last executing test programs: 51.964003138s ago: executing program 1 (id=205): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) keyctl$session_to_parent(0x12) 51.884053133s ago: executing program 1 (id=207): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) inotify_init() (fail_nth: 2) 51.720999172s ago: executing program 1 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) 51.676138285s ago: executing program 1 (id=210): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0xfffffffffffffffe, 0x29) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2(0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x7) 51.144253017s ago: executing program 1 (id=217): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) keyctl$session_to_parent(0x12) 50.695675163s ago: executing program 1 (id=219): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102640, 0x400, 0x0, 0x1, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x55fa, &(0x7f0000000540)={0x0, 0x7a7, 0x10100, 0x0, 0x37}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) openat(r0, &(0x7f00000001c0)='.\x00', 0x0, 0x20) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 50.644500976s ago: executing program 32 (id=219): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102640, 0x400, 0x0, 0x1, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x55fa, &(0x7f0000000540)={0x0, 0x7a7, 0x10100, 0x0, 0x37}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) openat(r0, &(0x7f00000001c0)='.\x00', 0x0, 0x20) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 4.905294951s ago: executing program 3 (id=644): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) getsockopt$inet_opts(r1, 0x84, 0xd, &(0x7f0000000440)=""/170, &(0x7f0000003a80)=0xaa) 4.766230479s ago: executing program 3 (id=645): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800000008500000006000000852000000500000008b7ffff04000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000084530ab3bf1000000b7040000000000008500000082000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xffff}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 4.391947171s ago: executing program 5 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbff"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 4.222960861s ago: executing program 5 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.119431177s ago: executing program 5 (id=650): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$tipc(0x1e, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) sendfile(r2, r2, 0x0, 0xfffc) mount(0x0, 0x0, 0x0, 0x4098808, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000002800), 0x101000, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f00000007c0)="c1188e99136a02ff4284860186ddb98a503401052577ce2042d811fc8d6bc37cd56e1de89becabe2c5a69a546878f7f57d35a109a099", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = memfd_secret(0x80000) fstat(r6, &(0x7f00000027c0)) statx(0xffffffffffffffff, &(0x7f0000002840)='./file2\x00', 0x4000, 0x800, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() sendmsg$unix(r1, &(0x7f0000002a40)={&(0x7f0000000280)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000001680)="eb8a57ce64f3ad072d4f0e49613ab1a6a39fd73d1ab719e956628bb876cee4b80563796d9f6c3b0658fbc26d26a099230afdb6498a906fa42b039314117e47edb5be48cf37731ef9d1ca67a684a222d031466578a992d3a3d11cb6d982acae00d6a569a2d31307b0720bfcfcec7c54ea54fef09700cb8b766f82b9a308763d1f0dac9bf32a0c9a3ce94272d7dc8427735ca0f436a8eebd247b40476b10c32deb7c3f3c376f73eb9e210a7aba5c1323b82ed868374b8e7d9394b28c26507106b57816e9dcf61af4756ae86e5cca752235d4db7fc060ef0038d8ce7887a575448fddb4ed2baca8e78c0b9a8df1550d38664e358911d2947d9a56ae51cdb3381a3b922c3968247e2e3b4493560026915e3230f1321c4c4f92c2530844bd80da58ad2b7aaf82e7652d00f3c5f7a40bb7a83e41a408fb1c8ff73f75353adc9c5af327a1ca67794ba68bedd33dae5062f53e6cdba6fb5647860d22f44c0511a7cdbe7be840818f6556b03b68c8c98f9eda76043b5711d7fccaf775e85ff325476f958631af1fa7cf38744f824c3ec87c42c4d121f46a044bbf512a262566c0ebab37fd4ae7c3ecbcf7b4b6b55bf18852d66b51a88276f359064090f7d73473d950213ef54dd0d62057462613d5d7fc916fe717d6c462bd1c2b6374d80458ca8e5e5a6896463cba523ed6153b538baeceebdd2dd5de1534973257d03c659c8da6910008e630b1622fbbbc02064fb8ea4a846c76721be7b5b371e80c27f8df852b948ea0e7b8e927829e2f534efce64a236211751675db3091d71a2786dac302a403a43eb961eb7661858b4bab4288ce599aec6911c18141cc14dd83f8e1fc41368d4b2af73375604af48d3a720396674b5973611abf7d9c467e3f079ef381405e83927c67b4c4b14437d04f71aacd1ac6e093a084e8f8a9383edca05315604f46c32f7a8f69c4a17869b922f58ecceb620e7b6843b0606d7e909b85d26b34733500d642f612254a0661b7b29bf4d421ef2d3a753ce5e5d1a2accdb5a8cc79e072cf8ef4c371b78dc9b7684db74bdc344eb6d2b7098a7ce5a91063515682bf9c71fcd6596c121685a782d079dab71ff9a1ca492ee14f67fdf1ac4f51b49276095b5139e48d5bf8ddcfa8e652f49554a9fa4dca637b6778491683d70821c7848bbf68f2ee2a03a087d8786325c214cc180fdc6af3734273be0bdf20e1fafd103b0674d67f964b2aa6c0fb5021164fe222d295c07b1b294fc2afdcb7e043b6c01641a4069fdcca426501747e33cd95978cf707c1d32070b0e0413c774585ab876974ba08346aec614350c42cb0dd0166c24585300b218bc00b28858cae6ffaa073b9218964a8c53fc5c32fcc044e9cfbd24dab05129907e92114fdd7a0118e1a1b9085b46c255b8db40916fb5001e794f52336a0b0e92e76034c1be18f731d0bc8e086b41c9ecc7638dc5dc619ad480b1273dc4d7fdbe3056f8be713c8500f2af94ac2083f7cb126885438d363268c8e087943680fa9f0181409321cbe574d5fe30855b660a9b822cb87ed99125cad7553779c95c8cd3f3738ba2f49a08b5fa173a90fe4502325a5a279c7e12631b3e75abf72ea489a7d01de17a8087719f5d40db76136a8340450d260df3005dd2900e47953191c14b7fad33c1b9c050d90973c909b457b350ce61266cc8723880e79e00461231af6eb2e2d582d472492da439d5090b0283e96eb0a00b5c0ffb10562ebcd2d82a4242661864403366af7cfdc5a55df276cc75db82d59e54d484bdea8e0fc242538541d05c5f3e6b74e666237dbb953b1301aadd0ee6d063ed61e3f096ed65ceef7cdfe39f5c978e39985e1bb40134a1f4391002d0cd0439aaebd24301a26843844256182c83422ed7c2fa06d01d708372c80617de2cb7180d30a3481ae99da0cbfeb259dcbdbeb3fef941b4ae74f4df502dbe3c5dfbb8ba82357ab59423df33dc6a08b22974fc91896b9a8bd43abf95778a4925ad187fdfbfc0c6e9fce5a81c4b20fad4e675537e751cc61b5c04c6c424420b53ed24ca0415e19daa8a618fa8eb9bda8caf1f186ae812098498054dbe0b9652091ee29a94f5d7374fd1632100ccb518e589be7b79603b6721ca390d3cc5e6e668c62fac33704ff8f5bd36117b347dc783ef96ad12ad2f3d2481d9a04589024b56155891f979550cc247c61e95ed2bcdab9f873fab4add1beb3c28f60c197bd0cc4fd24957c313580b309eb185cb84b7a22420aa7e3ac3dd73fc19fdaf15da0b2168cdf3073ef63c495913878b8215af664cafdad00f3f115fc62344df7ab8b615e7a29a104ec38a02ebdc49cccd1e6e15351c6ce53f93382a4a3054632ba77c61477cf222c3f2348b0368613080068bda76304a4bc53496c51a82411e26d6a3178d654ee4a43fe42b42c5ce2340f8458edf8029540cdbdbb4d52b6fd4bb2de634b43b9d2ade03407f309f33f237b3666fea997312069534881b47769b841d0a261b97a17bc742db75696f7a9f0e115693ac97e96c8449597cbec6ea792e953c38aa4c6f1f4b3e06db24d7ebe1e4f7b52e3ba83d0442970936a750d11119d68a7e5b9ae33f965b333aa80f01205e5be1f9209015bff740111db09e91385241504a87c2757f02e8be6b83be5c513457ba6780973967ed9529aa04ee4e9a9d2cf2be5d2d03b841e32fb83d2be2345c4aac55627f30c3a89cdf4e04107e3e05ed214ed2394607c111d639ccb273e8b581bfa8e4899bd9f5cdf9049883ebe408961e6a073d48478c687cb1aeb8231d0cd9208fd53c193dede5f492a047a52e50ff34937a884aab9987816fe8a45f4c4eb3e00fa9b0dd2696789f14a9e034ab7c80d913886a6932e2dd7f317dc363b1bc8ee1e09b7f1626889d6e277a30239ee1096543b8669bff4e21f3d3ee4e6fd6050911db57c2b7573154c2aed06285f78846f0d410c63d32eb89e6daa9c851add632cc143cd704537b0d8cfd73a54bc71744c4a828ccc385fff035de43c209d5b619c54fe124d522ae400d303533f3e5538fbddfc02290b2ccfa67717023843bb65ad882358cc85e956dce6be13327fbb03d06ec37bbd6f3d6f0a81fdcc5a649b2bd9f556f7cb770cb9e85d253ca6189c2b0a32876e790cad022075228100f6df9a80c6b09e21d57769dc832e4f397adc5c2ff18226f5c580167e8d06eea04623cbf0469afe76d8a4ec1a1db904d178ae3bb25277c9be3a118caf3a28d0b20c4a2085b5f43c2a63e67899299b3bee19a986f966f55ea63ba567cc8b0fd48637497269834d3d1baa8cb29d6c90f4e231af3fb3dd616e4ed856a81d3f34e1454bdaafea6eb6d83e843c8101202221053e5bae068d7bbde42db964672f66cfe4449e86dd86130023947df497ce4953e4b386ae2526f8c50442050b51b22082115e8dd18ade987fd26e349c6310ec24134ae1240d9241d18cc6eb9c8a8667ae25386579226377c4d6bde43f81e58ae7e0df89b12f82717d4ebba5979fa1990a01b95e18d1833bfa04f8e6ff9dc1c3066baac9aec6659880d9a5f3aa656056ec727f3f862186187532304f4d0a5fcf0ed280a5f6dfde6a2e5ff3e9c250b6e9e1425cd0ca36419b11865d96f11df9c2668ff295ac062629c9c0a22a6e44b4151e6dbee73c8ef6bab6f1841a04b0f78f89266b473cbba12cd1e8d54205c99cf7d5e9a61ded3fae786f41b840df9968de372bfd14e84023f45d6c6cb1147418fc585d210649cd0f446d1f4db78f47dfd26808d25534db180c7dc018779c32d6b22f50450318ccdaa2243b775752353fb849e189e2fddeccebfc520127d2090dad713ef1ae0de5505fb217c476c36c61c1bb6b96acb1c3a4f044fd35bce79c6522ab843b4125052d95bfcf79a0a66ba3f4d94856f159f5cd85650531c78c76b4c3fc4a260f7637e9be6505c3fbd0902373896b2d820ff5e502d6e570a059ce082c29736eac7eeb36d536a66cacd11f75f38ffadf87dbfcbdaf141e345fb7663f7bc35c6e8d1672b6c44a9f370c07f172044f98491a172d101daf7c719b9992b7e62fd04a37378355a0a2a98cc25d2383a0c84e97e1cf40b77736a95244ef19c2389043751d999e355f1fc153e44b3e1054ea7207a700b0c26deba8c5b5831a56b359a05244bfb8295528274cca1409c2cb95610084b7f52e49f1fd911f75916a21fd94bc38cd6b95a529808f8228f22c2fb3b099a0b49b610d44dfd028def2d230a5ff091d8938d7a513d97a2a54b6e5b8065e0be9664cfef29901d584f2588c250537d6287c378e4d58d33acd2b9c62d8d7472b4a1c0979bb4b2cf05f8557f7d299c1d1a7a5736daad893c9af213f59ef0c08fc20db005db324f24c044c72b880f44958f7595e38b8b40c0433fd782a46e66d261d537c0b379eef93e17167485e76ced7d03c9e46864fe0cbbfa6f861c6b8b075411716ed84ff95924e12140c64e3241e611811dbc9fe93404462e8dc28c783d92224c0c7fe1fc1ecc12800532ec1a9594335f76a795f6fc3ca667aaadfdac5e78e0060e4fa3efe6a5293b10098b43b7eeec4656d9d8aaa3d71b9dd70a14cfaa8a579f060f2119532a3f740ef848cd4b6e26ec4e0ce2d9297606fbdc53b3978553ef9a14554652b50175c2a6915084b6223b640ef222d115927ba3211d5078f19d30649228aa059fa0dd73849d417c9f538306c692bd20fa3b4cce719b33e306d826a4a63b1a70e50b04b876204744749212609951c839d92f270ef6792c84b3bb2ec27e49dbee5d490a9b13c27900c7c9c553d3b703d61eb637295dad1caa450e7c621a01c6bbf80258eaf258a39265cf32c4deb232a6c42646e87079c5fc2acfa5ed6c0efe732f3f7aaa1649f853611ef94da84119e57cdf3b39b04a2c70bc3707146141af5d10b5c5c1d60d9af25fc1f11550087a4cac0c7751751c9e64b1d4e2e7bdda447dcee2c8b7b1600e4c2184243ae4f7fb4647a7de10894daf7947bb6933131cb77f2471b7ac6711edc8bbd14f622f76d7bb2f665201ff5fe7609d01a19e489e11fbf31ceb924530f6ac4c7e63f9cee4b0a30dc22ff0367fc84b069aad3927aad0ba33881a69f18bfb3474ef6ba42ef768b2138a466303f69637f31b06e24fc2f1e5822844bfc156cc99f73b8ea7a753c70f8b3ff2d0c8a136ebb5799a5cef9869d2ec171bb6a6873929b4bf55a34cb78af356ea265e79f3193354738f38901101576708ed72708fce6b7b90658968e74fcec66f170d5e84a0dab54656b9f12220131393f5afbf97b709fdb000fb8cc63fac191b255bee4198a24661335ffda001c3719d2db827b34ee05ad355f0945dc388721511567a3de84bde43c030aad6f41a026a27d3537558450d7b1adfdaa913a3abdad9524a54ce3c31abd75da1d356ce5058a1620b8aa39f5f794808782138b5d30eaac29c59f0a136941d7a08fffe13cd3d363ef88f4d13b93d86eb360a83fa203a83f6bdb523708854798009655a2db3895cfcf4548b5c5a3e7f15d472a407780dcb65cd21cfbe3727a010c0515956b058b3877e1a1dc64f487050ff9cc9540e28e59d41da6a4ff1eb63fbee57286ffe6b929c7ec1378dd576d4189a684ada869e07d3eb9d047226aa62d3d334d5ad17d10a3acfc78578a47a9a3a6104f84ec94abd434ccc41fc187a221afd437237be61f617a481d40e61793612122046c5f9c875ae31fdaf69aff0b0b20f92c0f2b7ecbf37907291495ad7817871b4bc60e93d93d81d8ff6147c149f7c2189f63469619cbf6fe5471e0e22b137661c2002cad7ba168ea9ef556432510", 0x1000}, {&(0x7f0000002680)="f07a89bc66c22aaa612256acef262043645bb9b5dcf7ca7f884df12609a07ed79b87bd7e6eb189b7ddf41d7b6a906d1208984059b4c4cebc5185e0bccc7b3f67e971463a01096c3de0c3cab216ef580f45718e058fa0746552460ec81980bd056fcec2882d7193d1eef2f6d9f82f347094bfa44dea68304f93aa8dc5913db8c4ddcf2cb4dd92ab8270bada5420a279a4450dd0aa1c2dbf6a34ae23ed779c2dad7e455e50153da85e606bb6e2d6ed27846d911d4c0700acdb53871e0b1d6231387bdded74ae62df0692", 0xc9}, {&(0x7f0000002780)="a29a95f619751cefa1dbc414d469fb191829a91d7cff4deed437fc499e3c47d001c3251361f4f8ecd8af108878d8f4182bed767efa19fe89fd1d9dd8a4a38ba32f553a635012cb9f230aa0af67455f59b69d9661e48afe37", 0x58}], 0x3, &(0x7f0000002a80)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="4a0525804a4ae30225661a8ffe64c18bda36848200000000000000005b5425236c1b86a987ff951912e5ddb079d803cb43d86055c5694a83a817b1717938c6ac5fa4c385c583d787ec743057a230e07348f5a85671fc1876c5ec0a79b294ed18b1ed1fefff5f1675517ec464c8becb65260f7748f8ab7137834b47094b84d9b0b119c900932395f15d3aeabd5e792c97a321f6b95ec9c8017be56a"], 0x88, 0x40088}, 0x40010) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000440)='./file0\x00', r9, &(0x7f0000000180)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000000440)="$eJzs3E+LW1UYB+B3xtqpU+ePWqstiAfd6ObSmYUb3QwyBWlAaTtCKwh3nBsNuSYhNwxExOrKrZ9DBBHcCeJON7PxGwjuZuOygnhlEp1pJF1EZFLK82zyknN+yTknIXDCPffwtS8+bDerrJkPYnFhIRZ7EeluihSL8Y9P4+VXf/zpuRu3bl/bajS2r6d0devmxisppdXnv3/n469e+GFw/u1vV79bioP1dw9/2/z14OLBpcM/b37QqlKrSp3uIOVpt9sd5LtlkfZaVTtL6a2yyKsitTpV0Z9ob5bdXm+Y8s7eynKvX1RVyjvD1C6GadBNg/4w5e/nrU7KsiytLAezO3Nc7Xx5t67riLp+NM5GXdf1Y7Ec5+PxWInVWIv1eCKejKfiQjwdF+OZeDa++eXr4VECAAAAAAAAAAAAAAAAAAAA+P/Mev7/0qjXvEcNAAAAAAAAAAAAAAAAAAAAD5cbt25f22o0tq+ndC6i/Hx/Z39n/Dhu32pGK8oo4kqsxR8xOv0/Nq6vvtHYvpJG1uOz8s7f+Tv7O49M5jdGtxOYmt8Y59NkfimW781vxlpcmJ7fnJo/Fy+9eE8+i7X4+b3oRhl7cZQ9yX+ykdLrbzb+lb886gcAAAAPgywdm7p/z7L7tY/zM/w/MLG/PspePjPXqRMR1fCjdl6WRV/xwBdn5zuM3+u6nv8iHBe7vdP89t7/vZYi4j+/8kJEjJ9ZfTBW9aSY9y8Tp+HkQ5/3SAAAAAAAAAAAAJjFaVxOOO85AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xQ4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqwAAAP//HMPR4g==") mount(&(0x7f0000000040)=@filename='./file2\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x2000, 0x0) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18003fff0bcc141c080100000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r11}, 0x38) 3.911274069s ago: executing program 0 (id=651): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 3.875633101s ago: executing program 5 (id=652): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800000008500000006000000852000000500000008b7ffff0400000018110000", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xffff}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r8 = fsmount(r1, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 3.226434159s ago: executing program 3 (id=655): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) getsockopt$inet_opts(r1, 0x84, 0xd, &(0x7f0000000440)=""/170, &(0x7f0000003a80)=0xaa) 3.124244695s ago: executing program 3 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x8002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) 2.990713803s ago: executing program 3 (id=658): mount(&(0x7f0000000100)=@sg0, &(0x7f00000003c0)='.