last executing test programs: 6.685556649s ago: executing program 1 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000500)) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r8 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x2) fchdir(r10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f00000001c0), 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.506591579s ago: executing program 1 (id=563): r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x401, 0x90, 0x8, 0x101}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0x2, 0x81}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x44) syz_io_uring_setup(0x3a65, &(0x7f0000000200)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xc}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2) lseek(r6, 0xcd6, 0x2) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x9491, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x200000000000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000000280)={r7, 0x0, 0x8, 0x8, 0xfffffffffffffffc, 0xf}) 4.55116062s ago: executing program 0 (id=570): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd40bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xe, 0xffffffffffffffff, 0xa) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @multicast}, 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) keyctl$invalidate(0x15, r5) 4.49639265s ago: executing program 1 (id=571): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000010000060001400006000006000340000200000900010073797a3000000000090002000000140000001100010000000000000000000500000a000000000000"], 0x84}}, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4}, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 4.204715166s ago: executing program 2 (id=573): r0 = socket(0x10, 0x80b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001600000", 0x24) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x85, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='caif0\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/11, 0xb}], 0x3, &(0x7f0000000680)=""/162, 0xa2}, 0x9}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/64, 0x40}, {&(0x7f00000007c0)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}], 0x4, &(0x7f0000001900)=""/160, 0xa0}, 0x1}], 0x2, 0x141, &(0x7f0000001a40)={0x0, 0x989680}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.538398111s ago: executing program 0 (id=578): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd40bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xe, 0xffffffffffffffff, 0xa) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @multicast}, 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) keyctl$invalidate(0x15, r5) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES64=0x0, @ANYRESOCT=r3, @ANYBLOB="675da369860b91b8bdf6e301d593a0e1da0e205b724e"], 0x4, 0x263, &(0x7f0000000880)="$eJzs2s9rHGUYB/Bn05ZuWtJd8RctiC96UC9Lk7OHFokgBhQ1QhWkUzPRNeNuyCyBFTE56dU/wbN49CZIj15y8S/w4C2XHHsQRyaziUkstPgjW+Lnc0ge5p0v8868y8szy+6+/PWna6tlbzUbxUyrFTM3YjvutaIbM3FgO1564dZPz7x9673Xby4ttSdHF1JKV5798f3Pv3vu7ujyu99f+eFi7HQ/2N1b+HXnqZ2ru7+/83G/TP0yDYajlKU7w+Eou1PkaaVfrvVSerPIszJP/UGZbxwbXy2G6+vjlA1W5i6tb+RlmbLBOK3l4zQaptHGOGUfZf1B6vV6ae5S8E8sf3uvqmKvunA7qqqa/SYu3425X6ITrcdS6/EbrSdvt57ebl3dq6rOyejsdGbMv+tvrz9nwmRTX3wrpXZE8dXm8uZy878ebcfN1ehHEXlcj9n4LeqPyURTv/ra0uL1tK8bXxZbk/zW5vKFg0s0+fnoRPf++fkmnw7yFyOi/lvv7ofXX4hOPHH//MKJfHP9drz4/JF8Lzrx84cxjCJWos7G1mR+i1/Mp/TKG0sn8tf2zwMAOGt66VDdv52rXwqb/udcM947Nn6kP2ryR/rDzgP6wxP91fm4dn66905EOf5sLSuKfKN+wdsvDo/8X4vZo4/lYYqDr0L+u4nNHFuzv5zTjUfk0SnOThHxyVR2JE7Tn4v+wFPbpzIhAAAAAAAAAAAAHspp/Jxw2vcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA82v4IAAD//1jpvxo=") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x4000080a) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0xc0, 0xa0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045"], 0x0) 3.382678052s ago: executing program 1 (id=581): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffdfe, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x4005, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x11, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000f9100011000004000000000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f0000002380)=[0xffffffffffffffff, r1, r0], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) r4 = semget$private(0x0, 0x4000, 0xa) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.292807075s ago: executing program 3 (id=582): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000010000060001400006000006000340000200000900010073797a3000000000090002000000140000001100010000000000000000000500000a000000000000"], 0x84}}, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4}, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 3.288504215s ago: executing program 2 (id=583): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x2e00, 0x6}, 0x28) 2.796876373s ago: executing program 2 (id=584): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x32, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2ad6}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query, @map_fd={0x18, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0xcd}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0xd5d, 0xc5, &(0x7f0000000680)=""/197, 0x41100, 0x21, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x2, 0x9, 0x36f, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x3, 0xa, 0x6}], 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2}, 0x10044009) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0xf, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @alu={0x4, 0x1, 0x9, 0x9, 0x6, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x88}, @jmp={0x5, 0x1, 0xb, 0x0, 0x9, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f00000009c0)='GPL\x00', 0x4, 0xe4, &(0x7f0000000a00)=""/228, 0x41100, 0x2, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x9, 0x7, 0xfffffffe}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001140)=[{0x3, 0x4, 0xe}, {0x1, 0x2, 0x5, 0x3}], 0x10, 0xffff8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1b3, &(0x7f0000000280)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') open_tree(r6, &(0x7f0000000440)='./file0\x00', 0x9800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\f\x00']) dup2(r5, r5) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000340)={{0x2, 0x4e20, @empty}, {0x306, @link_local}, 0x48, {0x2, 0x4e21, @rand_addr=0x64010100}, 'syzkaller0\x00'}) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x503, &(0x7f0000000c00)="$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") 2.131936129s ago: executing program 3 (id=585): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x5cf, 0x739}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000002c0)=""/229, &(0x7f0000000000)=0xe5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="d3cda8490300"}}) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x2b1, &(0x7f0000000400)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x12d) getdents64(r3, 0x0, 0x0) 2.102197473s ago: executing program 0 (id=586): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x89, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) 1.953021525s ago: executing program 2 (id=587): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000010000060001400006000006000340000200000900010073797a3000000000090002000000140000001100010000000000000000000500000a000000000000"], 0x84}}, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 1.87315202s ago: executing program 0 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30110000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) unshare(0x60000600) sync() r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getresgid(&(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f00000003c0)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "bcf8", 0x1}}, @common=@unspec=@owner={{0x38}, {r3, 0xffffffffffffffff, r4, r5, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000040), 0x80000000002, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000140), 0x9) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x2, 0x5, 0x72}, 0x2c) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xc, 0x2}}, 0x44) 1.728954413s ago: executing program 3 (id=590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="de0d23f58346c8aefda301c2f7a8c5e880b2e601d5a8a95acf8680ffb0ef4f0c1b504a660856c2517a1b18aac68712322678a96f9971ead8bbee7e97fea87acdb8ea12f3289e0efc5ab9"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 963.76643ms ago: executing program 3 (id=594): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2001, 0x100) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) semget(0x0, 0x0, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r2, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r2}}, 0x20) mprotect(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x16) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x6756, &(0x7f0000000200)={0x0, 0x949a, 0x1040, 0x0, 0x1000001}, &(0x7f0000000c00), &(0x7f0000000040)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000018000902000000f4fe00098008000b80d6c0020114005500fe880000000000000000000000000101fa970000"], 0x40}}, 0x10) r6 = semget$private(0x0, 0x4, 0x29b) setuid(0xee00) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0xffd, 0x109000) ioctl$EVIOCGKEYCODE(r7, 0x80084504, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$setlease(r8, 0x400, 0x1) semop(r6, &(0x7f0000001940)=[{0x0, 0x203}, {}], 0x2) semctl$GETVAL(r6, 0x1, 0xc, 0x0) 956.809969ms ago: executing program 2 (id=595): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x400e7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="11"], 0x14) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000540)) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x40083}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 775.693595ms ago: executing program 4 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0075a, &(0x7f00000001c0)={[{@quota}, {@bsdgroups}, {@resgid={'resgid', 0x3d, r1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@errors_remount}, {@mblk_io_submit}]}, 0x1, 0x46b, &(0x7f0000000580)="$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") (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0075a, &(0x7f00000001c0)={[{@quota}, {@bsdgroups}, {@resgid={'resgid', 0x3d, r1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@errors_remount}, {@mblk_io_submit}]}, 0x1, 0x46b, &(0x7f0000000580)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044091}, 0x40000c0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000007000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 676.484256ms ago: executing program 1 (id=597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x48, 0x0, 0x38, 0x2}]}) 620.938766ms ago: executing program 0 (id=598): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x89, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) 620.162706ms ago: executing program 4 (id=599): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={r0, r1/1000+60000}, 0x10) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000080)={0x18}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x5, 0x566, [0x0, 0x200000000580, 0x2000000005b0, 0x2000000006ee], 0x0, &(0x7f0000000540), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffb}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x58, 0xf7, 'erspan0\x00', 'veth0_to_bond\x00', 'netpci0\x00', 'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff], 0xbe, 0xbe, 0x10e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@local, [0xff, 0xffffff00, 0xff, 0xffffffff], 0x4e22, 0x0, 0x0, 0x4e23, 0x8, 0x8}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', {0x3}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x8, 0x8914, 'pim6reg0\x00', 'team_slave_1\x00', 'batadv0\x00', 'veth1_to_hsr\x00', @random="e40047eedb1d", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0xe6, 0x116, [@time={{'time\x00', 0x0, 0x18}, {{0xf, 0x9, 0xe7a6, 0x442d, 0xed70, 0x8, 0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}}, {0x3, 0x64, 0x1, 'caif0\x00', 'dvmrp0\x00', 'team_slave_1\x00', 'macvlan0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x7f, 0xff, 0xff, 0xff, 0xff], 0xae, 0xae, 0xde, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x8, 0x7, 0x1, 0x7, 0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x2, 0xf7, 'batadv_slave_1\x00', 'gre0\x00', 'veth0\x00', 'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x38a8d5d775d394f6}, [0xff, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xffffffffffffffff}}}}, {0x30, 0x40, 0x5, 'ip6gretap0\x00', 'nicvf0\x00', 'netpci0\x00', 'sit0\x00', @random="4c3cff36caa4", [0xecd90ac3fdbdef4c, 0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xd825}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x100}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x5de) fstatfs(r2, &(0x7f0000000b80)=""/155) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000c40)={0x0, 'geneve1\x00', 0x1}, 0x18) sendto$inet(r2, &(0x7f0000000c80)="dab062a667c7eb1cf5cb4da692281af2816b12fad2be7c3e0757672485224a8c8b67509c59e06c0d7a905d29fe2ac7267f939f079da0e20dc9fd75f8aa6bc11311498f", 0x43, 0x4000000, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000d00), 0x35c0215e, 0x54800) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {0x40, 0x3}}, './file0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d80)={r3, r4}, 0xc) fsetxattr$security_ima(r2, &(0x7f0000000dc0), &(0x7f0000000e00)=@v1={0x2, "41291ea9fd6389cd82e7aa63"}, 0xd, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), 0xffffffffffffffff) r6 = creat(&(0x7f0000000e80)='./file0\x00', 0x72) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2c00, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000f00)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000f40)=r8) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000005780)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000056c0)=[{{&(0x7f0000000f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/5, 0x5}], 0x1, &(0x7f0000001080)=""/79, 0x4f}, 0x7}, {{&(0x7f0000001100)=@nfc_llcp, 0x80, &(0x7f0000003200)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/52, 0x34}, {&(0x7f00000031c0)=""/4, 0x4}], 0x4, &(0x7f0000003240)=""/202, 0xca}, 0x45bf27ac}, {{&(0x7f0000003340)=@nfc, 0x80, &(0x7f0000005640)=[{&(0x7f00000033c0)=""/69, 0x45}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/8, 0x8}, {&(0x7f0000004480)=""/34, 0x22}, {&(0x7f00000044c0)=""/87, 0x57}, {&(0x7f0000004540)=""/251, 0xfb}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x7}, 0x9}], 0x3, 0x40, &(0x7f00000057c0)={r10, r11+60000000}) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000005800)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f0000005900)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000005940)={0x7f, 0x5, 0xf9, 0x4, 0x10, 0x81, 0x1, 0x74, 0x0, 0x0, 0x0, 0x1, 0xd, 0x5}, 0xe) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000059c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x48, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000005980)='veth0_macvtap\x00', 0x5, 0x0, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000005a40)) fcntl$dupfd(r12, 0x406, r6) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000005a80)) 561.085475ms ago: executing program 0 (id=600): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffdfe, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x4005, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x11, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000f9100011000004000000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018220000", @ANYRES32, @ANYBLOB="0000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f0000002380)=[0xffffffffffffffff, r1, r0], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) r4 = semget$private(0x0, 0x4000, 