739): avc: denied { read } for pid=9697 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 260.905308][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.915489][ T6367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.261319][ T28] audit: type=1326 audit(1772076262.322:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.7.1473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97f757c629 code=0x0 [ 261.372939][ T9723] FAULT_INJECTION: forcing a failure. [ 261.372939][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.395931][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.4.1477 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.396019][ T9723] Tainted: [W]=WARN [ 261.396028][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.396042][ T9723] Call Trace: [ 261.396049][ T9723] [ 261.396056][ T9723] __dump_stack+0x1d/0x30 [ 261.396130][ T9723] dump_stack_lvl+0x95/0xd0 [ 261.396154][ T9723] dump_stack+0x15/0x1b [ 261.396194][ T9723] should_fail_ex+0x263/0x280 [ 261.396252][ T9723] should_fail+0xb/0x20 [ 261.396329][ T9723] should_fail_usercopy+0x1a/0x20 [ 261.396366][ T9723] _copy_to_user+0x20/0xa0 [ 261.396400][ T9723] bpf_prog_test_run_syscall+0x2b8/0x360 [ 261.396477][ T9723] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 261.396515][ T9723] bpf_prog_test_run+0x204/0x340 [ 261.396540][ T9723] __sys_bpf+0x52e/0x7e0 [ 261.396568][ T9723] __x64_sys_bpf+0x41/0x50 [ 261.396662][ T9723] x64_sys_call+0x10cb/0x3020 [ 261.396690][ T9723] do_syscall_64+0x12c/0x370 [ 261.396733][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.396762][ T9723] RIP: 0033:0x7fed6efec629 [ 261.396801][ T9723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.396823][ T9723] RSP: 002b:00007fed6da3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.396894][ T9723] RAX: ffffffffffffffda RBX: 00007fed6f265fa0 RCX: 00007fed6efec629 [ 261.396914][ T9723] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 261.396931][ T9723] RBP: 00007fed6da3f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.396962][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.396979][ T9723] R13: 00007fed6f266038 R14: 00007fed6f265fa0 R15: 00007ffe8e208b78 [ 261.397035][ T9723] [ 261.864648][ T9734] loop4: detected capacity change from 0 to 2048 [ 261.988291][ T3001] Alternate GPT is invalid, using primary GPT. [ 261.995048][ T3001] loop4: p1 p2 p3 [ 261.999076][ T3001] loop4: partition table partially beyond EOD, truncated [ 262.014841][ T9739] loop1: detected capacity change from 0 to 2048 [ 262.043895][ T3001] Alternate GPT is invalid, using primary GPT. [ 262.050467][ T3001] loop4: p1 p2 p3 [ 262.054352][ T3001] loop4: partition table partially beyond EOD, truncated [ 262.068492][ T9734] Alternate GPT is invalid, using primary GPT. [ 262.077414][ T9739] Alternate GPT is invalid, using primary GPT. [ 262.077543][ T9734] loop4: p1 p2 p3 [ 262.083778][ T9739] loop1: p1 p2 p3 [ 262.092639][ T9739] loop1: partition table partially beyond EOD, truncated [ 262.099916][ T9734] loop4: partition table partially beyond EOD, truncated [ 262.167424][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'. [ 262.188025][ T9743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9743 comm=syz.4.1484 [ 262.189141][ T9743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=9743 comm=syz.4.1484 [ 262.190013][ T28] audit: type=1400 audit(1772076263.252:2741): avc: denied { watch watch_reads } for pid=9742 comm="syz.4.1484" path="/269/file0" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.220392][ T3001] Alternate GPT is invalid, using primary GPT. [ 262.220539][ T3001] loop1: p1 p2 p3 [ 262.220550][ T3001] loop1: partition table partially beyond EOD, truncated [ 262.244782][ T9746] lo speed is unknown, defaulting to 1000 [ 262.246035][ T9746] lo speed is unknown, defaulting to 1000 [ 262.248296][ T9746] lo speed is unknown, defaulting to 1000 [ 262.267662][ T3001] Alternate GPT is invalid, using primary GPT. [ 262.267814][ T3001] loop1: p1 p2 p3 [ 262.267824][ T3001] loop1: partition table partially beyond EOD, truncated [ 262.329532][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.331690][ T28] audit: type=1400 audit(1772076263.392:2742): avc: denied { ioctl } for pid=9745 comm="syz.4.1485" path="socket:[25886]" dev="sockfs" ino=25886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.343420][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 262.345368][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.367260][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.373883][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.379599][ T9084] udevd[9084]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 262.420038][ T9085] ================================================================== [ 262.420080][ T9085] BUG: KCSAN: data-race in touch_atime / touch_atime [ 262.420131][ T9085] [ 262.420138][ T9085] write to 0xffff88810d8c3828 of 4 bytes by task 3753 on cpu 0: [ 262.420160][ T9085] touch_atime+0x1d7/0x330 [ 262.420192][ T9085] shmem_file_read_iter+0x477/0x540 [ 262.420232][ T9085] vfs_read+0x6c0/0x7f0 [ 262.420262][ T9085] ksys_read+0xdc/0x1a0 [ 262.420292][ T9085] __x64_sys_read+0x40/0x50 [ 262.420324][ T9085] x64_sys_call+0x2886/0x3020 [ 262.420351][ T9085] do_syscall_64+0x12c/0x370 [ 262.420389][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.420416][ T9085] [ 262.420423][ T9085] read to 0xffff88810d8c3828 of 4 bytes by task 9085 on cpu 1: [ 262.420442][ T9085] touch_atime+0x16c/0x330 [ 262.420467][ T9085] shmem_file_read_iter+0x477/0x540 [ 262.420504][ T9085] vfs_read+0x6c0/0x7f0 [ 262.420550][ T9085] ksys_read+0xdc/0x1a0 [ 262.420589][ T9085] __x64_sys_read+0x40/0x50 [ 262.420634][ T9085] x64_sys_call+0x2886/0x3020 [ 262.420660][ T9085] do_syscall_64+0x12c/0x370 [ 262.420696][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.420724][ T9085] [ 262.420729][ T9085] value changed: 0x1d54ef0f -> 0x1d6f950b [ 262.420744][ T9085] [ 262.420749][ T9085] Reported by Kernel Concurrency Sanitizer on: [ 262.420767][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 262.420796][ T9085] Tainted: [W]=WARN [ 262.420802][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.420815][ T9085] ================================================================== [ 262.421351][ T9085] udevd[9085]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 262.423468][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.425243][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.487501][ T9746] infiniband syU×: set active [ 262.487544][ T3417] lo speed is unknown, defaulting to 1000 [ 262.488311][ T9746] infiniband syU×: added lo [ 262.535456][ T9746] RDS/IB: syU×: added [ 262.535481][ T9746] smc: adding ib device syU× with port count 1 [ 262.535500][ T9746] smc: ib device syU× port 1 has no pnetid [ 262.535781][ T9746] lo speed is unknown, defaulting to 1000 [ 262.537359][ T3417] lo speed is unknown, defaulting to 1000 [ 262.706721][ T9746] lo speed is unknown, defaulting to 1000 [ 262.783920][ T9746] lo speed is unknown, defaulting to 1000 [ 262.861676][ T9746] lo speed is unknown, defaulting to 1000 [ 262.955923][ T9746] lo speed is unknown, defaulting to 1000