last executing test programs: 7.552693204s ago: executing program 2 (id=370): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r3, 0x25, 0x1, @val=@netfilter={0x7, 0x0, 0xc41d}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x20a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x5, 0x80000004dd5}, 0x0, 0x0, 0x10000, 0x2, 0x6f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r5}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 6.014403185s ago: executing program 0 (id=383): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0xffffffffffffffff, 0xffffffff, 0x8000004}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x0, 0x1, 0x7, 0x4, 0x9}, 0x9}}]}, {0x4}, {0x44}, {0xc, 0x8, {0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) (fail_nth: 3) 5.885491861s ago: executing program 0 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24001090}, 0x4004004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000001c0)) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x20400) writev(r4, 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x3, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0xb06, 0x3, 0x8, 0x1, 0x4800, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x3a, @local, 0x4e21, 0x4, 'ovf\x00', 0xd, 0x86, 0x5b}, 0x2c) 5.628586605s ago: executing program 4 (id=390): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/23, 0x17}], 0x4, &(0x7f0000000bc0)=""/202, 0xca}, 0x800}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000cc0)=""/87, 0x57}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/45, 0x2d}, {&(0x7f0000002a40)=""/195, 0xc3}, {&(0x7f0000002b40)=""/210, 0xd2}], 0x5, &(0x7f0000002cc0)=""/80, 0x50}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002dc0)=""/26, 0x1a}, {&(0x7f0000002e00)=""/188, 0xbc}, {&(0x7f0000002ec0)=""/216, 0xd8}], 0x3, &(0x7f0000003000)=""/61, 0x3d}, 0xa0fe}, {{&(0x7f0000003040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003280)=[{&(0x7f00000030c0)=""/147, 0x93}, {&(0x7f0000003180)=""/254, 0xfe}], 0x2, &(0x7f00000032c0)=""/97, 0x61}, 0x1d4}, {{&(0x7f0000003340)=@qipcrtr, 0x80, &(0x7f0000004580)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/65, 0x41}, {&(0x7f0000004440)=""/143, 0x8f}, {&(0x7f0000004500)=""/24, 0x18}, {&(0x7f0000004540)=""/20, 0x14}], 0x5, &(0x7f0000004600)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000005600)=@nfc, 0x80, &(0x7f0000006780)=[{&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/249, 0xf9}], 0x2, &(0x7f00000067c0)=""/43, 0x2b}, 0xe0}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000006800)=""/228, 0xe4}, {&(0x7f0000006900)=""/154, 0x9a}, {&(0x7f00000069c0)=""/138, 0x8a}, {&(0x7f0000006a80)=""/246, 0xf6}, {&(0x7f0000006b80)=""/241, 0xf1}, {&(0x7f0000006c80)=""/15, 0xf}], 0x6, &(0x7f0000006d40)=""/176, 0xb0}, 0x800}, {{&(0x7f0000006e00)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006e80)=""/225, 0xe1}, {&(0x7f0000006fc0)=""/241, 0xf1}], 0x2, &(0x7f0000007100)=""/219, 0xdb}, 0xffff8001}], 0x8, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000001000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/4091, &(0x7f0000002600)=0xffb) close(r7) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xe9f0ad8ee409064d}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440), 0x1, 0x519, &(0x7f00000014c0)="$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") 5.625585635s ago: executing program 0 (id=391): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073018f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x6055, 0x1000, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r3, &(0x7f00000001c0)=""/86, 0x56, 0xfffffffffffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 5.560092008s ago: executing program 0 (id=392): setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) getitimer(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) accept$unix(r1, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 4.358909812s ago: executing program 2 (id=395): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 4.055446007s ago: executing program 4 (id=399): openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'vcan0\x00'}}, 0x1e) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x78) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) 3.908273605s ago: executing program 1 (id=401): socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x3e, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x8, 0x7, 0x4, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x48, 0xc2, 0x2, 0x80000001}]}, 0x20}}, 0x800) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80178d, &(0x7f0000001040)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@dax_always}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x20000000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x2, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.904063685s ago: executing program 4 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24001090}, 0x4004004) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000001c0)) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) writev(r4, 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x3, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0xb06, 0x3, 0x8, 0x1, 0x4800, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x3a, @local, 0x4e21, 0x4, 'ovf\x00', 0xd, 0x86, 0x5b}, 0x2c) 3.553471993s ago: executing program 0 (id=403): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073018f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x6055, 0x1000, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r3, &(0x7f00000001c0)=""/86, 0x56, 0xfffffffffffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 3.335512315s ago: executing program 2 (id=404): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x38}}, 0x0) 3.219242361s ago: executing program 4 (id=405): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7fff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc704, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4f, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xb7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x4, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22f00100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) writev(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") getdents(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d) close(r0) 3.106752157s ago: executing program 0 (id=406): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r3, 0x25, 0x1, @val=@netfilter={0x7, 0x0, 0xc41d}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x20a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x5, 0x80000004dd5}, 0x0, 0x0, 0x10000, 0x2, 0x6f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r5}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 2.954773115s ago: executing program 1 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'erspan0\x00', 'ip6gretap0\x00'}, 0x0, 0x108, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x9, 0x800, 0x5498, 0xf3e2, 0x3ff, 0x9, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5c}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {0xff}, {}, 0xc, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 'bond0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x109a42, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) io_setup(0x3, &(0x7f0000008240)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x4008040, &(0x7f000005ffe4)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x20085e, &(0x7f00000107c0), 0x1, 0x53a, &(0x7f0000010280)="$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") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000300000000e0001"], 0x34}}, 0x48800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000010) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) 2.021270494s ago: executing program 3 (id=408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) (fail_nth: 3) 1.450514124s ago: executing program 3 (id=409): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0xffff, 0x100, 0x3}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x90}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90) 1.415272846s ago: executing program 2 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/23, 0x17}], 0x4, &(0x7f0000000bc0)=""/202, 0xca}, 0x800}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000cc0)=""/87, 0x57}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/45, 0x2d}, {&(0x7f0000002a40)=""/195, 0xc3}, {&(0x7f0000002b40)=""/210, 0xd2}], 0x5, &(0x7f0000002cc0)=""/80, 0x50}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002dc0)=""/26, 0x1a}, {&(0x7f0000002e00)=""/188, 0xbc}, {&(0x7f0000002ec0)=""/216, 0xd8}], 0x3, &(0x7f0000003000)=""/61, 0x3d}, 0xa0fe}, {{&(0x7f0000003040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003280)=[{&(0x7f00000030c0)=""/147, 0x93}, {&(0x7f0000003180)=""/254, 0xfe}], 0x2, &(0x7f00000032c0)=""/97, 0x61}, 0x1d4}, {{&(0x7f0000003340)=@qipcrtr, 0x80, &(0x7f0000004580)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/65, 0x41}, {&(0x7f0000004440)=""/143, 0x8f}, {&(0x7f0000004500)=""/24, 0x18}, {&(0x7f0000004540)=""/20, 0x14}], 0x5, &(0x7f0000004600)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000005600)=@nfc, 0x80, &(0x7f0000006780)=[{&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/249, 0xf9}], 0x2, &(0x7f00000067c0)=""/43, 0x2b}, 0xe0}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000006800)=""/228, 0xe4}, {&(0x7f0000006900)=""/154, 0x9a}, {&(0x7f00000069c0)=""/138, 0x8a}, {&(0x7f0000006a80)=""/246, 0xf6}, {&(0x7f0000006b80)=""/241, 0xf1}, {&(0x7f0000006c80)=""/15, 0xf}], 0x6, &(0x7f0000006d40)=""/176, 0xb0}, 0x800}, {{&(0x7f0000006e00)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006e80)=""/225, 0xe1}, {&(0x7f0000006fc0)=""/241, 0xf1}], 0x2, &(0x7f0000007100)=""/219, 0xdb}, 0xffff8001}], 0x8, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000001000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/4091, &(0x7f0000002600)=0xffb) close(r7) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xe9f0ad8ee409064d}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440), 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") 1.362844828s ago: executing program 1 (id=411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) 1.3390797s ago: executing program 3 (id=412): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x1e368, 0x0, 0x0, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$inet(0xa, 0x801, 0xffeffff9) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000500), 0x6}, 0x0, 0x0, 0x800001, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast2, @initdev, 0x0}, &(0x7f0000000400)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800a145025ec1e80c7500000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delchain={0x24, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x2, 0x6}, {0xfff1, 0x9}}}, 0x24}}, 0x4049004) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x4e20, @local}}) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f0000000540)=""/116, 0x20000, 0x800, 0xcf18, 0x1}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.32973859s ago: executing program 1 (id=413): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f00009c7000/0x3000)=nil, 0x3000, 0x200000a, 0x50, 0xffffffffffffffff, 0x6f1c000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setfsgid(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x541b, 0x1) sendfile(r1, r2, 0x0, 0x400003ffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000180)=0xfffffffd, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) 1.210444936s ago: executing program 3 (id=414): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0xffffffffffffffff, 0xffffffff, 0x8000004}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x0, 0x1, 0x7, 0x4, 0x9}, 0x9}}]}, {0x4}, {0x44}, {0xc, 0x8, {0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) (fail_nth: 4) 940.02525ms ago: executing program 3 (id=415): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 771.230019ms ago: executing program 2 (id=416): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073018f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x6055, 0x1000, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r3, &(0x7f00000001c0)=""/86, 0x56, 0xfffffffffffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 713.039272ms ago: executing program 2 (id=417): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 642.750516ms ago: executing program 1 (id=418): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffff0, 0x1) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x5, 0x69, &(0x7f0000000040)="87ec2c4bab4a4e016d5201000000000000000a9453b18f7de6ea4555f1a87812b8dce856a50f4196ef4e328328a069c47f52dcdea03290b1d3dd4a61fc75e161bcbb3e266cbe251ff6476879ad42df32de475cee27fc6684324d5d83ffddee607cbd5672211b75c9d0"}) 642.225086ms ago: executing program 1 (id=419): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xcbe, 0x71ee, 0x6}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xec, 0x3, 0x40, 0x6, 0x0, 0x0, 0x19206, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xa790}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x9, 0x3ff, 0x0, 0x0, 0x0, 0x2}, r1, 0x1, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={&(0x7f00000004c0), 0xd}, 0x419, 0x40000003, 0x2651, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$ppp(0xffffffffffffff9c, 0x0, 0x200040, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x400, 0x6}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000016c0)={r4, &(0x7f0000000680)="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", &(0x7f0000001680)=@tcp6=r4}, 0x20) 500.741133ms ago: executing program 4 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000140)={[{@data_err_ignore}, {@noacl}, {@sysvgroups}, {@jqfmt_vfsv1}, {@nodioread_nolock}, {@dax_always}, {@grpjquota}, {@noauto_da_alloc}, {@data_err_abort}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 254.237786ms ago: executing program 4 (id=421): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x2ad4}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 3 (id=422): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x2ad4}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1777075068.427:110): avc: denied { connect } for pid=3499 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.558922][ T28] audit: type=1400 audit(1777075068.437:111): avc: denied { mounton } for pid=3330 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.619456][ T28] audit: type=1400 audit(1777075068.467:112): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.673676][ T28] audit: type=1400 audit(1777075068.467:113): avc: denied { open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.731125][ T28] audit: type=1400 audit(1777075068.467:114): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.787078][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 36.895056][ T28] audit: type=1400 