0xa) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r5, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) 472.512328ms ago: executing program 1 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) set_mempolicy(0x1, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup2(r3, r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x22020400) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 377.22013ms ago: executing program 4 (id=602): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 349.103775ms ago: executing program 4 (id=603): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c45e54c380020104000000000000000005000005080008400000000390000a806800428006000340000000000c00028005000100210000002c00018014000300fe8000000000000000000000000000aa140004000000000000008e2953e8e5db1274deff0000000000000600034000020000060003400004000014000180080001006401010208000200ac1414aa14000280060003400004000006000340000400000800014000000000081e0140000000000e0006006674702d3230303030000000080004400000000700000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) socket(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001114019fdcbd7000ffdbdf2508004b0028"], 0x18}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) ppoll(0x0, 0x0, &(0x7f0000000780)={0x77359400}, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000280)={{0x0, 0x2}, 0x0, 0xffff7fff, 0x600, {0x80}, 0x0, 0xdee}) 224.063092ms ago: executing program 4 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) (async) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x4, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000002c0), 0x0) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, 0x0, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) (async) read(r0, &(0x7f00000001c0)=""/202, 0xca) 186.186485ms ago: executing program 2 (id=605): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="545cfb34", 0x4, 0xd, 0x0, 0x2}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x80200, 0x0, 0x0, 0x20000, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x400) poll(&(0x7f0000000600)=[{r7, 0x1002}], 0x1, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x588, 0x28, 0x200, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x10001, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x7fff, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x4f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x106, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x8, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x40401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x16, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x0, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x6b4, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x8, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0xefed, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x8, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x1, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0x7, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x12, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0xebe9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x41, 0x101, 0x0, 0x2, 0x8, 0x38b, 0x8}}, {0x14, 0x2, [0x2, 0xbf5, 0x7f, 0x8, 0x8000, 0x6, 0x0, 0x5]}}, {{0x1c, 0x1, {0x4, 0x23, 0x2, 0x6, 0x2, 0x3e, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0x7, 0x200]}}, {{0x1c, 0x1, {0x4, 0x8, 0x3, 0x7, 0x1, 0x289e, 0x4, 0x1}}, {0x6, 0x2, [0x7f]}}, {{0x1c, 0x1, {0x4, 0xff, 0x7f, 0x1, 0x2, 0x9, 0x8000, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x6]}}, {{0x1c, 0x1, {0xd9, 0x0, 0x4, 0xe, 0x2, 0x9, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x3, 0x7f, 0x0, 0x8000, 0x400, 0x5]}}, {{0x1c, 0x1, {0x3, 0x10, 0x7fff, 0x400, 0x0, 0x3, 0xfffffff9, 0x5}}, {0xe, 0x2, [0xc9cc, 0xffff, 0xea, 0xfffc, 0x1000]}}, {{0x1c, 0x1, {0x6, 0x4, 0x9, 0x100, 0x1, 0x0, 0x40, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x4f, 0xe, 0xfffffffc, 0x1, 0x40, 0x101, 0x5}}, {0xe, 0x2, [0x9, 0xddb, 0x3ff, 0x8, 0x9]}}]}]}, 0x588}, 0x1, 0x0, 0x0, 0x2400c009}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r9, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x800) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 113.077591ms ago: executing program 4 (id=606): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x42, &(0x7f0000000080)={@multicast, @random="a32a6399ae74", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, @empty}}}}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) keyctl$assume_authority(0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 89.620287ms ago: executing program 3 (id=607): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000340012800b0001006970766c616e000024000280060001000100000006000100010000000600020003000000060002000200000008000500", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11000000040000000400000012"], 0x50) 0s ago: executing program 3 (id=608): r0 = socket(0xa, 0x801, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x2}, 0xfffffffe, 0x0, 0x2, 0x0, 0x2, 0x5e0002}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000140012800b0001006c6f7770616e000004000280080005"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x1000, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x0, 0x8eb6}]}) write(r6, &(0x7f00000004c0)='t8', 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt(r0, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) socket$l2tp6(0xa, 0x2, 0x73) kernel console output (not intermixed with test programs): 2: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 75.363754][ T4294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.432725][ T4307] syz.2.215: attempt to access beyond end of device [ 75.432725][ T4307] loop2: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 75.465502][ T4316] netlink: 596 bytes leftover after parsing attributes in process `syz.0.222'. [ 75.633918][ T4314] loop1: detected capacity change from 0 to 8192 [ 75.695659][ T4326] xt_hashlimit: size too large, truncated to 1048576 [ 75.814534][ T4330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=4330 comm=syz.4.224 [ 75.835589][ T4330] loop4: detected capacity change from 0 to 512 [ 75.849403][ T4331] FAULT_INJECTION: forcing a failure. [ 75.849403][ T4331] name failslab, interval 1, probability 0, space 0, times 0 [ 75.924883][ T4330] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #11: block 10: comm syz.4.224: lblock 0 mapped to illegal pblock 10 (length 1) [ 75.939124][ T4330] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.943596][ T4330] EXT4-fs (loop4): Remounting filesystem read-only [ 75.952887][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.952902][ C1] EXT4-fs (loop4): initial error at time 1772730330: ext4_map_blocks:776: inode 11: block 10 [ 75.952947][ C1] EXT4-fs (loop4): last error at time 1772730330: ext4_map_blocks:776: inode 11: block 10 [ 75.986426][ T4330] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.999479][ T4330] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 76.009733][ T4330] EXT4-fs (loop4): 1 orphan inode deleted [ 76.016361][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.058818][ T4331] CPU: 1 UID: 0 PID: 4331 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 76.058917][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.058929][ T4331] Call Trace: [ 76.058936][ T4331] [ 76.058944][ T4331] __dump_stack+0x1d/0x30 [ 76.058972][ T4331] dump_stack_lvl+0x95/0xd0 [ 76.059013][ T4331] dump_stack+0x15/0x1b [ 76.059102][ T4331] should_fail_ex+0x263/0x280 [ 76.059128][ T4331] should_failslab+0x8c/0xb0 [ 76.059156][ T4331] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 76.059263][ T4331] ? __alloc_skb+0x2d6/0x690 [ 76.059360][ T4331] __alloc_skb+0x2d6/0x690 [ 76.059390][ T4331] ? __alloc_skb+0x200/0x690 [ 76.059420][ T4331] netlink_alloc_large_skb+0xbf/0xf0 [ 76.059455][ T4331] netlink_sendmsg+0x40c/0x6f0 [ 76.059494][ T4331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.059612][ T4331] ____sys_sendmsg+0x5af/0x600 [ 76.059710][ T4331] ___sys_sendmsg+0x195/0x1e0 [ 76.059755][ T4331] __x64_sys_sendmsg+0xd4/0x160 [ 76.059797][ T4331] x64_sys_call+0x194c/0x3020 [ 76.059832][ T4331] do_syscall_64+0x12c/0x370 [ 76.059932][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.060041][ T4331] RIP: 0033:0x7f1e612ac799 [ 76.060057][ T4331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.060078][ T4331] RSP: 002b:00007f1e5fce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.060100][ T4331] RAX: ffffffffffffffda RBX: 00007f1e61526090 RCX: 00007f1e612ac799 [ 76.060113][ T4331] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 76.060125][ T4331] RBP: 00007f1e5fce6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.060208][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.060220][ T4331] R13: 00007f1e61526128 R14: 00007f1e61526090 R15: 00007ffc3d36ab58 [ 76.060246][ T4331] [ 76.341462][ T4314] loop1: p1 < > p2 p4 < p5 > [ 76.346193][ T4314] loop1: partition table partially beyond EOD, truncated [ 76.420490][ T4314] loop1: p1 start 134217728 is beyond EOD, truncated [ 76.421378][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.427368][ T4314] loop1: p2 size 591360 extends beyond EOD, truncated [ 76.445335][ T4314] loop1: p5 size 591360 extends beyond EOD, truncated [ 76.535858][ T4327] loop3: detected capacity change from 0 to 8192 [ 76.597084][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 76.597103][ T28] audit: type=1400 audit(1772730330.839:514): avc: denied { ioctl } for pid=4337 comm="syz.2.228" path="socket:[7048]" dev="sockfs" ino=7048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.647213][ T4332] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.653909][ T4338] lo speed is unknown, defaulting to 1000 [ 76.677673][ T4327] loop3: p1 < > p2 p4 < p5 > [ 76.688368][ T4327] loop3: partition table partially beyond EOD, truncated [ 76.696151][ T4327] loop3: p1 start 134217728 is beyond EOD, truncated [ 76.703241][ T4327] loop3: p2 size 591360 extends beyond EOD, truncated [ 76.730956][ T4327] loop3: p5 size 591360 extends beyond EOD, truncated [ 76.775514][ T4348] loop4: detected capacity change from 0 to 128 [ 76.863182][ T4338] lo speed is unknown, defaulting to 1000 [ 76.924312][ T4338] lo speed is unknown, defaulting to 1000 [ 77.093866][ T4338] infiniband syU×: set active [ 77.098748][ T4055] lo speed is unknown, defaulting to 1000 [ 77.120112][ T4338] infiniband syU×: added lo [ 77.201022][ T4338] RDS/IB: syU×: added [ 77.220373][ T4338] smc: adding ib device syU× with port count 1 [ 77.246757][ T4338] smc: ib device syU× port 1 has no pnetid [ 77.253127][ T4041] lo speed is unknown, defaulting to 1000 [ 77.302787][ T4338] lo speed is unknown, defaulting to 1000 [ 77.432186][ T4363] syzkaller0: entered promiscuous mode [ 77.438272][ T4363] syzkaller0: entered allmulticast mode [ 77.455103][ T4338] lo speed is unknown, defaulting to 1000 [ 77.538446][ T4338] lo speed is unknown, defaulting to 1000 [ 77.566782][ T4371] FAULT_INJECTION: forcing a failure. [ 77.566782][ T4371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.590606][ T4371] CPU: 1 UID: 0 PID: 4371 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 77.590681][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.590699][ T4371] Call Trace: [ 77.590708][ T4371] [ 77.590717][ T4371] __dump_stack+0x1d/0x30 [ 77.590828][ T4371] dump_stack_lvl+0x95/0xd0 [ 77.590859][ T4371] dump_stack+0x15/0x1b [ 77.590948][ T4371] should_fail_ex+0x263/0x280 [ 77.590972][ T4371] should_fail+0xb/0x20 [ 77.590993][ T4371] should_fail_usercopy+0x1a/0x20 [ 77.591017][ T4371] _copy_from_user+0x1c/0xb0 [ 77.591104][ T4371] ptrace_request+0xe00/0x1a90 [ 77.591142][ T4371] arch_ptrace+0x289/0x3f0 [ 77.591181][ T4371] __se_sys_ptrace+0xf3/0x2c0 [ 77.591256][ T4371] __x64_sys_ptrace+0x55/0x70 [ 77.591307][ T4371] x64_sys_call+0x287b/0x3020 [ 77.591342][ T4371] do_syscall_64+0x12c/0x370 [ 77.591429][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.591498][ T4371] RIP: 0033:0x7f7dbc90c799 [ 77.591518][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.591540][ T4371] RSP: 002b:00007f7dbb367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 77.591595][ T4371] RAX: ffffffffffffffda RBX: 00007f7dbcb85fa0 RCX: 00007f7dbc90c799 [ 77.591612][ T4371] RDX: 0000200000000140 RSI: 0000000000000094 RDI: 0000000000004212 [ 77.591626][ T4371] RBP: 00007f7dbb367090 R08: 0000000000000000 R09: 0000000000000000 [ 77.591638][ T4371] R10: 0000200000000001 R11: 0000000000000246 R12: 0000000000000001 [ 77.591650][ T4371] R13: 00007f7dbcb86038 R14: 00007f7dbcb85fa0 R15: 00007ffcf4d57888 [ 77.591743][ T4371] [ 77.659628][ T4338] lo speed is unknown, defaulting to 1000 [ 77.722640][ T4374] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.778140][ T28] audit: type=1400 audit(1772730331.949:515): avc: denied { block_suspend } for pid=4373 comm="syz.3.237" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.811863][ T4374] loop3: detected capacity change from 0 to 164 [ 77.828181][ T28] audit: type=1400 audit(1772730332.069:516): avc: denied { mounton } for pid=4373 comm="syz.3.237" path="/41/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.835811][ T4377] xt_hashlimit: size too large, truncated to 1048576 [ 77.894718][ T4338] lo speed is unknown, defaulting to 1000 [ 78.007721][ T4338] lo speed is unknown, defaulting to 1000 [ 78.183029][ T4387] xt_hashlimit: size too large, truncated to 1048576 [ 78.220972][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 78.248410][ T28] audit: type=1400 audit(1772730332.479:517): avc: denied { create } for pid=4394 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.373988][ T4393] loop3: detected capacity change from 0 to 8192 [ 78.437524][ T3747] loop3: p1 < > p2 p4 < p5 > [ 78.448051][ T3747] loop3: partition table partially beyond EOD, truncated [ 78.475507][ T3747] loop3: p1 start 134217728 is beyond EOD, truncated [ 78.492877][ T3747] loop3: p2 size 591360 extends beyond EOD, truncated [ 78.507772][ T28] audit: type=1400 audit(1772730332.739:518): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 78.598781][ T4408] loop0: detected capacity change from 0 to 1024 [ 78.605774][ T3747] loop3: p5 size 591360 extends beyond EOD, truncated [ 78.613438][ T4408] EXT4-fs: inline encryption not supported [ 78.636531][ T28] audit: type=1400 audit(1772730332.739:519): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.667241][ T4393] loop3: p1 < > p2 p4 < p5 > [ 78.681722][ T28] audit: type=1400 audit(1772730332.739:520): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.718853][ T4393] loop3: partition table partially beyond EOD, truncated [ 78.747849][ T28] audit: type=1400 audit(1772730332.739:521): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.775012][ T4393] loop3: p1 start 134217728 is beyond EOD, truncated [ 78.800311][ T4393] loop3: p2 size 591360 extends beyond EOD, truncated [ 78.824083][ T4393] loop3: p5 size 591360 extends beyond EOD, truncated [ 78.831190][ T28] audit: type=1400 audit(1772730332.769:522): avc: denied { name_bind } for pid=4401 comm="syz.2.248" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.853107][ T28] audit: type=1400 audit(1772730332.779:523): avc: denied { module_request } for pid=4386 comm="syz.1.242" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.036286][ T4408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.089163][ T4420] 9pnet_fd: Insufficient options for proto=fd [ 79.549033][ T4442] syzkaller0: entered promiscuous mode [ 79.581658][ T4442] syzkaller0: entered allmulticast mode [ 79.717387][ T4444] loop2: detected capacity change from 0 to 512 [ 79.726514][ T4444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.799518][ T4444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.812308][ T4444] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.218765][ T4454] FAULT_INJECTION: forcing a failure. [ 80.218765][ T4454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.254751][ T4454] CPU: 1 UID: 0 PID: 4454 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 80.254800][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.254816][ T4454] Call Trace: [ 80.254823][ T4454] [ 80.254845][ T4454] __dump_stack+0x1d/0x30 [ 80.254906][ T4454] dump_stack_lvl+0x95/0xd0 [ 80.254979][ T4454] dump_stack+0x15/0x1b [ 80.255006][ T4454] should_fail_ex+0x263/0x280 [ 80.255035][ T4454] should_fail+0xb/0x20 [ 80.255061][ T4454] should_fail_usercopy+0x1a/0x20 [ 80.255117][ T4454] _copy_from_user+0x1c/0xb0 [ 80.255151][ T4454] ___sys_sendmsg+0xc1/0x1e0 [ 80.255212][ T4454] __x64_sys_sendmsg+0xd4/0x160 [ 80.255255][ T4454] x64_sys_call+0x194c/0x3020 [ 80.255290][ T4454] do_syscall_64+0x12c/0x370 [ 80.255318][ T4454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.255382][ T4454] RIP: 0033:0x7f1dcfd1c799 [ 80.255402][ T4454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.255424][ T4454] RSP: 002b:00007f1dce76f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.255448][ T4454] RAX: ffffffffffffffda RBX: 00007f1dcff95fa0 RCX: 00007f1dcfd1c799 [ 80.255531][ T4454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 80.255547][ T4454] RBP: 00007f1dce76f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.255562][ T4454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.255577][ T4454] R13: 00007f1dcff96038 R14: 00007f1dcff95fa0 R15: 00007ffdb461a9c8 [ 80.255683][ T4454] [ 80.510471][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 80.632261][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.439613][ T4471] loop3: detected capacity change from 0 to 128 [ 81.832259][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 81.832277][ T28] audit: type=1400 audit(1772730336.069:577): avc: denied { create } for pid=4480 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.916436][ T4469] loop2: detected capacity change from 0 to 4096 [ 81.940792][ T28] audit: type=1400 audit(1772730336.179:578): avc: denied { connect } for pid=4485 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.973027][ T4486] sctp: [Deprecated]: syz.1.271 (pid 4486) Use of int in maxseg socket option. [ 81.973027][ T4486] Use struct sctp_assoc_value instead [ 82.023571][ T4469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.054251][ T28] audit: type=1400 audit(1772730336.179:579): avc: denied { name_connect } for pid=4485 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 82.074369][ T28] audit: type=1400 audit(1772730336.209:580): avc: denied { listen } for pid=4485 comm="syz.1.271" lport=34995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.104890][ T28] audit: type=1400 audit(1772730336.209:581): avc: denied { accept } for pid=4485 comm="syz.1.271" lport=34995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.128284][ T28] audit: type=1400 audit(1772730336.209:582): avc: denied { setopt } for pid=4485 comm="syz.1.271" lport=34995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.160687][ T28] audit: type=1400 audit(1772730336.399:583): avc: denied { create } for pid=4485 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.181670][ T28] audit: type=1400 audit(1772730336.419:584): avc: denied { write } for pid=4485 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.201405][ T28] audit: type=1400 audit(1772730336.419:585): avc: denied { read } for pid=4485 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.214570][ T4492] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 82.234165][ T4492] team0 (unregistering): Port device team_slave_0 removed [ 82.245101][ T4492] team0 (unregistering): Failed to send options change via netlink (err -105) [ 82.258235][ T4492] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 82.270411][ T4492] team0 (unregistering): Port device team_slave_1 removed [ 82.280488][ T4492] team0 (unregistering): Failed to send options change via netlink (err -105) [ 82.289982][ T4492] team0 (unregistering): Failed to send port change of device netdevsim1 via netlink (err -105) [ 82.301396][ T4492] team0 (unregistering): Port device netdevsim1 removed [ 82.416905][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.479036][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.507754][ T4499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.557046][ T28] audit: type=1400 audit(1772730336.789:586): avc: denied { create } for pid=4500 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.790056][ T4510] loop4: detected capacity change from 0 to 512 [ 82.797048][ T4504] loop0: detected capacity change from 0 to 8192 [ 82.803987][ T4510] EXT4-fs: inline encryption not supported [ 82.820439][ T4510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.856931][ T3747] loop0: p1 < > p2 p4 < p5 > [ 82.862516][ T4511] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 82.862976][ T3747] loop0: partition table partially beyond EOD, [ 82.877045][ T4510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 82.937759][ T4510] System zones: 1-12 [ 82.942011][ T4510] EXT4-fs (loop4): 1 truncate cleaned up [ 82.948177][ T4510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.980717][ T3747] truncated [ 82.983948][ T3747] loop0: p1 start 134217728 is beyond EOD, truncated [ 82.993033][ T3747] loop0: p2 size 591360 extends beyond EOD, truncated [ 83.001007][ T3747] loop0: p5 size 591360 extends beyond EOD, truncated [ 83.029224][ T4504] loop0: p1 < > p2 p4 < p5 > [ 83.034095][ T4504] loop0: partition table partially beyond EOD, truncated [ 83.048202][ T4511] bond1 (unregistering): Released all slaves [ 83.057714][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.063156][ T4504] loop0: p1 start 134217728 is beyond EOD, truncated [ 83.128424][ T4526] loop1: detected capacity change from 0 to 1764 [ 83.149204][ T4504] loop0: p2 size 591360 extends beyond EOD, truncated [ 83.175521][ T4504] loop0: p5 size 591360 extends beyond EOD, truncated [ 83.225740][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.238931][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.283202][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 83.296854][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 83.305934][ T56] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.315145][ T56] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.324242][ T56] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.338545][ T56] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.386284][ T4521] syz.3.280 (4521) used greatest stack depth: 8904 bytes left [ 83.528562][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.539185][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.551493][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 83.606524][ T4543] loop0: detected capacity change from 0 to 256 [ 83.623225][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 83.629467][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.647128][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.794433][ T4557] FAULT_INJECTION: forcing a failure. [ 84.794433][ T4557] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.808110][ T4557] CPU: 1 UID: 0 PID: 4557 Comm: syz.4.291 Not tainted syzkaller #0 PREEMPT(full) [ 84.808138][ T4557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.808155][ T4557] Call Trace: [ 84.808164][ T4557] [ 84.808186][ T4557] __dump_stack+0x1d/0x30 [ 84.808212][ T4557] dump_stack_lvl+0x95/0xd0 [ 84.808311][ T4557] dump_stack+0x15/0x1b [ 84.808333][ T4557] should_fail_ex+0x263/0x280 [ 84.808363][ T4557] should_fail_alloc_page+0xf2/0x100 [ 84.808395][ T4557] __alloc_frozen_pages_noprof+0x108/0x360 [ 84.808425][ T4557] alloc_pages_mpol+0xb3/0x260 [ 84.808461][ T4557] ? anon_pipe_write+0xa1/0xb30 [ 84.808515][ T4557] alloc_pages_noprof+0x8f/0x130 [ 84.808549][ T4557] anon_pipe_write+0x69f/0xb30 [ 84.808576][ T4557] ? anon_pipe_write+0xa1/0xb30 [ 84.808643][ T4557] ? __pfx_anon_pipe_write+0x10/0x10 [ 84.808664][ T4557] vfs_write+0x5a6/0x9f0 [ 84.808701][ T4557] ksys_write+0xdc/0x1a0 [ 84.808722][ T4557] __x64_sys_write+0x40/0x50 [ 84.808739][ T4557] x64_sys_call+0x27e1/0x3020 [ 84.808790][ T4557] do_syscall_64+0x12c/0x370 [ 84.808821][ T4557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.808874][ T4557] RIP: 0033:0x7fb4e5c5cfce [ 84.808889][ T4557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.808912][ T4557] RSP: 002b:00007fb4e46f6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.808937][ T4557] RAX: ffffffffffffffda RBX: 00007fb4e46f76c0 RCX: 00007fb4e5c5cfce [ 84.808955][ T4557] RDX: 0000000000000029 RSI: 00007fb4e46f6e90 RDI: 0000000000000002 [ 84.808972][ T4557] RBP: 00007fb4e46f6e90 R08: 0000000000000000 R09: 0000000000000000 [ 84.808986][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 84.809077][ T4557] R13: 00007fb4e5eeb7a0 R14: 00007fb4e5ee24a0 R15: 0000000000000001 [ 84.809101][ T4557] [ 84.971349][ T4560] xt_hashlimit: size too large, truncated to 1048576 [ 85.207597][ T4565] Invalid logical block size (56684) [ 85.292177][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 85.304313][ T4585] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 85.337368][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 85.347292][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 85.358285][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 85.376212][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 85.423368][ T4591] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.304'. [ 85.531838][ T4595] FAULT_INJECTION: forcing a failure. [ 85.531838][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.562254][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT(full) [ 85.562284][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.562296][ T4595] Call Trace: [ 85.562302][ T4595] [ 85.562328][ T4595] __dump_stack+0x1d/0x30 [ 85.562361][ T4595] dump_stack_lvl+0x95/0xd0 [ 85.562393][ T4595] dump_stack+0x15/0x1b [ 85.562420][ T4595] should_fail_ex+0x263/0x280 [ 85.562524][ T4595] should_fail+0xb/0x20 [ 85.562545][ T4595] should_fail_usercopy+0x1a/0x20 [ 85.562569][ T4595] _copy_from_user+0x1c/0xb0 [ 85.562602][ T4595] __sys_bpf+0x183/0x7e0 [ 85.562638][ T4595] __x64_sys_bpf+0x41/0x50 [ 85.562702][ T4595] x64_sys_call+0x10cb/0x3020 [ 85.562805][ T4595] do_syscall_64+0x12c/0x370 [ 85.562831][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.562859][ T4595] RIP: 0033:0x7fc49d43c799 [ 85.562875][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.562892][ T4595] RSP: 002b:00007fc49be97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.562987][ T4595] RAX: ffffffffffffffda RBX: 00007fc49d6b5fa0 RCX: 00007fc49d43c799 [ 85.563000][ T4595] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 85.563012][ T4595] RBP: 00007fc49be97090 R08: 0000000000000000 R09: 0000000000000000 [ 85.563026][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.563042][ T4595] R13: 00007fc49d6b6038 R14: 00007fc49d6b5fa0 R15: 00007ffeedf65be8 [ 85.563106][ T4595] [ 85.945816][ T4603] loop2: detected capacity change from 0 to 512 [ 85.953314][ T4603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.203480][ T4604] loop0: detected capacity change from 0 to 512 [ 86.212302][ T4604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.265708][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.278460][ T4604] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.301565][ T4603] EXT4-fs (loop2): 1 orphan inode deleted [ 86.320568][ T4603] EXT4-fs (loop2): 1 truncate cleaned up [ 86.331085][ T4603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.422744][ T4603] EXT4-fs (loop2): shut down requested (1) [ 86.593503][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 86.766891][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.822514][ T4619] loop0: detected capacity change from 0 to 128 [ 86.840772][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 86.840789][ T28] audit: type=1400 audit(1772730341.079:618): avc: denied { bind } for pid=4618 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.913414][ T28] audit: type=1400 audit(1772730341.149:619): avc: denied { create } for pid=4622 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.936854][ T28] audit: type=1400 audit(1772730341.169:620): avc: denied { bind } for pid=4622 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.957121][ T28] audit: type=1400 audit(1772730341.169:621): avc: denied { name_bind } for pid=4622 comm="syz.0.313" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.979023][ T28] audit: type=1400 audit(1772730341.169:622): avc: denied { node_bind } for pid=4622 comm="syz.0.313" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.003045][ T4624] loop4: detected capacity change from 0 to 128 [ 87.051822][ T28] audit: type=1400 audit(1772730341.289:623): avc: denied { read write } for pid=4622 comm="syz.0.313" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.076741][ T28] audit: type=1400 audit(1772730341.289:624): avc: denied { open } for pid=4622 comm="syz.0.313" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.747445][ T28] audit: type=1400 audit(1772730341.989:625): avc: denied { write } for pid=4630 comm="syz.4.315" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.974159][ T4634] loop4: detected capacity change from 0 to 128 [ 87.987770][ T28] audit: type=1400 audit(1772730342.219:626): avc: denied { watch watch_reads } for pid=4630 comm="syz.4.315" path="/72" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.239789][ T4573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.332506][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.475484][ T28] audit: type=1400 audit(1772730342.709:627): avc: denied { prog_load } for pid=4636 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.748081][ T4650] FAULT_INJECTION: forcing a failure. [ 88.748081][ T4650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.803343][ T4650] CPU: 1 UID: 0 PID: 4650 Comm: syz.4.322 Not tainted syzkaller #0 PREEMPT(full) [ 88.803370][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.803383][ T4650] Call Trace: [ 88.803392][ T4650] [ 88.803468][ T4650] __dump_stack+0x1d/0x30 [ 88.803510][ T4650] dump_stack_lvl+0x95/0xd0 [ 88.803541][ T4650] dump_stack+0x15/0x1b [ 88.803569][ T4650] should_fail_ex+0x263/0x280 [ 88.803601][ T4650] should_fail+0xb/0x20 [ 88.803666][ T4650] should_fail_usercopy+0x1a/0x20 [ 88.803698][ T4650] _copy_from_user+0x1c/0xb0 [ 88.803819][ T4650] ___sys_sendmsg+0xc1/0x1e0 [ 88.803875][ T4650] __x64_sys_sendmsg+0xd4/0x160 [ 88.803920][ T4650] x64_sys_call+0x194c/0x3020 [ 88.803956][ T4650] do_syscall_64+0x12c/0x370 [ 88.804042][ T4650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.804070][ T4650] RIP: 0033:0x7fb4e5c9c799 [ 88.804090][ T4650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.804113][ T4650] RSP: 002b:00007fb4e46f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.804133][ T4650] RAX: ffffffffffffffda RBX: 00007fb4e5f15fa0 RCX: 00007fb4e5c9c799 [ 88.804180][ T4650] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 88.804197][ T4650] RBP: 00007fb4e46f7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.804214][ T4650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.804230][ T4650] R13: 00007fb4e5f16038 R14: 00007fb4e5f15fa0 R15: 00007fff5e617ed8 [ 88.804256][ T4650] [ 88.815821][ T4638] loop3: detected capacity change from 0 to 512 [ 89.015368][ T4656] sctp: [Deprecated]: syz.4.323 (pid 4656) Use of int in maxseg socket option. [ 89.015368][ T4656] Use struct sctp_assoc_value instead [ 89.060516][ T4638] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 89.338885][ T4638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.467377][ T4638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.522790][ T4676] sctp: [Deprecated]: syz.2.326 (pid 4676) Use of int in maxseg socket option. [ 89.522790][ T4676] Use struct sctp_assoc_value