\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) dup3(r0, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x296, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 2.822711343s ago: executing program 2 (id=661): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 2.691435941s ago: executing program 0 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) io_setup(0x80, &(0x7f0000000480)=0x0) io_destroy(r1) io_setup(0x10000, &(0x7f0000000800)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x1, 0x451, &(0x7f0000000f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000040000000000000081000000bcca0000000000009500000063509a9df34bb47fab8221000000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/profiling', 0x42902, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) io_pgetevents(r1, 0x0, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000140)={[0x4]}, 0x8}) 2.690105941s ago: executing program 5 (id=664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ':'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x44014) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x2, 0x571, &(0x7f0000000780)="$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") open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x6, &(0x7f0000000200)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) gettid() sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000651000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000058a000/0x4000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 2.467069184s ago: executing program 4 (id=665): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={r0, 0x78, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x1ff}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000001c0)=0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000900010073797a30000000000900030073797a3200000000140000001100"/110], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) 2.314497963s ago: executing program 4 (id=666): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) getsockopt$inet_opts(r1, 0x84, 0xd, &(0x7f0000000440)=""/170, &(0x7f0000003a80)=0xaa) 2.183740241s ago: executing program 4 (id=667): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xc00000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x1c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_setup(0x5, &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x11, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1e, 0x1}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) membarrier(0x10, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0, 0x80}, &(0x7f0000000740)=0x8) 2.151978443s ago: executing program 0 (id=668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007"], 0x5c}}, 0x20084884) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000e80)='./bus\x00', 0x0, &(0x7f0000000500), 0x21, 0x4a6, &(0x7f0000003840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c65) r4 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r4, 0x10, 0x0, 0x7000000) write$UHID_INPUT(r2, &(0x7f0000001180)={0x9, {"a2e3ad084fc752f91b29090942f70e0dd038e7ff7fc6e5539b3272078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d336d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c08b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb1b16cdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c2f882b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f710100744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x33e) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x5, 0x6e, 0x3d, 0x43, 0x0, 0x4, 0x80, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfffffffffffffff7, 0xfd48, 0x3, 0x3, 0x8, 0x5, 0x0, 0xfffffffd, 0x0, 0x8001}, 0xffffffffffffffff, 0x1, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x1e, 0x401, 0x3, @remote, @empty, 0x0, 0x20, 0x1, 0x41608639}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000440)={'sit0\x00', r5, 0x80, 0x40, 0x7480, 0x5a5, {{0x1e, 0x4, 0x3, 0x7, 0x78, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x57, [@multicast1, @dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_addr={0x44, 0x4c, 0x2b, 0x1, 0xf, [{@loopback, 0x8}, {@private=0xa010100, 0xc44}, {@multicast1, 0x10000}, {@multicast2, 0xc357}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@remote, 0x2}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@broadcast, 0x9}]}, @ssrr={0x89, 0x7, 0xf5, [@private=0xa010101]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000700)={0x6, 0x0, 0x4, 0x4}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080) 1.967883454s ago: executing program 3 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc, 0x90, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x0) lstat(&(0x7f0000005300)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003c80)) recvmmsg(r5, &(0x7f0000007600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/253, 0xf0}, 0xffffffe2}], 0x40002d4, 0x2, 0x0) 1.787831224s ago: executing program 0 (id=670): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$eJzs3c9vI1cdAPCvnZ+bpk0KlQoI6FIKC1qtnXjbqOqpXJBQVQlRceKQRok3iuLEUeyUJqzU5H9AohIHBCfOSCA4rLQnjghucNvLckBaYAXaIHEwmvF415u1E+8msdn485FGnjczme97nsx78Te2XwBD63JE7EfEeER8GBEz2fZctsS7zSU57sH9m8uH928u56LR+OAfuXR/si3afibxQnbOyYj4XvuONrXdvfWlSqW8nZWL9Y2tYm1379raxtJqebW8WSotzC/MvX39rVJP7Zjs4ZjXNn5179tr733/1u++dPdP+9/8UVKt6WxfezvOUrPpYw/jJEYj4r3zCDYAI1l7xk86sMPvAIOXj4jPRMTr6f0/EyPp1eyNSwoAz6dGYyYaM+3lx8x23gwAPM/yaQ4sly9kuYDpyOcLhWYO75WYyleqtfrVG9WdzZVmrmw2xvI31irluSxXOBtjuaQ8/0my/qhcisfL1yPi5Yj48cSltFxY7j3PAACcrReOjP//nmiO/wDABdfxzTPtr88X+1cXAKA/ennzLABwsRj/AWD4PBr/pwZaDwCgf7z+B4DhY/wHgGFzpzX+jwy6JgBAX3z3/feTpXGYff/1yke7O+vVj66tlGvrhY2d5cJydXursFqtrlbKheXqxknnq1SrW/Nvxs7HxXq5Vi/WdvcWN6o7m/XF9Hu9F8tjfWkVAHCcl1+7/ZdcROy/cyldom0uB2M1XGz5QVcAGBg5fxhevoUbhpfX+DC8fp194vekuTy7vkX402cI2vjkGX4IOGtXPi//D8NK/h+Gl/w/DC/5fxhejUau2+T+R18a9HlmYgDgvDxljt+/BOACOvf///uOMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6g6XSZbSvn84VCxIsRMRtjuRtrlfJcRLwUEX+eGJtIyvMDrTEAcHr5v+UuNef/ujLzxvTRveO5/0y01n/40w9+8vFSvb49n2z/Z7p9PCLqn2bbS/2uOwDQi9Y43RrHWx7cv7ncWvpZn3vfas4NmsQ9zJbmntEYTR7+OJlOOjz1r1yznEn+Xhk5g/j7BxHxuU7tz6W5kdls4tKj8ZPYL/Y1fv6x+Pl0X/MxeS4++8SZJ7qWTprrFYbF7aT/ebfT/ZePy+njZMe5iyfTHur0Wv3f4RP9X+t+n0z7mk793+VeY7z5++903XcQ8YXRTvFzD+PnusR/o8f4d7745de77Wv8POJKdI7fHqtY39gq1nb3riVPfHm1vFkqLcwvzL19/a1SMc1RF1uZ6nbNEeLv71x9qWv7f/nbrGt8Mv7kCe3/2rGtbjzscn/x3w9/8JVu8Q8ivvHVztf/lWPiJ2Pi17P1iWPrEbE09Zuus28n8Veaz//B017/qyfEbbn7172VHg8FAPqgtru3vlSplLfPdGUszviEbSu5c6qzladbGY0zOE/0sc7Jn8mnPc+rWcpsqXX/tB/zh5/dejXZ9v9wdU6/Mrg+CeiPRzf9oGsCAAAAAAAAAAAAAAB0c+4fJ8oPuoUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcZP8LAAD//8AUtBk=") ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) creat(&(0x7f0000000200)='./file1\x00', 0x12e) (async) creat(&(0x7f0000000200)='./file1\x00', 0x12e) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x200000, 0x0) 1.596243785s ago: executing program 2 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.51523701s ago: executing program 2 (id=672): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.428223455s ago: executing program 2 (id=673): mount(&(0x7f0000000100)=@sg0, &(0x7f00000003c0)='.\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) dup3(r0, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x296, &(0x7f0000000740)="$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") fstatfs(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 1.427505146s ago: executing program 0 (id=683): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket(0x80000000000000a, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f00000000c0)=0xf2f, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x3d, "a0aa5012dd144ea7a957074c1ae1ec4db503b056a0f6b6d729838d620e39732a14db79967da2a07e8ebbd03fca69960a0bba66105dc780995b16f347d9"}, &(0x7f00000001c0)=0x45) 1.237847087s ago: executing program 4 (id=674): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1.234282307s ago: executing program 0 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ':'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x44014) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x2, 0x571, &(0x7f0000000780)="$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") open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x6, &(0x7f0000000200)=0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) gettid() sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000651000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000058a000/0x4000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 871.428248ms ago: executing program 2 (id=675): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00', @ANYRES32], 0x20) (fail_nth: 2) 531.515428ms ago: executing program 2 (id=676): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xc00000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x1c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_setup(0x5, &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x11, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1e, 0x1}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0, 0x80}, &(0x7f0000000740)=0x8) 494.45339ms ago: executing program 5 (id=677): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xc00000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x1c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_setup(0x5, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x11, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1e, 0x1}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) membarrier(0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0, 0x80}, &(0x7f0000000740)=0x8) 112.964343ms ago: executing program 4 (id=678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a300000000014000380"], 0x68}}, 0x0) socket(0x2, 0x805, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @local}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) memfd_create(&(0x7f0000000000)='\x90\xd3\xc4\xb1', 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68) 0s ago: executing program 4 (id=679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) write(r3, &(0x7f0000000a00)="c7", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ntil 2038-01-19 (0x7fffffff) [ 38.150199][ T3575] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.270062][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.301236][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.701309][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 38.701325][ T28] audit: type=1400 audit(1771061545.104:187): avc: denied { cpu } for pid=3585 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.873928][ T3595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.29'. [ 39.288607][ T28] audit: type=1400 audit(1771061545.244:188): avc: denied { create } for pid=3594 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 39.329064][ T28] audit: type=1400 audit(1771061545.263:189): avc: denied { ioctl } for pid=3594 comm="syz.4.29" path="socket:[4985]" dev="sockfs" ino=4985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.367585][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.377508][ T3598] FAT-fs (loop0): Filesystem has been set read-only [ 39.384213][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.401546][ T28] audit: type=1400 audit(1771061545.609:190): avc: denied { create } for pid=3594 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.481243][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.523900][ T28] audit: type=1400 audit(1771061545.609:191): avc: denied { ioctl } for pid=3594 comm="syz.4.29" path="socket:[4993]" dev="sockfs" ino=4993 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.552373][ T28] audit: type=1400 audit(1771061545.637:192): avc: denied { bind } for pid=3594 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 39.572681][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.606783][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.616039][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.626518][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.635598][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.644629][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.653486][ T3598] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.719693][ T3609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 39.731522][ T3609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3609 comm=syz.3.32 [ 40.324574][ T3611] set_capacity_and_notify: 8 callbacks suppressed [ 40.324594][ T3611] loop2: detected capacity change from 0 to 2048 [ 40.379921][ T3616] /dev/sg0: Can't lookup blockdev [ 40.388269][ T3614] loop3: detected capacity change from 0 to 512 [ 40.408367][ T3614] EXT4-fs: inline encryption not supported [ 40.414267][ T3611] loop2: p1 < > p4 [ 40.427335][ T3611] loop2: p4 size 722688 extends beyond EOD, truncated [ 40.500878][ T3614] EXT4-fs (loop3): 1 orphan inode deleted [ 40.507101][ T3614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.521951][ T50] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 40.538986][ T3616] loop4: detected capacity change from 0 to 512 [ 40.559424][ T50] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 1 [ 40.575483][ T3614] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.607957][ T3616] FAT-fs (loop4): Directory bread(block 199916) failed [ 40.627118][ T3616] FAT-fs (loop4): Directory bread(block 199917) failed [ 40.637253][ T3616] FAT-fs (loop4): Directory bread(block 199918) failed [ 40.645584][ T3616] FAT-fs (loop4): Directory bread(block 199919) failed [ 40.654170][ T3616] FAT-fs (loop4): Directory bread(block 199920) failed [ 40.662634][ T3616] FAT-fs (loop4): Directory bread(block 199921) failed [ 40.666821][ T28] audit: type=1400 audit(1771061546.937:193): avc: denied { setopt } for pid=3621 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.670517][ T3616] FAT-fs (loop4): Directory bread(block 199922) failed [ 40.701728][ T3616] FAT-fs (loop4): Directory bread(block 199923) failed [ 40.785354][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.798524][ T28] audit: type=1400 audit(1771061547.068:194): avc: denied { write } for pid=3626 comm="syz.0.39" name="ip6_mr_cache" dev="proc" ino=4026532462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.836913][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.845260][ T3614] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.36: iget: bad i_size value: 360287970189639690 [ 40.863615][ T28] audit: type=1400 audit(1771061547.124:195): avc: denied { connect } for pid=3626 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.883543][ T3632] FAT-fs (loop4): Directory bread(block 199916) failed [ 40.895833][ T3631] loop1: detected capacity change from 0 to 128 [ 40.908744][ T3632] FAT-fs (loop4): Directory bread(block 199917) failed [ 41.054597][ T3637] wireguard0: entered promiscuous mode [ 41.072156][ T3641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.42'. [ 41.081938][ T3637] wireguard0: entered allmulticast mode [ 41.427326][ T3647] loop4: detected capacity change from 0 to 128 [ 41.473527][ T3314] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.483812][ T3314] FAT-fs (loop4): Filesystem has been set read-only [ 41.574969][ T3651] loop4: detected capacity change from 0 to 512 [ 41.596722][ T3651] EXT4-fs: Ignoring removed oldalloc option [ 41.657606][ T3651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.46: Parent and EA inode have the same ino 15 [ 41.678693][ T3651] loop4: lost filesystem error report for type 5 error -117 [ 41.680931][ T3651] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.688315][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.688337][ C1] EXT4-fs (loop4): initial error at time 1771061547: ext4_xattr_inode_iget:437 [ 41.688366][ C1] EXT4-fs (loop4): last error at time 1771061547: ext4_xattr_inode_iget:437 [ 41.718730][ T3648] loop0: detected capacity change from 0 to 1024 [ 41.738769][ T3651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.46: Parent and EA inode have the same ino 15 [ 41.786530][ T3651] loop4: lost filesystem error report for type 5 error -117 [ 41.786991][ T3651] EXT4-fs (loop4): 1 orphan inode deleted [ 41.815457][ T3623] Set syz1 is full, maxelem 65536 reached [ 41.825665][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.839396][ T3648] EXT4-fs: Ignoring removed orlov option [ 41.893652][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 41.893960][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 41.953236][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.993057][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.140734][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.181111][ T3666] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET) [ 42.246289][ T3666] loop0: detected capacity change from 0 to 256 [ 42.276119][ T3674] loop4: detected capacity change from 0 to 256 [ 42.296247][ T3666] FAT-fs (loop0): Directory bread(block 64) failed [ 42.312000][ T3668] loop2: detected capacity change from 0 to 8192 [ 42.318963][ T3666] FAT-fs (loop0): Directory bread(block 65) failed [ 42.325518][ T3666] FAT-fs (loop0): Directory bread(block 66) failed [ 42.339062][ T3666] FAT-fs (loop0): Directory bread(block 67) failed [ 42.342445][ T3668] process 'syz.2.51' launched '/dev/fd/6' with NULL argv: empty string added [ 42.362594][ T3666] FAT-fs (loop0): Directory bread(block 68) failed [ 42.371785][ T3666] FAT-fs (loop0): Directory bread(block 69) failed [ 42.378431][ T3666] FAT-fs (loop0): Directory bread(block 70) failed [ 42.385550][ T3666] FAT-fs (loop0): Directory bread(block 71) failed [ 42.392233][ T3666] FAT-fs (loop0): Directory bread(block 72) failed [ 42.398951][ T3666] FAT-fs (loop0): Directory bread(block 73) failed [ 42.477081][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.618250][ T3688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.57'. [ 42.704692][ T3294] loop4: p1 < > p4 [ 42.709333][ T3294] loop4: p4 size 722688 extends beyond EOD, truncated [ 42.723602][ T3691] loop4: p1 < > p4 [ 42.728390][ T3691] loop4: p4 size 722688 extends beyond EOD, truncated [ 42.792606][ T3695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3695 comm=syz.3.59 [ 43.110889][ T3704] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.120913][ T3704] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 43.136877][ T3704] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.61: inode #15: comm syz.2.61: iget: illegal inode # [ 43.149478][ T3704] loop2: lost filesystem error report for type 5 error -117 [ 43.149665][ T3704] EXT4-fs (loop2): Remounting filesystem read-only [ 43.157048][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 43.157070][ C1] EXT4-fs (loop2): initial error at time 1771061549: ext4_orphan_get:1391 [ 43.157093][ C1] EXT4-fs (loop2): last error at time 1771061549: ext4_orphan_get:1391 [ 43.189245][ T3704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.207513][ T3708] 9p: Bad value for 'wfdno' [ 43.219381][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.328964][ T3721] FAT-fs (loop0): Directory bread(block 199916) failed [ 43.344825][ T3721] FAT-fs (loop0): Directory bread(block 199917) failed [ 43.352001][ T3721] FAT-fs (loop0): Directory bread(block 199918) failed [ 43.359308][ T3721] FAT-fs (loop0): Directory bread(block 199919) failed [ 43.366593][ T3721] FAT-fs (loop0): Directory bread(block 199920) failed [ 43.373553][ T3721] FAT-fs (loop0): Directory bread(block 199921) failed [ 43.380706][ T3721] FAT-fs (loop0): Directory bread(block 199922) failed [ 43.387798][ T3721] FAT-fs (loop0): Directory bread(block 199923) failed [ 43.430576][ T3726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.68'. [ 43.613699][ T3733] Zero length message leads to an empty skb [ 45.451422][ T3675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.630819][ T3748] 9p: Bad value for 'wfdno' [ 45.654831][ T3755] netlink: 52 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.663826][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.724684][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 45.724754][ T28] audit: type=1400 audit(1771061551.671:211): avc: denied { map } for pid=3756 comm="syz.0.79" path="socket:[6241]" dev="sockfs" ino=6241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.770486][ T3757] set_capacity_and_notify: 5 callbacks suppressed [ 45.770506][ T3757] loop0: detected capacity change from 0 to 512 [ 45.814204][ T3757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.831926][ T28] audit: type=1400 audit(1771061551.708:212): avc: denied { read accept } for pid=3756 comm="syz.0.79" path="socket:[6241]" dev="sockfs" ino=6241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.930431][ T3757] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.098620][ T3768] loop4: detected capacity change from 0 to 128 [ 46.140272][ T28] audit: type=1400 audit(1771061552.054:213): avc: denied { mount } for pid=3762 comm="syz.1.80" name="/" dev="ramfs" ino=6263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.631454][ T3777] loop3: detected capacity change from 0 to 1024 [ 46.650656][ T3777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.214450][ T3782] loop1: detected capacity change from 0 to 2048 [ 47.337447][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.363245][ T3746] loop1: p1 < > p4 [ 47.374337][ T3746] loop1: p4 size 722688 extends beyond EOD, truncated [ 47.475579][ T28] audit: type=1400 audit(1771061553.055:214): avc: denied { connect } for pid=3776 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.495462][ T28] audit: type=1400 audit(1771061553.092:215): avc: denied { setopt } for pid=3776 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.498489][ T3782] loop1: p1 < > p4 [ 47.549185][ T3791] loop3: detected capacity change from 0 to 128 [ 47.604271][ T3782] loop1: p4 size 722688 extends beyond EOD, truncated [ 47.646419][ T3790] syz.3.85: attempt to access beyond end of device [ 47.646419][ T3790] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 47.706300][ T3000] loop1: p1 < > p4 [ 47.715857][ T3000] loop1: p4 size 722688 extends beyond EOD, truncated [ 47.877389][ T3811] loop3: detected capacity change from 0 to 128 [ 48.184038][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.398594][ T28] audit: type=1400 audit(1771061554.168:216): avc: denied { connect } for pid=3823 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.512217][ T3837] bond1: entered promiscuous mode [ 48.521863][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.541030][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.549698][ T3837] bond1: entered allmulticast mode [ 48.563330][ T28] audit: type=1400 audit(1771061554.327:217): avc: denied { mounton } for pid=3821 comm="syz.2.95" path="/proc/55/task" dev="proc" ino=6391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 48.580449][ T3837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.602159][ T3842] FAULT_INJECTION: forcing a failure. [ 48.602159][ T3842] name failslab, interval 1, probability 0, space 0, times 1 [ 48.618273][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(full) [ 48.618364][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.618384][ T3842] Call Trace: [ 48.618392][ T3842] [ 48.618402][ T3842] __dump_stack+0x1d/0x30 [ 48.618502][ T3842] dump_stack_lvl+0x95/0xd0 [ 48.618558][ T3842] dump_stack+0x15/0x1b [ 48.618585][ T3842] should_fail_ex+0x263/0x280 [ 48.618673][ T3842] ? __rdma_create_id+0x48/0x3d0 [ 48.618702][ T3842] should_failslab+0x8c/0xb0 [ 48.618742][ T3842] __kmalloc_cache_noprof+0x5f/0x410 [ 48.618816][ T3842] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 48.618839][ T3842] __rdma_create_id+0x48/0x3d0 [ 48.618894][ T3842] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 48.618923][ T3842] __rdma_create_kernel_id+0x3c/0x80 [ 48.618953][ T3842] rds_ib_laddr_check+0x8d/0x300 [ 48.618985][ T3842] rds_trans_get_preferred+0x106/0x2a0 [ 48.619084][ T3842] rds_bind+0x4d9/0xf20 [ 48.619106][ T3842] __sys_bind+0x1d0/0x290 [ 48.619130][ T3842] __x64_sys_bind+0x3f/0x50 [ 48.619203][ T3842] x64_sys_call+0x2b30/0x3020 [ 48.619295][ T3842] do_syscall_64+0x12c/0x370 [ 48.619348][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.619402][ T3842] RIP: 0033:0x7f3f767bbf79 [ 48.619422][ T3842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.619440][ T3842] RSP: 002b:00007f3f7520f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 48.619459][ T3842] RAX: ffffffffffffffda RBX: 00007f3f76a35fa0 RCX: 00007f3f767bbf79 [ 48.619532][ T3842] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.619548][ T3842] RBP: 00007f3f7520f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.619566][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.619668][ T3842] R13: 00007f3f76a36038 R14: 00007f3f76a35fa0 R15: 00007ffc727ce9d8 [ 48.619692][ T3842] [ 48.907039][ T3792] Set syz1 is full, maxelem 65536 reached [ 49.302112][ T3873] loop1: detected capacity change from 0 to 128 [ 50.308405][ T3880] loop4: detected capacity change from 0 to 512 [ 50.343356][ T28] audit: type=1400 audit(1771061555.992:218): avc: denied { create } for pid=3879 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.376283][ T28] audit: type=1400 audit(1771061555.992:219): avc: denied { bind } for pid=3879 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.406475][ T28] audit: type=1400 audit(1771061555.992:220): avc: denied { listen } for pid=3879 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.492473][ T3878] loop3: detected capacity change from 0 to 512 [ 50.542516][ T3888] /dev/sg0: Can't lookup blockdev [ 50.563268][ T3891] /dev/sg0: Can't lookup blockdev [ 50.608158][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.643414][ T3878] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.664325][ T3891] loop1: detected capacity change from 0 to 512 [ 50.788165][ T3891] FAT-fs (loop1): Directory bread(block 199916) failed [ 50.813824][ T3891] FAT-fs (loop1): Directory bread(block 199917) failed [ 50.827313][ T3891] FAT-fs (loop1): Directory bread(block 199918) failed [ 50.836638][ T3891] FAT-fs (loop1): Directory bread(block 199919) failed [ 50.845445][ T3891] FAT-fs (loop1): Directory bread(block 199920) failed [ 50.853987][ T3891] FAT-fs (loop1): Directory bread(block 199921) failed [ 50.862804][ T3891] FAT-fs (loop1): Directory bread(block 199922) failed [ 50.889272][ T3891] FAT-fs (loop1): Directory bread(block 199923) failed [ 50.933089][ T3904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.123'. [ 50.961643][ T3904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.123'. [ 51.034016][ T3907] /dev/sg0: Can't lookup blockdev [ 51.170213][ T3907] FAT-fs (loop0): Directory bread(block 199916) failed [ 51.178850][ T3907] FAT-fs (loop0): Directory bread(block 199917) failed [ 51.186613][ T3907] FAT-fs (loop0): Directory bread(block 199918) failed [ 51.218399][ T3907] FAT-fs (loop0): Directory bread(block 199919) failed [ 51.233042][ T3907] FAT-fs (loop0): Directory bread(block 199920) failed [ 51.243988][ T3891] FAT-fs (loop1): FAT read failed (blocknr 128) [ 51.251471][ T3907] FAT-fs (loop0): Directory bread(block 199921) failed [ 51.260810][ T3907] FAT-fs (loop0): Directory bread(block 199922) failed [ 51.270800][ T3907] FAT-fs (loop0): Directory bread(block 199923) failed [ 51.387213][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 51.387232][ T28] audit: type=1400 audit(1771061556.974:226): avc: denied { write } for pid=3911 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.556041][ T3907] FAT-fs (loop0): FAT read failed (blocknr 128) [ 51.563374][ T28] audit: type=1400 audit(1771061557.087:227): avc: denied { create } for pid=3916 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.606801][ T28] audit: type=1400 audit(1771061557.087:228): avc: denied { listen } for pid=3916 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.626327][ T28] audit: type=1400 audit(1771061557.087:229): avc: denied { ioctl } for pid=3916 comm="syz.2.128" path="socket:[6534]" dev="sockfs" ino=6534 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.650854][ T28] audit: type=1400 audit(1771061557.087:230): avc: denied { map } for pid=3916 comm="syz.2.128" path="socket:[6534]" dev="sockfs" ino=6534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.692882][ T28] audit: type=1400 audit(1771061557.087:231): avc: denied { read accept } for pid=3916 comm="syz.2.128" path="socket:[6534]" dev="sockfs" ino=6534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.758638][ T3923] /dev/sg0: Can't lookup blockdev [ 52.011164][ T3939] set_capacity_and_notify: 1 callbacks suppressed [ 52.011183][ T3939] loop1: detected capacity change from 0 to 128 [ 52.024859][ T3917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 52.118983][ T3941] loop0: detected capacity change from 0 to 512 [ 52.139047][ T3941] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=¶lt§{uYì(Îœ:ìvî_?±ÂBAПœ%ï3À÷ÐÖŽRww/ê锺J‚ë$ãbë„ŸÅJe<Ñ,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 52.192398][ T28] audit: type=1400 audit(1771061557.723:232): avc: denied { append } for pid=3943 comm="syz.2.139" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.292463][ T3946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 52.350929][ T3948] loop2: detected capacity change from 0 to 512 [ 52.360084][ T3925] loop4: detected capacity change from 0 to 512 [ 52.439677][ T3925] FAT-fs (loop4): Directory bread(block 199916) failed [ 52.461608][ T3953] /dev/sg0: Can't lookup blockdev [ 52.470903][ T3925] FAT-fs (loop4): Directory bread(block 199917) failed [ 52.479850][ T3925] FAT-fs (loop4): Directory bread(block 199918) failed [ 52.488142][ T3925] FAT-fs (loop4): Directory bread(block 199919) failed [ 52.495684][ T3925] FAT-fs (loop4): Directory bread(block 199920) failed [ 52.502992][ T3925] FAT-fs (loop4): Directory bread(block 199921) failed [ 52.510929][ T3925] FAT-fs (loop4): Directory bread(block 199922) failed [ 52.520139][ T3925] FAT-fs (loop4): Directory bread(block 199923) failed [ 53.227372][ T3969] loop4: detected capacity change from 0 to 128 [ 54.600839][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.757401][ T3986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3986 comm=syz.2.155 [ 54.776999][ T3990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 54.932823][ T4000] Set syz1 is full, maxelem 65536 reached [ 54.986350][ T4007] FAULT_INJECTION: forcing a failure. [ 54.986350][ T4007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.999621][ T4007] CPU: 0 UID: 0 PID: 4007 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(full) [ 54.999651][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 54.999743][ T4007] Call Trace: [ 54.999750][ T4007] [ 54.999757][ T4007] __dump_stack+0x1d/0x30 [ 54.999829][ T4007] dump_stack_lvl+0x95/0xd0 [ 54.999913][ T4007] dump_stack+0x15/0x1b [ 54.999960][ T4007] should_fail_ex+0x263/0x280 [ 54.999984][ T4007] should_fail+0xb/0x20 [ 55.000036][ T4007] should_fail_usercopy+0x1a/0x20 [ 55.000129][ T4007] _copy_from_user+0x1c/0xb0 [ 55.000228][ T4007] io_register_resize_rings+0xab/0xab0 [ 55.000289][ T4007] ? _parse_integer+0x27/0x40 [ 55.000307][ T4007] ? kstrtoull+0x111/0x140 [ 55.000328][ T4007] ? __rcu_read_unlock+0x4e/0x70 [ 55.000355][ T4007] __se_sys_io_uring_register+0xd0f/0x12d0 [ 55.000503][ T4007] ? mutex_unlock+0x4e/0x90 [ 55.000558][ T4007] ? fput+0x8f/0xc0 [ 55.000583][ T4007] ? ksys_write+0x194/0x1a0 [ 55.000615][ T4007] __x64_sys_io_uring_register+0x55/0x70 [ 55.000644][ T4007] x64_sys_call+0x2be0/0x3020 [ 55.000708][ T4007] do_syscall_64+0x12c/0x370 [ 55.000749][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.000776][ T4007] RIP: 0033:0x7fb3fa4ebf79 [ 55.000847][ T4007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.000869][ T4007] RSP: 002b:00007fb3f8f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 55.000893][ T4007] RAX: ffffffffffffffda RBX: 00007fb3fa765fa0 RCX: 00007fb3fa4ebf79 [ 55.000909][ T4007] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000003 [ 55.000921][ T4007] RBP: 00007fb3f8f47090 R08: 0000000000000000 R09: 0000000000000000 [ 55.000971][ T4007] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 55.000986][ T4007] R13: 00007fb3fa766038 R14: 00007fb3fa765fa0 R15: 00007ffea1137e18 [ 55.001015][ T4007] [ 55.349940][ T28] audit: type=1400 audit(1771061560.678:233): avc: denied { write } for pid=4011 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.370226][ T4012] netlink: 277 bytes leftover after parsing attributes in process `syz.0.165'. [ 55.422087][ T28] audit: type=1400 audit(1771061560.697:234): avc: denied { nlmsg_write } for pid=4011 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.155126][ T4023] loop1: detected capacity change from 0 to 256 [ 56.267751][ T4022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4022 comm=syz.2.168 [ 56.363715][ T4023] FAT-fs (loop1): Directory bread(block 64) failed [ 56.370404][ T4023] FAT-fs (loop1): Directory bread(block 65) failed [ 56.377135][ T4023] FAT-fs (loop1): Directory bread(block 66) failed [ 56.383976][ T4023] FAT-fs (loop1): Directory bread(block 67) failed [ 56.390709][ T4023] FAT-fs (loop1): Directory bread(block 68) failed [ 56.397536][ T4023] FAT-fs (loop1): Directory bread(block 69) failed [ 56.404226][ T4023] FAT-fs (loop1): Directory bread(block 70) failed [ 56.410803][ T4023] FAT-fs (loop1): Directory bread(block 71) failed [ 56.417561][ T4023] FAT-fs (loop1): Directory bread(block 72) failed [ 56.424161][ T4023] FAT-fs (loop1): Directory bread(block 73) failed [ 56.675038][ T28] audit: type=1400 audit(1771061561.913:235): avc: denied { create } for pid=4029 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.791784][ T4036] netlink: 52 bytes leftover after parsing attributes in process `syz.4.174'. [ 56.801140][ T4037] FAULT_INJECTION: forcing a failure. [ 56.801140][ T4037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.834493][ T4036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 56.843492][ T4037] CPU: 0 UID: 0 PID: 4037 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 56.843533][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 56.843545][ T4037] Call Trace: [ 56.843553][ T4037] [ 56.843560][ T4037] __dump_stack+0x1d/0x30 [ 56.843585][ T4037] dump_stack_lvl+0x95/0xd0 [ 56.843783][ T4037] dump_stack+0x15/0x1b [ 56.843810][ T4037] should_fail_ex+0x263/0x280 [ 56.843907][ T4037] should_fail+0xb/0x20 [ 56.843930][ T4037] should_fail_usercopy+0x1a/0x20 [ 56.843963][ T4037] _copy_from_user+0x1c/0xb0 [ 56.844080][ T4037] xsk_setsockopt+0x308/0x640 [ 56.844195][ T4037] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.844265][ T4037] __sys_setsockopt+0x184/0x200 [ 56.844358][ T4037] __x64_sys_setsockopt+0x64/0x80 [ 56.844390][ T4037] x64_sys_call+0x2327/0x3020 [ 56.844423][ T4037] do_syscall_64+0x12c/0x370 [ 56.844564][ T4037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.844684][ T4037] RIP: 0033:0x7f446ef9bf79 [ 56.844699][ T4037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.844721][ T4037] RSP: 002b:00007f446d9ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.844742][ T4037] RAX: ffffffffffffffda RBX: 00007f446f215fa0 RCX: 00007f446ef9bf79 [ 56.844755][ T4037] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 56.844818][ T4037] RBP: 00007f446d9ef090 R08: 0000000000000020 R09: 0000000000000000 [ 56.844918][ T4037] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 56.844934][ T4037] R13: 00007f446f216038 R14: 00007f446f215fa0 R15: 00007ffe3afdd178 [ 56.844958][ T4037] [ 57.078847][ T4045] vlan0: entered promiscuous mode [ 57.162984][ T4052] /dev/sg0: Can't lookup blockdev [ 57.239665][ T4056] loop2: detected capacity change from 0 to 128 [ 57.780817][ T4052] loop4: detected capacity change from 0 to 512 [ 57.827664][ T4052] FAT-fs (loop4): Directory bread(block 199916) failed [ 57.838050][ T4052] FAT-fs (loop4): Directory bread(block 199917) failed [ 57.848570][ T4052] FAT-fs (loop4): Directory bread(block 199918) failed [ 57.949502][ T4067] tipc: Can't bind to reserved service type 2 [ 58.018048][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 58.018075][ T28] audit: type=1400 audit(1771061563.110:237): avc: denied { connect } for pid=4065 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.068181][ T4052] FAT-fs (loop4): Directory bread(block 199919) failed [ 58.141378][ T4052] FAT-fs (loop4): Directory bread(block 199920) failed [ 58.166340][ T28] audit: type=1400 audit(1771061563.120:238): avc: denied { bind } for pid=4065 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.185952][ T28] audit: type=1400 audit(1771061563.120:239): avc: denied { name_bind } for pid=4065 comm="syz.3.185" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.194684][ T4052] FAT-fs (loop4): Directory bread(block 199921) failed [ 58.208459][ T28] audit: type=1400 audit(1771061563.120:240): avc: denied { node_bind } for pid=4065 comm="syz.3.185" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 58.242586][ T28] audit: type=1400 audit(1771061563.120:241): avc: denied { ioctl } for pid=4065 comm="syz.3.185" path="socket:[6844]" dev="sockfs" ino=6844 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.267428][ T28] audit: type=1400 audit(1771061563.307:242): avc: denied { write } for pid=4068 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.299550][ T4052] FAT-fs (loop4): Directory bread(block 199922) failed [ 58.307884][ T4052] FAT-fs (loop4): Directory bread(block 199923) failed [ 58.406401][ T4076] FAT-fs (loop4): Directory bread(block 199916) failed [ 58.460889][ T4076] FAT-fs (loop4): Directory bread(block 199917) failed [ 58.523170][ T4083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.532173][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.747188][ T28] audit: type=1400 audit(1771061563.849:243): avc: denied { watch watch_reads } for pid=4098 comm="syz.4.196" path="/45/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.890621][ T4103] loop0: detected capacity change from 0 to 128 [ 58.909657][ T4104] loop3: detected capacity change from 0 to 1024 [ 59.304372][ T4104] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 59.373777][ T28] audit: type=1400 audit(1771061564.439:244): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.430445][ T28] audit: type=1400 audit(1771061564.467:245): avc: denied { read write } for pid=4098 comm="syz.4.196" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.460424][ T28] audit: type=1400 audit(1771061564.467:246): avc: denied { open } for pid=4098 comm="syz.4.196" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.314049][ T4120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 60.375833][ T4122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.204'. [ 60.388179][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'. [ 60.398577][ T4120] syz_tun: entered allmulticast mode [ 60.452723][ T4127] FAULT_INJECTION: forcing a failure. [ 60.452723][ T4127] name failslab, interval 1, probability 0, space 0, times 0 [ 60.470548][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(full) [ 60.470578][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 60.470619][ T4127] Call Trace: [ 60.470627][ T4127] [ 60.470635][ T4127] __dump_stack+0x1d/0x30 [ 60.470663][ T4127] dump_stack_lvl+0x95/0xd0 [ 60.470689][ T4127] dump_stack+0x15/0x1b [ 60.470711][ T4127] should_fail_ex+0x263/0x280 [ 60.470797][ T4127] should_failslab+0x8c/0xb0 [ 60.470906][ T4127] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 60.470977][ T4127] ? __alloc_skb+0x2d6/0x690 [ 60.471004][ T4127] __alloc_skb+0x2d6/0x690 [ 60.471047][ T4127] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 60.471087][ T4127] ? __alloc_skb+0x200/0x690 [ 60.471112][ T4127] audit_log_start+0x3aa/0x730 [ 60.471161][ T4127] ? kstrtouint_from_user+0xa8/0xf0 [ 60.471190][ T4127] audit_seccomp+0x47/0x100 [ 60.471280][ T4127] ? __seccomp_filter+0x8db/0x1350 [ 60.471311][ T4127] __seccomp_filter+0x8ec/0x1350 [ 60.471340][ T4127] ? __rcu_read_unlock+0x4e/0x70 [ 60.471384][ T4127] ? __fget_files+0x184/0x1c0 [ 60.471408][ T4127] ? mutex_lock+0x57/0x90 [ 60.471437][ T4127] ? xfd_validate_state+0x45/0xf0 [ 60.471474][ T4127] __secure_computing+0x81/0x150 [ 60.471504][ T4127] do_syscall_64+0xd3/0x370 [ 60.471668][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.471734][ T4127] RIP: 0033:0x7f5965b2bf79 [ 60.471754][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.471776][ T4127] RSP: 002b:00007f5964587028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 60.471800][ T4127] RAX: ffffffffffffffda RBX: 00007f5965da5fa0 RCX: 00007f5965b2bf79 [ 60.471818][ T4127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.471833][ T4127] RBP: 00007f5964587090 R08: 0000000000000000 R09: 0000000000000000 [ 60.471848][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.471875][ T4127] R13: 00007f5965da6038 R14: 00007f5965da5fa0 R15: 00007ffca24929d8 [ 60.471897][ T4127] [ 60.537287][ T4120] syz_tun: left allmulticast mode [ 60.747723][ T4143] /dev/sg0: Can't lookup blockdev [ 60.800263][ T4147] loop4: detected capacity change from 0 to 2048 [ 60.817047][ T4148] loop1: detected capacity change from 0 to 1024 [ 60.846737][ T4148] EXT4-fs: Ignoring removed orlov option [ 60.866001][ T4147] loop4: p1 < > p4 [ 60.875676][ T4147] loop4: p4 size 722688 extends beyond EOD, truncated [ 60.875778][ T4148] EXT4-fs: inline encryption not supported [ 60.897422][ T4148] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 60.925881][ T4148] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 60.965919][ T4143] loop0: detected capacity change from 0 to 512 [ 60.985321][ T4148] EXT4-fs (loop1): invalid journal inode [ 60.991113][ T4148] EXT4-fs (loop1): can't get journal size [ 61.013997][ T4143] FAT-fs (loop0): Directory bread(block 199916) failed [ 61.027257][ T4153] loop2: detected capacity change from 0 to 8192 [ 61.034975][ T3000] loop4: p1 < > p4 [ 61.039520][ T3000] loop4: p4 size 722688 extends beyond EOD, truncated [ 61.046818][ T4143] FAT-fs (loop0): Directory bread(block 199917) failed [ 61.061045][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.068459][ T4143] FAT-fs (loop0): Directory bread(block 199918) failed [ 61.091927][ T4143] FAT-fs (loop0): Directory bread(block 199919) failed [ 61.101373][ T4143] FAT-fs (loop0): Directory bread(block 199920) failed [ 61.108847][ T4143] FAT-fs (loop0): Directory bread(block 199921) failed [ 61.221158][ T3317] EXT4-fs error (device loop1): __ext4_iget:5378: inode #15: block 1803188595: comm syz-executor: invalid block [ 61.307979][ T4143] FAT-fs (loop0): Directory bread(block 199922) failed [ 61.381739][ T3317] EXT4-fs error (device loop1): __ext4_iget:5378: inode #15: block 1803188595: comm syz-executor: invalid block [ 61.399041][ T4143] FAT-fs (loop0): Directory bread(block 199923) failed [ 61.484506][ T4162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 61.577230][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 61.646053][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.668669][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.685420][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 61.723918][ T4162] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 61.763939][ T4162] team0: Device xfrm0 is of different type [ 61.806550][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.825505][ T4143] FAT-fs (loop0): FAT read failed (blocknr 128) [ 61.881150][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.999740][ T4194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.227'. [ 62.009390][ T4194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 62.537234][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.757867][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 62.791646][ T50] bridge_slave_1: left allmulticast mode [ 62.814558][ T50] bridge_slave_1: left promiscuous mode [ 62.820296][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.856715][ T50] bridge_slave_0: left allmulticast mode [ 62.886058][ T50] bridge_slave_0: left promiscuous mode [ 62.891809][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.897655][ T4216] loop2: detected capacity change from 0 to 512 [ 63.052874][ T4241] loop0: detected capacity change from 0 to 128 [ 63.080363][ T4216] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.232: iget: bad i_size value: 360287970189639690 [ 63.093485][ T4216] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.099123][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 63.114765][ C1] EXT4-fs (loop2): initial error at time 1771061567: ext4_orphan_get:1391: inode 15 [ 63.124324][ C1] EXT4-fs (loop2): last error at time 1771061567: ext4_orphan_get:1391: inode 15 [ 63.133647][ T4216] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.232: couldn't read orphan inode 15 (err -117) [ 63.209331][ T4216] loop2: lost filesystem error report for type 5 error -117 [ 63.209906][ T4216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.249984][ T4216] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.296605][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.324192][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.334064][ T50] bond0 (unregistering): Released all slaves [ 63.343264][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.384387][ T50] hsr_slave_0: left promiscuous mode [ 63.397713][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 63.397730][ T28] audit: type=1400 audit(1771061568.199:278): avc: denied { mount } for pid=4251 comm="syz.2.240" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.399747][ T4252] netlink: 'syz.2.240': attribute type 13 has an invalid length. [ 63.434077][ T50] hsr_slave_1: left promiscuous mode [ 63.452492][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.462885][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.480136][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.504315][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.525195][ T50] veth1_macvtap: left promiscuous mode [ 63.531587][ T50] veth0_macvtap: left promiscuous mode [ 63.552468][ T50] veth1_vlan: left promiscuous mode [ 63.558238][ T50] veth0_vlan: left promiscuous mode [ 63.639190][ T28] audit: type=1400 audit(1771061568.433:279): avc: denied { create } for pid=4253 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.673510][ T28] audit: type=1400 audit(1771061568.433:280): avc: denied { setopt } for pid=4253 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.701352][ T4261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=4261 comm=syz.3.241 [ 63.719121][ T28] audit: type=1400 audit(1771061568.433:281): avc: denied { create } for pid=4253 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.740350][ T50] team0 (unregistering): Port device team_slave_1 removed [ 63.752678][ T50] team0 (unregistering): Port device team_slave_0 removed [ 63.905466][ T4267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.242'. [ 63.919356][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.926627][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.937640][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 63.992633][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.006626][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.101386][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.110561][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.154519][ T28] audit: type=1400 audit(1771061568.910:282): avc: denied { listen } for pid=4271 comm="syz.0.244" laddr=::1 lport=50918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.157719][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.188621][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.196581][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.204046][ T4172] bridge_slave_0: entered allmulticast mode [ 64.210859][ T4172] bridge_slave_0: entered promiscuous mode [ 64.220320][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.230176][ T28] audit: type=1400 audit(1771061568.985:283): avc: denied { create } for pid=4275 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.249746][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.257798][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.265243][ T4172] bridge_slave_1: entered allmulticast mode [ 64.272042][ T4172] bridge_slave_1: entered promiscuous mode [ 64.324276][ T28] audit: type=1400 audit(1771061569.069:284): avc: denied { connect } for pid=4286 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.347654][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.379058][ T28] audit: type=1400 audit(1771061569.069:285): avc: denied { write } for pid=4286 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.412846][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.474482][ T4293] loop4: detected capacity change from 0 to 1764 [ 64.483773][ T4172] team0: Port device team_slave_0 added [ 64.489476][ T28] audit: type=1400 audit(1771061569.106:286): avc: denied { create } for pid=4286 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.493388][ T4310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4310 comm=syz.3.250 [ 64.524550][ T28] audit: type=1400 audit(1771061569.106:287): avc: denied { setattr } for pid=4286 comm="syz.3.246" name="SCTPv6" dev="sockfs" ino=7332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.539959][ T4172] team0: Port device team_slave_1 added [ 64.560411][ T4309] vlan0: entered promiscuous mode [ 64.624417][ T4293] syz_tun: entered allmulticast mode [ 64.652541][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.659748][ T4319] loop2: detected capacity change from 0 to 764 [ 64.667518][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.709932][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.722715][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.730040][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.757594][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.791197][ T4326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.258'. [ 64.800928][ T4326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 64.826257][ T4172] hsr_slave_0: entered promiscuous mode [ 64.842933][ T4172] hsr_slave_1: entered promiscuous mode [ 64.849670][ T4172] debugfs: 'hsr0' already exists in 'hsr' [ 64.865650][ T4172] Cannot create hsr debugfs directory [ 64.970607][ T4346] netlink: 'syz.2.262': attribute type 12 has an invalid length. [ 64.978574][ T4346] netlink: 'syz.2.262': attribute type 29 has an invalid length. [ 64.989425][ T4346] netlink: 148 bytes leftover after parsing attributes in process `syz.2.262'. [ 65.003235][ T4346] netlink: 59 bytes leftover after parsing attributes in process `syz.2.262'. [ 65.038088][ T4349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.097412][ T4361] vlan0: entered promiscuous mode [ 65.154610][ T4366] loop4: detected capacity change from 0 to 1024 [ 65.197157][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.228817][ T4172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.236752][ T4366] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.248984][ T4172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.260253][ T4172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.290580][ T4379] netlink: 52 bytes leftover after parsing attributes in process `syz.0.272'. [ 65.307156][ T4172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.315133][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 65.375727][ T4366] syzkaller0: entered promiscuous mode [ 65.414410][ T4366] syzkaller0: entered allmulticast mode [ 65.462754][ T4395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.275'. [ 65.471765][ T4395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 65.562411][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.583320][ T4412] loop3: detected capacity change from 0 to 2048 [ 65.590958][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.602214][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.609324][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.625196][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.632435][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.640410][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.653797][ T4412] loop3: p1 < > p4 [ 65.666842][ T4412] loop3: p4 size 722688 extends beyond EOD, truncated [ 65.689749][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.720977][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.865582][ T4428] loop4: detected capacity change from 0 to 512 [ 65.945605][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.986994][ T4428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.042837][ T4443] loop2: detected capacity change from 0 to 128 [ 66.092971][ T4428] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.157283][ T4448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4448 comm=syz.0.285 [ 66.269312][ T4172] veth0_vlan: entered promiscuous mode [ 66.300126][ T4172] veth1_vlan: entered promiscuous mode [ 66.314271][ T4172] veth0_macvtap: entered promiscuous mode [ 66.335059][ T4172] veth1_macvtap: entered promiscuous mode [ 66.364798][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.387287][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.416034][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.445641][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.464882][ T4466] loop0: detected capacity change from 0 to 1764 [ 66.471415][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.528811][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.550525][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146356][ T4493] vlan2: entered allmulticast mode [ 68.151586][ T4493] vlan1: entered allmulticast mode [ 68.161385][ T4493] veth0_vlan: entered allmulticast mode [ 68.312021][ T4502] loop4: detected capacity change from 0 to 2048 [ 68.330237][ T4506] loop5: detected capacity change from 0 to 2048 [ 68.380951][ T3746] loop5: p1 < > p4 [ 68.385604][ T3746] loop5: p4 size 722688 extends beyond EOD, truncated [ 68.396725][ T3294] loop4: p1 < > p4 [ 68.405515][ T4506] loop5: p1 < > p4 [ 68.410352][ T4506] loop5: p4 size 722688 extends beyond EOD, truncated [ 68.420191][ T3294] loop4: p4 size 722688 extends beyond EOD, truncated [ 68.456390][ T4502] loop4: p1 < > p4 [ 68.468831][ T4502] loop4: p4 size 722688 extends beyond EOD, truncated [ 69.016985][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 69.017002][ T28] audit: type=1400 audit(1771061573.456:310): avc: denied { name_bind } for pid=4507 comm="syz.0.299" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.688076][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 69.698334][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 69.717613][ T4531] loop4: detected capacity change from 0 to 128 [ 69.750315][ T4444] Set syz1 is full, maxelem 65536 reached [ 69.760907][ T4531] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.790914][ T4531] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.854588][ T28] audit: type=1400 audit(1771061574.242:311): avc: denied { create } for pid=4530 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.875550][ T4531] nfs4: Unknown parameter ''\^+{!$' [ 69.901497][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.912121][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 69.919955][ T28] audit: type=1400 audit(1771061574.242:312): avc: denied { connect } for pid=4530 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.925217][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.057786][ T4540] loop0: detected capacity change from 0 to 2048 [ 70.076870][ T28] audit: type=1400 audit(1771061574.270:313): avc: denied { listen } for pid=4530 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.096264][ T28] audit: type=1400 audit(1771061574.270:314): avc: denied { mounton } for pid=4530 comm="syz.4.303" path="/62/mnt" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.293179][ T3294] loop0: p1 < > p4 [ 70.316333][ T3294] loop0: p4 size 722688 extends beyond EOD, truncated [ 70.471068][ T28] audit: type=1326 audit(1771061574.822:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.4.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f767bbf79 code=0x0 [ 70.622506][ T28] audit: type=1326 audit(1771061574.859:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.4.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f767bbf79 code=0x0 [ 70.643496][ T4540] loop0: p1 < > p4 [ 70.658055][ T4540] loop0: p4 size 722688 extends beyond EOD, truncated [ 70.874729][ T4510] Set syz1 is full, maxelem 65536 reached [ 70.924404][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 70.936187][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 71.000627][ T4558] vlan0: entered promiscuous mode [ 71.141675][ T28] audit: type=1400 audit(1771061575.439:317): avc: denied { map } for pid=4561 comm="syz.5.312" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.192837][ T28] audit: type=1400 audit(1771061575.439:318): avc: denied { execute } for pid=4561 comm="syz.5.312" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.220947][ T28] audit: type=1400 audit(1771061575.439:319): avc: denied { ioctl } for pid=4561 comm="syz.5.312" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.591487][ T4581] loop3: detected capacity change from 0 to 128 [ 72.277163][ T4551] Set syz1 is full, maxelem 65536 reached [ 72.457748][ T4585] /dev/sg0: Can't lookup blockdev [ 72.533129][ T4588] loop5: detected capacity change from 0 to 1024 [ 72.577305][ T4585] loop0: detected capacity change from 0 to 512 [ 72.669949][ T4585] FAT-fs (loop0): Directory bread(block 199916) failed [ 72.694932][ T4602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4602 comm=syz.3.321 [ 72.707766][ T4585] FAT-fs (loop0): Directory bread(block 199917) failed [ 72.719835][ T4601] loop5: detected capacity change from 0 to 2048 [ 72.737678][ T4585] FAT-fs (loop0): Directory bread(block 199918) failed [ 72.763674][ T4585] FAT-fs (loop0): Directory bread(block 199919) failed [ 72.785337][ T4585] FAT-fs (loop0): Directory bread(block 199920) failed [ 72.793560][ T4585] FAT-fs (loop0): Directory bread(block 199921) failed [ 72.802002][ T3746] loop5: p1 < > p4 [ 72.813654][ T4585] FAT-fs (loop0): Directory bread(block 199922) failed [ 72.824155][ T3746] loop5: p4 size 722688 extends beyond EOD, truncated [ 72.832693][ T4585] FAT-fs (loop0): Directory bread(block 199923) failed [ 72.859320][ T4604] loop3: detected capacity change from 0 to 2048 [ 72.861258][ T4606] __nla_validate_parse: 7 callbacks suppressed [ 72.861295][ T4606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 72.881612][ T4601] loop5: p1 < > p4 [ 72.888555][ T4601] loop5: p4 size 722688 extends beyond EOD, truncated [ 72.896147][ T4607] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 72.914007][ T4585] FAT-fs (loop0): Directory bread(block 199916) failed [ 72.932732][ T4585] FAT-fs (loop0): Directory bread(block 199917) failed [ 72.952912][ T4604] loop3: p1 < > p4 [ 72.959075][ T4604] loop3: p4 size 722688 extends beyond EOD, truncated [ 73.003189][ T3000] loop3: p1 < > p4 [ 73.014569][ T3000] loop3: p4 size 722688 extends beyond EOD, truncated [ 73.050246][ T4610] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 73.061856][ T4610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.092245][ T4610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 73.123981][ T4610] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 73.852016][ T4637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4637 comm=syz.5.334 [ 73.940449][ T4643] loop5: detected capacity change from 0 to 128 [ 73.963009][ T4643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4643 comm=syz.5.336 [ 74.972964][ T4659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.341'. [ 75.276468][ T4659] loop5: detected capacity change from 0 to 8192 [ 75.305611][ T4661] loop0: detected capacity change from 0 to 1024 [ 75.506388][ T4668] /dev/sg0: Can't lookup blockdev [ 75.551449][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 75.551466][ T28] audit: type=1326 audit(1771061579.574:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.555351][ T4668] loop3: detected capacity change from 0 to 512 [ 75.575122][ T28] audit: type=1326 audit(1771061579.574:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.628672][ T4668] FAT-fs (loop3): Directory bread(block 199916) failed [ 75.635662][ T4668] FAT-fs (loop3): Directory bread(block 199917) failed [ 75.671319][ T28] audit: type=1326 audit(1771061579.574:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.694708][ T4668] FAT-fs (loop3): Directory bread(block 199918) failed [ 75.701659][ T4668] FAT-fs (loop3): Directory bread(block 199919) failed [ 75.702758][ T4678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.720233][ T4680] netlink: 68 bytes leftover after parsing attributes in process `syz.5.349'. [ 75.729465][ T4678] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 75.730317][ T28] audit: type=1326 audit(1771061579.574:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.737186][ T4680] netlink: 36 bytes leftover after parsing attributes in process `syz.5.349'. [ 75.767600][ T4668] FAT-fs (loop3): Directory bread(block 199920) failed [ 75.774655][ T4678] audit: backlog limit exceeded [ 75.787976][ T4678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.348'. [ 75.788998][ T4668] FAT-fs (loop3): Directory bread(block 199921) failed [ 75.797563][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 75.821056][ T28] audit: type=1326 audit(1771061579.583:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.844718][ T4668] FAT-fs (loop3): Directory bread(block 199922) failed [ 75.863748][ T4668] FAT-fs (loop3): Directory bread(block 199923) failed [ 75.876985][ T4683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 75.885149][ T28] audit: type=1326 audit(1771061579.583:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fa4ebf79 code=0x7ffc0000 [ 75.955051][ T4689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.352'. [ 75.980922][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.351'. [ 75.986917][ T4668] FAT-fs (loop3): FAT read failed (blocknr 128) [ 75.990492][ T4669] FAT-fs (loop3): Directory bread(block 199916) failed [ 76.602779][ T4702] syz.3.355 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.857435][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 76.900650][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 76.977624][ T4733] loop0: detected capacity change from 0 to 512 [ 77.010701][ T4726] bridge1: entered promiscuous mode [ 77.015952][ T4726] bridge1: entered allmulticast mode [ 77.038657][ T4732] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.049172][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.059775][ T4732] SELinux: failed to load policy [ 77.093364][ T4733] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.150875][ T4720] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 2175 (only 1 groups) [ 77.220500][ T4742] /dev/sg0: Can't lookup blockdev [ 77.235966][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.252479][ T4742] loop3: detected capacity change from 0 to 512 [ 77.260135][ T4742] FAT-fs (loop3): Directory bread(block 199916) failed [ 77.270894][ T4742] FAT-fs (loop3): Directory bread(block 199917) failed [ 77.285646][ T4742] FAT-fs (loop3): Directory bread(block 199918) failed [ 77.317170][ T4742] FAT-fs (loop3): Directory bread(block 199919) failed [ 77.338774][ T4742] FAT-fs (loop3): Directory bread(block 199920) failed [ 77.357477][ T4742] FAT-fs (loop3): Directory bread(block 199921) failed [ 77.374873][ T4742] FAT-fs (loop3): Directory bread(block 199922) failed [ 77.403589][ T4742] FAT-fs (loop3): Directory bread(block 199923) failed [ 77.482301][ T4757] FAT-fs (loop3): Directory bread(block 199916) failed [ 77.502427][ T4742] FAT-fs (loop3): FAT read failed (blocknr 128) [ 77.591295][ T4764] loop0: detected capacity change from 0 to 512 [ 77.598202][ T4764] EXT4-fs: Ignoring removed orlov option [ 77.611276][ T4764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.651867][ T4764] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.666427][ T4764] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.372: bg 0: block 248: padding at end of block bitmap is not set [ 77.697364][ T4770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4770 comm=syz.3.373 [ 77.768652][ T4764] loop0: lost filesystem error report for type 5 error -117 [ 77.769200][ T4764] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.372: Failed to acquire dquot type 1 [ 77.787783][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.787809][ C0] EXT4-fs (loop0): last error at time 1771061581: ext4_validate_block_bitmap:441 [ 77.803797][ T4764] loop0: lost filesystem error report for type 5 error -117 [ 77.818751][ T4764] EXT4-fs (loop0): 1 truncate cleaned up [ 77.853541][ T4764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.904559][ T4764] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 77.930587][ T4764] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.372: Abort forced by user [ 77.949453][ T4764] EXT4-fs (loop0): Remounting filesystem read-only [ 77.956106][ T4764] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 77.980648][ T4764] ext4 filesystem being remounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.054064][ T4792] bridge1: entered promiscuous mode [ 78.067207][ T4792] bridge1: entered allmulticast mode [ 78.073888][ T4794] loop3: detected capacity change from 0 to 512 [ 78.099632][ T4794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.156066][ T4794] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.210625][ T4789] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 2175 (only 1 groups) [ 78.294477][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.389650][ T4801] __nla_validate_parse: 2 callbacks suppressed [ 78.389671][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.379'. [ 78.406174][ T4801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.976625][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.030665][ T4810] netlink: 52 bytes leftover after parsing attributes in process `syz.0.382'. [ 79.072999][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'. [ 79.094208][ T4815] /dev/sg0: Can't lookup blockdev [ 79.227468][ T4815] loop4: detected capacity change from 0 to 512 [ 79.271045][ T4815] FAT-fs (loop4): Directory bread(block 199916) failed [ 79.279769][ T4827] loop0: detected capacity change from 0 to 512 [ 79.296041][ T4815] FAT-fs (loop4): Directory bread(block 199917) failed [ 79.328003][ T4815] FAT-fs (loop4): Directory bread(block 199918) failed [ 79.359195][ T4815] FAT-fs (loop4): Directory bread(block 199919) failed [ 79.368047][ T4831] netlink: 'syz.5.386': attribute type 3 has an invalid length. [ 79.376675][ T4815] FAT-fs (loop4): Directory bread(block 199920) failed [ 79.381808][ T4827] EXT4-fs (loop0): failed to initialize system zone (-117) [ 79.424150][ T4815] FAT-fs (loop4): Directory bread(block 199921) failed [ 79.432134][ T4815] FAT-fs (loop4): Directory bread(block 199922) failed [ 79.443987][ T4827] EXT4-fs (loop0): mount failed [ 79.449205][ T4815] FAT-fs (loop4): Directory bread(block 199923) failed [ 79.582222][ T4849] FAT-fs (loop4): Directory bread(block 199916) failed [ 79.610931][ T4849] FAT-fs (loop4): Directory bread(block 199917) failed [ 79.777947][ T4857] loop3: detected capacity change from 0 to 8192 [ 79.869238][ T4859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4859 comm=syz.5.391 [ 80.036060][ T4874] loop2: detected capacity change from 0 to 1024 [ 80.086195][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.599231][ T4889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.401'. [ 80.723668][ T4898] syzkaller0: entered promiscuous mode [ 80.737014][ T4898] syzkaller0: entered allmulticast mode [ 80.783495][ T4897] loop5: detected capacity change from 0 to 8192 [ 80.895708][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.019796][ T4906] loop5: detected capacity change from 0 to 512 [ 81.201546][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 81.415663][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 81.552377][ T4915] bridge2: entered promiscuous mode [ 81.561872][ T4915] bridge2: entered allmulticast mode [ 81.592766][ T4921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4921 comm=syz.2.409 [ 81.850849][ T4938] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 81.861661][ T4924] loop0: detected capacity change from 0 to 2048 [ 81.921485][ T4936] loop4: detected capacity change from 0 to 8192 [ 81.939266][ T4924] loop0: p1 < > p4 [ 81.982891][ T4924] loop0: p4 size 722688 extends beyond EOD, truncated [ 82.019000][ T4952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4952 comm=syz.2.421 [ 82.062372][ T4955] loop3: detected capacity change from 0 to 128 [ 82.080040][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 82.117590][ T4949] x_tables: duplicate underflow at hook 1 [ 82.182387][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 82.266171][ T4972] xt_hashlimit: size too large, truncated to 1048576 [ 82.320603][ T4974] loop2: detected capacity change from 0 to 512 [ 82.327252][ T4974] msdos: Unknown parameter '7' [ 82.486312][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 82.501532][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 82.596344][ T4979] bridge1: entered promiscuous mode [ 82.612281][ T4979] bridge1: entered allmulticast mode [ 83.100437][ T4992] loop4: detected capacity change from 0 to 128 [ 83.653823][ T4994] loop2: detected capacity change from 0 to 8192 [ 83.748693][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 83.748723][ T28] audit: type=1400 audit(1771061587.244:473): avc: denied { write } for pid=5001 comm="syz.0.435" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.084864][ T28] audit: type=1400 audit(1771061587.552:474): avc: denied { ioctl } for pid=5013 comm="syz.3.439" path="socket:[9523]" dev="sockfs" ino=9523 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.188503][ T5015] loop5: detected capacity change from 0 to 2048 [ 84.289015][ T3746] loop5: p1 < > p4 [ 84.307348][ T3746] loop5: p4 size 722688 extends beyond EOD, truncated [ 84.394882][ T5015] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 84.526060][ T5029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5029 comm=syz.4.446 [ 84.601928][ T5032] loop3: detected capacity change from 0 to 2048 [ 84.653555][ T5032] loop3: p1 < > p4 [ 84.658324][ T5032] loop3: p4 size 722688 extends beyond EOD, truncated [ 84.680492][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.689178][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.708310][ T3000] loop3: p1 < > p4 [ 84.712943][ T3000] loop3: p4 size 722688 extends beyond EOD, truncated [ 84.768672][ T5036] loop4: detected capacity change from 0 to 8192 [ 84.809012][ T28] audit: type=1326 audit(1771061588.226:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.2.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f446ef9bf79 code=0x0 [ 84.875950][ T28] audit: type=1400 audit(1771061588.291:476): avc: denied { bind } for pid=5040 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.896174][ T28] audit: type=1400 audit(1771061588.291:477): avc: denied { setopt } for pid=5040 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.917712][ T28] audit: type=1400 audit(1771061588.291:478): avc: denied { read } for pid=5040 comm="syz.2.450" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.940487][ T28] audit: type=1400 audit(1771061588.291:479): avc: denied { open } for pid=5040 comm="syz.2.450" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.972033][ T28] audit: type=1400 audit(1771061588.291:480): avc: denied { ioctl } for pid=5040 comm="syz.2.450" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.988391][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 85.007288][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 85.019739][ T5049] bridge1: entered promiscuous mode [ 85.024997][ T5049] bridge1: entered allmulticast mode [ 85.061355][ T5053] /dev/sg0: Can't lookup blockdev [ 85.130317][ T5053] FAT-fs (loop5): Directory bread(block 199916) failed [ 85.139120][ T5053] FAT-fs (loop5): Directory bread(block 199917) failed [ 85.149937][ T5053] FAT-fs (loop5): Directory bread(block 199918) failed [ 85.159003][ T5053] FAT-fs (loop5): Directory bread(block 199919) failed [ 85.170863][ T5053] FAT-fs (loop5): Directory bread(block 199920) failed [ 85.181236][ T5053] FAT-fs (loop5): Directory bread(block 199921) failed [ 85.190561][ T5053] FAT-fs (loop5): Directory bread(block 199922) failed [ 85.198919][ T5053] FAT-fs (loop5): Directory bread(block 199923) failed [ 85.265489][ T5055] FAT-fs (loop5): Directory bread(block 199916) failed [ 85.285069][ T5055] FAT-fs (loop5): Directory bread(block 199917) failed [ 85.550906][ T5057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5057 comm=syz.5.455 [ 85.584598][ T5061] ext4: Bad value for 'init_itable' [ 85.686083][ T5067] ext4: Bad value for 'jqfmt' [ 85.708664][ T28] audit: type=1400 audit(1771061589.068:481): avc: denied { block_suspend } for pid=5066 comm="syz.5.460" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.840488][ T5080] EXT4-fs (loop3): failed to initialize system zone (-117) [ 85.849629][ T5080] EXT4-fs (loop3): mount failed [ 85.862447][ T5083] tipc: Started in network mode [ 85.870951][ T5083] tipc: Node identity e62235cb08c5, cluster identity 4711 [ 85.897988][ T5083] tipc: Enabled bearer , priority 0 [ 85.928844][ T5085] vlan3: entered promiscuous mode [ 85.934024][ T5085] hsr0: entered promiscuous mode [ 85.966711][ T5083] syzkaller0: entered promiscuous mode [ 85.972317][ T5083] syzkaller0: entered allmulticast mode [ 86.023774][ T5090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 86.050812][ T5090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 86.072566][ T5095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5095 comm=syz.2.469 [ 86.085755][ T5076] tipc: Resetting bearer [ 86.094447][ T5076] tipc: Disabling bearer [ 86.644471][ T5127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5127 comm=syz.2.480 [ 86.885123][ T5133] set_capacity_and_notify: 4 callbacks suppressed [ 86.885140][ T5133] loop2: detected capacity change from 0 to 512 [ 86.967023][ T5133] EXT4-fs (loop2): failed to initialize system zone (-117) [ 87.003094][ T5133] EXT4-fs (loop2): mount failed [ 87.084374][ T28] audit: type=1400 audit(1771061590.359:482): avc: denied { write } for pid=5135 comm="syz.5.482" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.572207][ T5147] loop5: detected capacity change from 0 to 512 [ 87.602386][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 87.792713][ T5147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.832262][ T5165] bond2: entered promiscuous mode [ 87.854577][ T5165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.863243][ T5147] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.886598][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 87.898326][ T5170] loop3: detected capacity change from 0 to 136 [ 88.324820][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.373439][ T5178] team0: Port device batadv1 added [ 88.456651][ T5184] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 88.470595][ T5168] loop2: detected capacity change from 0 to 512 [ 88.482236][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.504653][ T5168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.529688][ T5184] team0: Port device bond0 added [ 88.650593][ T5168] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.438870][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.652248][ T5198] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 89.681132][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 89.681150][ T28] audit: type=1400 audit(1771061592.791:487): avc: denied { rename } for pid=5197 comm="syz.3.502" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.734985][ T28] audit: type=1400 audit(1771061592.819:488): avc: denied { unlink } for pid=5197 comm="syz.3.502" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.950122][ T5208] loop4: detected capacity change from 0 to 128 [ 90.724517][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.892204][ T5224] /dev/sg0: Can't lookup blockdev [ 90.897215][ T5160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.959959][ T5227] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 90.972116][ T5229] /dev/sg0: Can't lookup blockdev [ 91.088089][ T5224] loop5: detected capacity change from 0 to 512 [ 91.100187][ T5238] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 91.107950][ T5238] netlink: 'syz.2.518': attribute type 2 has an invalid length. [ 91.125439][ T5229] loop0: detected capacity change from 0 to 512 [ 91.144183][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 91.167414][ T5224] FAT-fs (loop5): Directory bread(block 199916) failed [ 91.181669][ T5224] FAT-fs (loop5): Directory bread(block 199917) failed [ 91.197759][ T5229] FAT-fs (loop0): Directory bread(block 199916) failed [ 91.306043][ T5224] FAT-fs (loop5): Directory bread(block 199918) failed [ 91.326283][ T5229] FAT-fs (loop0): Directory bread(block 199917) failed [ 91.347346][ T5224] FAT-fs (loop5): Directory bread(block 199919) failed [ 91.359965][ T5229] FAT-fs (loop0): Directory bread(block 199918) failed [ 91.462316][ T5224] FAT-fs (loop5): Directory bread(block 199920) failed [ 91.508552][ T5246] /dev/sg0: Can't lookup blockdev [ 91.518677][ T5229] FAT-fs (loop0): Directory bread(block 199919) failed [ 91.530369][ T5224] FAT-fs (loop5): Directory bread(block 199921) failed [ 91.587816][ T5229] FAT-fs (loop0): Directory bread(block 199920) failed [ 91.604856][ T5224] FAT-fs (loop5): Directory bread(block 199922) failed [ 91.650606][ T5229] FAT-fs (loop0): Directory bread(block 199921) failed [ 91.672320][ T5224] FAT-fs (loop5): Directory bread(block 199923) failed [ 91.705969][ T5229] FAT-fs (loop0): Directory bread(block 199922) failed [ 91.743150][ T5229] FAT-fs (loop0): Directory bread(block 199923) failed [ 91.772944][ T5246] loop3: detected capacity change from 0 to 512 [ 91.796325][ T5247] FAT-fs (loop5): Directory bread(block 199916) failed [ 91.814122][ T5247] FAT-fs (loop5): Directory bread(block 199917) failed [ 91.830917][ T5248] FAT-fs (loop0): Directory bread(block 199916) failed [ 91.890356][ T5248] FAT-fs (loop0): Directory bread(block 199917) failed [ 91.908848][ T5246] FAT-fs (loop3): Directory bread(block 199916) failed [ 91.975016][ T5246] FAT-fs (loop3): Directory bread(block 199917) failed [ 91.983562][ T5246] FAT-fs (loop3): Directory bread(block 199918) failed [ 92.022925][ T5246] FAT-fs (loop3): Directory bread(block 199919) failed [ 92.032048][ T5246] FAT-fs (loop3): Directory bread(block 199920) failed [ 92.043860][ T5246] FAT-fs (loop3): Directory bread(block 199921) failed [ 92.052765][ T5246] FAT-fs (loop3): Directory bread(block 199922) failed [ 92.064557][ T5246] FAT-fs (loop3): Directory bread(block 199923) failed [ 92.081867][ T5252] loop5: detected capacity change from 0 to 128 [ 92.146410][ T5253] FAT-fs (loop3): Directory bread(block 199916) failed [ 92.221984][ T5253] FAT-fs (loop3): Directory bread(block 199917) failed [ 92.564149][ T5261] loop0: detected capacity change from 0 to 512 [ 92.612662][ T5261] EXT4-fs (loop0): failed to initialize system zone (-117) [ 92.640939][ T5267] loop3: detected capacity change from 0 to 1024 [ 92.670296][ T5261] EXT4-fs (loop0): mount failed [ 92.694275][ T5267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.726698][ T5257] loop4: detected capacity change from 0 to 512 [ 92.757210][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.023860][ T5257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.155492][ T5257] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.197507][ T5279] loop3: detected capacity change from 0 to 256 [ 93.257278][ T5279] FAT-fs (loop3): Directory bread(block 64) failed [ 93.340338][ T5279] FAT-fs (loop3): Directory bread(block 65) failed [ 93.419367][ T5279] FAT-fs (loop3): Directory bread(block 66) failed [ 93.496184][ T5279] FAT-fs (loop3): Directory bread(block 67) failed [ 93.519024][ T5279] FAT-fs (loop3): Directory bread(block 68) failed [ 93.525758][ T5279] FAT-fs (loop3): Directory bread(block 69) failed [ 93.532372][ T5279] FAT-fs (loop3): Directory bread(block 70) failed [ 93.539025][ T5279] FAT-fs (loop3): Directory bread(block 71) failed [ 93.545621][ T5279] FAT-fs (loop3): Directory bread(block 72) failed [ 93.552255][ T5279] FAT-fs (loop3): Directory bread(block 73) failed [ 93.559695][ T5282] loop5: detected capacity change from 0 to 2048 [ 93.605577][ T5279] syz.3.531: attempt to access beyond end of device [ 93.605577][ T5279] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 93.623081][ T5282] loop5: p1 < > p4 [ 93.638558][ T5282] loop5: p4 size 722688 extends beyond EOD, truncated [ 93.653752][ T3000] loop5: p1 < > p4 [ 93.669929][ T3000] loop5: p4 size 722688 extends beyond EOD, truncated [ 93.939689][ T5292] /dev/sg0: Can't lookup blockdev [ 93.949118][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 93.970876][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 94.012319][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 94.026354][ T5289] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 94.047346][ T5289] team0: Device xfrm0 is of different type [ 94.118040][ T5292] loop0: detected capacity change from 0 to 512 [ 94.170523][ T5295] /dev/sg0: Can't lookup blockdev [ 94.184441][ T5292] FAT-fs (loop0): Directory bread(block 199916) failed [ 94.209904][ T5292] FAT-fs (loop0): Directory bread(block 199917) failed [ 94.236546][ T5292] FAT-fs (loop0): Directory bread(block 199918) failed [ 94.327101][ T5292] FAT-fs (loop0): Directory bread(block 199919) failed [ 94.346357][ T5292] FAT-fs (loop0): Directory bread(block 199920) failed [ 94.416822][ T5295] loop3: detected capacity change from 0 to 512 [ 94.471560][ T5292] FAT-fs (loop0): Directory bread(block 199921) failed [ 94.499549][ T5292] FAT-fs (loop0): Directory bread(block 199922) failed [ 94.522836][ T5295] FAT-fs (loop3): Directory bread(block 199916) failed [ 94.534226][ T5292] FAT-fs (loop0): Directory bread(block 199923) failed [ 94.553045][ T5295] FAT-fs (loop3): Directory bread(block 199917) failed [ 94.560814][ T5295] FAT-fs (loop3): Directory bread(block 199918) failed [ 94.614089][ T5295] FAT-fs (loop3): Directory bread(block 199919) failed [ 94.637622][ T5295] FAT-fs (loop3): Directory bread(block 199920) failed [ 94.646568][ T5298] FAT-fs (loop0): Directory bread(block 199916) failed [ 94.678420][ T5298] FAT-fs (loop0): Directory bread(block 199917) failed [ 94.685906][ T5295] FAT-fs (loop3): Directory bread(block 199921) failed [ 94.833003][ T5295] FAT-fs (loop3): Directory bread(block 199922) failed [ 94.842584][ T5295] FAT-fs (loop3): Directory bread(block 199923) failed [ 94.880940][ T5300] netlink: 'syz.0.537': attribute type 11 has an invalid length. [ 95.149449][ T5310] loop5: detected capacity change from 0 to 512 [ 95.171783][ T5310] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.198282][ T5295] FAT-fs (loop3): FAT read failed (blocknr 128) [ 95.231059][ T5310] EXT4-fs (loop5): 1 truncate cleaned up [ 95.245100][ T5310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.407124][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.427908][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.473248][ T5315] loop2: detected capacity change from 0 to 512 [ 95.554630][ T5315] EXT4-fs (loop2): failed to initialize system zone (-117) [ 95.612139][ T5325] /dev/sg0: Can't lookup blockdev [ 95.656633][ T5315] EXT4-fs (loop2): mount failed [ 95.679543][ T28] audit: type=1400 audit(1771061598.403:489): avc: denied { read } for pid=5319 comm="syz.5.545" lport=59161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.725304][ T5327] loop3: detected capacity change from 0 to 2048 [ 95.823809][ T3746] loop3: p1 < > p4 [ 95.837791][ T5325] FAT-fs (loop4): Directory bread(block 199916) failed [ 95.854561][ T3746] loop3: p4 size 722688 extends beyond EOD, truncated [ 95.874499][ T5325] FAT-fs (loop4): Directory bread(block 199917) failed [ 95.894068][ T5325] FAT-fs (loop4): Directory bread(block 199918) failed [ 95.911119][ T5336] netlink: 256 bytes leftover after parsing attributes in process `syz.2.551'. [ 95.951795][ T5327] loop3: p1 < > p4 [ 95.963005][ T5325] FAT-fs (loop4): Directory bread(block 199919) failed [ 95.971014][ T5336] netlink: 256 bytes leftover after parsing attributes in process `syz.2.551'. [ 95.972271][ T5327] loop3: p4 size 722688 extends beyond EOD, [ 95.994634][ T5325] FAT-fs (loop4): Directory bread(block 199920) failed [ 96.015965][ T5327] truncated [ 96.026546][ T5325] FAT-fs (loop4): Directory bread(block 199921) failed [ 96.039366][ T5325] FAT-fs (loop4): Directory bread(block 199922) failed [ 96.070405][ T5325] FAT-fs (loop4): Directory bread(block 199923) failed [ 96.144182][ T5342] FAT-fs (loop0): invalid media value (0x00) [ 96.150344][ T5342] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 96.171747][ T5328] FAT-fs (loop4): Directory bread(block 199916) failed [ 96.218665][ T5342] FAT-fs (loop0): Can't find a valid FAT filesystem [ 96.368364][ T5328] FAT-fs (loop4): Directory bread(block 199917) failed [ 96.554061][ T28] audit: type=1400 audit(1771061599.142:490): avc: denied { mount } for pid=5341 comm="syz.0.552" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 96.672837][ T28] audit: type=1400 audit(1771061599.329:491): avc: denied { write } for pid=5352 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.764290][ T28] audit: type=1400 audit(1771061599.395:492): avc: denied { read } for pid=5352 comm="syz.2.555" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.817755][ T5355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.835163][ T5359] /dev/sg0: Can't lookup blockdev [ 96.840934][ T28] audit: type=1400 audit(1771061599.395:493): avc: denied { open } for pid=5352 comm="syz.2.555" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.904632][ T5355] EXT4-fs (loop4): 1 truncate cleaned up [ 96.922426][ T28] audit: type=1400 audit(1771061599.395:494): avc: denied { read } for pid=5352 comm="syz.2.555" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.949057][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.975174][ T5359] FAT-fs (loop0): Directory bread(block 199916) failed [ 96.984383][ T5359] FAT-fs (loop0): Directory bread(block 199917) failed [ 96.993098][ T5359] FAT-fs (loop0): Directory bread(block 199918) failed [ 97.001155][ T5359] FAT-fs (loop0): Directory bread(block 199919) failed [ 97.014669][ T5359] FAT-fs (loop0): Directory bread(block 199920) failed [ 97.026170][ T5359] FAT-fs (loop0): Directory bread(block 199921) failed [ 97.041910][ T28] audit: type=1400 audit(1771061599.395:495): avc: denied { open } for pid=5352 comm="syz.2.555" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 97.085484][ T5359] FAT-fs (loop0): Directory bread(block 199922) failed [ 97.094198][ T5359] FAT-fs (loop0): Directory bread(block 199923) failed [ 97.188123][ T28] audit: type=1400 audit(1771061599.395:496): avc: denied { read write } for pid=5352 comm="syz.2.555" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.213495][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.232964][ T5364] FAT-fs (loop0): Directory bread(block 199916) failed [ 97.305177][ T28] audit: type=1400 audit(1771061599.395:497): avc: denied { open } for pid=5352 comm="syz.2.555" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.341980][ T5364] FAT-fs (loop0): Directory bread(block 199917) failed [ 97.500925][ T5368] EXT4-fs (loop4): failed to initialize system zone (-117) [ 97.567873][ T5368] EXT4-fs (loop4): mount failed [ 97.893722][ T28] audit: type=1400 audit(1771061600.470:498): avc: denied { read write } for pid=5376 comm="syz.2.563" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.935806][ T5382] set_capacity_and_notify: 6 callbacks suppressed [ 97.935828][ T5382] loop2: detected capacity change from 0 to 512 [ 98.045642][ T5388] loop0: detected capacity change from 0 to 2048 [ 98.060812][ T5382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.106051][ T5382] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.127268][ T5378] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (16384 blocks, 16256 new) [ 98.148631][ T5378] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 98.224513][ T3746] loop0: p1 < > p4 [ 98.231737][ T3746] loop0: p4 size 722688 extends beyond EOD, truncated [ 98.261250][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.286308][ T5403] loop5: detected capacity change from 0 to 2048 [ 98.347458][ T5388] loop0: p1 < > p4 [ 98.352536][ T5388] loop0: p4 size 722688 extends beyond EOD, truncated [ 98.381399][ T3000] loop0: p1 < > p4 [ 98.387148][ T3000] loop0: p4 size 722688 extends beyond EOD, truncated [ 98.421373][ T3294] loop5: p1 < > p4 [ 98.436207][ T3294] loop5: p4 size 722688 extends beyond EOD, truncated [ 98.951472][ T5403] loop5: p1 < > p4 [ 98.967387][ T5403] loop5: p4 size 722688 extends beyond EOD, truncated [ 99.020128][ T5431] ------------[ cut here ]------------ [ 99.025638][ T5431] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 99.050325][ T5431] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.571/5431 [ 99.061254][ T5431] Modules linked in: [ 99.065236][ T5431] CPU: 0 UID: 0 PID: 5431 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 99.074583][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.084722][ T5431] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 99.091015][ T5431] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 99.110776][ T5431] RSP: 0018:ffffc9000143f368 EFLAGS: 00010246 [ 99.116900][ T5431] RAX: ffff888104af5cf8 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 99.124986][ T5431] RDX: ffffffff86812917 RSI: ffffffff866d46a9 RDI: ffffffff871d3750 [ 99.133032][ T5431] RBP: ffff88814690e270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 99.141141][ T5431] R10: 00000000000000d0 R11: 0000000000000000 R12: ffff88814690e230 [ 99.149188][ T5431] R13: 00000000ffffdfcc R14: ffff88814690e27c R15: ffff88814690e268 [ 99.157196][ T5431] FS: 00007f446d9ad6c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 99.166198][ T5431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.172838][ T5431] CR2: 00007f446d9acff8 CR3: 0000000137db4000 CR4: 00000000003506f0 [ 99.180906][ T5431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.188966][ T5431] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 99.196997][ T5431] Call Trace: [ 99.200316][ T5431] [ 99.203330][ T5431] reg_set_min_max+0x1c8/0x260 [ 99.208141][ T5431] check_cond_jmp_op+0x13b0/0x1ab0 [ 99.213352][ T5431] do_check+0x4a9b/0x9860 [ 99.217727][ T5431] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 99.223626][ T5431] do_check_common+0xd0b/0x1630 [ 99.228529][ T5431] bpf_check+0x2f6d/0xcc10 [ 99.233033][ T5431] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 99.239165][ T5431] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 99.244865][ T5431] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 99.250839][ T5431] ? pcpu_block_update+0x24e/0x3b0 [ 99.256021][ T5431] ? _find_next_zero_bit+0x64/0xa0 [ 99.261169][ T5431] ? pcpu_block_refresh_hint+0x157/0x170 [ 99.266907][ T5431] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 99.273108][ T5431] ? css_rstat_updated+0xbb/0x280 [ 99.278228][ T5431] ? mod_memcg_state+0x182/0x270 [ 99.283283][ T5431] ? __rcu_read_unlock+0x4e/0x70 [ 99.288287][ T5431] ? avc_has_perm_noaudit+0xab/0x130 [ 99.293621][ T5431] ? avc_has_perm+0x101/0x190 [ 99.298416][ T5431] ? selinux_bpf_prog_load+0x197/0x1c0 [ 99.303984][ T5431] ? security_bpf_prog_load+0x9e/0x140 [ 99.309526][ T5431] bpf_prog_load+0xf76/0x1140 [ 99.314383][ T5431] ? security_bpf+0x2b/0x90 [ 99.319740][ T5431] __sys_bpf+0x505/0x7e0 [ 99.324104][ T5431] __x64_sys_bpf+0x41/0x50 [ 99.328572][ T5431] x64_sys_call+0x10cb/0x3020 [ 99.333439][ T5431] do_syscall_64+0x12c/0x370 [ 99.338089][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.344055][ T5431] RIP: 0033:0x7f446ef9bf79 [ 99.348571][ T5431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.368269][ T5431] RSP: 002b:00007f446d9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.376790][ T5431] RAX: ffffffffffffffda RBX: 00007f446f216180 RCX: 00007f446ef9bf79 [ 99.384884][ T5431] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 99.392951][ T5431] RBP: 00007f446f0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 99.400997][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.409141][ T5431] R13: 00007f446f216218 R14: 00007f446f216180 R15: 00007ffe3afdd178 [ 99.417197][ T5431] [ 99.420254][ T5431] ---[ end trace 0000000000000000 ]--- [ 99.478744][ T5437] loop0: detected capacity change from 0 to 512 [ 99.568853][ T5437] EXT4-fs (loop0): failed to initialize system zone (-117) [ 99.658049][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 99.661942][ T5437] EXT4-fs (loop0): mount failed [ 99.795772][ T5446] loop2: detected capacity change from 0 to 128 [ 100.102517][ T5459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5459 comm=syz.4.580 [ 100.278283][ T5468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.584'. [ 100.348603][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 100.617407][ T5464] loop0: detected capacity change from 0 to 1764 [ 100.883637][ T5464] syz_tun: entered allmulticast mode [ 101.141669][ T5487] loop2: detected capacity change from 0 to 2048 [ 101.190294][ T5487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.211441][ T5487] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.266240][ T5487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.591: bg 0: block 345: padding at end of block bitmap is not set [ 101.318100][ T5487] EXT4-fs (loop2): Remounting filesystem read-only [ 101.347041][ T5487] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.2.591: cleanup dec ref error -117 [ 101.398688][ T5490] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 101.406744][ T5477] loop4: detected capacity change from 0 to 512 [ 101.425080][ T5493] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 101.495581][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.590206][ T5487] bond1: (slave veth3): Enslaving as an active interface with a down link [ 101.631433][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.685325][ T5477] ------------[ cut here ]------------ [ 101.691153][ T5477] EA inode 11 i_nlink=2 [ 101.691184][ T5477] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.586/5477 [ 101.707283][ T5477] Modules linked in: [ 101.711560][ T5477] CPU: 0 UID: 0 PID: 5477 Comm: syz.4.586 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.723435][ T5477] Tainted: [W]=WARN [ 101.727541][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 101.738619][ T5477] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 101.738986][ T5490] bond1: (slave batadv1): making interface the new active one [ 101.745550][ T5477] Code: e4 7e 99 ff 4c 8d 2d cd 1b 5e 05 49 8d 7e 40 e8 74 11 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 0c b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 1f dc 03 66 66 66 66 66 66 2e [ 101.756002][ T5490] batadv1: entered promiscuous mode [ 101.773311][ T5477] RSP: 0018:ffffc90000f4b778 EFLAGS: 00010246 [ 101.785038][ T5477] RAX: ffff888104af1af8 RBX: ffff88811a882908 RCX: ffffffff81bfc048 [ 101.793590][ T5477] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871ddc00 [ 101.801928][ T5477] RBP: 000000000000000b R08: 000188811a8828bb R09: 0000000000000000 [ 101.810203][ T5477] R10: 00000000000e99c8 R11: 0000000000000020 R12: ffff88811a8828b8 [ 101.818541][ T5477] R13: ffffffff871ddc00 R14: ffff88811a882870 R15: 0000000000000001 [ 101.826902][ T5477] FS: 00007f3f7520f6c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 101.831780][ T5490] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 101.836391][ T5477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.851758][ T5477] CR2: 0000200000000200 CR3: 000000013ac70000 CR4: 00000000003506f0 [ 101.860196][ T5477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.868692][ T5477] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.876900][ T5477] Call Trace: [ 101.880494][ T5477] [ 101.883744][ T5477] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 101.891580][ T5477] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 101.891687][ T5477] ? ext4_truncate+0x92b/0xb00 [ 101.891792][ T5477] ext4_evict_inode+0xa1f/0xd60 [ 101.891878][ T5477] ? __pfx_ext4_evict_inode+0x10/0x10 [ 101.892029][ T5477] evict+0x2af/0x510 [ 101.892071][ T5477] ? __pfx_ext4_drop_inode+0x10/0x10 [ 101.892200][ T5477] ? iput+0x1ea/0x580 [ 101.892243][ T5477] iput+0x41a/0x580 [ 101.892436][ T5477] ext4_process_orphan+0x1a9/0x1c0 [ 101.892478][ T5477] ext4_orphan_cleanup+0x6a8/0xa00 [ 101.892572][ T5477] ext4_fill_super+0x3408/0x37c0 [ 101.892724][ T5477] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.892906][ T5477] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.893013][ T5477] get_tree_bdev_flags+0x291/0x300 [ 101.966414][ T5477] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.972305][ T5477] get_tree_bdev+0x1f/0x30 [ 101.977073][ T5477] ext4_get_tree+0x1c/0x30 [ 101.981994][ T5477] vfs_get_tree+0x57/0x1d0 [ 101.986879][ T5477] do_new_mount+0x288/0x8d0 [ 101.991933][ T5477] path_mount+0x4d0/0xbc0 [ 101.996800][ T5477] __se_sys_mount+0x28c/0x2e0 [ 102.001843][ T5477] ? __x64_sys_mount+0x1e/0x80 [ 102.007241][ T5477] __x64_sys_mount+0x67/0x80 [ 102.012137][ T5477] x64_sys_call+0x2d61/0x3020 [ 102.019365][ T5477] do_syscall_64+0x12c/0x370 [ 102.024731][ T5477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.031070][ T5477] RIP: 0033:0x7f3f767bd20a [ 102.035957][ T5477] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.061604][ T5477] RSP: 002b:00007f3f7520ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.072914][ T5477] RAX: ffffffffffffffda RBX: 00007f3f7520eee0 RCX: 00007f3f767bd20a [ 102.081520][ T5477] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f3f7520eea0 [ 102.089997][ T5477] RBP: 00002000000009c0 R08: 00007f3f7520eee0 R09: 0000000000800718 [ 102.098315][ T5477] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 102.106697][ T5477] R13: 00007f3f7520eea0 R14: 000000000000048d R15: 0000200000000200 [ 102.115077][ T5477] [ 102.118285][ T5477] ---[ end trace 0000000000000000 ]--- [ 102.126475][ T5477] EXT4-fs (loop4): 1 orphan inode deleted [ 102.137395][ T5477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.164989][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.328738][ T5512] loop3: detected capacity change from 0 to 512 [ 102.339965][ T5512] EXT4-fs (loop3): 1 truncate cleaned up [ 102.361855][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.387781][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.403936][ T5515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5515 comm=syz.5.597 [ 102.845065][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.128454][ T5541] loop4: detected capacity change from 0 to 512 [ 103.244989][ T5541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.299240][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.339326][ T5541] EXT4-fs (loop4): 1 truncate cleaned up [ 103.393204][ T5541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.467062][ T5543] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.507940][ T5526] netlink: 60 bytes leftover after parsing attributes in process `syz.5.603'. [ 103.565604][ T5543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.604'. [ 103.578306][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 103.578324][ T28] audit: type=1400 audit(1771061605.793:502): avc: denied { create } for pid=5525 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.679821][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.682980][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.819695][ T28] audit: type=1400 audit(1771061606.008:503): avc: denied { listen } for pid=5569 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.863014][ T28] audit: type=1400 audit(1771061606.008:504): avc: denied { mounton } for pid=5569 comm="syz.4.607" path="/116/file1" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.919024][ T28] audit: type=1400 audit(1771061606.092:505): avc: denied { read } for pid=5569 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.959779][ T5580] sctp: [Deprecated]: syz.0.611 (pid 5580) Use of int in max_burst socket option. [ 103.959779][ T5580] Use struct sctp_assoc_value instead [ 104.068487][ T5587] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5587 comm=syz.3.612 [ 104.145262][ T5595] set_capacity_and_notify: 1 callbacks suppressed [ 104.145284][ T5595] loop5: detected capacity change from 0 to 1024 [ 104.182679][ T5595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.267336][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.286820][ T5597] loop0: detected capacity change from 0 to 512 [ 104.324787][ T5597] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.370472][ T5606] loop5: detected capacity change from 0 to 512 [ 104.379731][ T5597] EXT4-fs (loop0): 1 truncate cleaned up [ 104.406073][ T5597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.429276][ T5606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.444663][ T28] audit: type=1400 audit(1771061606.597:506): avc: denied { map } for pid=5596 comm="syz.0.616" path="/135/file1/cpu.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.482276][ T5606] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.509450][ T5615] loop3: detected capacity change from 0 to 512 [ 104.540321][ T5615] EXT4-fs (loop3): 1 truncate cleaned up [ 104.540968][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.543876][ T28] audit: type=1400 audit(1771061606.691:507): avc: denied { mounton } for pid=5614 comm="syz.3.619" path="/131/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.618312][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.653675][ T28] audit: type=1400 audit(1771061606.784:508): avc: denied { write } for pid=5619 comm="syz.0.620" path="socket:[12464]" dev="sockfs" ino=12464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.674173][ T5617] netlink: 56 bytes leftover after parsing attributes in process `syz.5.617'. [ 104.794464][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.794717][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.883294][ T5624] loop4: detected capacity change from 0 to 512 [ 104.971666][ T5624] EXT4-fs (loop4): failed to initialize system zone (-117) [ 105.028903][ T5624] EXT4-fs (loop4): mount failed [ 105.104224][ T5634] loop4: detected capacity change from 0 to 128 [ 105.136901][ T5634] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.244580][ T5634] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.340232][ T5634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.625: bg 0: bad block bitmap checksum [ 105.352329][ T28] audit: type=1400 audit(1771061607.439:509): avc: denied { setattr } for pid=5633 comm="syz.4.625" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.422124][ T5644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5644 comm=syz.5.627 [ 105.565579][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.774074][ T5651] loop4: detected capacity change from 0 to 1024 [ 105.817196][ T5651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.876318][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'. [ 105.944783][ T5661] loop5: detected capacity change from 0 to 512 [ 105.963321][ T5659] loop3: detected capacity change from 0 to 512 [ 105.984660][ T5659] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.014138][ T5659] EXT4-fs (loop3): 1 truncate cleaned up [ 106.033114][ T5659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.069439][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.079553][ T5661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.096858][ T5661] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.100102][ T5666] loop0: detected capacity change from 0 to 512 [ 106.141387][ T5666] EXT4-fs (loop0): failed to initialize system zone (-117) [ 106.210520][ T5666] EXT4-fs (loop0): mount failed [ 106.241977][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.252492][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.386252][ T5674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.413458][ T28] audit: type=1400 audit(1771061608.440:510): avc: denied { setopt } for pid=5677 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.421703][ T5674] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.433498][ T28] audit: type=1400 audit(1771061608.449:511): avc: denied { connect } for pid=5677 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.547052][ T5681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.589366][ T5678] vhci_hcd vhci_hcd.0: invalid port number 133 [ 106.621107][ T5678] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 106.707876][ T5681] EXT4-fs (loop0): 1 truncate cleaned up [ 106.730372][ T5681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.922387][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.027086][ T5689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 107.391221][ T5693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.422564][ T5693] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.599117][ T5700] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.652617][ T5693] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.643: bg 0: block 345: padding at end of block bitmap is not set [ 107.736341][ T5704] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 107.772439][ T5693] EXT4-fs (loop4): Remounting filesystem read-only [ 107.824260][ T5693] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.4.643: cleanup dec ref error -117 [ 107.898910][ T5704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.931021][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 107.948378][ T5693] bond3: (slave batadv2): making interface the new active one [ 107.957552][ T5693] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 108.003939][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.075581][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 108.084447][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 108.103625][ T5711] bridge2: entered promiscuous mode [ 108.108966][ T5711] bridge2: entered allmulticast mode [ 108.140337][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.226227][ T5714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.299957][ T5714] EXT4-fs (loop0): 1 truncate cleaned up [ 108.310398][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.472461][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.727444][ T5731] EXT4-fs: Ignoring removed orlov option [ 108.855189][ T5731] EXT4-fs (loop4): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 108.973362][ T5731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.233384][ T5731] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.654: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 109.257846][ T5731] EXT4-fs (loop4): Remounting filesystem read-only [ 109.292188][ T5738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5738 comm=syz.3.656 [ 109.391706][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 109.391792][ T28] audit: type=1400 audit(1771061611.227:514): avc: denied { create } for pid=5730 comm="syz.4.654" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 109.426944][ T5743] /dev/sg0: Can't lookup blockdev [ 109.463691][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.554378][ T5743] set_capacity_and_notify: 7 callbacks suppressed [ 109.554437][ T5743] loop3: detected capacity change from 0 to 512 [ 109.586757][ T5749] loop2: detected capacity change from 0 to 128 [ 109.612000][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 109.718396][ T5743] FAT-fs (loop3): Directory bread(block 199916) failed [ 109.726825][ T5743] FAT-fs (loop3): Directory bread(block 199917) failed [ 109.735255][ T5743] FAT-fs (loop3): Directory bread(block 199918) failed [ 109.743573][ T5743] FAT-fs (loop3): Directory bread(block 199919) failed [ 109.752410][ T5743] FAT-fs (loop3): Directory bread(block 199920) failed [ 109.761275][ T5743] FAT-fs (loop3): Directory bread(block 199921) failed [ 109.769962][ T5743] FAT-fs (loop3): Directory bread(block 199922) failed [ 109.785562][ T5743] FAT-fs (loop3): Directory bread(block 199923) failed [ 109.793310][ T5755] loop5: detected capacity change from 0 to 512 [ 109.858151][ T5751] loop4: detected capacity change from 0 to 8192 [ 109.863015][ T5755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.893998][ T5761] FAT-fs (loop3): Directory bread(block 199916) failed [ 109.925235][ T5755] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.937764][ T5761] FAT-fs (loop3): Directory bread(block 199917) failed [ 109.944807][ T5754] loop0: detected capacity change from 0 to 512 [ 109.983440][ T5754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.115705][ T5754] EXT4-fs (loop0): 1 truncate cleaned up [ 110.122332][ T5754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.230664][ T5768] loop4: detected capacity change from 0 to 2048 [ 110.237780][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.295164][ T5771] loop0: detected capacity change from 0 to 512 [ 110.309652][ T3746] loop4: p1 < > p4 [ 110.314520][ T3746] loop4: p4 size 722688 extends beyond EOD, truncated [ 110.330948][ T5768] loop4: p1 < > p4 [ 110.351981][ T5768] loop4: p4 size 722688 extends beyond EOD, truncated [ 110.368929][ T5771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.382363][ T3000] loop4: p1 < > p4 [ 110.393815][ T3000] loop4: p4 size 722688 extends beyond EOD, truncated [ 110.403129][ T5771] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.497793][ T5776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.596161][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.662944][ T5776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.687174][ T5782] loop0: detected capacity change from 0 to 512 [ 110.716246][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.745467][ T5782] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.802218][ T5776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.843417][ T28] audit: type=1400 audit(1771061612.574:515): avc: denied { read } for pid=5780 comm="syz.0.670" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 110.878477][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.891725][ T5776] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.963124][ T5792] /dev/sg0: Can't lookup blockdev [ 111.000445][ T71] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.046876][ T5792] loop2: detected capacity change from 0 to 512 [ 111.062032][ T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.093474][ T5792] FAT-fs (loop2): Directory bread(block 199916) failed [ 111.103294][ T5792] FAT-fs (loop2): Directory bread(block 199917) failed [ 111.116594][ T71] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.162801][ T5794] loop0: detected capacity change from 0 to 512 [ 111.175577][ T5792] FAT-fs (loop2): Directory bread(block 199918) failed [ 111.188262][ T71] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.197440][ T5792] FAT-fs (loop2): Directory bread(block 199919) failed [ 111.205496][ T5792] FAT-fs (loop2): Directory bread(block 199920) failed [ 111.212171][ T5794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.228777][ T5792] FAT-fs (loop2): Directory bread(block 199921) failed [ 111.264732][ T5792] FAT-fs (loop2): Directory bread(block 199922) failed [ 111.282110][ T5794] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.293166][ T5792] FAT-fs (loop2): Directory bread(block 199923) failed [ 111.402533][ T5792] FAT-fs (loop2): Directory bread(block 199916) failed [ 111.409845][ T5792] FAT-fs (loop2): Directory bread(block 199917) failed [ 111.560360][ T5802] FAULT_INJECTION: forcing a failure. [ 111.560360][ T5802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.581195][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: syz.2.675 Tainted: G W syzkaller #0 PREEMPT(full) [ 111.581238][ T5802] Tainted: [W]=WARN [ 111.581301][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.581315][ T5802] Call Trace: [ 111.581329][ T5802] [ 111.581339][ T5802] __dump_stack+0x1d/0x30 [ 111.581371][ T5802] dump_stack_lvl+0x95/0xd0 [ 111.581397][ T5802] dump_stack+0x15/0x1b [ 111.581445][ T5802] should_fail_ex+0x263/0x280 [ 111.581508][ T5802] should_fail+0xb/0x20 [ 111.581532][ T5802] should_fail_usercopy+0x1a/0x20 [ 111.581604][ T5802] _copy_to_user+0x20/0xa0 [ 111.581679][ T5802] simple_read_from_buffer+0xb5/0x130 [ 111.581724][ T5802] proc_fail_nth_read+0x10e/0x150 [ 111.581750][ T5802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.581777][ T5802] vfs_read+0x1ab/0x7f0 [ 111.581812][ T5802] ? __rcu_read_unlock+0x4e/0x70 [ 111.581836][ T5802] ? __fget_files+0x184/0x1c0 [ 111.581903][ T5802] ? mutex_lock+0x57/0x90 [ 111.581950][ T5802] ksys_read+0xdc/0x1a0 [ 111.581994][ T5802] __x64_sys_read+0x40/0x50 [ 111.582068][ T5802] x64_sys_call+0x2886/0x3020 [ 111.582154][ T5802] do_syscall_64+0x12c/0x370 [ 111.582197][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.582223][ T5802] RIP: 0033:0x7f446ef5c84e [ 111.582307][ T5802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.582325][ T5802] RSP: 002b:00007f446d9eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.582412][ T5802] RAX: ffffffffffffffda RBX: 00007f446d9ef6c0 RCX: 00007f446ef5c84e [ 111.582426][ T5802] RDX: 000000000000000f RSI: 00007f446d9ef0a0 RDI: 0000000000000003 [ 111.582446][ T5802] RBP: 00007f446d9ef090 R08: 0000000000000000 R09: 0000000000000000 [ 111.582462][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.582477][ T5802] R13: 00007f446f216038 R14: 00007f446f215fa0 R15: 00007ffe3afdd178 [ 111.582578][ T5802] [ 111.886683][ T4172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.929226][ T3746] loop2: p1 < > p4 [ 111.934081][ T3746] loop2: p4 size 722688 extends beyond EOD, truncated [ 111.953965][ T5805] loop2: p1 < > p4 [ 111.958817][ T5805] loop2: p4 size 722688 extends beyond EOD, truncated [ 112.056363][ T3294] loop5: p1 < > p4 [ 112.073091][ T3294] loop5: p4 size 722688 extends beyond EOD, truncated [ 112.101266][ T5808] loop5: p1 < > p4 [ 112.105994][ T5808] loop5: p4 size 722688 extends beyond EOD, truncated [ 112.514687][ T5818] ================================================================== [ 112.522836][ T5818] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 112.530082][ T5818] [ 112.532437][ T5818] write to 0xffff88811a88d114 of 4 bytes by task 5817 on cpu 1: [ 112.540101][ T5818] __xa_set_mark+0x172/0x1a0 [ 112.544735][ T5818] __folio_mark_dirty+0x383/0x4a0 [ 112.549800][ T5818] mark_buffer_dirty+0x120/0x220 [ 112.554767][ T5818] block_write_end+0x12d/0x210 [ 112.559555][ T5818] generic_write_end+0x56/0x150 [ 112.564433][ T5818] fat_write_end+0x4f/0x160 [ 112.568958][ T5818] generic_perform_write+0x311/0x490 [ 112.574282][ T5818] __generic_file_write_iter+0x9e/0x120 [ 112.579864][ T5818] generic_file_write_iter+0x8d/0x310 [ 112.585277][ T5818] iter_file_splice_write+0x6bc/0xa80 [ 112.590698][ T5818] direct_splice_actor+0x156/0x2a0 [ 112.595847][ T5818] splice_direct_to_actor+0x311/0x670 [ 112.601258][ T5818] do_splice_direct+0x119/0x1a0 [ 112.606141][ T5818] do_sendfile+0x382/0x650 [ 112.610581][ T5818] __x64_sys_sendfile64+0x105/0x150 [ 112.615797][ T5818] x64_sys_call+0x2dc4/0x3020 [ 112.620520][ T5818] do_syscall_64+0x12c/0x370 [ 112.625145][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.631064][ T5818] [ 112.633412][ T5818] read to 0xffff88811a88d114 of 4 bytes by task 5818 on cpu 0: [ 112.640976][ T5818] xas_find_marked+0x5d7/0x620 [ 112.645774][ T5818] filemap_get_folios_tag+0xfa/0x510 [ 112.651087][ T5818] file_write_and_wait_range+0x20c/0x2f0 [ 112.656762][ T5818] __generic_file_fsync+0x46/0x160 [ 112.661913][ T5818] fat_file_fsync+0x49/0x100 [ 112.666523][ T5818] vfs_fsync_range+0xc5/0xe0 [ 112.671136][ T5818] generic_file_write_iter+0x1ba/0x310 [ 112.676633][ T5818] iter_file_splice_write+0x6bc/0xa80 [ 112.682054][ T5818] direct_splice_actor+0x156/0x2a0 [ 112.687205][ T5818] splice_direct_to_actor+0x311/0x670 [ 112.692617][ T5818] do_splice_direct+0x119/0x1a0 [ 112.697504][ T5818] do_sendfile+0x382/0x650 [ 112.702041][ T5818] __x64_sys_sendfile64+0x105/0x150 [ 112.707261][ T5818] x64_sys_call+0x2dc4/0x3020 [ 112.711970][ T5818] do_syscall_64+0x12c/0x370 [ 112.716591][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.722519][ T5818] [ 112.724862][ T5818] value changed: 0x04000021 -> 0x0e000021 [ 112.730609][ T5818] [ 112.732943][ T5818] Reported by Kernel Concurrency Sanitizer on: [ 112.739114][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.4.679 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.749898][ T5818] Tainted: [W]=WARN [ 112.753713][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 112.763786][ T5818] ================================================================== [ 112.867052][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.978009][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 112.990117][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 114.586380][ T12] batadv1: left promiscuous mode