audit(1777075068.897:115): avc: denied { prog_run } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.031779][ T3511] syz.4.5 (3511) used greatest stack depth: 10880 bytes left [ 37.060143][ T28] audit: type=1400 audit(1777075069.057:116): avc: denied { cpu } for pid=3516 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.175448][ T3521] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 37.182794][ T3502] syz.3.6 (3502) used greatest stack depth: 10800 bytes left [ 37.215722][ T3522] loop3: detected capacity change from 0 to 512 [ 37.222799][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.236193][ T3522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.257836][ T3522] EXT4-fs (loop3): 1 orphan inode deleted [ 37.278112][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 37.284963][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.319728][ T3522] Cannot find add_set index 0 as target [ 37.346272][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.391278][ T3529] loop2: detected capacity change from 0 to 128 [ 37.405850][ T3534] loop3: detected capacity change from 0 to 512 [ 37.481505][ T3537] loop0: detected capacity change from 0 to 512 [ 37.496260][ T3534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.14: missing EA_INODE flag [ 37.558570][ T3534] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 37.568511][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.584800][ C1] EXT4-fs (loop3): initial error at time 1777075069: ext4_xattr_inode_iget:441: inode 12 [ 37.595286][ C1] EXT4-fs (loop3): last error at time 1777075069: ext4_xattr_inode_iget:441: inode 12 [ 37.639528][ T3534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.14: error while reading EA inode 12 err=-117 [ 37.655627][ T3537] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.15: missing EA_INODE flag [ 37.671361][ T3540] loop1: detected capacity change from 0 to 512 [ 37.718418][ T3537] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 37.719106][ T3537] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.15: error while reading EA inode 12 err=-117 [ 37.740485][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 37.740515][ C0] EXT4-fs (loop0): initial error at time 1777075069: ext4_xattr_inode_iget:441: inode 12 [ 37.740553][ C0] EXT4-fs (loop0): last error at time 1777075069: ext4_xattr_inode_iget:441: inode 12 [ 37.883671][ T3534] loop3: lost filesystem error report for type 5 error -117 [ 37.900498][ T3534] EXT4-fs (loop3): 1 orphan inode deleted [ 38.051266][ T3534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.089314][ T3540] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.145563][ T3537] loop0: lost filesystem error report for type 5 error -117 [ 38.206380][ T3537] EXT4-fs (loop0): 1 orphan inode deleted [ 38.231689][ T3537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.261955][ T3537] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 38.269302][ T3540] ------------[ cut here ]------------ [ 38.274817][ T3540] EA inode 11 i_nlink=2 [ 38.274840][ T3540] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.11/3540 [ 38.289614][ T3540] Modules linked in: [ 38.293597][ T3540] CPU: 1 UID: 0 PID: 3540 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT(full) [ 38.302824][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 38.312966][ T3540] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 38.319625][ T3540] Code: 64 60 98 ff 4c 8d 2d 1d a5 7c 05 49 8d 7e 40 e8 14 1f b6 ff 49 8b 6e 40 4c 89 e7 e8 48 1a b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 01 de 03 66 66 66 66 66 66 2e [ 38.339320][ T3540] RSP: 0018:ffffc90001a27778 EFLAGS: 00010246 [ 38.345413][ T3540] RAX: ffff888101c5bdf8 RBX: ffff888107a18dd8 RCX: ffffffff81c0e588 [ 38.353454][ T3540] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff873d8a90 [ 38.361576][ T3540] RBP: 000000000000000b R08: 0001888107a18d8b R09: 0000000000000000 [ 38.369620][ T3540] R10: ffffc90001a276a8 R11: 0001c90001a276a8 R12: ffff888107a18d88 [ 38.377673][ T3540] R13: ffffffff873d8a90 R14: ffff888107a18d40 R15: 0000000000000001 [ 38.385705][ T3540] FS: 00007fd8cefba6c0(0000) GS:ffff8882ae7c9000(0000) knlGS:0000000000000000 [ 38.394744][ T3540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.401384][ T3540] CR2: 0000001b34163fff CR3: 000000011c68e000 CR4: 00000000003506f0 [ 38.409403][ T3540] Call Trace: [ 38.412694][ T3540] [ 38.415726][ T3540] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 38.421738][ T3540] ? errseq_check+0x2c/0x50 [ 38.426267][ T3540] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 38.431789][ T3540] ? ext4_truncate+0x89f/0xa10 [ 38.436590][ T3540] ext4_evict_inode+0xb16/0xe30 [ 38.441561][ T3540] ? __pfx_ext4_evict_inode+0x10/0x10 [ 38.447016][ T3540] evict+0x2af/0x510 [ 38.451056][ T3540] ? __dquot_initialize+0x146/0x7c0 [ 38.456403][ T3540] iput+0x41a/0x580 [ 38.460294][ T3540] ext4_process_orphan+0x1a9/0x1c0 [ 38.465494][ T3540] ext4_orphan_cleanup+0x69c/0x9f0 [ 38.470690][ T3540] ext4_fill_super+0x3408/0x37c0 [ 38.475684][ T3540] ? set_blocksize+0x14c/0x270 [ 38.480703][ T3540] ? setup_bdev_super+0x30e/0x370 [ 38.485867][ T3540] ? __pfx_ext4_fill_super+0x10/0x10 [ 38.491232][ T3540] get_tree_bdev_flags+0x291/0x300 [ 38.496405][ T3540] ? __pfx_ext4_fill_super+0x10/0x10 [ 38.501830][ T3540] get_tree_bdev+0x1f/0x30 [ 38.506330][ T3540] ext4_get_tree+0x1c/0x30 [ 38.510901][ T3540] vfs_get_tree+0x57/0x1d0 [ 38.515414][ T3540] do_new_mount+0x288/0x8d0 [ 38.519994][ T3540] path_mount+0x4d0/0xbc0 [ 38.524351][ T3540] __se_sys_mount+0x28c/0x2e0 [ 38.529107][ T3540] __x64_sys_mount+0x67/0x80 [ 38.533728][ T3540] x64_sys_call+0x2d61/0x3020 [ 38.538602][ T3540] do_syscall_64+0x12c/0x3b0 [ 38.543226][ T3540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.549210][ T3540] RIP: 0033:0x7fd8d09ce04a [ 38.553658][ T3540] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.573545][ T3540] RSP: 002b:00007fd8cefb9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.582086][ T3540] RAX: ffffffffffffffda RBX: 00007fd8cefb9ee0 RCX: 00007fd8d09ce04a [ 38.590116][ T3540] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd8cefb9ea0 [ 38.598199][ T3540] RBP: 00002000000009c0 R08: 00007fd8cefb9ee0 R09: 0000000000800718 [ 38.606233][ T3540] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 38.614315][ T3540] R13: 00007fd8cefb9ea0 R14: 000000000000048d R15: 0000200000000200 [ 38.622396][ T3540] [ 38.625436][ T3540] ---[ end trace 0000000000000000 ]--- [ 38.631498][ T3540] EXT4-fs (loop1): 1 orphan inode deleted [ 38.632764][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.638139][ T3540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.659584][ T3546] loop4: detected capacity change from 0 to 512 [ 38.671961][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.700189][ T3546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.17: missing EA_INODE flag [ 38.764008][ T3553] loop0: detected capacity change from 0 to 512 [ 38.776039][ T3546] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.778334][ T3546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17: error while reading EA inode 12 err=-117 [ 38.787525][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.787545][ C1] EXT4-fs (loop4): initial error at time 1777075070: ext4_xattr_inode_iget:441: inode 12 [ 38.787585][ C1] EXT4-fs (loop4): last error at time 1777075070: ext4_xattr_inode_iget:441: inode 12 [ 38.836016][ T3546] loop4: lost filesystem error report for type 5 error -117 [ 38.837180][ T3546] EXT4-fs (loop4): 1 orphan inode deleted [ 38.851447][ T3546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.869196][ T3556] netlink: 488 bytes leftover after parsing attributes in process `syz.3.16'. [ 38.921368][ T3546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 38.957634][ T3546] bridge1: entered promiscuous mode [ 38.968187][ T3559] FAULT_INJECTION: forcing a failure. [ 38.968187][ T3559] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.970382][ T3546] bridge1: entered allmulticast mode [ 38.999236][ T3553] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'. [ 39.011130][ T3559] CPU: 1 UID: 0 PID: 3559 Comm: syz.2.20 Tainted: G W syzkaller #0 PREEMPT(full) [ 39.011163][ T3559] Tainted: [W]=WARN [ 39.011169][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 39.011180][ T3559] Call Trace: [ 39.011185][ T3559] [ 39.011191][ T3559] __dump_stack+0x1d/0x30 [ 39.011292][ T3559] dump_stack_lvl+0x95/0xd0 [ 39.011319][ T3559] dump_stack+0x15/0x1b [ 39.011339][ T3559] should_fail_ex+0x263/0x280 [ 39.011472][ T3559] should_fail+0xb/0x20 [ 39.011583][ T3559] should_fail_usercopy+0x1a/0x20 [ 39.011605][ T3559] _copy_from_user+0x1c/0xb0 [ 39.011625][ T3559] ___sys_sendmsg+0xc1/0x1e0 [ 39.011664][ T3559] __x64_sys_sendmsg+0xd4/0x160 [ 39.011752][ T3559] x64_sys_call+0x194c/0x3020 [ 39.011788][ T3559] do_syscall_64+0x12c/0x3b0 [ 39.011818][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.011929][ T3559] RIP: 0033:0x7f615f21cdd9 [ 39.011950][ T3559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.011976][ T3559] RSP: 002b:00007f615dc77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.012063][ T3559] RAX: ffffffffffffffda RBX: 00007f615f495fa0 RCX: 00007f615f21cdd9 [ 39.012079][ T3559] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 39.012097][ T3559] RBP: 00007f615dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 39.012114][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.012135][ T3559] R13: 00007f615f496038 R14: 00007f615f495fa0 R15: 00007ffe6b4e9058 [ 39.012161][ T3559] [ 39.041048][ T3546] team0: Port device bridge1 added [ 39.264406][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 39.307001][ T3566] bond1 (unregistering): Released all slaves [ 39.473699][ T3580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 39.568426][ T3584] loop0: detected capacity change from 0 to 128 [ 39.733022][ T3546] syz.4.17 (3546) used greatest stack depth: 10680 bytes left [ 39.786592][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.945587][ T3593] loop0: detected capacity change from 0 to 128 [ 40.674874][ T3610] loop3: detected capacity change from 0 to 1024 [ 40.735081][ T3610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.818720][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.856704][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.959206][ T3622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 40.994713][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.158242][ T3626] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.405878][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 41.405895][ T28] audit: type=1400 audit(1777075073.407:185): avc: denied { write } for pid=3634 comm="syz.3.40" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.467434][ T28] audit: type=1400 audit(1777075073.457:186): avc: denied { ioctl } for pid=3649 comm="syz.0.44" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.582701][ T28] audit: type=1400 audit(1777075073.587:187): avc: denied { create } for pid=3655 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.608811][ T3656] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 41.627394][ T28] audit: type=1400 audit(1777075073.617:188): avc: denied { getopt } for pid=3617 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.781232][ T3662] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.794738][ T3662] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.951115][ T28] audit: type=1400 audit(1777075073.777:189): avc: denied { write } for pid=3659 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.002674][ T3662] EXT4-fs (loop0): 1 orphan inode deleted [ 42.010200][ T3662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.339951][ T3669] set_capacity_and_notify: 2 callbacks suppressed [ 42.339969][ T3669] loop1: detected capacity change from 0 to 512 [ 42.362463][ T3671] loop2: detected capacity change from 0 to 128 [ 42.369078][ T28] audit: type=1400 audit(1777075074.367:190): avc: denied { create } for pid=3668 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.399358][ T28] audit: type=1400 audit(1777075074.367:191): avc: denied { setopt } for pid=3668 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.422126][ T3677] loop4: detected capacity change from 0 to 512 [ 42.428545][ T3669] EXT4-fs (loop1): 1 truncate cleaned up [ 42.438321][ T3669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.461215][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 42.475768][ T28] audit: type=1400 audit(1777075074.477:192): avc: denied { allowed } for pid=3667 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.514345][ T28] audit: type=1400 audit(1777075074.477:193): avc: denied { create } for pid=3667 comm="syz.1.49" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.516281][ T3677] EXT4-fs (loop4): 1 truncate cleaned up [ 42.535473][ T28] audit: type=1400 audit(1777075074.477:194): avc: denied { read } for pid=3667 comm="syz.1.49" path="socket:[5097]" dev="sockfs" ino=5097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.566318][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.578384][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.594674][ T3683] loop3: detected capacity change from 0 to 512 [ 42.627577][ T3687] loop1: detected capacity change from 0 to 512 [ 42.636892][ T3683] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 42.675549][ T3683] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 42.702873][ T3683] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.54: Corrupt directory, running e2fsck is recommended [ 42.718401][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 42.743410][ T3687] EXT4-fs (loop1): 1 truncate cleaned up [ 42.759370][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.771490][ T3683] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 42.989281][ T3683] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.54: corrupted in-inode xattr: invalid ea_ino [ 43.052019][ T3687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 43.071342][ T3683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.071868][ T3683] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.54: couldn't read orphan inode 15 (err -117) [ 43.092706][ T3683] loop3: lost filesystem error report for type 5 error -117 [ 43.093576][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.354151][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.366135][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.384711][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.437600][ T3695] loop4: detected capacity change from 0 to 512 [ 43.448949][ T3697] loop3: detected capacity change from 0 to 512 [ 43.463122][ T3700] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 43.476522][ T3695] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.55: missing EA_INODE flag [ 43.488220][ T3699] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 