instead [ 89.574344][ T4638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.708044][ T4638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.738002][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 89.814546][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846938][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.885675][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.909468][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.929834][ T4694] loop4: detected capacity change from 0 to 256 [ 89.954679][ T4694] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.143512][ T4701] FAULT_INJECTION: forcing a failure. [ 90.143512][ T4701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.313263][ T4701] CPU: 1 UID: 0 PID: 4701 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(full) [ 90.313299][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.313315][ T4701] Call Trace: [ 90.313421][ T4701] [ 90.313430][ T4701] __dump_stack+0x1d/0x30 [ 90.313465][ T4701] dump_stack_lvl+0x95/0xd0 [ 90.313544][ T4701] dump_stack+0x15/0x1b [ 90.313572][ T4701] should_fail_ex+0x263/0x280 [ 90.313601][ T4701] should_fail+0xb/0x20 [ 90.313626][ T4701] should_fail_usercopy+0x1a/0x20 [ 90.313795][ T4701] _copy_from_user+0x1c/0xb0 [ 90.313942][ T4701] __sys_bpf+0x183/0x7e0 [ 90.313979][ T4701] __x64_sys_bpf+0x41/0x50 [ 90.314019][ T4701] x64_sys_call+0x10cb/0x3020 [ 90.314055][ T4701] do_syscall_64+0x12c/0x370 [ 90.314159][ T4701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.314255][ T4701] RIP: 0033:0x7fb4e5c9c799 [ 90.314276][ T4701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.314299][ T4701] RSP: 002b:00007fb4e46d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.314348][ T4701] RAX: ffffffffffffffda RBX: 00007fb4e5f16090 RCX: 00007fb4e5c9c799 [ 90.314366][ T4701] RDX: 0000000000000070 RSI: 000020000000d000 RDI: 0000000000000005 [ 90.314383][ T4701] RBP: 00007fb4e46d6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.314445][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.314572][ T4701] R13: 00007fb4e5f16128 R14: 00007fb4e5f16090 R15: 00007fff5e617ed8 [ 90.314598][ T4701] [ 90.522750][ T4702] loop3: detected capacity change from 0 to 512 [ 90.542622][ T4702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.610616][ T4703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.740883][ T4694] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 90.796020][ T4707] loop1: detected capacity change from 0 to 128 [ 90.812834][ T4694] FAT-fs (loop4): Filesystem has been set read-only [ 90.839027][ T4694] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 90.871947][ T4702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.886028][ T4702] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.886706][ T4694] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 90.912910][ T4694] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 90.921295][ T4707] FAT-fs (loop1): error, invalid access to FAT (entry 0x0f07fff8) [ 90.929333][ T4707] FAT-fs (loop1): Filesystem has been set read-only [ 90.952725][ T4707] loop1: detected capacity change from 0 to 256 [ 90.960690][ T4707] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.128652][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.168458][ T4706] loop0: detected capacity change from 0 to 8192 [ 91.186619][ T4713] loop3: detected capacity change from 0 to 512 [ 91.208262][ T3302] loop0: p1 < > p2 p4 < p5 > [ 91.212990][ T3302] loop0: partition table partially beyond EOD, truncated [ 91.225230][ T4713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.240040][ T3302] loop0: p1 start 134217728 is beyond EOD, truncated [ 91.267265][ T4699] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 91.275215][ T4699] FAT-fs (loop1): Filesystem has been set read-only [ 91.282051][ T4699] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 91.312354][ T4713] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.337995][ T3302] loop0: p2 size 591360 extends beyond EOD, truncated [ 91.369845][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 91.389695][ T3302] loop0: p5 size 591360 extends beyond EOD, truncated [ 91.497734][ T4706] loop0: p1 < > p2 p4 < p5 > [ 91.528814][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.540509][ T4706] loop0: partition table partially beyond EOD, truncated [ 91.560509][ T4706] loop0: p1 start 134217728 is beyond EOD, truncated [ 91.587004][ T4706] loop0: p2 size 591360 extends beyond EOD, truncated [ 91.657178][ T4706] loop0: p5 size 591360 extends beyond EOD, truncated [ 91.672500][ T4731] sctp: [Deprecated]: syz.3.340 (pid 4731) Use of int in maxseg socket option. [ 91.672500][ T4731] Use struct sctp_assoc_value instead [ 91.690967][ T4732] loop1: detected capacity change from 0 to 736 [ 91.753981][ T4732] rock: directory entry would overflow storage [ 91.796528][ T4732] rock: sig=0x3b10, size=4, remaining=3 [ 91.958812][ T4706] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.126511][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 92.126529][ T28] audit: type=1400 audit(1772730346.359:747): avc: denied { map_read map_write } for pid=4730 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.244271][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 92.278944][ T4738] syzkaller0: entered promiscuous mode [ 92.284494][ T4738] syzkaller0: entered allmulticast mode [ 92.378049][ T4706] lo speed is unknown, defaulting to 1000 [ 92.744965][ T4743] loop2: detected capacity change from 0 to 512 [ 92.761686][ T4743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.101014][ T4743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.116315][ T4743] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.197639][ T28] audit: type=1400 audit(1772730347.439:748): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 93.292370][ T4753] sctp: [Deprecated]: syz.4.346 (pid 4753) Use of int in maxseg socket option. [ 93.292370][ T4753] Use struct sctp_assoc_value instead [ 93.397344][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.630961][ T28] audit: type=1400 audit(1772730347.869:749): avc: denied { module_request } for pid=4760 comm="syz.4.349" kmod="fs-nilfs2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 93.745732][ T4770] loop2: detected capacity change from 0 to 128 [ 93.768467][ T28] audit: type=1400 audit(1772730348.009:750): avc: denied { create } for pid=4768 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.900513][ T28] audit: type=1400 audit(1772730348.059:751): avc: denied { write } for pid=4768 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.920158][ T28] audit: type=1400 audit(1772730348.059:752): avc: denied { ioctl } for pid=4768 comm="syz.0.350" path="socket:[9269]" dev="sockfs" ino=9269 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.946187][ T28] audit: type=1400 audit(1772730348.189:753): avc: denied { watch } for pid=4756 comm="syz.2.347" path="/60/file0/file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 93.993346][ T4759] loop1: detected capacity change from 0 to 8192 [ 94.026042][ T4771] syzkaller0: entered promiscuous mode [ 94.048104][ T3747] loop1: p1 < > p2 p4 < p5 > [ 94.048111][ T4771] syzkaller0: entered allmulticast mode [ 94.176624][ T3747] loop1: partition table partially beyond EOD, truncated [ 94.183990][ T3747] loop1: p1 start 134217728 is beyond EOD, truncated [ 94.191373][ T3747] loop1: p2 size 591360 extends beyond EOD, truncated [ 94.199738][ T3747] loop1: p5 size 591360 extends beyond EOD, truncated [ 94.212603][ T4759] loop1: p1 < > p2 p4 < p5 > [ 94.217672][ T4759] loop1: partition table partially beyond EOD, truncated [ 94.225405][ T4759] loop1: p1 start 134217728 is beyond EOD, truncated [ 94.232338][ T4759] loop1: p2 size 591360 extends beyond EOD, truncated [ 94.242279][ T4759] loop1: p5 size 591360 extends beyond EOD, truncated [ 94.271988][ T3000] loop1: p1 < > p2 p4 < p5 > [ 94.276978][ T3000] loop1: partition table partially beyond EOD, truncated [ 94.290510][ T3000] loop1: p1 start 134217728 is beyond EOD, truncated [ 94.305162][ T3000] loop1: p2 size 591360 extends beyond EOD, truncated [ 94.318344][ T3000] loop1: p5 size 591360 extends beyond EOD, truncated [ 94.366583][ T4780] loop0: detected capacity change from 0 to 256 [ 94.394848][ T4780] msdos: Bad value for 'gid' [ 94.416502][ T4780] msdos: Bad value for 'gid' [ 94.452792][ T4782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 94.482737][ T4782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 94.536882][ T4782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'. [ 94.549886][ T4782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'. [ 94.674277][ T4785] loop0: detected capacity change from 0 to 512 [ 94.681036][ T4759] ip6_vti0 speed is unknown, defaulting to 1000 [ 94.707095][ T4785] EXT4-fs: Mount option(s) incompatible with ext2 [ 94.806083][ T28] audit: type=1400 audit(1772730348.979:754): avc: denied { create } for pid=4784 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.829329][ T28] audit: type=1400 audit(1772730348.979:755): avc: denied { bind } for pid=4784 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.871261][ T28] audit: type=1400 audit(1772730348.979:756): avc: denied { listen } for pid=4784 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.158804][ T4759] lo speed is unknown, defaulting to 1000 [ 95.176623][ T4792] loop4: detected capacity change from 0 to 128 [ 96.129808][ T4802] FAULT_INJECTION: forcing a failure. [ 96.129808][ T4802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.186500][ T4802] CPU: 0 UID: 0 PID: 4802 Comm: syz.4.359 Not tainted syzkaller #0 PREEMPT(full) [ 96.186533][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.186549][ T4802] Call Trace: [ 96.186556][ T4802] [ 96.186566][ T4802] __dump_stack+0x1d/0x30 [ 96.186628][ T4802] dump_stack_lvl+0x95/0xd0 [ 96.186651][ T4802] dump_stack+0x15/0x1b [ 96.186728][ T4802] should_fail_ex+0x263/0x280 [ 96.186755][ T4802] should_fail+0xb/0x20 [ 96.186774][ T4802] should_fail_usercopy+0x1a/0x20 [ 96.186827][ T4802] _copy_from_user+0x1c/0xb0 [ 96.186854][ T4802] __sys_bpf+0x183/0x7e0 [ 96.186928][ T4802] __x64_sys_bpf+0x41/0x50 [ 96.186970][ T4802] x64_sys_call+0x10cb/0x3020 [ 96.187022][ T4802] do_syscall_64+0x12c/0x370 [ 96.187042][ T4802] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 96.187075][ T4802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.187104][ T4802] RIP: 0033:0x7fb4e5c9c799 [ 96.187124][ T4802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.187173][ T4802] RSP: 002b:00007fb4e46f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.187194][ T4802] RAX: ffffffffffffffda RBX: 00007fb4e5f15fa0 RCX: 00007fb4e5c9c799 [ 96.187211][ T4802] RDX: 0000000000000070 RSI: 000020000000d000 RDI: 0000000000000005 [ 96.187228][ T4802] RBP: 00007fb4e46f7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.187290][ T4802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.187347][ T4802] R13: 00007fb4e5f16038 R14: 00007fb4e5f15fa0 R15: 00007fff5e617ed8 [ 96.187386][ T4802] [ 96.499590][ T4811] netlink: 64 bytes leftover after parsing attributes in process `syz.4.362'. [ 96.788051][ T4822] random: crng reseeded on system resumption [ 97.225181][ T4824] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.383888][ T4824] lo speed is unknown, defaulting to 1000 [ 97.795337][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 97.795432][ T28] audit: type=1400 audit(1772730352.029:781): avc: denied { append } for pid=4832 comm="syz.0.367" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.829407][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 97.842143][ T28] audit: type=1400 audit(1772730352.059:782): avc: denied { read } for pid=4832 comm="syz.0.367" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.867266][ T28] audit: type=1400 audit(1772730352.069:783): avc: denied { open } for pid=4832 comm="syz.0.367" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.891236][ T28] audit: type=1400 audit(1772730352.069:784): avc: denied { ioctl } for pid=4832 comm="syz.0.367" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.918301][ T28] audit: type=1326 audit(1772730352.069:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 97.935902][ T4831] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 97.942764][ T28] audit: type=1326 audit(1772730352.069:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 97.974385][ T28] audit: type=1326 audit(1772730352.069:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 97.998189][ T28] audit: type=1326 audit(1772730352.069:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 98.021807][ T28] audit: type=1326 audit(1772730352.069:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 98.066533][ T28] audit: type=1326 audit(1772730352.069:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49d43c799 code=0x7ffc0000 [ 98.152059][ T4836] loop1: detected capacity change from 0 to 512 [ 98.169391][ T4836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.291704][ T4836] EXT4-fs (loop1): 1 truncate cleaned up [ 98.369006][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4844 comm=syz.4.371 [ 98.406168][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.446492][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4844 comm=syz.4.371 [ 98.586798][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 98.618402][ T4850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 98.648191][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 98.657273][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 99.288035][ T4874] random: crng reseeded on system resumption [ 100.317335][ T4887] loop3: detected capacity change from 0 to 512 [ 100.339657][ T4887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.409026][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.423701][ T4887] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.500539][ T4888] batadv_slave_1: entered promiscuous mode [ 100.552994][ T4886] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.563766][ T4881] batadv_slave_1: left promiscuous mode [ 100.678114][ T4886] lo speed is unknown, defaulting to 1000 [ 100.765241][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.908913][ T4903] FAULT_INJECTION: forcing a failure. [ 100.908913][ T4903] name failslab, interval 1, probability 0, space 0, times 0 [ 100.957698][ T4903] CPU: 1 UID: 0 PID: 4903 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT(full) [ 100.957729][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.957744][ T4903] Call Trace: [ 100.957750][ T4903] [ 100.957757][ T4903] __dump_stack+0x1d/0x30 [ 100.957847][ T4903] dump_stack_lvl+0x95/0xd0 [ 100.957871][ T4903] dump_stack+0x15/0x1b [ 100.957892][ T4903] should_fail_ex+0x263/0x280 [ 100.957926][ T4903] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 100.958021][ T4903] should_failslab+0x8c/0xb0 [ 100.958064][ T4903] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 100.958157][ T4903] ? shmem_alloc_inode+0x34/0x50 [ 100.958222][ T4903] ? kstrtouint+0x76/0xc0 [ 100.958245][ T4903] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 100.958307][ T4903] shmem_alloc_inode+0x34/0x50 [ 100.958334][ T4903] alloc_inode+0x40/0x170 [ 100.958419][ T4903] new_inode+0x1d/0xe0 [ 100.958449][ T4903] shmem_get_inode+0x246/0x750 [ 100.958482][ T4903] __shmem_file_setup+0x112/0x210 [ 100.958533][ T4903] shmem_file_setup+0x3b/0x50 [ 100.958561][ T4903] memfd_alloc_file+0x4e/0x300 [ 100.958600][ T4903] __se_sys_memfd_create+0x2e1/0x3b0 [ 100.958663][ T4903] __x64_sys_memfd_create+0x31/0x40 [ 100.958756][ T4903] x64_sys_call+0x1f22/0x3020 [ 100.958820][ T4903] do_syscall_64+0x12c/0x370 [ 100.958841][ T4903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.958869][ T4903] RIP: 0033:0x7fb4e5c9c799 [ 100.958885][ T4903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.958910][ T4903] RSP: 002b:00007fb4e46f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 100.958983][ T4903] RAX: ffffffffffffffda RBX: 000000000000061f RCX: 00007fb4e5c9c799 [ 100.958997][ T4903] RDX: 00007fb4e46f6ee0 RSI: 0000000000000000 RDI: 00007fb4e5d32db9 [ 100.959009][ T4903] RBP: 0000200000000b00 R08: 00000000ffffffff R09: 0000000000000000 [ 100.959023][ T4903] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 100.959039][ T4903] R13: 00007fb4e46f6ee0 R14: 00007fb4e46f6ea0 R15: 00002000000005c0 [ 100.959060][ T4903] [ 101.225636][ T4905] loop4: detected capacity change from 0 to 512 [ 101.243569][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.278716][ T4905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.278742][ T4907] loop2: detected capacity change from 0 to 1024 [ 101.300646][ T4910] sctp: [Deprecated]: syz.1.387 (pid 4910) Use of int in maxseg socket option. [ 101.300646][ T4910] Use struct sctp_assoc_value instead [ 101.326866][ T4905] EXT4-fs (loop4): 1 orphan inode deleted [ 101.332733][ T4905] EXT4-fs (loop4): 1 truncate cleaned up [ 101.340458][ T4905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.357133][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.363614][ T4905] EXT4-fs (loop4): shut down requested (1) [ 101.363647][ T4907] EXT4-fs: Ignoring removed oldalloc option [ 101.375564][ T4907] ext4: Unknown parameter 'obj_user' [ 101.459042][ T4907] loop2: detected capacity change from 0 to 128 [ 101.472050][ T4907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.503467][ T4907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 101.511872][ T4915] loop3: detected capacity change from 0 to 128 [ 101.548195][ T4907] System zones: 1-3, 19-19, 35-36 [ 101.574342][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.578187][ T4907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.713108][ T4907] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.753877][ T4923] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.819248][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.889812][ T4929] FAULT_INJECTION: forcing a failure. [ 101.889812][ T4929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.903083][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 101.903172][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.903231][ T4929] Call Trace: [ 101.903239][ T4929] [ 101.903287][ T4929] __dump_stack+0x1d/0x30 [ 101.903356][ T4929] dump_stack_lvl+0x95/0xd0 [ 101.903379][ T4929] dump_stack+0x15/0x1b [ 101.903403][ T4929] should_fail_ex+0x263/0x280 [ 101.903437][ T4929] should_fail+0xb/0x20 [ 101.903528][ T4929] should_fail_usercopy+0x1a/0x20 [ 101.903561][ T4929] _copy_to_user+0x20/0xa0 [ 101.903597][ T4929] simple_read_from_buffer+0xb5/0x130 [ 101.903624][ T4929] proc_fail_nth_read+0x10e/0x150 [ 101.903735][ T4929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.903765][ T4929] vfs_read+0x1ab/0x7f0 [ 101.903796][ T4929] ? __rcu_read_unlock+0x4e/0x70 [ 101.903864][ T4929] ? __fget_files+0x184/0x1c0 [ 101.903888][ T4929] ? mutex_lock+0x57/0x90 [ 101.903923][ T4929] ksys_read+0xdc/0x1a0 [ 101.903977][ T4929] __x64_sys_read+0x40/0x50 [ 101.904008][ T4929] x64_sys_call+0x2886/0x3020 [ 101.904035][ T4929] do_syscall_64+0x12c/0x370 [ 101.904059][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.904110][ T4929] RIP: 0033:0x7f7dbc8ccfce [ 101.904131][ T4929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.904153][ T4929] RSP: 002b:00007f7dbb366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.904232][ T4929] RAX: ffffffffffffffda RBX: 00007f7dbb3676c0 RCX: 00007f7dbc8ccfce [ 101.904249][ T4929] RDX: 000000000000000f RSI: 00007f7dbb3670a0 RDI: 0000000000000003 [ 101.904265][ T4929] RBP: 00007f7dbb367090 R08: 0000000000000000 R09: 0000000000000000 [ 101.904282][ T4929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.904298][ T4929] R13: 00007f7dbcb86038 R14: 00007f7dbcb85fa0 R15: 00007ffcf4d57888 [ 101.904323][ T4929] [ 102.134793][ T4923] lo speed is unknown, defaulting to 1000 [ 102.312564][ T4925] loop4: detected capacity change from 0 to 8192 [ 102.320605][ T4942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 102.389569][ T3747] loop4: p1 < > p2 p4 < p5 > [ 102.394415][ T3747] loop4: partition table partially beyond EOD, truncated [ 102.414801][ T3747] loop4: p1 start 134217728 is beyond EOD, truncated [ 102.426478][ T3747] loop4: p2 size 591360 extends beyond EOD, truncated [ 102.445137][ T3747] loop4: p5 size 591360 extends beyond EOD, truncated [ 102.517869][ T4925] loop4: p1 < > p2 p4 < p5 > [ 102.535912][ T4925] loop4: partition table partially beyond EOD, truncated [ 102.572547][ T4925] loop4: p1 start 134217728 is beyond EOD, truncated [ 102.598043][ T4925] loop4: p2 size 591360 extends beyond EOD, truncated [ 102.667999][ T4925] loop4: p5 size 591360 extends beyond EOD, truncated [ 102.982424][ T4961] loop1: detected capacity change from 0 to 512 [ 103.057760][ T4961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.074483][ T4925] ip6_vti0 speed is unknown, defaulting to 1000 [ 103.084399][ T4961] EXT4-fs (loop1): 1 truncate cleaned up [ 103.117022][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.176542][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 103.176573][ T28] audit: type=1400 audit(1772730357.409:849): avc: denied { ioctl } for pid=4960 comm="syz.1.402" path="/79/file1/memory.events.local" dev="loop1" ino=18 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.268494][ T4964] random: crng reseeded on system resumption [ 103.567667][ T28] audit: type=1400 audit(1772730357.679:850): avc: denied { map } for pid=4960 comm="syz.1.402" path="/79/file1/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.674031][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.849994][ T4925] lo speed is unknown, defaulting to 1000 [ 104.661284][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.405'. [ 104.674706][ T4977] loop2: detected capacity change from 0 to 512 [ 104.696222][ T4977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.746064][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.761496][ T4977] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.853395][ T4981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 105.107776][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.134141][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 105.158242][ T4984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 105.330875][ T28] audit: type=1400 audit(1772730359.569:851): avc: denied { read } for pid=5004 comm="syz.0.415" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.386343][ T5003] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.397808][ T5010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'. [ 105.416527][ T28] audit: type=1400 audit(1772730359.609:852): avc: denied { append } for pid=5008 comm="syz.1.416" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.432668][ T5012] random: crng reseeded on system resumption [ 105.455356][ T5003] team0 (unregistering): Port device team_slave_0 removed [ 105.474074][ T5003] team0 (unregistering): Failed to send options change via netlink (err -105) [ 105.493676][ T5003] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 105.520262][ T5003] team0 (unregistering): Port device team_slave_1 removed [ 105.572396][ T5019] random: crng reseeded on system resumption [ 105.637902][ T28] audit: type=1400 audit(1772730359.879:853): avc: denied { write } for pid=5021 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.659857][ T5023] loop3: detected capacity change from 0 to 128 [ 105.830921][ T5024] loop4: detected capacity change from 0 to 512 [ 105.849453][ T5024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.924153][ T5024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.942516][ T5024] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.705167][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.762394][ T5037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 106.772103][ T5037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 106.827232][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 106.893058][ T5036] syz.4.423 (5036): attempted to duplicate a private mapping with mremap. This is not supported. [ 106.937661][ T5038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.424'. [ 107.053263][ T28] audit: type=1400 audit(1772730361.289:854): avc: denied { bind } for pid=5034 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.129705][ T5039] loop2: detected capacity change from 0 to 8192 [ 107.142385][ T28] audit: type=1400 audit(1772730361.309:855): avc: denied { bind } for pid=5034 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.183842][ T28] audit: type=1400 audit(1772730361.309:856): avc: denied { create } for pid=5034 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.206840][ T3747] loop2: p1 < > p2 p4 < p5 > [ 107.211644][ T3747] loop2: partition table partially beyond EOD, truncated [ 107.246622][ T3747] loop2: p1 start 134217728 is beyond EOD, truncated [ 107.263253][ T3747] loop2: p2 size 591360 extends beyond EOD, truncated [ 107.290443][ T3747] loop2: p5 size 591360 extends beyond EOD, truncated [ 107.301463][ T28] audit: type=1400 audit(1772730361.529:857): avc: denied { block_suspend } for pid=5046 comm="syz.1.427" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.491901][ T5039] loop2: p1 < > p2 p4 < p5 > [ 107.616514][ T5064] random: crng reseeded on system resumption [ 107.836171][ T28] audit: type=1400 audit(1772730362.049:858): avc: denied { read } for pid=5066 comm="syz.4.432" path="socket:[9150]" dev="sockfs" ino=9150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.925124][ T5039] loop2: partition table partially beyond EOD, truncated [ 108.174665][ T5039] loop2: p1 start 134217728 is beyond EOD, truncated [ 108.184202][ T5073] loop3: detected capacity change from 0 to 512 [ 108.196825][ T5039] loop2: p2 size 591360 extends beyond EOD, truncated [ 108.214776][ T5039] loop2: p5 size 591360 extends beyond EOD, truncated [ 108.279287][ T28] audit: type=1400 audit(1772730362.509:859): avc: denied { mount } for pid=5074 comm="syz.0.434" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.318018][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.433: iget: bad extra_isize 90 (inode size 256) [ 108.336642][ T5073] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.336891][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.433: error while reading EA inode 11 err=-117 [ 108.358306][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.358329][ C0] EXT4-fs (loop3): initial error at time 1772730362: ext4_xattr_inode_iget:441: inode 11 [ 108.358354][ C0] EXT4-fs (loop3): last error at time 1772730362: ext4_xattr_inode_iget:441: inode 11 [ 108.406916][ T5080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 108.424905][ T5039] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.429821][ T28] audit: type=1400 audit(1772730362.659:860): avc: denied { create } for pid=5082 comm="syz.0.436" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.458437][ T5080] ipvlan2: entered promiscuous mode [ 108.467415][ T5080] loop4: detected capacity change from 0 to 128 [ 108.475982][ T28] audit: type=1400 audit(1772730362.669:861): avc: denied { write } for pid=5082 comm="syz.0.436" name="file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.481059][ T5073] loop3: lost filesystem error report for type 5 error -117 [ 108.518836][ T5080] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 108.527328][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.433: iget: bad extra_isize 90 (inode size 256) [ 108.558827][ T5073] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 108.559000][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.433: error while reading EA inode 11 err=-117 [ 108.577102][ T28] audit: type=1400 audit(1772730362.669:862): avc: denied { open } for pid=5082 comm="syz.0.436" path="/88/file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.649624][ T5073] loop3: lost filesystem error report for type 5 error -117 [ 108.649804][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.433: iget: bad extra_isize 90 (inode size 256) [ 108.666856][ T28] audit: type=1400 audit(1772730362.669:863): avc: denied { ioctl } for pid=5082 comm="syz.0.436" path="/88/file0" dev="tmpfs" ino=494 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.717337][ T5090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5090 comm=syz.4.437 [ 108.726658][ T5073] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 108.729927][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.433: error while reading EA inode 18 err=-117 [ 108.764577][ T28] audit: type=1400 audit(1772730362.789:864): avc: denied { remount } for pid=5077 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 108.784925][ T5073] loop3: lost filesystem error report for type 5 error -117 [ 108.785235][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.433: iget: bad extra_isize 90 (inode size 256) [ 108.807205][ T5073] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 108.807432][ T5073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.433: error while reading EA inode 18 err=-117 [ 108.831590][ T28] audit: type=1400 audit(1772730362.899:865): avc: denied { write } for pid=5086 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.831633][ T5073] loop3: lost filesystem error report for type 5 error -117 [ 108.832218][ T5073] EXT4-fs (loop3): 1 orphan inode deleted [ 108.873201][ T5059] loop1: detected capacity change from 0 to 1024 [ 108.876684][ T28] audit: type=1400 audit(1772730362.899:866): avc: denied { read } for pid=5086 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.883514][ T5059] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.915906][ T5059] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.927410][ T5059] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 108.937602][ T5073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.950092][ T5059] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.950936][ T28] audit: type=1400 audit(1772730362.939:867): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.981711][ T5059] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #17: comm syz.1.430: iget: bad i_size value: 4398046511204 [ 109.013468][ T28] audit: type=1400 audit(1772730362.949:868): avc: denied { connect } for pid=5086 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.040719][ T5059] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 109.041247][ T5059] EXT4-fs (loop1): no journal found [ 109.050591][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 109.050646][ C0] EXT4-fs (loop1): initial error at time 1772730363: ext4_get_journal_inode:5863: inode 17 [ 109.050680][ C0] EXT4-fs (loop1): last error at time 1772730363: ext4_get_journal_inode:5863: inode 17 [ 109.103951][ T5039] lo speed is unknown, defaulting to 1000 [ 109.143102][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.539228][ T5100] loop1: detected capacity change from 0 to 512 [ 109.608737][ T5100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.651041][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.665882][ T5100] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.875800][ T5105] loop4: detected capacity change from 0 to 128 [ 109.921979][ T5105] FAT-fs (loop4): bogus number of reserved sectors [ 109.934967][ T5105] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 109.944787][ T5105] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.016602][ T5105] loop4: detected capacity change from 0 to 512 [ 110.023482][ T5105] EXT4-fs: Ignoring removed orlov option [ 110.032972][ T5105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.421513][ T5113] loop2: detected capacity change from 0 to 512 [ 110.460250][ T5113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.492881][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.521958][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.536655][ T5113] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.608019][ T5105] EXT4-fs (loop4): 1 orphan inode deleted [ 110.613955][ T5105] EXT4-fs (loop4): 1 truncate cleaned up [ 110.671937][ T5105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.871232][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.882964][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.981681][ T5129] loop1: detected capacity change from 0 to 512 [ 111.121665][ T5129] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 111.132221][ T5129] EXT4-fs (loop1): bad block size 65536 [ 111.366144][ T5129] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 111.701659][ T5136] loop0: detected capacity change from 0 to 8192 [ 111.772198][ T5136] loop0: p1 < > p2 p4 < p5 > [ 111.800829][ T5136] loop0: partition table partially beyond EOD, truncated [ 111.815178][ T5142] tipc: Started in network mode [ 111.825176][ T5142] tipc: Node identity 6a685e2d8a2c, cluster identity 4711 [ 111.832533][ T5136] loop0: p1 start 134217728 is beyond EOD, truncated [ 111.840079][ T5142] tipc: Enabled bearer , priority 0 [ 111.880534][ T5136] loop0: p2 size 591360 extends beyond EOD, truncated [ 111.935022][ T5136] loop0: p5 size 591360 extends beyond EOD, truncated [ 111.947400][ T5142] syzkaller0: entered promiscuous mode [ 111.963485][ T5142] syzkaller0: entered allmulticast mode [ 111.977443][ T5142] tipc: Resetting bearer [ 112.018567][ T5141] tipc: Resetting bearer [ 112.083521][ T5140] loop3: detected capacity change from 0 to 1024 [ 112.157098][ T5140] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 112.170699][ T5140] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.192978][ T5141] tipc: Disabling bearer [ 112.207654][ T5140] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 112.218541][ T5140] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.236804][ T5140] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #17: comm syz.3.450: iget: bad i_size value: 4398046511204 [ 112.323420][ T5155] loop2: detected capacity change from 0 to 256 [ 112.326728][ T5140] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 112.336474][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 112.352108][ C0] EXT4-fs (loop3): initial error at time 1772730878: ext4_get_journal_inode:5863: inode 17 [ 112.362342][ C0] EXT4-fs (loop3): last error at time 1772730878: ext4_get_journal_inode:5863: inode 17 [ 112.375686][ T5155] vlan2: entered allmulticast mode [ 112.384334][ T5140] EXT4-fs (loop3): no journal found [ 112.411448][ T5155] dummy0: entered allmulticast mode [ 112.434768][ T5134] __nla_validate_parse: 4 callbacks suppressed [ 112.434786][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 112.466556][ T5134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 112.557299][ T5160] FAULT_INJECTION: forcing a failure. [ 112.557299][ T5160] name failslab, interval 1, probability 0, space 0, times 0 [ 112.575389][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 112.575423][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.575476][ T5160] Call Trace: [ 112.575483][ T5160] [ 112.575492][ T5160] __dump_stack+0x1d/0x30 [ 112.575520][ T5160] dump_stack_lvl+0x95/0xd0 [ 112.575545][ T5160] dump_stack+0x15/0x1b [ 112.575567][ T5160] should_fail_ex+0x263/0x280 [ 112.575651][ T5160] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 112.575737][ T5160] should_failslab+0x8c/0xb0 [ 112.575759][ T5160] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 112.575796][ T5160] ? shmem_alloc_inode+0x34/0x50 [ 112.575832][ T5160] ? kstrtouint+0x76/0xc0 [ 112.575852][ T5160] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 112.575955][ T5160] shmem_alloc_inode+0x34/0x50 [ 112.575984][ T5160] alloc_inode+0x40/0x170 [ 112.576007][ T5160] new_inode+0x1d/0xe0 [ 112.576032][ T5160] shmem_get_inode+0x246/0x750 [ 112.576142][ T5160] __shmem_file_setup+0x112/0x210 [ 112.576170][ T5160] shmem_file_setup+0x3b/0x50 [ 112.576196][ T5160] memfd_alloc_file+0x4e/0x300 [ 112.576300][ T5160] __se_sys_memfd_create+0x2e1/0x3b0 [ 112.576334][ T5160] __x64_sys_memfd_create+0x31/0x40 [ 112.576394][ T5160] x64_sys_call+0x1f22/0x3020 [ 112.576422][ T5160] do_syscall_64+0x12c/0x370 [ 112.576450][ T5160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.576495][ T5160] RIP: 0033:0x7f1e612ac799 [ 112.576511][ T5160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.576530][ T5160] RSP: 002b:00007f1e5fd06e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 112.576551][ T5160] RAX: ffffffffffffffda RBX: 0000000000000548 RCX: 00007f1e612ac799 [ 112.576564][ T5160] RDX: 00007f1e5fd06ee0 RSI: 0000000000000000 RDI: 00007f1e61342db9 [ 112.576578][ T5160] RBP: 0000200000001300 R08: 00000000ffffffff R09: 0000000000000000 [ 112.576591][ T5160] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 112.576659][ T5160] R13: 00007f1e5fd06ee0 R14: 00007f1e5fd06ea0 R15: 0000200000000080 [ 112.576678][ T5160] [ 113.191758][ T5168] loop3: detected capacity change from 0 to 512 [ 113.208128][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.255792][ T5168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.270206][ T5168] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.630239][ T5185] loop0: detected capacity change from 0 to 512 [ 113.667033][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.686515][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 113.686536][ T28] audit: type=1400 audit(1772730879.847:879): avc: denied { setopt } for pid=5183 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.711422][ T5185] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.727461][ T5192] sctp: [Deprecated]: syz.4.467 (pid 5192) Use of int in maxseg socket option. [ 113.727461][ T5192] Use struct sctp_assoc_value instead [ 113.774480][ T5185] FAULT_INJECTION: forcing a failure. [ 113.774480][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 113.791430][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.807427][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT(full) [ 113.807459][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.807516][ T5185] Call Trace: [ 113.807523][ T5185] [ 113.807579][ T5185] __dump_stack+0x1d/0x30 [ 113.807614][ T5185] dump_stack_lvl+0x95/0xd0 [ 113.807646][ T5185] dump_stack+0x15/0x1b [ 113.807675][ T5185] should_fail_ex+0x263/0x280 [ 113.807742][ T5185] should_failslab+0x8c/0xb0 [ 113.807771][ T5185] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 113.807845][ T5185] ? __d_alloc+0x37/0x340 [ 113.807883][ T5185] __d_alloc+0x37/0x340 [ 113.807921][ T5185] d_alloc_parallel+0x54/0xce0 [ 113.808000][ T5185] ? lockref_get_not_dead+0x120/0x1c0 [ 113.808038][ T5185] ? __rcu_read_unlock+0x4e/0x70 [ 113.808105][ T5185] ? try_to_unlazy+0x39d/0x580 [ 113.808140][ T5185] __lookup_slow+0x96/0x260 [ 113.808178][ T5185] lookup_slow+0x3c/0x60 [ 113.808208][ T5185] path_lookupat+0x2f7/0x500 [ 113.808264][ T5185] filename_lookup+0x190/0x390 [ 113.808312][ T5185] do_fchmodat+0x85/0x170 [ 113.808347][ T5185] __x64_sys_chmod+0x38/0x50 [ 113.808415][ T5185] x64_sys_call+0x29fc/0x3020 [ 113.808441][ T5185] do_syscall_64+0x12c/0x370 [ 113.808467][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.808554][ T5185] RIP: 0033:0x7fc49d43c799 [ 113.808573][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.808595][ T5185] RSP: 002b:00007fc49be97028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 113.808619][ T5185] RAX: ffffffffffffffda RBX: 00007fc49d6b5fa0 RCX: 00007fc49d43c799 [ 113.808700][ T5185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 113.808712][ T5185] RBP: 00007fc49be97090 R08: 0000000000000000 R09: 0000000000000000 [ 113.808725][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.808736][ T5185] R13: 00007fc49d6b6038 R14: 00007fc49d6b5fa0 R15: 00007ffeedf65be8 [ 113.808756][ T5185] [ 114.028303][ T5194] random: crng reseeded on system resumption [ 114.280514][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.895166][ T5199] loop2: detected capacity change from 0 to 512 [ 114.910287][ T5199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.959827][ T5199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.974119][ T5199] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.135936][ T5211] loop1: detected capacity change from 0 to 512 [ 115.147794][ T5206] loop3: detected capacity change from 0 to 8192 [ 115.155013][ T5211] EXT4-fs: Ignoring removed nobh option [ 115.160286][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 115.184598][ T5211] EXT4-fs: Ignoring removed bh option [ 115.206909][ T5211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.226620][ T28] audit: type=1400 audit(1772730881.437:880): avc: denied { create } for pid=5203 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 115.228329][ T3747] loop3: p1 p2 p3 [ 115.251143][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.278743][ T5211] EXT4-fs (loop1): 1 truncate cleaned up [ 115.295943][ T5211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.329583][ T3747] loop3: p1 size 4719617 extends beyond EOD, truncated [ 115.356005][ T5217] loop2: detected capacity change from 0 to 512 [ 115.362920][ T5217] EXT4-fs: Ignoring removed orlov option [ 115.374521][ T3747] loop3: p3 start 117772289 is beyond EOD, truncated [ 115.383273][ T5211] FAULT_INJECTION: forcing a failure. [ 115.383273][ T5211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.400468][ T5206] loop3: p1 p2 p3 [ 115.404379][ T5211] CPU: 0 UID: 0 PID: 5211 Comm: syz.1.473 Not tainted syzkaller #0 PREEMPT(full) [ 115.404413][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.404429][ T5211] Call Trace: [ 115.404437][ T5211] [ 115.404448][ T5211] __dump_stack+0x1d/0x30 [ 115.404482][ T5211] dump_stack_lvl+0x95/0xd0 [ 115.404522][ T5211] dump_stack+0x15/0x1b [ 115.404543][ T5211] should_fail_ex+0x263/0x280 [ 115.404568][ T5211] should_fail+0xb/0x20 [ 115.404591][ T5211] should_fail_usercopy+0x1a/0x20 [ 115.404640][ T5211] _copy_from_user+0x1c/0xb0 [ 115.404676][ T5211] vmemdup_user+0x5e/0xd0 [ 115.404698][ T5211] path_setxattrat+0x1b1/0x310 [ 115.404788][ T5206] loop3: p1 size 4719617 extends beyond EOD, [ 115.404901][ T5211] __x64_sys_lsetxattr+0x71/0x90 [ 115.405021][ T5211] x64_sys_call+0x1300/0x3020 [ 115.405117][ T5211] do_syscall_64+0x12c/0x370 [ 115.405188][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.405262][ T5211] RIP: 0033:0x7f7dbc90c799 [ 115.405308][ T5211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.405379][ T5211] RSP: 002b:00007f7dbb367028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 115.405442][ T5211] RAX: ffffffffffffffda RBX: 00007f7dbcb85fa0 RCX: 00007f7dbc90c799 [ 115.405486][ T5211] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000100 [ 115.405528][ T5211] RBP: 00007f7dbb367090 R08: 0000000000000000 R09: 0000000000000000 [ 115.405624][ T5211] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 115.405666][ T5211] R13: 00007f7dbcb86038 R14: 00007f7dbcb85fa0 R15: 00007ffcf4d57888 [ 115.405736][ T5211] [ 115.450923][ T5217] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.474: Attempting to read directory block (0) that is past i_size (256) [ 115.466608][ T5206] truncated [ 115.469386][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.478867][ T5206] loop3: p3 start 117772289 is beyond EOD, [ 115.484656][ T5217] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 115.561115][ T5206] truncated [ 115.566509][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 115.573192][ T5217] EXT4-fs (loop2): Remounting filesystem read-only [ 115.574874][ C0] EXT4-fs (loop2): initial error at time 1772730881: dx_probe:791: inode 2 [ 115.641069][ C0] EXT4-fs (loop2): last error at time 1772730881: dx_probe:791: inode 2 [ 115.652324][ T5203] delete_channel: no stack [ 115.666572][ T5217] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 115.675730][ T5217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.747974][ T3305] loop0: p1 < > p2 p4 < p5 > [ 115.752703][ T3305] loop0: partition table partially beyond EOD, truncated [ 115.764293][ T3305] loop0: p1 start 134217728 is beyond EOD, truncated [ 115.810457][ T3305] loop0: p2 size 591360 extends beyond EOD, truncated [ 115.812937][ T28] audit: type=1400 audit(1772730882.047:881): avc: denied { mounton } for pid=5235 comm="syz.4.479" path="/117/file1" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.818050][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.866164][ T5236] EXT4-fs: Ignoring removed bh option [ 115.875270][ T5236] EXT4-fs: inline encryption not supported [ 115.882335][ T3305] loop0: p5 size 591360 extends beyond EOD, truncated [ 115.892507][ T5236] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.937797][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.949462][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 116.017441][ T5236] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.048719][ T5227] loop0: p1 < > p2 p4 < p5 > [ 116.055966][ T5236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.479: bg 0: block 248: padding at end of block bitmap is not set [ 116.064153][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 116.076676][ T5236] loop4: lost filesystem error report for type 5 error -117 [ 116.080863][ T5236] Quota error (device loop4): write_blk: dquota write failed [ 116.088235][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 116.088253][ C1] EXT4-fs (loop4): last error at time 1772730882: ext4_validate_block_bitmap:441 [ 116.091063][ T5227] loop0: partition table partially beyond EOD, [ 116.096605][ T5236] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 116.115993][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 116.141973][ T28] audit: type=1400 audit(1772730882.347:882): avc: denied { ioctl } for pid=5243 comm="syz.2.478" path="socket:[10403]" dev="sockfs" ino=10403 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.176876][ T5236] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.479: Failed to acquire dquot type 1 [ 116.214434][ T5227] truncated [ 116.222518][ T5236] loop4: lost filesystem error report for type 5 error -117 [ 116.223206][ T5236] EXT4-fs (loop4): 1 truncate cleaned up [ 116.236780][ T5227] loop0: p1 start 134217728 is beyond EOD, truncated [ 116.236861][ T5227] loop0: p2 size 591360 extends beyond EOD, truncated [ 116.266566][ T5227] loop0: p5 size 591360 extends beyond EOD, truncated [ 116.277655][ T28] audit: type=1400 audit(1772730882.437:883): avc: denied { firmware_load } for pid=5237 comm="syz.3.480" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 116.279669][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 116.292122][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 116.988439][ T5259] set_capacity_and_notify: 2 callbacks suppressed [ 116.988455][ T5259] loop2: detected capacity change from 0 to 512 [ 117.007726][ T5259] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 117.020973][ T5259] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 117.029528][ T5259] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 117.055794][ T5259] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 117.063504][ T5259] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 117.110078][ T5263] loop4: detected capacity change from 0 to 4096 [ 117.155177][ T5261] loop1: detected capacity change from 0 to 8192 [ 117.187522][ T5263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.229322][ T3747] loop1: p1 p2 p3 [ 117.241606][ T3747] loop1: p1 size 4719617 extends beyond EOD, truncated [ 117.275054][ T3747] loop1: p3 start 117772289 is beyond EOD, truncated [ 117.299869][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 117.328093][ T5261] loop1: p1 p2 p3 [ 117.331925][ T5261] loop1: p1 size 4719617 extends beyond