43.488223][ T3697] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.56: missing EA_INODE flag [ 43.517797][ T3700] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 43.529698][ T3695] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.530744][ T3695] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.55: error while reading EA inode 12 err=-117 [ 43.539297][ T3697] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 43.540026][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 43.556882][ T3697] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.56: error while reading EA inode 12 err=-117 [ 43.561139][ C0] EXT4-fs (loop4): initial error at time 1777075075: ext4_xattr_inode_iget:441 [ 43.561149][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 43.561162][ C0] : inode 12 [ 43.561166][ C1] EXT4-fs (loop3): initial error at time 1777075075: ext4_xattr_inode_iget:441 [ 43.561178][ C0] EXT4-fs (loop4): last error at time 1777075075: ext4_xattr_inode_iget:441 [ 43.561191][ C1] : inode 12 [ 43.561197][ C0] : inode 12 [ 43.561203][ C1] EXT4-fs (loop3): last error at time 1777075075: ext4_xattr_inode_iget:441: inode 12 [ 43.597306][ T3695] loop4: lost filesystem error report for type 5 error -117 [ 43.600840][ T3697] loop3: lost filesystem error report for type 5 error -117 [ 43.627483][ T3695] EXT4-fs (loop4): 1 orphan inode deleted [ 43.654944][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.663198][ T3697] EXT4-fs (loop3): 1 orphan inode deleted [ 43.680455][ T3706] FAULT_INJECTION: forcing a failure. [ 43.680455][ T3706] name failslab, interval 1, probability 0, space 0, times 0 [ 43.687896][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.705370][ T3706] CPU: 0 UID: 0 PID: 3706 Comm: syz.1.58 Tainted: G W syzkaller #0 PREEMPT(full) [ 43.705464][ T3706] Tainted: [W]=WARN [ 43.705521][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 43.705559][ T3706] Call Trace: [ 43.705605][ T3706] [ 43.705695][ T3706] __dump_stack+0x1d/0x30 [ 43.705811][ T3706] dump_stack_lvl+0x95/0xd0 [ 43.705898][ T3706] dump_stack+0x15/0x1b [ 43.705965][ T3706] should_fail_ex+0x263/0x280 [ 43.706119][ T3706] should_failslab+0x8c/0xb0 [ 43.706178][ T3706] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 43.706279][ T3706] ? __alloc_skb+0x2d6/0x690 [ 43.706348][ T3706] ? __account_obj_stock+0x3d5/0x590 [ 43.706458][ T3706] __alloc_skb+0x2d6/0x690 [ 43.706526][ T3706] ? __alloc_skb+0x200/0x690 [ 43.706593][ T3706] alloc_skb_with_frags+0x7e/0x3d0 [ 43.706686][ T3706] ? avc_has_perm_noaudit+0xab/0x130 [ 43.706802][ T3706] sock_alloc_send_pskb+0x44d/0x500 [ 43.706926][ T3706] unix_dgram_sendmsg+0x391/0x1050 [ 43.707026][ T3706] ? selinux_socket_sendmsg+0x192/0x1c0 [ 43.707098][ T3706] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 43.707190][ T3706] ____sys_sendmsg+0x563/0x5b0 [ 43.707362][ T3706] ___sys_sendmsg+0x195/0x1e0 [ 43.707477][ T3706] __x64_sys_sendmsg+0xd4/0x160 [ 43.707576][ T3706] x64_sys_call+0x194c/0x3020 [ 43.707749][ T3706] do_syscall_64+0x12c/0x3b0 [ 43.707877][ T3706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.707944][ T3706] RIP: 0033:0x7fd8d09ccdd9 [ 43.708033][ T3706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.708082][ T3706] RSP: 002b:00007fd8cf41f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.708145][ T3706] RAX: ffffffffffffffda RBX: 00007fd8d0c45fa0 RCX: 00007fd8d09ccdd9 [ 43.708205][ T3706] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 43.708238][ T3706] RBP: 00007fd8cf41f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.708276][ T3706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.708314][ T3706] R13: 00007fd8d0c46038 R14: 00007fd8d0c45fa0 R15: 00007ffe2b2435e8 [ 43.708444][ T3706] [ 43.959679][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.006742][ T3711] loop2: detected capacity change from 0 to 512 [ 44.032318][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.038529][ T3709] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 44.154584][ T3716] loop1: detected capacity change from 0 to 2368 [ 44.170029][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 44.179145][ T3716] iso9660: Unknown parameter 'ŠXðÓ-¥¤ô' [ 44.189060][ T3711] loop2: detected capacity change from 0 to 2048 [ 44.200871][ T3722] netlink: 'syz.4.65': attribute type 2 has an invalid length. [ 44.234744][ T3711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.265303][ T3724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.66: missing EA_INODE flag [ 44.265336][ T3724] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 44.268491][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 44.268511][ C1] EXT4-fs (loop3): initial error at time 1777075076: ext4_xattr_inode_iget:441: inode 12 [ 44.268540][ C1] EXT4-fs (loop3): last error at time 1777075076: ext4_xattr_inode_iget:441: inode 12 [ 44.268646][ T3724] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.66: error while reading EA inode 12 err=-117 [ 44.268668][ T3724] loop3: lost filesystem error report for type 5 error -117 [ 44.268832][ T3724] EXT4-fs (loop3): 1 orphan inode deleted [ 44.269315][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.353774][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 44.384043][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.515076][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.539770][ T3747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.559826][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.563411][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.563512][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.771660][ T3662] syz.0.47 (3662) used greatest stack depth: 9232 bytes left [ 44.773493][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.996695][ T3761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 45.413907][ T3766] FAULT_INJECTION: forcing a failure. [ 45.413907][ T3766] name failslab, interval 1, probability 0, space 0, times 0 [ 45.463630][ T3768] FAT-fs (loop1): bogus number of reserved sectors [ 45.478619][ T3766] CPU: 0 UID: 0 PID: 3766 Comm: syz.0.77 Tainted: G W syzkaller #0 PREEMPT(full) [ 45.478659][ T3766] Tainted: [W]=WARN [ 45.478668][ T3766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 45.478719][ T3766] Call Trace: [ 45.478738][ T3766] [ 45.478748][ T3766] __dump_stack+0x1d/0x30 [ 45.478780][ T3766] dump_stack_lvl+0x95/0xd0 [ 45.478805][ T3766] dump_stack+0x15/0x1b [ 45.478842][ T3766] should_fail_ex+0x263/0x280 [ 45.478874][ T3766] should_failslab+0x8c/0xb0 [ 45.478896][ T3766] __kmalloc_noprof+0xb8/0x4d0 [ 45.478995][ T3766] ? bitmap_zalloc+0x29/0x40 [ 45.479027][ T3766] bitmap_zalloc+0x29/0x40 [ 45.479058][ T3766] evdev_ioctl_handler+0xa95/0x16d0 [ 45.479141][ T3766] ? __fget_files+0x184/0x1c0 [ 45.479169][ T3766] ? mutex_lock+0x57/0x90 [ 45.479188][ T3766] ? __pfx_evdev_ioctl+0x10/0x10 [ 45.479204][ T3766] evdev_ioctl+0x24/0x30 [ 45.479247][ T3766] __se_sys_ioctl+0xce/0x140 [ 45.479426][ T3766] __x64_sys_ioctl+0x43/0x50 [ 45.479464][ T3766] x64_sys_call+0x1563/0x3020 [ 45.479491][ T3766] do_syscall_64+0x12c/0x3b0 [ 45.479592][ T3766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.479618][ T3766] RIP: 0033:0x7fe8fdd2cdd9 [ 45.479636][ T3766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.479673][ T3766] RSP: 002b:00007fe8fc77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.479692][ T3766] RAX: ffffffffffffffda RBX: 00007fe8fdfa5fa0 RCX: 00007fe8fdd2cdd9 [ 45.479773][ T3766] RDX: 0000200000000240 RSI: 0000000040104593 RDI: 0000000000000003 [ 45.479795][ T3766] RBP: 00007fe8fc77f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.479905][ T3766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.479920][ T3766] R13: 00007fe8fdfa6038 R14: 00007fe8fdfa5fa0 R15: 00007fff4be6f3f8 [ 45.479939][ T3766] [ 45.480067][ T3768] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.680221][ T3768] FAT-fs (loop1): Can't find a valid FAT filesystem [ 45.704153][ T3768] netlink: 64 bytes leftover after parsing attributes in process `syz.1.78'. [ 45.952404][ T3793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 46.047480][ T3795] siw: device registration error -23 [ 46.200506][ T3795] EXT4-fs (loop2): 1 orphan inode deleted [ 46.219022][ T3795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.409632][ T28] kauditd_printk_skb: 523 callbacks suppressed [ 46.409647][ T28] audit: type=1326 audit(1777075078.417:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.503508][ T28] audit: type=1326 audit(1777075078.447:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.528949][ T28] audit: type=1326 audit(1777075078.447:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.552269][ T28] audit: type=1326 audit(1777075078.447:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.577624][ T28] audit: type=1326 audit(1777075078.447:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.670933][ T28] audit: type=1326 audit(1777075078.447:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.694334][ T28] audit: type=1326 audit(1777075078.447:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.717703][ T28] audit: type=1326 audit(1777075078.447:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.749340][ T28] audit: type=1326 audit(1777075078.457:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.798921][ T28] audit: type=1326 audit(1777075078.467:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 46.898757][ T3803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3803 comm=syz.3.89 [ 46.914217][ T3803] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 46.925939][ T3803] netlink: 5 bytes leftover after parsing attributes in process `syz.3.89'. [ 46.958133][ T3803] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.996968][ T3803] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.013613][ T3803] EXT4-fs (loop3): mount failed [ 47.015977][ T3793] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.289003][ T3818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 47.814009][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.081061][ T3824] set_capacity_and_notify: 7 callbacks suppressed [ 48.081146][ T3824] loop0: detected capacity change from 0 to 128 [ 48.782125][ T3832] __nla_validate_parse: 1 callbacks suppressed [ 48.782141][ T3832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 49.003575][ T3834] loop3: detected capacity change from 0 to 128 [ 49.185744][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.327416][ T3839] siw: device registration error -23 [ 49.360800][ T3839] loop4: detected capacity change from 0 to 512 [ 49.412678][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 49.470143][ T3839] EXT4-fs (loop4): 1 orphan inode deleted [ 49.477589][ T3839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.052829][ T3851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3851 comm=syz.0.103 [ 50.074832][ T3851] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 50.088747][ T3851] netlink: 5 bytes leftover after parsing attributes in process `syz.0.103'. [ 50.237821][ T3851] loop0: detected capacity change from 0 to 512 [ 50.248463][ T3851] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.385061][ T3851] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.405148][ T3851] EXT4-fs (loop0): mount failed [ 51.246688][ T3865] loop0: detected capacity change from 0 to 512 [ 51.299855][ T3865] EXT4-fs (loop0): 1 truncate cleaned up [ 51.347934][ T3865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.452908][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 51.517662][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.761638][ T3873] siw: device registration error -23 [ 51.777650][ T3873] loop3: detected capacity change from 0 to 512 [ 51.813297][ T3873] EXT4-fs (loop3): 1 orphan inode deleted [ 51.834009][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.246558][ T3880] loop2: detected capacity change from 0 to 128 [ 52.389245][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.448595][ T28] kauditd_printk_skb: 528 callbacks suppressed [ 52.448608][ T28] audit: type=1400 audit(1777075084.447:1256): avc: denied { ioctl } for pid=3884 comm="syz.4.115" path="socket:[6462]" dev="sockfs" ino=6462 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.603808][ T28] audit: type=1400 audit(1777075084.647:1257): avc: denied { mount } for pid=3884 comm="syz.4.115" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 53.950627][ T3893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 54.009421][ T28] audit: type=1400 audit(1777075084.647:1258): avc: denied { create } for pid=3884 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.048014][ T3895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3895 comm=syz.0.116 [ 54.103262][ T3895] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 54.111650][ T3895] netlink: 5 bytes leftover after parsing attributes in process `syz.0.116'. [ 54.215122][ T3895] loop0: detected capacity change from 0 to 512 [ 54.241936][ T3895] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.251627][ T3903] loop4: detected capacity change from 0 to 512 [ 54.272306][ T3903] EXT4-fs (loop4): 1 truncate cleaned up [ 54.280923][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.316272][ T3910] loop1: detected capacity change from 0 to 512 [ 54.324573][ T3895] EXT4-fs (loop0): failed to initialize system zone (-117) [ 54.329391][ T28] audit: type=1400 audit(1777075086.317:1259): avc: denied { create } for pid=3902 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.334902][ T3895] EXT4-fs (loop0): mount failed [ 54.352353][ T3903] 9p: Bad value for 'rfdno' [ 54.366958][ T28] audit: type=1400 audit(1777075086.357:1260): avc: denied { mounton } for pid=3902 comm="syz.4.120" path="/21/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.366984][ T28] audit: type=1400 audit(1777075086.357:1261): avc: denied { write } for pid=3902 comm="syz.4.120" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.367008][ T28] audit: type=1400 audit(1777075086.357:1262): avc: denied { open } for pid=3902 comm="syz.4.120" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.434889][ T3910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.122: missing EA_INODE flag [ 54.434921][ T3910] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 54.435096][ T3910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.122: error while reading EA inode 12 err=-117 [ 54.435153][ T3910] loop1: lost filesystem error report for type 5 error -117 [ 54.435367][ T3910] EXT4-fs (loop1): 1 orphan inode deleted [ 54.435854][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.536722][ T3918] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 54.549263][ T3903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.120'. [ 54.617275][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.631867][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.070508][ T3928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 55.719420][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 55.905810][ T3938] loop4: detected capacity change from 0 to 512 [ 56.564008][ T3938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.129: missing EA_INODE flag [ 56.579166][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.590394][ T3938] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 56.590517][ T3938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.129: error while reading EA inode 12 err=-117 [ 56.599778][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.599808][ C0] EXT4-fs (loop4): initial error at time 1777075088: ext4_xattr_inode_iget:441: inode 12 [ 56.599868][ C0] EXT4-fs (loop4): last error at time 1777075088: ext4_xattr_inode_iget:441: inode 12 [ 56.644953][ T3938] loop4: lost filesystem error report for type 5 error -117 [ 56.662312][ T3938] EXT4-fs (loop4): 1 orphan inode deleted [ 56.676958][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.692980][ T3944] loop1: detected capacity change from 0 to 128 [ 56.703657][ T3950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3950 comm=syz.0.134 [ 56.723910][ T3950] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 56.733048][ T3950] netlink: 5 bytes leftover after parsing attributes in process `syz.0.134'. [ 56.785140][ T3950] loop0: detected capacity change from 0 to 512 [ 56.917348][ T3950] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.084188][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 57.135426][ T3950] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.216105][ T3950] EXT4-fs (loop0): mount failed [ 57.326337][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.669897][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 57.708159][ T3970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 58.761530][ T3984] loop0: detected capacity change from 0 to 512 [ 58.781145][ T3984] EXT4-fs (loop0): 1 orphan inode deleted [ 58.788775][ T3984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.514232][ T3994] FAULT_INJECTION: forcing a failure. [ 59.514232][ T3994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.528963][ T3994] CPU: 0 UID: 0 PID: 3994 Comm: syz.3.149 Tainted: G W syzkaller #0 PREEMPT(full) [ 59.529000][ T3994] Tainted: [W]=WARN [ 59.529010][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 59.529027][ T3994] Call Trace: [ 59.529036][ T3994] [ 59.529113][ T3994] __dump_stack+0x1d/0x30 [ 59.529146][ T3994] dump_stack_lvl+0x95/0xd0 [ 59.529224][ T3994] dump_stack+0x15/0x1b [ 59.529288][ T3994] should_fail_ex+0x263/0x280 [ 59.529343][ T3994] should_fail+0xb/0x20 [ 59.529455][ T3994] should_fail_usercopy+0x1a/0x20 [ 59.529473][ T3994] _copy_to_user+0x20/0xa0 [ 59.529499][ T3994] simple_read_from_buffer+0xb5/0x130 [ 59.529529][ T3994] proc_fail_nth_read+0x10e/0x150 [ 59.529660][ T3994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.529693][ T3994] vfs_read+0x1ab/0x7f0 [ 59.529735][ T3994] ? __rcu_read_unlock+0x4e/0x70 [ 59.529759][ T3994] ? __fget_files+0x184/0x1c0 [ 59.529856][ T3994] ? mutex_lock+0x57/0x90 [ 59.529881][ T3994] ksys_read+0xdc/0x1a0 [ 59.529994][ T3994] __x64_sys_read+0x40/0x50 [ 59.530037][ T3994] x64_sys_call+0x2886/0x3020 [ 59.530070][ T3994] do_syscall_64+0x12c/0x3b0 [ 59.530206][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.530235][ T3994] RIP: 0033:0x7fd9dcbed60e [ 59.530256][ T3994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.530280][ T3994] RSP: 002b:00007fd9db686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.530303][ T3994] RAX: ffffffffffffffda RBX: 00007fd9db6876c0 RCX: 00007fd9dcbed60e [ 59.530385][ T3994] RDX: 000000000000000f RSI: 00007fd9db6870a0 RDI: 0000000000000004 [ 59.530401][ T3994] RBP: 00007fd9db687090 R08: 0000000000000000 R09: 0000000000000000 [ 59.530418][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.530434][ T3994] R13: 00007fd9dcea6038 R14: 00007fd9dcea5fa0 R15: 00007fffdea643a8 [ 59.530457][ T3994] [ 59.775778][ T4000] loop3: detected capacity change from 0 to 128 [ 59.786377][ T28] audit: type=1400 audit(1777075091.787:1263): avc: denied { sqpoll } for pid=3991 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.809988][ T4003] loop2: detected capacity change from 0 to 128 [ 59.821638][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 59.838087][ T3998] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 60.059761][ T3997] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 60.920957][ T4012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'. [ 60.954301][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 61.062386][ T4010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 61.156481][ T4021] netlink: 76 bytes leftover after parsing attributes in process `syz.4.155'. [ 61.179473][ T4021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.155'. [ 61.199271][ T28] audit: type=1400 audit(1777075093.197:1264): avc: denied { name_bind } for pid=4020 comm="syz.4.155" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.234885][ T28] audit: type=1400 audit(1777075093.197:1265): avc: denied { node_bind } for pid=4020 comm="syz.4.155" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 61.293484][ T4021] loop4: detected capacity change from 0 to 256 [ 61.304326][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.367913][ T4023] loop0: detected capacity change from 0 to 128 [ 61.452958][ T28] audit: type=1400 audit(1777075093.457:1266): avc: denied { module_request } for pid=4020 comm="syz.4.155" kmod="fs-binder" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.822907][ T4032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 61.885423][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 61.894462][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 62.618400][ T4041] loop2: detected capacity change from 0 to 128 [ 62.646312][ T4043] loop4: detected capacity change from 0 to 512 [ 62.680057][ T4043] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.163: missing EA_INODE flag [ 62.834511][ T4043] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 62.834733][ T4043] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.163: error while reading EA inode 12 err=-117 [ 62.843929][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.843944][ C0] EXT4-fs (loop4): initial error at time 1777075094: ext4_xattr_inode_iget:441: inode 12 [ 62.843972][ C0] EXT4-fs (loop4): last error at time 1777075094: ext4_xattr_inode_iget:441: inode 12 [ 63.295526][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 63.538996][ T4054] loop3: detected capacity change from 0 to 512 [ 63.560941][ T4043] loop4: lost filesystem error report for type 5 error -117 [ 63.561154][ T4043] EXT4-fs (loop4): 1 orphan inode deleted [ 63.592728][ T4054] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.164: missing EA_INODE flag [ 63.638778][ T4043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.654913][ T4054] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 63.655098][ T4054] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.164: error while reading EA inode 12 err=-117 [ 63.655128][ T4054] loop3: lost filesystem error report for type 5 error -117 [ 63.655279][ T4054] EXT4-fs (loop3): 1 orphan inode deleted [ 63.655731][ T4054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.766995][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.866594][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.887319][ T4069] siw: device registration error -23 [ 63.919211][ T4069] loop2: detected capacity change from 0 to 512 [ 63.977575][ T4069] EXT4-fs (loop2): 1 orphan inode deleted [ 63.990927][ T4069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.079587][ T4074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4074 comm=syz.3.172 [ 64.101476][ T28] audit: type=1400 audit(1777075096.097:1267): avc: denied { bind } for pid=4075 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.139916][ T4074] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 64.164208][ T28] audit: type=1400 audit(1777075096.097:1268): avc: denied { write } for pid=4075 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.200261][ T4078] loop3: detected capacity change from 0 to 512 [ 64.230769][ T4078] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.247962][ T28] audit: type=1400 audit(1777075096.097:1269): avc: denied { read } for pid=4075 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.267289][ T28] audit: type=1400 audit(1777075096.107:1270): avc: denied { getopt } for pid=4075 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.297113][ T4078] EXT4-fs (loop3): failed to initialize system zone (-117) [ 64.297151][ T4071] siw: device registration error -23 [ 64.311930][ T4071] loop1: detected capacity change from 0 to 512 [ 64.319374][ T4078] EXT4-fs (loop3): mount failed [ 64.364001][ T4071] EXT4-fs (loop1): 1 orphan inode deleted [ 64.374573][ T28] audit: type=1400 audit(1777075096.377:1271): avc: denied { bind } for pid=4082 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.400775][ T4071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.412897][ T28] audit: type=1400 audit(1777075096.397:1272): avc: denied { setopt } for pid=4082 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.571315][ T4083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.714368][ T4083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.810089][ T4083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.889956][ T4083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.999198][ T339] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.010925][ T339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.022269][ T339] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045669][ T339] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.099765][ T4096] loop4: detected capacity change from 0 to 128 [ 65.406060][ T4099] __nla_validate_parse: 1 callbacks suppressed [ 65.406075][ T4099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.177'. [ 65.593509][ T4101] loop3: detected capacity change from 0 to 128 [ 65.703057][ T4103] loop0: detected capacity change from 0 to 128 [ 66.144223][ T4104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 66.162826][ T4108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'. [ 66.595617][ T4111] loop4: detected capacity change from 0 to 1024 [ 66.613905][ T4111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.647183][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.699359][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.732280][ T4119] loop4: detected capacity change from 0 to 512 [ 66.744753][ T4117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 66.789817][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.887654][ T4124] FAULT_INJECTION: forcing a failure. [ 66.887654][ T4124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.915801][ T4122] loop4: detected capacity change from 0 to 512 [ 66.924665][ T4124] CPU: 0 UID: 0 PID: 4124 Comm: syz.2.185 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.924693][ T4124] Tainted: [W]=WARN [ 66.924768][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.924782][ T4124] Call Trace: [ 66.924789][ T4124] [ 66.924797][ T4124] __dump_stack+0x1d/0x30 [ 66.924826][ T4124] dump_stack_lvl+0x95/0xd0 [ 66.924901][ T4124] dump_stack+0x15/0x1b [ 66.924937][ T4124] should_fail_ex+0x263/0x280 [ 66.925050][ T4124] should_fail+0xb/0x20 [ 66.925153][ T4124] should_fail_usercopy+0x1a/0x20 [ 66.925176][ T4124] _copy_from_iter+0xcf/0xea0 [ 66.925242][ T4124] ? skb_set_owner_w+0x19b/0x200 [ 66.925270][ T4124] ? sock_alloc_send_pskb+0x469/0x500 [ 66.925306][ T4124] skb_copy_datagram_from_iter+0xb2/0x480 [ 66.925359][ T4124] ? skb_put+0xa9/0xf0 [ 66.925386][ T4124] unix_dgram_sendmsg+0x40f/0x1050 [ 66.925414][ T4124] ? selinux_socket_sendmsg+0x192/0x1c0 [ 66.925522][ T4124] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 66.925541][ T4124] ____sys_sendmsg+0x563/0x5b0 [ 66.925633][ T4124] ___sys_sendmsg+0x195/0x1e0 [ 66.925677][ T4124] __x64_sys_sendmsg+0xd4/0x160 [ 66.925705][ T4124] x64_sys_call+0x194c/0x3020 [ 66.925737][ T4124] do_syscall_64+0x12c/0x3b0 [ 66.925836][ T4124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.925855][ T4124] RIP: 0033:0x7f615f21cdd9 [ 66.925869][ T4124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.925885][ T4124] RSP: 002b:00007f615dc77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.925930][ T4124] RAX: ffffffffffffffda RBX: 00007f615f495fa0 RCX: 00007f615f21cdd9 [ 66.925946][ T4124] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.925962][ T4124] RBP: 00007f615dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 66.925973][ T4124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.925983][ T4124] R13: 00007f615f496038 R14: 00007f615f495fa0 R15: 00007ffe6b4e9058 [ 66.926015][ T4124] [ 66.927016][ T4122] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.150297][ T4122] EXT4-fs (loop4): 1 truncate cleaned up [ 67.156496][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.188793][ T28] audit: type=1400 audit(1777075099.177:1273): avc: denied { setattr } for pid=4121 comm="syz.4.184" path="/34/bus" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.260062][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.288965][ T28] audit: type=1400 audit(1777075099.287:1274): avc: denied { create } for pid=4129 comm="syz.2.187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.358539][ T28] audit: type=1400 audit(1777075099.287:1275): avc: denied { write } for pid=4129 comm="syz.2.187" name="file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.390305][ T28] audit: type=1400 audit(1777075099.287:1276): avc: denied { open } for pid=4129 comm="syz.2.187" path="/33/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.433085][ T28] audit: type=1400 audit(1777075099.387:1277): avc: denied { bind } for pid=4129 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.474519][ T28] audit: type=1400 audit(1777075099.387:1278): avc: denied { listen } for pid=4129 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.523729][ T28] audit: type=1400 audit(1777075099.397:1279): avc: denied { accept } for pid=4129 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.557973][ T4117] loop3: detected capacity change from 0 to 8192 [ 67.568777][ T4117] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.682942][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.696184][ T28] audit: type=1400 audit(1777075099.697:1280): avc: denied { unlink } for pid=3326 comm="syz-executor" name="file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.748687][ T4144] loop0: detected capacity change from 0 to 128 [ 67.814654][ T4146] loop2: detected capacity change from 0 to 128 [ 67.859257][ T4148] loop1: detected capacity change from 0 to 512 [ 67.883839][ T4148] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.193: missing EA_INODE flag [ 67.896083][ T4148] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.908603][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.924712][ C0] EXT4-fs (loop1): initial error at time 1777075099: ext4_xattr_inode_iget:441: inode 12 [ 67.934894][ C0] EXT4-fs (loop1): last error at time 1777075099: ext4_xattr_inode_iget:441: inode 12 [ 67.968091][ T4148] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.193: error while reading EA inode 12 err=-117 [ 67.997075][ T4148] loop1: lost filesystem error report for type 5 error -117 [ 67.997301][ T4148] EXT4-fs (loop1): 1 orphan inode deleted [ 68.042077][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 68.057328][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.091409][ T4153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 68.233177][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.255717][ T4156] FAULT_INJECTION: forcing a failure. [ 68.255717][ T4156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.273224][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 68.282723][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.1.194 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.282767][ T4156] Tainted: [W]=WARN [ 68.282845][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.282932][ T4156] Call Trace: [ 68.282937][ T4156] [ 68.282943][ T4156] __dump_stack+0x1d/0x30 [ 68.282973][ T4156] dump_stack_lvl+0x95/0xd0 [ 68.283001][ T4156] dump_stack+0x15/0x1b [ 68.283028][ T4156] should_fail_ex+0x263/0x280 [ 68.283098][ T4156] should_fail+0xb/0x20 [ 68.283129][ T4156] should_fail_usercopy+0x1a/0x20 [ 68.283151][ T4156] _copy_from_user+0x1c/0xb0 [ 68.283198][ T4156] rtc_dev_ioctl+0x467/0xc60 [ 68.283258][ T4156] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 68.283297][ T4156] __se_sys_ioctl+0xce/0x140 [ 68.283368][ T4156] __x64_sys_ioctl+0x43/0x50 [ 68.283408][ T4156] x64_sys_call+0x1563/0x3020 [ 68.283444][ T4156] do_syscall_64+0x12c/0x3b0 [ 68.283491][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.283523][ T4156] RIP: 0033:0x7fd8d09ccdd9 [ 68.283541][ T4156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.283562][ T4156] RSP: 002b:00007fd8cf41f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.283580][ T4156] RAX: ffffffffffffffda RBX: 00007fd8d0c45fa0 RCX: 00007fd8d09ccdd9 [ 68.283597][ T4156] RDX: 0000200000000040 RSI: 0000000040187014 RDI: 0000000000000008 [ 68.283656][ T4156] RBP: 00007fd8cf41f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.283671][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.283683][ T4156] R13: 00007fd8d0c46038 R14: 00007fd8d0c45fa0 R15: 00007ffe2b2435e8 [ 68.283701][ T4156] [ 68.600937][ T4168] siw: device registration error -23 [ 68.705655][ T4168] EXT4-fs (loop3): 1 orphan inode deleted [ 68.713909][ T4168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.759898][ T28] audit: type=1400 audit(1777075100.587:1281): avc: denied { connect } for pid=4166 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.855661][ T4172] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.200: missing EA_INODE flag [ 68.922069][ T28] audit: type=1400 audit(1777075100.587:1282): avc: denied { getopt } for pid=4166 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.946029][ T4172] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.948467][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 68.964179][ C1] EXT4-fs (loop1): initial error at time 1777075100: ext4_xattr_inode_iget:441: inode 12 [ 68.974053][ C1] EXT4-fs (loop1): last error at time 1777075100: ext4_xattr_inode_iget:441: inode 12 [ 68.988534][ T4172] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.200: error while reading EA inode 12 err=-117 [ 69.001221][ T4172] loop1: lost filesystem error report for type 5 error -117 [ 69.001967][ T4172] EXT4-fs (loop1): 1 orphan inode deleted [ 69.019235][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.108736][ T4172] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 69.134957][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.323776][ T4187] 9p: Bad value for 'wfdno' [ 69.676362][ T4193] netlink: 'syz.1.205': attribute type 21 has an invalid length. [ 69.707670][ T4193] netlink: 156 bytes leftover after parsing attributes in process `syz.1.205'. [ 70.227151][ T4201] FAULT_INJECTION: forcing a failure. [ 70.227151][ T4201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.333783][ T4201] CPU: 1 UID: 0 PID: 4201 Comm: syz.1.210 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.333822][ T4201] Tainted: [W]=WARN [ 70.333828][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.333840][ T4201] Call Trace: [ 70.333846][ T4201] [ 70.333874][ T4201] __dump_stack+0x1d/0x30 [ 70.333905][ T4201] dump_stack_lvl+0x95/0xd0 [ 70.333939][ T4201] dump_stack+0x15/0x1b [ 70.333968][ T4201] should_fail_ex+0x263/0x280 [ 70.334015][ T4201] should_fail+0xb/0x20 [ 70.334046][ T4201] should_fail_usercopy+0x1a/0x20 [ 70.334149][ T4201] _copy_from_user+0x1c/0xb0 [ 70.334168][ T4201] ___sys_recvmsg+0xaa/0x3b0 [ 70.334284][ T4201] do_recvmmsg+0x1ef/0x560 [ 70.334317][ T4201] ? fput+0x8f/0xc0 [ 70.334346][ T4201] __x64_sys_recvmmsg+0xe5/0x170 [ 70.334445][ T4201] x64_sys_call+0x80f/0x3020 [ 70.334480][ T4201] do_syscall_64+0x12c/0x3b0 [ 70.334585][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.334610][ T4201] RIP: 0033:0x7fd8d09ccdd9 [ 70.334628][ T4201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.334648][ T4201] RSP: 002b:00007fd8cf41f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 70.334677][ T4201] RAX: ffffffffffffffda RBX: 00007fd8d0c45fa0 RCX: 00007fd8d09ccdd9 [ 70.334693][ T4201] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000003 [ 70.334708][ T4201] RBP: 00007fd8cf41f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.334723][ T4201] R10: 000000000001822b R11: 0000000000000246 R12: 0000000000000001 [ 70.334764][ T4201] R13: 00007fd8d0c46038 R14: 00007fd8d0c45fa0 R15: 00007ffe2b2435e8 [ 70.334786][ T4201] [ 70.704216][ T4208] set_capacity_and_notify: 2 callbacks suppressed [ 70.704232][ T4208] loop1: detected capacity change from 0 to 128 [ 71.622300][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.634686][ T4218] loop0: detected capacity change from 0 to 128 [ 71.756478][ T4225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'. [ 71.810176][ T4227] loop2: detected capacity change from 0 to 128 [ 71.884192][ T4231] loop3: detected capacity change from 0 to 512 [ 72.007813][ T4231] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.218: missing EA_INODE flag [ 72.024032][ T4233] loop4: detected capacity change from 0 to 764 [ 72.032773][ T4233] ======================================================= [ 72.032773][ T4233] WARNING: The mand mount option has been deprecated and [ 72.032773][ T4233] and is ignored by this kernel. Remove the mand [ 72.032773][ T4233] option from the mount to silence this warning. [ 72.032773][ T4233] ======================================================= [ 72.073929][ T4231] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 72.078475][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 72.094069][ C1] EXT4-fs (loop3): initial error at time 1777075104: ext4_xattr_inode_iget:441: inode 12 [ 72.103960][ C1] EXT4-fs (loop3): last error at time 1777075104: ext4_xattr_inode_iget:441: inode 12 [ 72.225901][ T4239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 72.239058][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 72.239070][ T28] audit: type=1400 audit(1777075104.087:1290): avc: denied { mount } for pid=4232 comm="syz.4.219" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 72.289479][ T4231] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.218: error while reading EA inode 12 err=-117 [ 72.321814][ T4242] rock: directory entry would overflow storage [ 72.406710][ T4231] loop3: lost filesystem error report for type 5 error -117 [ 72.407229][ T4231] EXT4-fs (loop3): 1 orphan inode deleted [ 72.467800][ T4242] rock: sig=0x4f50, size=4, remaining=3 [ 72.537177][ T28] audit: type=1326 audit(1777075104.307:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b166cdd9 code=0x7ffc0000 [ 72.585746][ T4231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.602576][ T4242] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 72.715597][ T28] audit: type=1326 audit(1777075104.307:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b166cdd9 code=0x7ffc0000 [ 72.739009][ T28] audit: type=1326 audit(1777075104.317:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 72.762165][ T28] audit: type=1326 audit(1777075104.397:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb3b166cc07 code=0x7ffc0000 [ 72.774606][ T4244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 72.785632][ T28] audit: type=1326 audit(1777075104.397:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 72.785664][ T28] audit: type=1326 audit(1777075104.397:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb3b162d60e code=0x7ffc0000 [ 72.785697][ T28] audit: type=1326 audit(1777075104.397:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b166cdd9 code=0x7ffc0000 [ 72.785853][ T28] audit: type=1326 audit(1777075104.427:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b166cdd9 code=0x7ffc0000 [ 72.785886][ T28] audit: type=1326 audit(1777075104.427:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4232 comm="syz.4.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b166cdd9 code=0x7ffc0000 [ 72.933831][ T4248] FAULT_INJECTION: forcing a failure. [ 72.933831][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.951369][ T4248] CPU: 1 UID: 0 PID: 4248 Comm: syz.2.221 Tainted: G W syzkaller #0 PREEMPT(full) [ 72.951424][ T4248] Tainted: [W]=WARN [ 72.951432][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.951446][ T4248] Call Trace: [ 72.951454][ T4248] [ 72.951463][ T4248] __dump_stack+0x1d/0x30 [ 72.951496][ T4248] dump_stack_lvl+0x95/0xd0 [ 72.951531][ T4248] dump_stack+0x15/0x1b [ 72.951561][ T4248] should_fail_ex+0x263/0x280 [ 72.951668][ T4248] should_fail+0xb/0x20 [ 72.951733][ T4248] should_fail_usercopy+0x1a/0x20 [ 72.951755][ T4248] _copy_to_user+0x20/0xa0 [ 72.951779][ T4248] simple_read_from_buffer+0xb5/0x130 [ 72.951814][ T4248] proc_fail_nth_read+0x10e/0x150 [ 72.951900][ T4248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.951938][ T4248] vfs_read+0x1ab/0x7f0 [ 72.952019][ T4248] ? put_event+0x61/0x80 [ 72.952042][ T4248] ? perf_pending_task+0x1df/0x210 [ 72.952152][ T4248] ? task_work_run+0x169/0x1a0 [ 72.952182][ T4248] ksys_read+0xdc/0x1a0 [ 72.952218][ T4248] __x64_sys_read+0x40/0x50 [ 72.952254][ T4248] x64_sys_call+0x2886/0x3020 [ 72.952342][ T4248] do_syscall_64+0x12c/0x3b0 [ 72.952371][ T4248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.952397][ T4248] RIP: 0033:0x7f615f1dd60e [ 72.952414][ T4248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.952434][ T4248] RSP: 002b:00007f615dc76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.952494][ T4248] RAX: ffffffffffffffda RBX: 00007f615dc776c0 RCX: 00007f615f1dd60e [ 72.952509][ T4248] RDX: 000000000000000f RSI: 00007f615dc770a0 RDI: 0000000000000009 [ 72.952523][ T4248] RBP: 00007f615dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 72.952537][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.952620][ T4248] R13: 00007f615f496038 R14: 00007f615f495fa0 R15: 00007ffe6b4e9058 [ 72.952644][ T4248] [ 72.996307][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 73.064733][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.138604][ T4247] loop0: detected capacity change from 0 to 8192 [ 73.249493][ T4247] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.267003][ T4258] loop4: detected capacity change from 0 to 256 [ 73.302306][ T4258] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.449998][ T4270] loop2: detected capacity change from 0 to 128 [ 73.495651][ T4272] loop4: detected capacity change from 0 to 512 [ 73.524673][ T4268] siw: device registration error -23 [ 73.541094][ T4276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 73.559532][ T4272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.231: missing EA_INODE flag [ 73.586350][ T4272] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 73.586520][ T4272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.231: error while reading EA inode 12 err=-117 [ 73.595747][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 73.595769][ C0] EXT4-fs (loop4): initial error at time 1777075105: ext4_xattr_inode_iget:441: inode 12 [ 73.595841][ C0] EXT4-fs (loop4): last error at time 1777075105: ext4_xattr_inode_iget:441: inode 12 [ 73.608196][ T4268] loop3: detected capacity change from 0 to 512 [ 73.651429][ T4272] loop4: lost filesystem error report for type 5 error -117 [ 73.653004][ T4272] EXT4-fs (loop4): 1 orphan inode deleted [ 73.668282][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.710578][ T4274] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 73.715877][ T4274] loop1: partition table partially beyond EOD, truncated [ 73.734661][ T4274] loop1: p2 start 4278190080 is beyond EOD, truncated [ 73.762547][ T4274] loop1: p4 size 8192 extends beyond EOD, truncated [ 73.774206][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.802779][ T4274] loop1: p6 size 8192 extends beyond EOD, truncated [ 73.905256][ T4282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4282 comm=syz.1.235 [ 73.947215][ T4282] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 74.009499][ T4287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4287 comm=syz.0.234 [ 74.042753][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.053223][ T4282] netlink: 5 bytes leftover after parsing attributes in process `syz.1.235'. [ 74.055414][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.066616][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 74.085245][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.101635][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 74.102732][ T4292] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 74.132370][ T4288] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.139967][ T4285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.175156][ T4285] random: crng reseeded on system resumption [ 74.221205][ T4288] EXT4-fs (loop1): failed to initialize system zone (-117) [ 74.232822][ T4292] netlink: 5 bytes leftover after parsing attributes in process `syz.0.234'. [ 74.265914][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.278647][ T4288] EXT4-fs (loop1): mount failed [ 74.317632][ T4287] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.380852][ T4268] EXT4-fs (loop3): 1 orphan inode deleted [ 74.386958][ T4287] EXT4-fs (loop0): failed to initialize system zone (-117) [ 74.416778][ T4287] EXT4-fs (loop0): mount failed [ 74.635689][ T4311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 74.646544][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.672260][ T4315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.922683][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 74.951623][ T4331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 75.021090][ T4333] FAULT_INJECTION: forcing a failure. [ 75.021090][ T4333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.052511][ T4333] CPU: 1 UID: 0 PID: 4333 Comm: syz.0.245 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.052552][ T4333] Tainted: [W]=WARN [ 75.052558][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.052568][ T4333] Call Trace: [ 75.052573][ T4333] [ 75.052580][ T4333] __dump_stack+0x1d/0x30 [ 75.052660][ T4333] dump_stack_lvl+0x95/0xd0 [ 75.052689][ T4333] dump_stack+0x15/0x1b [ 75.052716][ T4333] should_fail_ex+0x263/0x280 [ 75.052793][ T4333] should_fail+0xb/0x20 [ 75.052830][ T4333] should_fail_usercopy+0x1a/0x20 [ 75.052852][ T4333] _copy_to_user+0x20/0xa0 [ 75.052895][ T4333] simple_read_from_buffer+0xb5/0x130 [ 75.052925][ T4333] proc_fail_nth_read+0x10e/0x150 [ 75.052979][ T4333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.053096][ T4333] vfs_read+0x1ab/0x7f0 [ 75.053134][ T4333] ? __rcu_read_unlock+0x4e/0x70 [ 75.053163][ T4333] ? __fget_files+0x184/0x1c0 [ 75.053220][ T4333] ? mutex_lock+0x57/0x90 [ 75.053244][ T4333] ksys_read+0xdc/0x1a0 [ 75.053283][ T4333] __x64_sys_read+0x40/0x50 [ 75.053396][ T4333] x64_sys_call+0x2886/0x3020 [ 75.053456][ T4333] do_syscall_64+0x12c/0x3b0 [ 75.053485][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.053587][ T4333] RIP: 0033:0x7fe8fdced60e [ 75.053605][ T4333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.053626][ T4333] RSP: 002b:00007fe8fc77efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.053716][ T4333] RAX: ffffffffffffffda RBX: 00007fe8fc77f6c0 RCX: 00007fe8fdced60e [ 75.053734][ T4333] RDX: 000000000000000f RSI: 00007fe8fc77f0a0 RDI: 0000000000000004 [ 75.053748][ T4333] RBP: 00007fe8fc77f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.053760][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.053774][ T4333] R13: 00007fe8fdfa6038 R14: 00007fe8fdfa5fa0 R15: 00007fff4be6f3f8 [ 75.053797][ T4333] [ 75.288695][ T4331] Option ' W' to dns_resolver key: bad/missing value [ 75.520129][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.753100][ T4352] siw: device registration error -23 [ 75.764330][ T4352] set_capacity_and_notify: 7 callbacks suppressed [ 75.764348][ T4352] loop2: detected capacity change from 0 to 512 [ 75.905758][ T4352] EXT4-fs (loop2): 1 orphan inode deleted [ 75.912029][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.269762][ T4355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4355 comm=syz.0.251 [ 76.316020][ T4355] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 76.327769][ T4355] loop0: detected capacity change from 0 to 512 [ 76.337560][ T4355] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.415287][ T4355] EXT4-fs (loop0): failed to initialize system zone (-117) [ 76.443455][ T4355] EXT4-fs (loop0): mount failed [ 76.492266][ T4359] loop1: detected capacity change from 0 to 8192 [ 76.517441][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.538959][ T4359] loop1: p1 p2 p3 p4 [ 76.564479][ T4359] loop1: p1 size 67898881 extends beyond EOD, truncated [ 76.591534][ T4359] loop1: p3 start 4294443008 is beyond EOD, truncated [ 76.598256][ T4367] loop3: detected capacity change from 0 to 512 [ 76.606138][ T4359] loop1: p4 size 262144 extends beyond EOD, truncated [ 76.614026][ T4369] FAULT_INJECTION: forcing a failure. [ 76.614026][ T4369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.629668][ T4367] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.255: missing EA_INODE flag [ 76.643524][ T4369] CPU: 1 UID: 0 PID: 4369 Comm: syz.0.257 Tainted: G W syzkaller #0 PREEMPT(full) [ 76.643588][ T4369] Tainted: [W]=WARN [ 76.643594][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.643606][ T4369] Call Trace: [ 76.643614][ T4369] [ 76.643636][ T4369] __dump_stack+0x1d/0x30 [ 76.643661][ T4369] dump_stack_lvl+0x95/0xd0 [ 76.643713][ T4369] dump_stack+0x15/0x1b [ 76.643751][ T4369] should_fail_ex+0x263/0x280 [ 76.643789][ T4369] should_fail+0xb/0x20 [ 76.643894][ T4369] should_fail_usercopy+0x1a/0x20 [ 76.643916][ T4369] _copy_to_user+0x20/0xa0 [ 76.643960][ T4369] simple_read_from_buffer+0xb5/0x130 [ 76.643984][ T4369] proc_fail_nth_read+0x10e/0x150 [ 76.644027][ T4369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.644094][ T4369] vfs_read+0x1ab/0x7f0 [ 76.644190][ T4369] ? __rcu_read_unlock+0x4e/0x70 [ 76.644279][ T4369] ? __fget_files+0x184/0x1c0 [ 76.644300][ T4369] ? mutex_lock+0x57/0x90 [ 76.644319][ T4369] ksys_read+0xdc/0x1a0 [ 76.644360][ T4369] __x64_sys_read+0x40/0x50 [ 76.644388][ T4369] x64_sys_call+0x2886/0x3020 [ 76.644416][ T4369] do_syscall_64+0x12c/0x3b0 [ 76.644520][ T4369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.644599][ T4369] RIP: 0033:0x7fe8fdced60e [ 76.644613][ T4369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.644686][ T4369] RSP: 002b:00007fe8fc77efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.644705][ T4369] RAX: ffffffffffffffda RBX: 00007fe8fc77f6c0 RCX: 00007fe8fdced60e [ 76.644725][ T4369] RDX: 000000000000000f RSI: 00007fe8fc77f0a0 RDI: 0000000000000005 [ 76.644740][ T4369] RBP: 00007fe8fc77f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.644755][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.644769][ T4369] R13: 00007fe8fdfa6038 R14: 00007fe8fdfa5fa0 R15: 00007fff4be6f3f8 [ 76.644807][ T4369] [ 76.691742][ T4367] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 76.844832][ T4359] __nla_validate_parse: 5 callbacks suppressed [ 76.844850][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 76.878459][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 76.884943][ C0] EXT4-fs (loop3): initial error at time 1777075108: ext4_xattr_inode_iget:441: inode 12 [ 76.894806][ C0] EXT4-fs (loop3): last error at time 1777075108: ext4_xattr_inode_iget:441: inode 12 [ 76.905166][ T4367] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.255: error while reading EA inode 12 err=-117 [ 76.935438][ T4367] loop3: lost filesystem error report for type 5 error -117 [ 76.935657][ T4367] EXT4-fs (loop3): 1 orphan inode deleted [ 76.953769][ T4367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.969783][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 76.985796][ T4380] loop0: detected capacity change from 0 to 128 [ 77.069574][ T4382] loop4: detected capacity change from 0 to 512 [ 77.078793][ T4382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.105237][ T4382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 77.113246][ T4382] System zones: 1-12 [ 77.118028][ T4382] EXT4-fs (loop4): 1 truncate cleaned up [ 77.124407][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.333501][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 77.347711][ T4386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 77.543414][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.798669][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 77.821106][ T4391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 77.853285][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.981701][ T4400] loop1: detected capacity change from 0 to 128 [ 78.238538][ T4401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'. [ 78.428644][ T4405] siw: device registration error -23 [ 78.522432][ T4410] loop4: detected capacity change from 0 to 512 [ 78.648154][ T4412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4412 comm=syz.3.268 [ 78.696973][ T4410] EXT4-fs (loop4): 1 orphan inode deleted [ 78.731119][ T4412] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 78.745482][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.782062][ T4412] netlink: 5 bytes leftover after parsing attributes in process `syz.3.268'. [ 78.817678][ T4412] loop3: detected capacity change from 0 to 512 [ 78.882281][ T4412] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.967761][ T4412] EXT4-fs (loop3): failed to initialize system zone (-117) [ 79.012186][ T4412] EXT4-fs (loop3): mount failed [ 79.424835][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.594632][ T4423] loop1: detected capacity change from 0 to 512 [ 79.606740][ T4423] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.272: missing EA_INODE flag [ 79.622906][ T4423] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 79.623014][ T4423] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.272: error while reading EA inode 12 err=-117 [ 79.632351][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.632374][ C0] EXT4-fs (loop1): initial error at time 1777075111: ext4_xattr_inode_iget:441: inode 12 [ 79.632404][ C0] EXT4-fs (loop1): last error at time 1777075111: ext4_xattr_inode_iget:441: inode 12 [ 79.805068][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 79.805108][ T28] audit: type=1400 audit(1777075111.677:1410): avc: denied { ioctl } for pid=4419 comm="syz.3.271" path="socket:[8632]" dev="sockfs" ino=8632 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.224718][ T4431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 80.242693][ T28] audit: type=1400 audit(1777075111.687:1411): avc: denied { setopt } for pid=4419 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.350373][ T4423] loop1: lost filesystem error report for type 5 error -117 [ 80.350888][ T4423] EXT4-fs (loop1): 1 orphan inode deleted [ 80.379529][ T28] audit: type=1400 audit(1777075111.847:1412): avc: denied { accept } for pid=4419 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.460877][ T4423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.672976][ T28] audit: type=1400 audit(1777075111.847:1413): avc: denied { connect } for pid=4419 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.771487][ T4437] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.801329][ T4442] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 80.845355][ T28] audit: type=1400 audit(1777075111.847:1414): avc: denied { create } for pid=4419 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.905408][ T28] audit: type=1400 audit(1777075111.847:1415): avc: denied { ioctl } for pid=4419 comm="syz.3.271" path="socket:[8638]" dev="sockfs" ino=8638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.946666][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.990829][ T28] audit: type=1400 audit(1777075112.197:1416): avc: denied { write } for pid=4432 comm="syz.3.274" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.021572][ T4444] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 81.099303][ T4448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4448 comm=syz.3.280 [ 81.124797][ T4448] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 81.138761][ T4448] netlink: 5 bytes leftover after parsing attributes in process `syz.3.280'. [ 81.348836][ T4448] set_capacity_and_notify: 1 callbacks suppressed [ 81.348942][ T4448] loop3: detected capacity change from 0 to 512 [ 81.373355][ T4448] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.401765][ T4448] EXT4-fs (loop3): failed to initialize system zone (-117) [ 81.410279][ T4448] EXT4-fs (loop3): mount failed [ 81.458204][ T4452] loop1: detected capacity change from 0 to 128 [ 81.747166][ T4456] batadv0: entered promiscuous mode [ 81.968683][ T4462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 82.011266][ T4456] bond0: entered promiscuous mode [ 82.170438][ T4456] bond_slave_0: entered promiscuous mode [ 82.198104][ T4456] bond_slave_1: entered promiscuous mode [ 82.208347][ T4456] hsr1: entered allmulticast mode [ 82.213579][ T4456] batadv0: entered allmulticast mode [ 82.249531][ T4456] bond0: entered allmulticast mode [ 82.254811][ T4456] bond_slave_0: entered allmulticast mode [ 82.499293][ T4456] bond_slave_1: entered allmulticast mode [ 82.505346][ T4456] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.001096][ T4473] loop0: detected capacity change from 0 to 1024 [ 83.011122][ T4473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.055228][ T4473] EXT4-fs: dax option not supported [ 83.210758][ T4482] syzkaller0: entered promiscuous mode [ 83.216274][ T4482] syzkaller0: entered allmulticast mode [ 83.234622][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.285021][ T28] audit: type=1400 audit(1777075115.277:1417): avc: denied { write } for pid=4481 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.346937][ T4482] loop0: detected capacity change from 0 to 2048 [ 83.430626][ T28] audit: type=1400 audit(1777075115.437:1418): avc: denied { read } for pid=4487 comm="syz.1.292" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.485562][ T4488] loop1: detected capacity change from 0 to 512 [ 83.522305][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.544716][ T28] audit: type=1400 audit(1777075115.457:1419): avc: denied { open } for pid=4487 comm="syz.1.292" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.888935][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.985287][ T4501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4501 comm=syz.1.296 [ 83.999733][ T4482] loop0: p1 < > p4 [ 84.057233][ T4501] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 84.067518][ T4482] loop0: p4 size 722688 extends beyond EOD, truncated [ 84.072712][ T4501] netlink: 5 bytes leftover after parsing attributes in process `syz.1.296'. [ 84.107501][ T4503] loop2: detected capacity change from 0 to 128 [ 84.158811][ T4505] loop4: detected capacity change from 0 to 1764 [ 84.318782][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.333137][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.500136][ T4513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 84.561379][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.798841][ T3311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.868589][ T4501] loop1: detected capacity change from 0 to 512 [ 84.933218][ T4501] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.971231][ T4501] EXT4-fs (loop1): failed to initialize system zone (-117) [ 85.006861][ T4501] EXT4-fs (loop1): mount failed [ 85.120924][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 85.120939][ T28] audit: type=1400 audit(1777075117.127:1426): avc: denied { bind } for pid=4518 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.181096][ T28] audit: type=1400 audit(1777075117.147:1427): avc: denied { name_bind } for pid=4518 comm="syz.0.301" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 85.227197][ T28] audit: type=1400 audit(1777075117.147:1428): avc: denied { node_bind } for pid=4518 comm="syz.0.301" saddr=ff01::1 src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 85.290040][ T28] audit: type=1400 audit(1777075117.297:1429): avc: denied { read } for pid=4531 comm="syz.3.304" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.313717][ T4530] loop2: detected capacity change from 0 to 512 [ 85.320064][ T4532] program syz.3.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.363617][ T4535] loop3: detected capacity change from 0 to 512 [ 85.380320][ T4535] EXT4-fs: Ignoring removed bh option [ 85.416153][ T4530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.305: missing EA_INODE flag [ 85.453860][ T4530] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 85.458451][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 85.462629][ T4535] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 85.467621][ C0] EXT4-fs (loop2): initial error at time 1777075117: ext4_xattr_inode_iget:441: inode 12 [ 85.484366][ T4530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.305: error while reading EA inode 12 err=-117 [ 85.493074][ C0] EXT4-fs (loop2): last error at time 1777075117: ext4_xattr_inode_iget:441: inode 12 [ 85.515757][ T4530] loop2: lost filesystem error report for type 5 error -117 [ 85.523987][ T4530] EXT4-fs (loop2): 1 orphan inode deleted [ 85.545907][ T4535] EXT4-fs (loop3): 1 truncate cleaned up [ 85.573139][ T4530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.607715][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.843966][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.883565][ T28] audit: type=1400 audit(1777075117.877:1430): avc: denied { add_name } for pid=4529 comm="syz.2.305" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.158542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.214168][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.294275][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.406049][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 86.554101][ T4557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4557 comm=syz.3.313 [ 86.627146][ T4557] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 86.664021][ T4557] netlink: 5 bytes leftover after parsing attributes in process `syz.3.313'. [ 86.720631][ T4559] set_capacity_and_notify: 1 callbacks suppressed [ 86.720648][ T4559] loop3: detected capacity change from 0 to 512 [ 86.921291][ T4559] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.969639][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.987314][ T4565] loop1: detected capacity change from 0 to 512 [ 87.019275][ T4559] EXT4-fs (loop3): failed to initialize system zone (-117) [ 87.038620][ T4565] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.316: missing EA_INODE flag [ 87.062034][ T4559] EXT4-fs (loop3): mount failed [ 87.073018][ T28] audit: type=1326 audit(1777075119.077:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fdd2cdd9 code=0x7ffc0000 [ 87.116814][ T4565] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.116952][ T4565] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.316: error while reading EA inode 12 err=-117 [ 87.126190][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.126206][ C0] EXT4-fs (loop1): initial error at time 1777075119: ext4_xattr_inode_iget:441: inode 12 [ 87.126257][ C0] EXT4-fs (loop1): last error at time 1777075119: ext4_xattr_inode_iget:441: inode 12 [ 87.150573][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.198583][ T28] audit: type=1326 audit(1777075119.077:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fdd2cdd9 code=0x7ffc0000 [ 87.231706][ T4565] loop1: lost filesystem error report for type 5 error -117 [ 87.231798][ T28] audit: type=1326 audit(1777075119.077:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fdd2cdd9 code=0x7ffc0000 [ 87.287368][ T28] audit: type=1326 audit(1777075119.077:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe8fdd2cdd9 code=0x7ffc0000 [ 87.312609][ T4565] EXT4-fs (loop1): 1 orphan inode deleted [ 87.319189][ T4565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.343313][ T28] audit: type=1326 audit(1777075119.077:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fdd2cdd9 code=0x7ffc0000 [ 87.379075][ T4565] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 87.431651][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.534620][ T4593] siw: device registration error -23 [ 87.826864][ T4595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=4595 comm=syz.4.324 [ 87.893389][ T4593] loop3: detected capacity change from 0 to 512 [ 87.895939][ T4588] loop1: detected capacity change from 0 to 128 [ 87.966734][ T4593] EXT4-fs (loop3): 1 orphan inode deleted [ 87.974503][ T4593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.054414][ T4602] loop0: detected capacity change from 0 to 128 [ 88.111849][ T4600] loop2: detected capacity change from 0 to 128 [ 88.120622][ T4600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.162523][ T4600] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.181917][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.449298][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.467344][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 88.491488][ T4612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4612 comm=syz.2.328 [ 88.510443][ T4610] FAULT_INJECTION: forcing a failure. [ 88.510443][ T4610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.528026][ T4612] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 88.541639][ T4612] netlink: 5 bytes leftover after parsing attributes in process `syz.2.328'. [ 88.551416][ T4610] CPU: 1 UID: 0 PID: 4610 Comm: syz.4.329 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.551448][ T4610] Tainted: [W]=WARN [ 88.551460][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.551474][ T4610] Call Trace: [ 88.551481][ T4610] [ 88.551490][ T4610] __dump_stack+0x1d/0x30 [ 88.551578][ T4610] dump_stack_lvl+0x95/0xd0 [ 88.551607][ T4610] dump_stack+0x15/0x1b [ 88.551633][ T4610] should_fail_ex+0x263/0x280 [ 88.551664][ T4610] should_fail+0xb/0x20 [ 88.551782][ T4610] should_fail_usercopy+0x1a/0x20 [ 88.551803][ T4610] _copy_from_user+0x1c/0xb0 [ 88.551825][ T4610] ___sys_sendmsg+0xc1/0x1e0 [ 88.551894][ T4610] __x64_sys_sendmsg+0xd4/0x160 [ 88.551970][ T4610] x64_sys_call+0x194c/0x3020 [ 88.552005][ T4610] do_syscall_64+0x12c/0x3b0 [ 88.552065][ T4610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.552085][ T4610] RIP: 0033:0x7fb3b166cdd9 [ 88.552099][ T4610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.552118][ T4610] RSP: 002b:00007fb3b00c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.552139][ T4610] RAX: ffffffffffffffda RBX: 00007fb3b18e5fa0 RCX: 00007fb3b166cdd9 [ 88.552155][ T4610] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 88.552174][ T4610] RBP: 00007fb3b00c7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.552195][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.552210][ T4610] R13: 00007fb3b18e6038 R14: 00007fb3b18e5fa0 R15: 00007ffc384936e8 [ 88.552234][ T4610] [ 88.721968][ T4613] loop2: detected capacity change from 0 to 512 [ 88.729130][ T4613] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.752529][ T4613] EXT4-fs (loop2): failed to initialize system zone (-117) [ 88.759917][ T4613] EXT4-fs (loop2): mount failed [ 89.316060][ T4627] loop1: detected capacity change from 0 to 128 [ 89.500539][ T4625] tipc: Started in network mode [ 89.535253][ T4625] tipc: Node identity 0e40bd0e850b, cluster identity 4711 [ 89.547955][ T4626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 89.557941][ T4625] tipc: Enabled bearer , priority 0 [ 89.578386][ T4627] syzkaller0: entered promiscuous mode [ 89.600615][ T4627] syzkaller0: entered allmulticast mode [ 89.670368][ T4625] tipc: Resetting bearer [ 89.685449][ T4624] tipc: Resetting bearer [ 89.693706][ T4624] tipc: Disabling bearer [ 89.903491][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.333'. [ 89.903618][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.999390][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.097896][ T4637] loop1: detected capacity change from 0 to 8192 [ 90.119107][ T4637] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.484089][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.501512][ T4649] loop4: detected capacity change from 0 to 512 [ 90.536604][ T4651] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4651 comm=syz.0.341 [ 90.565743][ T4649] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.339: missing EA_INODE flag [ 90.577531][ T4649] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 90.577623][ T4649] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.339: error while reading EA inode 12 err=-117 [ 90.586832][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 90.586869][ C0] EXT4-fs (loop4): initial error at time 1777075122: ext4_xattr_inode_iget:441: inode 12 [ 90.586912][ C0] EXT4-fs (loop4): last error at time 1777075122: ext4_xattr_inode_iget:441: inode 12 [ 90.626719][ T4649] loop4: lost filesystem error report for type 5 error -117 [ 90.626859][ T4649] EXT4-fs (loop4): 1 orphan inode deleted [ 90.640695][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.709069][ T4651] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 90.734956][ T4651] netlink: 5 bytes leftover after parsing attributes in process `syz.0.341'. [ 90.795787][ T4651] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.806180][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.956642][ T4665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 90.983778][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.993902][ T4651] EXT4-fs (loop0): failed to initialize system zone (-117) [ 91.021580][ T4651] EXT4-fs (loop0): mount failed [ 91.130435][ T4674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 91.401409][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 91.423985][ T4685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 92.136126][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.166816][ T4674] set_capacity_and_notify: 3 callbacks suppressed [ 92.166831][ T4674] loop4: detected capacity change from 0 to 8192 [ 93.023589][ T4696] siw: device registration error -23 [ 93.055682][ T4696] loop1: detected capacity change from 0 to 512 [ 93.136105][ T4696] EXT4-fs (loop1): 1 orphan inode deleted [ 93.143268][ T4696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.292987][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.307849][ T4695] loop0: detected capacity change from 0 to 128 [ 93.321554][ T4674] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.343734][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.019957][ T4705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 94.601955][ T3311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.823035][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.038809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.491823][ T4716] loop3: detected capacity change from 0 to 512 [ 95.499016][ T4714] siw: device registration error -23 [ 95.515149][ T4716] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.357: missing EA_INODE flag [ 95.531097][ T4716] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 95.531194][ T4716] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.357: error while reading EA inode 12 err=-117 [ 95.540361][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 95.540395][ C0] EXT4-fs (loop3): initial error at time 1777075127: ext4_xattr_inode_iget:441: inode 12 [ 95.540427][ C0] EXT4-fs (loop3): last error at time 1777075127: ext4_xattr_inode_iget:441: inode 12 [ 95.552896][ T4714] loop4: detected capacity change from 0 to 512 [ 95.559452][ T4716] loop3: lost filesystem error report for type 5 error -117 [ 95.585898][ T4716] EXT4-fs (loop3): 1 orphan inode deleted [ 95.604842][ T4716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.651613][ T4719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4719 comm=syz.0.358 [ 95.666475][ T4719] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 95.685433][ T4719] netlink: 5 bytes leftover after parsing attributes in process `syz.0.358'. [ 95.715036][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.801460][ T4719] loop0: detected capacity change from 0 to 512 [ 95.822149][ T4719] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.853893][ T4714] EXT4-fs (loop4): 1 orphan inode deleted [ 95.856582][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.874029][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.883778][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.927505][ T4719] EXT4-fs (loop0): failed to initialize system zone (-117) [ 95.936937][ T4719] EXT4-fs (loop0): mount failed [ 96.024726][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 96.024741][ T28] audit: type=1400 audit(1777075128.027:1547): avc: denied { ioctl } for pid=4730 comm="syz.2.362" path="socket:[9329]" dev="sockfs" ino=9329 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.115030][ T4733] netlink: 'syz.2.362': attribute type 10 has an invalid length. [ 96.124109][ T28] audit: type=1400 audit(1777075128.027:1548): avc: denied { ioctl } for pid=4730 comm="syz.2.362" path="socket:[9327]" dev="sockfs" ino=9327 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.262530][ T4736] loop3: detected capacity change from 0 to 512 [ 96.270799][ T4733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.362'. [ 96.333947][ T4736] EXT4-fs (loop3): 1 orphan inode deleted [ 96.340048][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.357686][ T4736] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.374722][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.389040][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.398916][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.414822][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.423919][ T4736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.563608][ T4744] loop2: detected capacity change from 0 to 1024 [ 96.597300][ T4746] loop0: detected capacity change from 0 to 128 [ 96.611747][ T4744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.635009][ T4750] loop1: detected capacity change from 0 to 128 [ 96.787890][ T4728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.796270][ T4728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.804603][ T4728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.270111][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.286362][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 97.697050][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.713440][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 97.918243][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.162866][ T4765] siw: device registration error -23 [ 98.179904][ T4765] loop2: detected capacity change from 0 to 512 [ 98.275330][ T28] audit: type=1400 audit(1777075130.277:1549): avc: denied { create } for pid=4762 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.356613][ T4765] EXT4-fs (loop2): 1 orphan inode deleted [ 98.376089][ T4765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.709884][ T4763] loop3: detected capacity change from 0 to 256 [ 