EOD, truncated [ 117.353313][ T5261] loop1: p3 start 117772289 is beyond EOD, truncated [ 117.381336][ T5257] delete_channel: no stack [ 117.528890][ T5277] sctp: [Deprecated]: syz.1.488 (pid 5277) Use of int in maxseg socket option. [ 117.528890][ T5277] Use struct sctp_assoc_value instead [ 117.555290][ T5279] FAULT_INJECTION: forcing a failure. [ 117.555290][ T5279] name failslab, interval 1, probability 0, space 0, times 0 [ 117.572622][ T5264] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.580812][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 117.586041][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.600704][ T5279] CPU: 1 UID: 0 PID: 5279 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 117.600737][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.600753][ T5279] Call Trace: [ 117.600820][ T5279] [ 117.600829][ T5279] __dump_stack+0x1d/0x30 [ 117.600861][ T5279] dump_stack_lvl+0x95/0xd0 [ 117.600893][ T5279] dump_stack+0x15/0x1b [ 117.600921][ T5279] should_fail_ex+0x263/0x280 [ 117.600947][ T5279] should_failslab+0x8c/0xb0 [ 117.601010][ T5279] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 117.601040][ T5279] ? __alloc_skb+0x2d6/0x690 [ 117.601096][ T5279] __alloc_skb+0x2d6/0x690 [ 117.601121][ T5279] ? __alloc_skb+0x200/0x690 [ 117.601146][ T5279] netlink_alloc_large_skb+0xbf/0xf0 [ 117.601230][ T5279] netlink_sendmsg+0x40c/0x6f0 [ 117.601267][ T5279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.601302][ T5279] ____sys_sendmsg+0x5af/0x600 [ 117.601375][ T5279] ___sys_sendmsg+0x195/0x1e0 [ 117.601429][ T5279] __x64_sys_sendmsg+0xd4/0x160 [ 117.601472][ T5279] x64_sys_call+0x194c/0x3020 [ 117.601501][ T5279] do_syscall_64+0x12c/0x370 [ 117.601604][ T5279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.601631][ T5279] RIP: 0033:0x7f1e612ac799 [ 117.601668][ T5279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.601689][ T5279] RSP: 002b:00007f1e5fd07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.601708][ T5279] RAX: ffffffffffffffda RBX: 00007f1e61525fa0 RCX: 00007f1e612ac799 [ 117.601722][ T5279] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 117.601734][ T5279] RBP: 00007f1e5fd07090 R08: 0000000000000000 R09: 0000000000000000 [ 117.601793][ T5279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.601809][ T5279] R13: 00007f1e61526038 R14: 00007f1e61525fa0 R15: 00007ffc3d36ab58 [ 117.601831][ T5279] [ 117.878821][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 117.896153][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.976020][ T28] audit: type=1400 audit(1772730884.207:884): avc: denied { ioctl } for pid=5262 comm="syz.4.485" path="/119/file0/file1" dev="loop4" ino=15 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.050235][ T5264] lo speed is unknown, defaulting to 1000 [ 118.089634][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 118.098910][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 118.112088][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.367681][ T5293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'. [ 118.396630][ T5294] random: crng reseeded on system resumption [ 118.501069][ T5295] loop2: detected capacity change from 0 to 128 [ 118.592248][ T5295] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 118.702626][ T5293] ipvlan2: entered promiscuous mode [ 119.093177][ T5304] FAULT_INJECTION: forcing a failure. [ 119.093177][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 119.124733][ T28] audit: type=1400 audit(1772730885.347:885): avc: denied { prog_load } for pid=5301 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.175105][ T5304] CPU: 1 UID: 0 PID: 5304 Comm: syz.4.497 Not tainted syzkaller #0 PREEMPT(full) [ 119.175137][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.175159][ T5304] Call Trace: [ 119.175167][ T5304] [ 119.175179][ T5304] __dump_stack+0x1d/0x30 [ 119.175298][ T5304] dump_stack_lvl+0x95/0xd0 [ 119.175328][ T5304] dump_stack+0x15/0x1b [ 119.175432][ T5304] should_fail_ex+0x263/0x280 [ 119.175456][ T5304] should_failslab+0x8c/0xb0 [ 119.175483][ T5304] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 119.175575][ T5304] ? __alloc_skb+0x2d6/0x690 [ 119.175605][ T5304] __alloc_skb+0x2d6/0x690 [ 119.175642][ T5304] ? __alloc_skb+0x200/0x690 [ 119.175671][ T5304] netlink_alloc_large_skb+0xbf/0xf0 [ 119.175705][ T5304] netlink_sendmsg+0x40c/0x6f0 [ 119.175785][ T5304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.175860][ T5304] ____sys_sendmsg+0x5af/0x600 [ 119.175901][ T5304] ___sys_sendmsg+0x195/0x1e0 [ 119.175966][ T5304] __x64_sys_sendmsg+0xd4/0x160 [ 119.176048][ T5304] x64_sys_call+0x194c/0x3020 [ 119.176143][ T5304] do_syscall_64+0x12c/0x370 [ 119.176164][ T5304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.176260][ T5304] RIP: 0033:0x7fb4e5c9c799 [ 119.176285][ T5304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.176383][ T5304] RSP: 002b:00007fb4e46f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.176418][ T5304] RAX: ffffffffffffffda RBX: 00007fb4e5f15fa0 RCX: 00007fb4e5c9c799 [ 119.176461][ T5304] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 119.176478][ T5304] RBP: 00007fb4e46f7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.176493][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.176510][ T5304] R13: 00007fb4e5f16038 R14: 00007fb4e5f15fa0 R15: 00007fff5e617ed8 [ 119.176536][ T5304] [ 119.339132][ T28] audit: type=1400 audit(1772730885.357:886): avc: denied { bpf } for pid=5301 comm="syz.2.496" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.401037][ T28] audit: type=1400 audit(1772730885.377:887): avc: denied { create } for pid=5301 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.426532][ T28] audit: type=1400 audit(1772730885.377:888): avc: denied { write } for pid=5301 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.486485][ T28] audit: type=1400 audit(1772730885.377:889): avc: denied { read } for pid=5301 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.567153][ T28] audit: type=1400 audit(1772730885.707:890): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.626343][ T5312] sctp: [Deprecated]: syz.1.509 (pid 5312) Use of int in maxseg socket option. [ 119.626343][ T5312] Use struct sctp_assoc_value instead [ 119.657266][ T1425] tipc: Subscription rejected, illegal request [ 119.666476][ T28] audit: type=1400 audit(1772730885.707:891): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.716614][ T28] audit: type=1400 audit(1772730885.707:892): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.749915][ T28] audit: type=1400 audit(1772730885.787:893): avc: denied { read } for pid=5307 comm="syz.2.499" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.771460][ T28] audit: type=1400 audit(1772730885.787:894): avc: denied { open } for pid=5307 comm="syz.2.499" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.816101][ T5322] netlink: 88 bytes leftover after parsing attributes in process `syz.0.501'. [ 120.063697][ T5328] random: crng reseeded on system resumption [ 120.633605][ T5330] loop1: detected capacity change from 0 to 512 [ 120.684941][ T5330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.711801][ T5333] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 120.728451][ T5330] EXT4-fs (loop1): 1 orphan inode deleted [ 120.738569][ T5330] EXT4-fs (loop1): 1 truncate cleaned up [ 120.756782][ T5333] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 120.764489][ T5333] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 120.772481][ T5330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.830594][ T5330] EXT4-fs (loop1): shut down requested (1) [ 120.838903][ T5333] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 121.027346][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.489191][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 122.314489][ T5377] loop0: detected capacity change from 0 to 512 [ 122.382795][ T5378] random: crng reseeded on system resumption [ 122.434063][ T5377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.632665][ T5377] EXT4-fs (loop0): 1 orphan inode deleted [ 122.781454][ T5377] EXT4-fs (loop0): 1 truncate cleaned up [ 122.807707][ T5377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.979874][ T5377] EXT4-fs (loop0): shut down requested (1) [ 122.988415][ T5375] loop1: detected capacity change from 0 to 8192 [ 123.089940][ T3747] loop1: p1 < > p2 p4 < p5 > [ 123.094820][ T3747] loop1: partition table partially beyond EOD, truncated [ 123.226725][ T3747] loop1: p1 start 134217728 is beyond EOD, truncated [ 123.233747][ T3747] loop1: p2 size 591360 extends beyond EOD, truncated [ 123.248480][ T3747] loop1: p5 size 591360 extends beyond EOD, truncated [ 123.270535][ T5375] loop1: p1 < > p2 p4 < p5 > [ 123.276050][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.298417][ T5375] loop1: partition table partially beyond EOD, truncated [ 123.326669][ T5375] loop1: p1 start 134217728 is beyond EOD, truncated [ 123.333756][ T5375] loop1: p2 size 591360 extends beyond EOD, truncated [ 123.412394][ T5375] loop1: p5 size 591360 extends beyond EOD, truncated [ 123.848959][ T5396] FAULT_INJECTION: forcing a failure. [ 123.848959][ T5396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.862443][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(full) [ 123.862470][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.862485][ T5396] Call Trace: [ 123.862493][ T5396] [ 123.862503][ T5396] __dump_stack+0x1d/0x30 [ 123.862611][ T5396] dump_stack_lvl+0x95/0xd0 [ 123.862671][ T5396] dump_stack+0x15/0x1b [ 123.862699][ T5396] should_fail_ex+0x263/0x280 [ 123.862724][ T5396] ? __pfx_ppp_ioctl+0x10/0x10 [ 123.862772][ T5396] should_fail+0xb/0x20 [ 123.862795][ T5396] should_fail_usercopy+0x1a/0x20 [ 123.862821][ T5396] _copy_from_user+0x1c/0xb0 [ 123.862867][ T5396] memdup_user+0x5e/0xd0 [ 123.862934][ T5396] ppp_get_filter+0xe5/0x180 [ 123.862962][ T5396] ppp_ioctl+0xbab/0x1230 [ 123.862987][ T5396] ? __fget_files+0x184/0x1c0 [ 123.863011][ T5396] ? mutex_lock+0x57/0x90 [ 123.863051][ T5396] ? __pfx_ppp_ioctl+0x10/0x10 [ 123.863074][ T5396] __se_sys_ioctl+0xce/0x140 [ 123.863151][ T5396] __x64_sys_ioctl+0x43/0x50 [ 123.863195][ T5396] x64_sys_call+0x1563/0x3020 [ 123.863235][ T5396] do_syscall_64+0x12c/0x370 [ 123.863257][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.863300][ T5396] RIP: 0033:0x7f7dbc90c799 [ 123.863321][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.863343][ T5396] RSP: 002b:00007f7dbb367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.863367][ T5396] RAX: ffffffffffffffda RBX: 00007f7dbcb85fa0 RCX: 00007f7dbc90c799 [ 123.863389][ T5396] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 123.863402][ T5396] RBP: 00007f7dbb367090 R08: 0000000000000000 R09: 0000000000000000 [ 123.863430][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.863443][ T5396] R13: 00007f7dbcb86038 R14: 00007f7dbcb85fa0 R15: 00007ffcf4d57888 [ 123.863463][ T5396] [ 124.129497][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 124.129511][ T28] audit: type=1400 audit(1772730890.367:970): avc: denied { mount } for pid=5401 comm="syz.4.526" name="/" dev="ramfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 124.342470][ T28] audit: type=1400 audit(1772730890.577:971): avc: denied { setopt } for pid=5399 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.537790][ T5413] loop2: detected capacity change from 0 to 512 [ 125.631947][ T5416] loop4: detected capacity change from 0 to 512 [ 125.651865][ T5413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.660852][ T5416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.749814][ T5416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.750334][ T5413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.750469][ T5413] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.764471][ T5416] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.790012][ T28] audit: type=1400 audit(1772730892.027:972): avc: denied { add_name } for pid=5408 comm="syz.2.529" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.818416][ T28] audit: type=1400 audit(1772730892.027:973): avc: denied { create } for pid=5408 comm="syz.2.529" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.865724][ T28] audit: type=1400 audit(1772730892.047:974): avc: denied { setopt } for pid=5417 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.934019][ T28] audit: type=1400 audit(1772730892.057:975): avc: denied { append } for pid=5408 comm="syz.2.529" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.956845][ T28] audit: type=1400 audit(1772730892.057:976): avc: denied { open } for pid=5408 comm="syz.2.529" path="/100/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.984960][ T28] audit: type=1400 audit(1772730892.117:977): avc: denied { write } for pid=5417 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.027860][ T28] audit: type=1400 audit(1772730892.247:978): avc: denied { name_bind } for pid=5427 comm="syz.1.531" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 126.083688][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 126.100488][ T28] audit: type=1400 audit(1772730892.247:979): avc: denied { create } for pid=5427 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.122994][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.180094][ T5437] loop2: detected capacity change from 0 to 1024 [ 126.197939][ T5437] EXT4-fs: Ignoring removed orlov option [ 126.203654][ T5437] EXT4-fs: inline encryption not supported [ 126.303776][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.312946][ T5437] EXT4-fs (loop2): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 126.429673][ T5452] loop1: detected capacity change from 0 to 1024 [ 126.470870][ T5459] loop2: detected capacity change from 0 to 512 [ 126.479082][ T5452] EXT4-fs: inline encryption not supported [ 126.488195][ T5459] ------------[ cut here ]------------ [ 126.493720][ T5459] EA inode 11 i_nlink=2 [ 126.493752][ T5459] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.542/5459 [ 126.508684][ T5459] Modules linked in: [ 126.512636][ T5459] CPU: 0 UID: 0 PID: 5459 Comm: syz.2.542 Not tainted syzkaller #0 PREEMPT(full) [ 126.522009][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.532223][ T5459] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 126.539067][ T5459] Code: 14 49 99 ff 4c 8d 2d ed d3 5d 05 49 8d 7e 40 e8 84 df b5 ff 49 8b 6e 40 4c 89 e7 e8 b8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 4d dd 03 66 66 66 66 66 66 2e [ 126.558903][ T5459] RSP: 0018:ffffc90011487778 EFLAGS: 00010246 [ 126.565006][ T5459] RAX: ffff8881035f0ab8 RBX: ffff88810769ca68 RCX: ffffffff81c011e8 [ 126.573095][ T5459] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de5c0 [ 126.581131][ T5459] RBP: 000000000000000b R08: 000188810769ca1b R09: 0000000000000000 [ 126.589174][ T5459] R10: ffffc900114876a8 R11: 0001c900114876a8 R12: ffff88810769ca18 [ 126.597213][ T5459] R13: ffffffff871de5c0 R14: ffff88810769c9d0 R15: 0000000000000001 [ 126.605218][ T5459] FS: 00007f1e5fcc56c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 126.614298][ T5459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.620933][ T5459] CR2: 00007ffe5aa7ff80 CR3: 000000011d63a000 CR4: 00000000003506f0 [ 126.628977][ T5459] Call Trace: [ 126.632287][ T5459] [ 126.635319][ T5459] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 126.641324][ T5459] ? errseq_check+0x2c/0x50 [ 126.645896][ T5459] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 126.651640][ T5459] ? ext4_truncate+0x92b/0xb00 [ 126.656574][ T5459] ext4_evict_inode+0xa1f/0xd60 [ 126.661539][ T5459] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.667075][ T5459] evict+0x2af/0x510 [ 126.671023][ T5459] ? __dquot_initialize+0x146/0x7c0 [ 126.676327][ T5459] iput+0x41a/0x580 [ 126.680272][ T5459] ext4_process_orphan+0x1a9/0x1c0 [ 126.685437][ T5459] ext4_orphan_cleanup+0x6a8/0xa00 [ 126.690665][ T5459] ext4_fill_super+0x3408/0x37c0 [ 126.695701][ T5459] ? set_blocksize+0x14c/0x270 [ 126.700586][ T5459] ? setup_bdev_super+0x30e/0x370 [ 126.705663][ T5459] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.711179][ T5459] get_tree_bdev_flags+0x291/0x300 [ 126.716420][ T5459] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.721838][ T5459] get_tree_bdev+0x1f/0x30 [ 126.726300][ T5459] ext4_get_tree+0x1c/0x30 [ 126.730804][ T5459] vfs_get_tree+0x57/0x1d0 [ 126.735458][ T5459] do_new_mount+0x288/0x8d0 [ 126.740196][ T5459] path_mount+0x4d0/0xbc0 [ 126.744642][ T5459] __se_sys_mount+0x28c/0x2e0 [ 126.749452][ T5459] __x64_sys_mount+0x67/0x80 [ 126.754081][ T5459] x64_sys_call+0x2d61/0x3020 [ 126.758840][ T5459] do_syscall_64+0x12c/0x370 [ 126.763474][ T5459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.769589][ T5459] RIP: 0033:0x7f1e612ada0a [ 126.774506][ T5459] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.794282][ T5459] RSP: 002b:00007f1e5fcc4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.802875][ T5459] RAX: ffffffffffffffda RBX: 00007f1e5fcc4ee0 RCX: 00007f1e612ada0a [ 126.810999][ T5459] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1e5fcc4ea0 [ 126.819192][ T5459] RBP: 00002000000009c0 R08: 00007f1e5fcc4ee0 R09: 0000000000800718 [ 126.827268][ T5459] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 126.827285][ T5459] R13: 00007f1e5fcc4ea0 R14: 000000000000048d R15: 0000200000000200 [ 126.827307][ T5459] [ 126.827315][ T5459] ---[ end trace 0000000000000000 ]--- [ 126.836652][ T5452] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.842507][ T5452] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.539: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.842596][ T5452] loop1: lost filesystem error report for type 5 error -117 [ 126.842673][ T5452] EXT4-fs (loop1): Remounting filesystem read-only [ 126.842705][ T5452] EXT4-fs (loop1): 1 orphan inode deleted [ 126.843342][ T5452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.845308][ T5459] EXT4-fs (loop2): 1 orphan inode deleted [ 126.924959][ T5471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.539'. [ 126.934019][ T1425] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 126.952834][ T5459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.965663][ T1425] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 126.976668][ T1425] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 127.002220][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.205016][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.322093][ T5483] random: crng reseeded on system resumption [ 127.445205][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 128.208618][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 128.350211][ T5497] ip6gre1: entered promiscuous mode [ 128.368049][ T5497] ip6gre1: entered allmulticast mode [ 128.508604][ T5502] loop2: detected capacity change from 0 to 8192 [ 128.527505][ T3747] loop2: p1 p2 p3 [ 128.531564][ T3747] loop2: p1 size 4719617 extends beyond EOD, truncated [ 128.540587][ T3747] loop2: p3 start 117772289 is beyond EOD, truncated [ 128.594070][ T5502] loop2: p1 p2 p3 [ 128.603410][ T5502] loop2: p1 size 4719617 extends beyond EOD, truncated [ 128.638212][ T5502] loop2: p3 start 117772289 is beyond EOD, truncated [ 128.649668][ T5499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 128.730629][ T5498] delete_channel: no stack [ 128.896763][ T5516] sctp: [Deprecated]: syz.2.560 (pid 5516) Use of int in maxseg socket option. [ 128.896763][ T5516] Use struct sctp_assoc_value instead [ 129.001443][ T5524] random: crng reseeded on system resumption [ 129.323445][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 129.389609][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.650107][ T5543] loop1: detected capacity change from 0 to 512 [ 130.667000][ T5543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.701573][ T5538] sctp: [Deprecated]: syz.3.565 (pid 5538) Use of int in maxseg socket option. [ 130.701573][ T5538] Use struct sctp_assoc_value instead [ 130.761022][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 130.788521][ T5543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.803285][ T5543] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.889228][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.924933][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 131.086112][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.146260][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 131.146279][ T28] audit: type=1400 audit(1772731665.375:1010): avc: denied { ioctl } for pid=5558 comm="syz.4.569" path="socket:[11546]" dev="sockfs" ino=11546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.187670][ T5561] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 131.212092][ T5561] bond1 (unregistering): Released all slaves [ 131.241540][ T5570] loop3: detected capacity change from 0 to 512 [ 131.262942][ T5570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.285731][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 131.295973][ T5570] EXT4-fs (loop3): 1 orphan inode deleted [ 131.303162][ T5570] EXT4-fs (loop3): 1 truncate cleaned up [ 131.310250][ T5570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.324277][ T5570] EXT4-fs (loop3): shut down requested (1) [ 131.361391][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.503077][ T5586] random: crng reseeded on system resumption [ 131.728721][ T5578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 131.875134][ T5584] loop3: detected capacity change from 0 to 8192 [ 131.947535][ T28] audit: type=1400 audit(1772731666.155:1011): avc: denied { create } for pid=5577 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.979988][ T3747] loop3: p1 p2 p3 [ 131.990466][ T3747] loop3: p1 size 4719617 extends beyond EOD, truncated [ 132.007510][ T3747] loop3: p3 start 117772289 is beyond EOD, truncated [ 132.028392][ T5584] loop3: p1 p2 p3 [ 132.032590][ T5584] loop3: p1 size 4719617 extends beyond EOD, truncated [ 132.052432][ T5584] loop3: p3 start 117772289 is beyond EOD, truncated [ 132.063964][ T5577] delete_channel: no stack [ 132.203326][ T5599] loop4: detected capacity change from 0 to 1024 [ 132.231742][ T5599] EXT4-fs: inline encryption not supported [ 132.238531][ T5599] EXT4-fs: Ignoring removed bh option [ 132.307438][ T5604] loop0: detected capacity change from 0 to 128 [ 132.747282][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 132.828380][ T5611] random: crng reseeded on system resumption [ 132.893183][ T28] audit: type=1400 audit(1772731666.995:1012): avc: denied { mount } for pid=5595 comm="syz.0.578" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 133.014976][ T5614] loop2: detected capacity change from 0 to 256 [ 133.059297][ T28] audit: type=1400 audit(1772731667.025:1013): avc: denied { watch } for pid=5595 comm="syz.0.578" path="/112/file0/file0" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 133.147633][ T28] audit: type=1400 audit(1772731667.225:1014): avc: denied { create } for pid=5613 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.219068][ T28] audit: type=1400 audit(1772731667.235:1015): avc: denied { setopt } for pid=5613 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.331611][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 133.357139][ T28] audit: type=1400 audit(1772731667.235:1016): avc: denied { ioctl } for pid=5613 comm="syz.2.584" path="socket:[11662]" dev="sockfs" ino=11662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.377749][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.468004][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 133.482131][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 133.494162][ T5617] loop3: detected capacity change from 0 to 512 [ 133.499473][ T28] audit: type=1400 audit(1772731667.235:1017): avc: denied { write } for pid=5613 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.504253][ T5617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.536539][ T5614] 9p: Bad value for 'rfdno' [ 133.544500][ T28] audit: type=1400 audit(1772731667.655:1018): avc: denied { write open } for pid=5598 comm="syz.4.580" path="/140/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.584031][ T5617] EXT4-fs (loop3): 1 orphan inode deleted [ 133.657170][ T5617] EXT4-fs (loop3): 1 truncate cleaned up [ 133.663945][ T5617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.685190][ T28] audit: type=1400 audit(1772731667.655:1019): avc: denied { mounton } for pid=5598 comm="syz.4.580" path="/140/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.774394][ T5615] loop1: detected capacity change from 0 to 8192 [ 133.784988][ T5617] EXT4-fs (loop3): shut down requested (1) [ 133.793560][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.844500][ T5626] ip6_vti0 speed is unknown, defaulting to 1000 [ 133.854114][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.886692][ T3747] loop1: p1 < > p2 p4 < p5 > [ 133.903169][ T3747] loop1: partition table partially beyond EOD, truncated [ 133.983916][ T5629] random: crng reseeded on system resumption [ 134.249895][ T5635] x_tables: duplicate underflow at hook 2 [ 134.370687][ T5626] lo speed is unknown, defaulting to 1000 [ 134.443631][ T3747] loop1: p1 start 134217728 is beyond EOD, truncated [ 134.456553][ T3747] loop1: p2 size 591360 extends beyond EOD, truncated [ 134.466153][ T3747] loop1: p5 size 591360 extends beyond EOD, truncated [ 134.484711][ T5638] loop0: detected capacity change from 0 to 512 [ 134.516950][ T5615] loop1: p1 < > p2 p4 < p5 > [ 134.545671][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 134.611518][ T5645] loop4: detected capacity change from 0 to 1024 [ 134.636865][ T5645] EXT4-fs: inline encryption not supported [ 134.654225][ T5615] loop1: partition table partially beyond EOD, truncated [ 134.666278][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.695848][ T5645] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 134.706238][ T5615] loop1: p1 start 134217728 is beyond EOD, truncated [ 134.713438][ T5645] EXT4-fs (loop4): group descriptors corrupted! [ 134.715833][ T5650] loop2: detected capacity change from 0 to 512 [ 134.719895][ T5615] loop1: p2 size 591360 extends beyond EOD, truncated [ 134.737925][ T5615] loop1: p5 size 591360 extends beyond EOD, truncated [ 134.749901][ T4054] IPVS: starting estimator thread 0... [ 134.789976][ T5650] EXT4-fs: Ignoring removed nobh option [ 134.816525][ T5654] loop4: detected capacity change from 0 to 512 [ 134.823705][ T5654] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.843889][ T5654] EXT4-fs (loop4): 1 truncate cleaned up [ 134.846770][ T5652] IPVS: using max 1872 ests per chain, 93600 per kthread [ 134.851669][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.912606][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.929268][ T5650] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.951915][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.963339][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 134.987507][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 134.998410][ T3747] udevd[3747]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 135.034079][ T5650] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.595: EA inode hash validation failed [ 135.085723][ T5650] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.120229][ T5650] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.595: corrupted inode contents [ 135.135715][ T5650] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.148393][ T5650] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.595: mark_inode_dirty error [ 135.158233][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 135.158403][ C1] EXT4-fs (loop2): initial error at time 1772731669: ext4_do_update_inode:5569: inode 15 [ 135.158583][ C1] EXT4-fs (loop2): last error at time 1772731669: ext4_do_update_inode:5569: inode 15 [ 135.202026][ T5650] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.206367][ T5650] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.595: corrupted inode contents [ 135.232266][ T72] IPVS: stop unused estimator thread 0... [ 135.238695][ T5650] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.248234][ T5650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.595: mark_inode_dirty error [ 135.272775][ T5650] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.273858][ T5650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.595: mark inode dirty (error -117) [ 135.299847][ T5650] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.301353][ T5650] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 135.322199][ T5650] EXT4-fs (loop2): 1 orphan inode deleted [ 135.337509][ T5650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.395187][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.548233][ T5674] loop0: detected capacity change from 0 to 8192 [ 135.562746][ T5681] SELinux: failed to load policy [ 135.607303][ T5674] ================================================================== [ 135.615483][ T5674] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 135.623097][ T5674] [ 135.625481][ T5674] read-write to 0xffff888237d26668 of 1 bytes by task 3747 on cpu 1: [ 135.633654][ T5674] folio_add_lru+0xa4/0x1e0 [ 135.638217][ T5674] folio_add_lru_vma+0x49/0x70 [ 135.643037][ T5674] handle_mm_fault+0x2c3f/0x3020 [ 135.648050][ T5674] do_user_addr_fault+0x3fd/0x1050 [ 135.653312][ T5674] exc_page_fault+0x62/0xa0 [ 135.657945][ T5674] asm_exc_page_fault+0x26/0x30 [ 135.662905][ T5674] rep_movs_alternative+0x4a/0x90 [ 135.668026][ T5674] _copy_to_iter+0x141/0xea0 [ 135.672740][ T5674] copy_page_to_iter+0x18f/0x2d0 [ 135.677789][ T5674] filemap_read+0x407/0xa10 [ 135.682357][ T5674] blkdev_read_iter+0x22d/0x2e0 [ 135.687342][ T5674] vfs_read+0x6c0/0x7f0 [ 135.691635][ T5674] ksys_read+0xdc/0x1a0 [ 135.695939][ T5674] __x64_sys_read+0x40/0x50 [ 135.700595][ T5674] x64_sys_call+0x2886/0x3020 [ 135.705415][ T5674] do_syscall_64+0x12c/0x370 [ 135.710129][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.716076][ T5674] [ 135.718457][ T5674] read to 0xffff888237d26668 of 1 bytes by task 5674 on cpu 0: [ 135.726029][ T5674] __lru_add_drain_all+0x17e/0x450 [ 135.731231][ T5674] lru_add_drain_all+0x10/0x20 [ 135.736045][ T5674] invalidate_bdev+0x47/0x70 [ 135.740661][ T5674] bdev_disk_changed+0xeb/0xd40 [ 135.745544][ T5674] loop_set_status+0x5db/0x6a0 [ 135.750347][ T5674] lo_ioctl+0x671/0x13a0 [ 135.754616][ T5674] blkdev_ioctl+0x387/0x460 [ 135.759224][ T5674] __se_sys_ioctl+0xce/0x140 [ 135.763856][ T5674] __x64_sys_ioctl+0x43/0x50 [ 135.768486][ T5674] x64_sys_call+0x1563/0x3020 [ 135.773195][ T5674] do_syscall_64+0x12c/0x370 [ 135.777897][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.783825][ T5674] [ 135.786173][ T5674] value changed: 0x00 -> 0x01 [ 135.790986][ T5674] [ 135.793327][ T5674] Reported by Kernel Concurrency Sanitizer on: [ 135.799498][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: syz.0.600 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.810320][ T5674] Tainted: [W]=WARN [ 135.814138][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.824227][ T5674] ================================================================== [ 135.849229][ T5674] loop0: p1 < > p2 p4 < p5 > [ 135.874516][ T5674] loop0: partition table partially beyond EOD, truncated [ 135.897640][ T5674] loop0: p1 start 134217728 is beyond EOD, truncated [ 135.904725][ T5674] loop0: p2 size 591360 extends beyond EOD, truncated [ 135.914841][ T5674] loop0: p5 size 591360 extends beyond EOD, truncated [ 136.056170][ T5674] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.122411][ T5674] lo speed is unknown, defaulting to 1000