98.787976][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 98.839905][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.849957][ T28] audit: type=1400 audit(1777075130.847:1550): avc: denied { mount } for pid=4762 comm="syz.3.371" name="/" dev="ramfs" ino=9431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.938916][ T4777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4777 comm=syz.3.374 [ 98.984252][ T4777] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 99.003462][ T4777] netlink: 5 bytes leftover after parsing attributes in process `syz.3.374'. [ 99.174890][ T28] audit: type=1400 audit(1777075131.177:1551): avc: denied { write } for pid=4785 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.183145][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 99.203149][ T4777] loop3: detected capacity change from 0 to 512 [ 99.209610][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 99.219557][ T4777] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.243741][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 99.257649][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.269666][ T4777] EXT4-fs (loop3): failed to initialize system zone (-117) [ 99.281270][ T4777] EXT4-fs (loop3): mount failed [ 99.302329][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.369682][ T28] audit: type=1400 audit(1777075131.367:1552): avc: denied { bind } for pid=4794 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.392212][ T4797] loop4: detected capacity change from 0 to 512 [ 99.471657][ T4803] loop4: detected capacity change from 0 to 512 [ 99.487861][ T4803] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.384: missing EA_INODE flag [ 99.527108][ T4803] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 99.528453][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 99.544108][ C0] EXT4-fs (loop4): initial error at time 1777075131: ext4_xattr_inode_iget:441: inode 12 [ 99.552909][ T4803] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.384: error while reading EA inode 12 err=-117 [ 99.554029][ C0] EXT4-fs (loop4): last error at time 1777075131: ext4_xattr_inode_iget:441: inode 12 [ 99.579402][ T4803] loop4: lost filesystem error report for type 5 error -117 [ 99.579624][ T4803] EXT4-fs (loop4): 1 orphan inode deleted [ 99.593596][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.612493][ T4806] loop3: detected capacity change from 0 to 128 [ 99.630026][ T28] audit: type=1400 audit(1777075131.627:1553): avc: denied { create } for pid=4809 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.725965][ T4803] forcing mempool usage for bio_alloc_bioset+0x36c/0x600 [ 99.748692][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.861518][ T4817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4817 comm=syz.4.390 [ 99.887007][ T4817] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 99.908505][ T4817] netlink: 5 bytes leftover after parsing attributes in process `syz.4.390'. [ 99.959234][ T4817] loop4: detected capacity change from 0 to 512 [ 100.002751][ T4817] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.085957][ T3494] net_ratelimit: 8 callbacks suppressed [ 100.085975][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.125526][ T4817] EXT4-fs (loop4): failed to initialize system zone (-117) [ 100.138277][ T4817] EXT4-fs (loop4): mount failed [ 100.165208][ T4822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 100.200935][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 100.232416][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 100.902881][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 100.955489][ T28] audit: type=1400 audit(1777075132.957:1554): avc: denied { read } for pid=4827 comm="syz.1.393" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.024304][ T28] audit: type=1400 audit(1777075132.987:1555): avc: denied { open } for pid=4827 comm="syz.1.393" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.078589][ T4834] loop3: detected capacity change from 0 to 512 [ 101.106090][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.121238][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.136133][ T4834] ext4: Unknown parameter '‘ ' [ 101.152403][ T28] audit: type=1400 audit(1777075132.987:1556): avc: denied { ioctl } for pid=4827 comm="syz.1.393" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.407038][ T28] audit: type=1400 audit(1777075132.997:1557): avc: denied { mount } for pid=4827 comm="syz.1.393" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.534305][ T4851] ip6t_REJECT: ECHOREPLY is not supported [ 101.700953][ T4852] loop1: detected capacity change from 0 to 512 [ 101.896645][ T4856] loop3: detected capacity change from 0 to 512 [ 102.160143][ T3311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.488554][ T4867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.404'. [ 102.832039][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.871566][ T4869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 103.442316][ T4872] set_capacity_and_notify: 1 callbacks suppressed [ 103.442334][ T4872] loop0: detected capacity change from 0 to 512 [ 103.451604][ T4871] xt_socket: unknown flags 0x58 [ 103.479310][ T4872] EXT4-fs (loop0): 1 orphan inode deleted [ 103.485551][ T4872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.611930][ T4876] FAULT_INJECTION: forcing a failure. [ 103.611930][ T4876] name failslab, interval 1, probability 0, space 0, times 0 [ 103.624602][ T4876] CPU: 0 UID: 0 PID: 4876 Comm: syz.3.408 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.624638][ T4876] Tainted: [W]=WARN [ 103.624659][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.624670][ T4876] Call Trace: [ 103.624676][ T4876] [ 103.624682][ T4876] __dump_stack+0x1d/0x30 [ 103.624711][ T4876] dump_stack_lvl+0x95/0xd0 [ 103.624792][ T4876] dump_stack+0x15/0x1b [ 103.624814][ T4876] should_fail_ex+0x263/0x280 [ 103.624843][ T4876] should_failslab+0x8c/0xb0 [ 103.624918][ T4876] kmem_cache_alloc_noprof+0x66/0x3f0 [ 103.624938][ T4876] ? radix_tree_node_alloc+0x8a/0x1f0 [ 103.624976][ T4876] radix_tree_node_alloc+0x8a/0x1f0 [ 103.625004][ T4876] idr_get_free+0x1fa/0x550 [ 103.625047][ T4876] idr_alloc_u32+0xf2/0x1a0 [ 103.625092][ T4876] idr_alloc_cyclic+0x7b/0x140 [ 103.625121][ T4876] bpf_link_prime+0x69/0x1d0 [ 103.625222][ T4876] bpf_xdp_link_attach+0x216/0x5a0 [ 103.625275][ T4876] link_create+0x4d2/0x690 [ 103.625314][ T4876] __sys_bpf+0x35d/0x7e0 [ 103.625360][ T4876] __x64_sys_bpf+0x41/0x50 [ 103.625389][ T4876] x64_sys_call+0x10cb/0x3020 [ 103.625451][ T4876] do_syscall_64+0x12c/0x3b0 [ 103.625480][ T4876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.625505][ T4876] RIP: 0033:0x7fd9dcc2cdd9 [ 103.625523][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.625617][ T4876] RSP: 002b:00007fd9db687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.625634][ T4876] RAX: ffffffffffffffda RBX: 00007fd9dcea5fa0 RCX: 00007fd9dcc2cdd9 [ 103.625646][ T4876] RDX: 0000000000000014 RSI: 00002000000003c0 RDI: 000000000000001c [ 103.625705][ T4876] RBP: 00007fd9db687090 R08: 0000000000000000 R09: 0000000000000000 [ 103.625718][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.625770][ T4876] R13: 00007fd9dcea6038 R14: 00007fd9dcea5fa0 R15: 00007fffdea643a8 [ 103.625877][ T4876] [ 104.015989][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.062698][ T4884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4884 comm=syz.2.410 [ 104.093276][ T4884] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 104.124929][ T4869] loop4: detected capacity change from 0 to 8192 [ 104.162052][ T4869] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.220928][ T4892] FAULT_INJECTION: forcing a failure. [ 104.220928][ T4892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.248489][ T4892] CPU: 1 UID: 0 PID: 4892 Comm: syz.3.414 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.248595][ T4892] Tainted: [W]=WARN [ 104.248603][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.248617][ T4892] Call Trace: [ 104.248660][ T4892] [ 104.248666][ T4892] __dump_stack+0x1d/0x30 [ 104.248696][ T4892] dump_stack_lvl+0x95/0xd0 [ 104.248722][ T4892] dump_stack+0x15/0x1b [ 104.248810][ T4892] should_fail_ex+0x263/0x280 [ 104.248897][ T4892] should_fail+0xb/0x20 [ 104.248976][ T4892] should_fail_usercopy+0x1a/0x20 [ 104.249015][ T4892] _copy_from_iter+0xcf/0xea0 [ 104.249096][ T4892] ? __alloc_skb+0x4f6/0x690 [ 104.249118][ T4892] ? __alloc_skb+0x200/0x690 [ 104.249179][ T4892] netlink_sendmsg+0x4ae/0x6f0 [ 104.249220][ T4892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.249258][ T4892] ____sys_sendmsg+0x563/0x5b0 [ 104.249313][ T4892] ___sys_sendmsg+0x195/0x1e0 [ 104.249427][ T4892] __x64_sys_sendmsg+0xd4/0x160 [ 104.249594][ T4892] x64_sys_call+0x194c/0x3020 [ 104.249657][ T4892] do_syscall_64+0x12c/0x3b0 [ 104.249686][ T4892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.249753][ T4892] RIP: 0033:0x7fd9dcc2cdd9 [ 104.249769][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.249791][ T4892] RSP: 002b:00007fd9db687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.249812][ T4892] RAX: ffffffffffffffda RBX: 00007fd9dcea5fa0 RCX: 00007fd9dcc2cdd9 [ 104.249893][ T4892] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 104.249909][ T4892] RBP: 00007fd9db687090 R08: 0000000000000000 R09: 0000000000000000 [ 104.249926][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.249942][ T4892] R13: 00007fd9dcea6038 R14: 00007fd9dcea5fa0 R15: 00007fffdea643a8 [ 104.249967][ T4892] [ 104.456237][ T4884] loop2: detected capacity change from 0 to 512 [ 104.485739][ T4884] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.552836][ T4884] EXT4-fs (loop2): failed to initialize system zone (-117) [ 104.565788][ T4884] EXT4-fs (loop2): mount failed [ 104.691525][ T28] audit: type=1400 audit(1777075136.687:1558): avc: denied { name_bind } for pid=4888 comm="syz.1.413" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 104.763201][ T4902] loop2: detected capacity change from 0 to 128 [ 105.012271][ T4911] loop4: detected capacity change from 0 to 1024 [ 105.020074][ T4911] ext4: Unknown parameter 'noacl' [ 105.088778][ T4912] __nla_validate_parse: 1 callbacks suppressed [ 105.088810][ T4912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 105.182318][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.211832][ T3311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.601538][ T4914] ================================================================== [ 105.609694][ T4914] BUG: KCSAN: data-race in _copy_from_iter / bcm_can_tx [ 105.616706][ T4914] [ 105.619050][ T4914] read to 0xffff8881242845c0 of 72 bytes by interrupt on cpu 0: [ 105.626710][ T4914] bcm_can_tx+0x1b3/0x4c0 [ 105.631096][ T4914] bcm_tx_timeout_handler+0xe5/0x290 [ 105.636452][ T4914] __hrtimer_run_queues+0x276/0x4f0 [ 105.641688][ T4914] hrtimer_run_softirq+0xe2/0x520 [ 105.646758][ T4914] handle_softirqs+0xb9/0x280 [ 105.651476][ T4914] __irq_exit_rcu+0x42/0xd0 [ 105.656017][ T4914] sysvec_apic_timer_interrupt+0x37/0x80 [ 105.661690][ T4914] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.667714][ T4914] [ 105.670059][ T4914] write to 0xffff8881242845c0 of 72 bytes by task 4914 on cpu 1: [ 105.677804][ T4914] _copy_from_iter+0x258/0xea0 [ 105.682620][ T4914] bcm_tx_setup+0xaeb/0xde0 [ 105.687157][ T4914] bcm_sendmsg+0x357/0x4a0 [ 105.691615][ T4914] ____sys_sendmsg+0x563/0x5b0 [ 105.696443][ T4914] ___sys_sendmsg+0x195/0x1e0 [ 105.701154][ T4914] __x64_sys_sendmsg+0xd4/0x160 [ 105.706057][ T4914] x64_sys_call+0x194c/0x3020 [ 105.710809][ T4914] do_syscall_64+0x12c/0x3b0 [ 105.715441][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.721365][ T4914] [ 105.723697][ T4914] Reported by Kernel Concurrency Sanitizer on: [ 105.729864][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.4.421 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.740695][ T4914] Tainted: [W]=WARN [ 105.744518][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.754597][ T4914] ================================================================== [ 105.787208][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.829938][ T4916] FAULT_INJECTION: forcing a failure. [ 105.829938][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.866437][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.3.422 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.866475][ T4916] Tainted: [W]=WARN [ 105.866484][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.866501][ T4916] Call Trace: [ 105.866508][ T4916] [ 105.866518][ T4916] __dump_stack+0x1d/0x30 [ 105.866603][ T4916] dump_stack_lvl+0x95/0xd0 [ 105.866637][ T4916] dump_stack+0x15/0x1b [ 105.866721][ T4916] should_fail_ex+0x263/0x280 [ 105.866774][ T4916] should_fail+0xb/0x20 [ 105.866859][ T4916] should_fail_usercopy+0x1a/0x20 [ 105.866931][ T4916] _copy_from_iter+0x21c/0xea0 [ 105.866979][ T4916] ? selinux_socket_sendmsg+0x192/0x1c0 [ 105.867069][ T4916] bcm_sendmsg+0xc6/0x4a0 [ 105.867113][ T4916] ? __pfx_bcm_sendmsg+0x10/0x10 [ 105.867151][ T4916] ____sys_sendmsg+0x563/0x5b0 [ 105.867193][ T4916] ___sys_sendmsg+0x195/0x1e0 [ 105.867249][ T4916] __x64_sys_sendmsg+0xd4/0x160 [ 105.867424][ T4916] x64_sys_call+0x194c/0x3020 [ 105.867463][ T4916] do_syscall_64+0x12c/0x3b0 [ 105.867500][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.867528][ T4916] RIP: 0033:0x7fd9dcc2cdd9 [ 105.867548][ T4916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.867641][ T4916] RSP: 002b:00007fd9db687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.867668][ T4916] RAX: ffffffffffffffda RBX: 00007fd9dcea5fa0 RCX: 00007fd9dcc2cdd9 [ 105.867884][ T4916] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 105.867971][ T4916] RBP: 00007fd9db687090 R08: 0000000000000000 R09: 0000000000000000 [ 105.867986][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.868060][ T4916] R13: 00007fd9dcea6038 R14: 00007fd9dcea5fa0 R15: 00007fffdea643a8 [ 105.868086][ T4916] [ 106.240837][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.281691][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.238708][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.321386][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.118841][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.127004][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.361331][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.759114][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.401816][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.441406][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.158699][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.480719][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.521689][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.561386][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.208772][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog