last executing test programs: 37.019158798s ago: executing program 1 (id=1000): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x182) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 35.606370575s ago: executing program 1 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 35.213288563s ago: executing program 1 (id=1014): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001a00150100000000000000000200"/28], 0x1c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 33.892612019s ago: executing program 1 (id=1027): openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x40}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45f, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[], 0x24, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semop(0x0, &(0x7f0000001240)=[{0x2, 0x102}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_settime(0x7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='ata_bmdma_status\x00', r0, 0x0, 0xffa}, 0x18) inotify_init() r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000500)={0xffffffffffffffff, 0x1, 0x81, 0x4, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getxattr(0x0, &(0x7f0000000300)=@known='user.incfs.size\x00', 0x0, 0x0) epoll_create1(0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r2, 0x0, 0x0) socket$inet(0x2, 0x1, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x20040071}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xc, r5, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) 33.476996137s ago: executing program 1 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f00000003c0)='./file1\x00', 0x135) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd70000000000001", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000040), 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x201, &(0x7f00000010c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f3, 0x0, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1df, 0x0, @gue={{0x2, 0x0, 0x3, 0xc, 0x100}, "bd138189b11da1b22021f596c3bb91216125d24dd98ca913d9c8dd98667c55ed05fd0cbd7d39fbd27422ba31f30e5c902ba3940f8ce4ddaa8710104712af0b7cc8b6174c3fde085bacc1077ef34afe27ed674c1db4e0f4ff06a8dd940956475750d0b7cda62d43232839b7826f2f786f02e449cb079b6b6a47ef232400cb2fa0e90a6ccde58afcc3ab15a43a3419f40a3d9f73b8560dd50fe1a1165fb9ccf16d830f152939fd76159eb6636277200bd6fb203b0be5875143ddb0b647269a7b3babcfbeee3c9c750304adb495b22dbf3999ab7121d4d0cc706a47c293a7cd0521e4826c713d11981bd56797b6930dd56beecb589111d104d62093087afa9a39335919e0aca7f018087aa9c797023b413045a136edbffda8874087add96b00030769c471d274418f5d7316bb5283c439944c8fecacef9dd67411e177b81ac13743fae58c8a1b820df920f17816be26a455c9881ef80ac2aa2121b211d64942a70565d0d70e4ea3fcf85e308b53e6cfa8312c69ec2ed5f4b45320c4abd7f60d215961eb30764cbc949ac946ed9d36d8a87a0582c6f66efd87ac4d080de522b2f22c65bd7978eaa499ff803383cef64476c1b16ce74cf733ac5dbb52752767602c0c215b9c6d029e7cf2d2ec5ab0ea336e"}}}}}}, 0x0) syz_emit_ethernet(0x103e, &(0x7f0000001300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x1008, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x1008, 0x0, @opaque="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"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) recvmsg(r1, 0x0, 0x142) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x80) 33.106921764s ago: executing program 1 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 33.102659224s ago: executing program 32 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 5.319067686s ago: executing program 2 (id=1307): syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffd8ee}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mq_unlink(0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x101, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="c8", 0x1}], 0x1}, 0x800) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x3a, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@inlinecrypt}, {@nomblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x60880, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") getdents64(r4, 0x0, 0x0) 5.005734512s ago: executing program 0 (id=1314): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001a00150100000000000000000200"/28], 0x1c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 4.410964224s ago: executing program 2 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 4.394261924s ago: executing program 2 (id=1319): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xae, 0x71, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x8000, 0x200, 0x3b91c057}}) sendto$packet(r0, &(0x7f00000001c0)="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", 0xfd, 0x20004004, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x9, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRESDEC=r0], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0xf5}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 4.131073089s ago: executing program 2 (id=1321): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00'}, 0x18) setns(r4, 0x66020000) syz_usb_disconnect(0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) tkill(0x0, 0x35) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4d6c3c000008100085060034f000000000000000", @ANYRES32, @ANYBLOB="0c000100626f6e64000000000c000200080001000500"/33], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x2000077, 0x20800000000412, 0x6, 0x100000000007, 0x1000000000001000, 0xf67, 0x3ee}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, r6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) mlock2(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r5}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x50) 3.215334227s ago: executing program 3 (id=1326): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2.681453707s ago: executing program 0 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 2.666454478s ago: executing program 0 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x401, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000002000000000000000040000000300000010000000000000002b00000000000000fc03b3cb7b0ce14d16c92801ba42aac8b33fe301dfc7ba77874f874bc3746026ac07362ef23292fc844174d9bece"], 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_mount_image$iso9660(&(0x7f0000000840), &(0x7f0000000540)='./file0\x00', 0xc400, &(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES64=0x0, @ANYRESOCT=r0], 0xfd, 0x694, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES64=r0, @ANYBLOB="0000df602e"], 0x48) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xe) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) poll(&(0x7f0000000800)=[{r6, 0x8004}, {r4, 0x10}, {0xffffffffffffffff, 0x80c0}, {r5, 0x100}], 0x4, 0x7fff) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4894) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r10, &(0x7f0000000000)='\x00', 0x2, 0x1100) getpid() sched_setaffinity(0x0, 0x0, 0x0) 2.55490532s ago: executing program 0 (id=1331): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xae, 0x71, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x8000, 0x200, 0x3b91c057}}) sendto$packet(r0, &(0x7f00000001c0)="4044b2f609a1fabd065601d947737a7512c3878e4802f1ac4677feb6c0c600c6664fa38979daf157da68d1fdd17460c0bd0f8406f43f3aed8ccbf33b4636b71a036fa29cbd114f3d9de99fdaa185bddf0c6649d9021d562266b2663e9be474938a90f994fa11b2fa2f3cbc45967164d996fcffb3c6d1f8c9422e7d66e511938f0f95b478253b952ccdf2ee5089f6af86630f10b1594321603cd5d01b6f2d4b90a5aa0c5fe9ff03c25ef40c07b0c0f652b14d73379b86ee2190400798496889ae2e0d8d58f76e2600ffad9cd7ffdd0a29b0bb2034a05e6ef620b7a0aef8120db5c05fe8703e02b5350bb2779738bbb6304f338769bbae15ded571c7bdfa", 0xfd, 0x20004004, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x9, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRESDEC=r0], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r7, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0xf5}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 2.54008562s ago: executing program 0 (id=1332): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000070003"], 0x48}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) connect$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x3}, 0x4) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r9, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r9, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) 2.255034816s ago: executing program 0 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40000000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15, 0x24, 0x12, 0xf001}, @mbim_extended={0x8, 0x24, 0x1c, 0x38, 0x1, 0x7}, @mdlm_detail={0x6, 0x24, 0x13, 0x4, "e2ee"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r8, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x260, 0x100, 0x2, 0x3b, 0x9, 0x2}}, {0x8, 0x2, [0xf9a1, 0xc000]}}, {{0x1c, 0x1, {0xc, 0x6, 0x1, 0xfffffff5, 0x2, 0x7fff, 0x6, 0x2}}, {0x8, 0x2, [0x883, 0x1]}}, {{0x1c, 0x1, {0x80, 0x4, 0x7, 0x0, 0x1, 0xa1, 0x2, 0x2}}, {0x8, 0x2, [0x8, 0xfffc]}}]}]}, 0xa8}}, 0x0) 2.217921577s ago: executing program 5 (id=1335): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) 1.52190677s ago: executing program 3 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) 1.475283121s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0], 0x48) r2 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32], 0x48) r4 = socket(0x28, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49d, &(0x7f0000000c40)={0x0, 0x34f4, 0x800, 0x3, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r6, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0x21, &(0x7f0000001180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7ffffffe, 0xbe, &(0x7f0000000b80)=""/190, 0x41000, 0x0, '\x00', 0x0, @cgroup_device=0x6, r5, 0x8, &(0x7f0000000380)={0xa, 0x80000004}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x0, 0x6, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[r1, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff], 0x0, 0x10, 0xbfe}, 0x94) write$tcp_congestion(r9, 0x0, 0x0) wait4(r2, &(0x7f0000000240), 0x40000000, 0x0) syz_clone3(&(0x7f00000007c0)={0x40000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x23}, 0x0, 0x0, &(0x7f0000000640)=""/201, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) getpid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000000200)='GPL\x00', 0xe, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0xf7e1, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x4, 0x5, 0x8, 0x6}, {0x1, 0x3, 0xa}, {0x4, 0x4, 0xa, 0xa}, {0x1, 0x1, 0xd, 0x6}, {0x2, 0x5, 0xc, 0x3}, {0x4, 0x5, 0x5}, {0x4, 0x1, 0x0, 0x3}, {0x1, 0x4, 0x10, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) 1.436586242s ago: executing program 2 (id=1338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x400000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0x0, 0x80, 0x7, 'z\x00'}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x36f0516f) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.293100815s ago: executing program 5 (id=1339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="000000007b8af8ff00000000bfa200000000000007020000f8ffdfffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x0, 0x100}, 0x0, 0x0) 1.266553145s ago: executing program 5 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 1.187712806s ago: executing program 5 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 1.184206237s ago: executing program 3 (id=1342): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xae, 0x71, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x8000, 0x200, 0x3b91c057}}) sendto$packet(r0, &(0x7f00000001c0)="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", 0xfd, 0x20004004, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x9, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708c7fcbb2a00007b8af8ff00000000057843d6d602c13cb5e0020000f8ffffffb703000000000000b704000000000000850000005700000095e649a6e34170bee5b98c0a96cb539527615d0d64e045242379b3384cad6af751e2be489fe5edd320820ee1a07cd2ba09a09f5f54ec7615bfe7808be161c5c5a049d9e09b6c16d795cf19e65b55ce84820823e8a5a60f9bdfae245963fdd93298090041c49dc48ca0310b84a88a6f1266d2a71c154087e9f250a61cf3ddb1b6637ad42865ac3cea33f7eaf9583c1d4b70397d3487f2f3a84899a5c26713ca3a91d7f3d523c0a277709606cadcdc4280e90ece5ac60877bea65fffaf7d3bfeb6609c5d5fa6d0344dbd014e8b6a73a1483b7bb20480fd360000", @ANYRESDEC=r0], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0xf5}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 907.030402ms ago: executing program 3 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x182) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 608.596188ms ago: executing program 3 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x1, 0xb2, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000f20000ea156a22922eba64ecf818f6ba9eb4d24d212e825e1c769dd1bb837978439e33770900"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='locks_get_lock_context\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 435.462411ms ago: executing program 2 (id=1346): r0 = socket(0xf, 0x5, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400b8dc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1}, 0x20040051) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x1000000000000}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000e00)="$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") unshare(0x8040480) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = gettid() r8 = io_uring_setup(0x1a4e, &(0x7f0000000500)={0x0, 0x552e, 0x80, 0x400002, 0x332}) r9 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') close_range(r8, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r10, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000370400000084fb82e942e58ef700", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100626f6e64000000002c00028005001d00000000000500010004"], 0x5c}}, 0x0) 406.352482ms ago: executing program 4 (id=1347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 369.814533ms ago: executing program 4 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) 346.708683ms ago: executing program 4 (id=1349): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = pidfd_getfd(r1, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="b5e729bd7000fbdbec2504000000180001801400020076657468315f746f5f62726964676500"], 0x2c}, 0x1, 0x0, 0x0, 0x20004810}, 0x20040800) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r8, 0x30, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 300.490974ms ago: executing program 5 (id=1350): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xae, 0x71, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x8000, 0x200, 0x3b91c057}}) sendto$packet(r0, &(0x7f00000001c0)="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", 0xfd, 0x20004004, &(0x7f0000000140)={0x11, 0x19, r1, 0x1, 0x9, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRESDEC=r0], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0xf5}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 222.973945ms ago: executing program 4 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) 222.558285ms ago: executing program 4 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0], 0x48) r2 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32], 0x48) r4 = socket(0x28, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49d, &(0x7f0000000c40)={0x0, 0x34f4, 0x800, 0x3, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r6, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0x21, &(0x7f0000001180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7ffffffe, 0xbe, &(0x7f0000000b80)=""/190, 0x41000, 0x0, '\x00', 0x0, @cgroup_device=0x6, r5, 0x8, &(0x7f0000000380)={0xa, 0x80000004}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x0, 0x6, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[r1, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff], 0x0, 0x10, 0xbfe}, 0x94) write$tcp_congestion(r9, 0x0, 0x0) wait4(r2, &(0x7f0000000240), 0x40000000, 0x0) syz_clone3(&(0x7f00000007c0)={0x40000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x23}, 0x0, 0x0, &(0x7f0000000640)=""/201, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) getpid() r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000000200)='GPL\x00', 0xe, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0xf7e1, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r0, r0, r0, r0, r0], &(0x7f0000000400)=[{0x4, 0x5, 0x8, 0x6}, {0x1, 0x3, 0xa}, {0x4, 0x4, 0xa, 0xa}, {0x1, 0x1, 0xd, 0x6}, {0x2, 0x5, 0xc, 0x3}, {0x4, 0x5, 0x5}, {0x4, 0x1, 0x0, 0x3}, {0x1, 0x4, 0x10, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) 181.800066ms ago: executing program 5 (id=1353): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f00000000c0)={[{@debug}]}, 0xc1, 0x7df, &(0x7f00000017c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x8) prctl$PR_SVE_GET_VL(0x33, 0xe4d3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0xa8c5018b5e67115a, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r5, &(0x7f0000000240)=[{}], 0x1, 0x1400, 0x0, 0x0) 0s ago: executing program 4 (id=1354): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.818376][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.957097][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.966561][ T6425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.033803][ T6427] siw: device registration error -23 [ 104.055872][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.318740][ T6437] lo speed is unknown, defaulting to 1000 [ 104.324551][ T29] audit: type=1326 audit(1758296168.985:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 104.366070][ T6440] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 104.381998][ T6440] bond0: (slave dummy0): Releasing backup interface [ 104.383952][ T6443] loop2: detected capacity change from 0 to 2048 [ 104.397224][ T6440] dummy0: left promiscuous mode [ 104.403880][ T6440] team0: Failed to send options change via netlink (err -105) [ 104.411456][ T6440] team0: Port device dummy0 added [ 104.418165][ T6444] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 104.421212][ T6443] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 104.427039][ T6444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.435143][ T6443] System zones: 0-7 [ 104.447493][ T6444] team0: Failed to send options change via netlink (err -105) [ 104.447972][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 104.456296][ T6444] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.477545][ T6444] team0: Port device dummy0 removed [ 104.484845][ T6444] dummy0: entered promiscuous mode [ 104.491742][ T6444] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.508670][ T5678] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 104.549608][ T5678] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.824940][ T6455] netlink: 566 bytes leftover after parsing attributes in process `syz.0.947'. [ 104.866015][ T6458] loop0: detected capacity change from 0 to 4096 [ 104.873638][ T6458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.898436][ T6458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.939624][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 104.939637][ T29] audit: type=1326 audit(1758296169.635:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 104.958457][ T6461] lo speed is unknown, defaulting to 1000 [ 104.984825][ T29] audit: type=1326 audit(1758296169.665:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.008259][ T29] audit: type=1326 audit(1758296169.665:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.031695][ T29] audit: type=1326 audit(1758296169.675:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.055042][ T29] audit: type=1326 audit(1758296169.675:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.078394][ T29] audit: type=1326 audit(1758296169.675:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.101757][ T29] audit: type=1326 audit(1758296169.675:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.125633][ T29] audit: type=1326 audit(1758296169.675:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.3.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 105.270605][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 105.331038][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.367857][ T6468] loop2: detected capacity change from 0 to 2048 [ 105.389787][ T29] audit: type=1400 audit(1758296170.075:2704): avc: denied { create } for pid=6469 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.420285][ T29] audit: type=1400 audit(1758296170.115:2705): avc: denied { create } for pid=6469 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.441878][ T6468] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 105.460356][ T6468] System zones: 0-7 [ 105.467380][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 105.638509][ T6475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.811827][ T6486] loop1: detected capacity change from 0 to 512 [ 105.834205][ T6489] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 105.844950][ T6489] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 105.857013][ T6489] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.866110][ T6489] team0: Port device dummy0 removed [ 105.874025][ T6489] dummy0: entered promiscuous mode [ 105.879953][ T6489] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.891395][ T5678] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 105.899733][ T5678] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.930494][ T6486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.943984][ T6486] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.959042][ T6486] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 106.012404][ T6486] bond0: (slave dummy0): Releasing backup interface [ 106.021187][ T6494] siw: device registration error -23 [ 106.028880][ T6486] dummy0: left promiscuous mode [ 106.044455][ T6486] team0: Port device dummy0 added [ 106.075155][ T6495] team0: Port device dummy0 removed [ 106.103805][ T6495] dummy0: entered promiscuous mode [ 106.166706][ T5678] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 106.178325][ T6495] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.223920][ T5678] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.347615][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 106.350427][ T6486] syz.1.955 (6486) used greatest stack depth: 10504 bytes left [ 106.362043][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.396934][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.439788][ T6503] lo speed is unknown, defaulting to 1000 [ 106.478616][ T6511] loop4: detected capacity change from 0 to 512 [ 106.501666][ T6511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.514363][ T6507] loop1: detected capacity change from 0 to 4096 [ 106.521041][ T6511] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.522645][ T6507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.545867][ T6507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.558563][ T6511] bond0: (slave dummy0): Releasing backup interface [ 106.582154][ T6511] dummy0: left promiscuous mode [ 106.600233][ T6511] team0: Port device dummy0 added [ 106.612878][ T6511] team0: Port device dummy0 removed [ 106.621005][ T6511] dummy0: entered promiscuous mode [ 106.626692][ T6511] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.751180][ T6521] bond0: (slave dummy0): Releasing backup interface [ 106.758171][ T6523] random: crng reseeded on system resumption [ 106.771509][ T6521] dummy0: left promiscuous mode [ 107.308803][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.337142][ T6534] lo speed is unknown, defaulting to 1000 [ 107.422864][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.589785][ T6540] lo speed is unknown, defaulting to 1000 [ 107.683566][ T6546] lo speed is unknown, defaulting to 1000 [ 107.776243][ T6547] lo speed is unknown, defaulting to 1000 [ 108.184376][ T6549] loop0: detected capacity change from 0 to 512 [ 108.216959][ T6549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.230804][ T6556] netlink: 566 bytes leftover after parsing attributes in process `syz.2.973'. [ 108.235315][ T6549] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.270693][ T6549] validate_nla: 3 callbacks suppressed [ 108.270709][ T6549] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 108.304951][ T6560] loop2: detected capacity change from 0 to 512 [ 108.321444][ T6563] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 108.323649][ T6549] team0: Port device dummy0 added [ 108.339649][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.344448][ T6563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.356518][ T6560] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.381468][ T3567] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 108.390337][ T3567] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.401027][ T6563] team0: Failed to send options change via netlink (err -105) [ 108.408562][ T6563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.427321][ T6560] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.463190][ T6563] team0: Port device dummy0 removed [ 108.470726][ T6563] dummy0: entered promiscuous mode [ 108.476495][ T6563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.491696][ T6569] loop1: detected capacity change from 0 to 512 [ 108.505850][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.515468][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.531024][ T6566] fido_id[6566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.569687][ T6572] loop4: detected capacity change from 0 to 4096 [ 108.572482][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.588947][ T6572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.600150][ T6569] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.615504][ T6572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.680305][ T6574] bond0: (slave dummy0): Releasing backup interface [ 108.728622][ T6574] dummy0: left promiscuous mode [ 108.755769][ T6569] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.829248][ T6585] siw: device registration error -23 [ 109.020263][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.286522][ T6597] loop3: detected capacity change from 0 to 512 [ 109.302099][ T6597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.320603][ T6597] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.352789][ T6598] lo speed is unknown, defaulting to 1000 [ 109.384681][ T6597] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 109.407361][ T6603] lo speed is unknown, defaulting to 1000 [ 109.444238][ T6604] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 109.511757][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 109.513794][ T6597] team0: Port device dummy0 added [ 109.532460][ T6604] team0: Port device dummy0 removed [ 109.537892][ T6607] loop0: detected capacity change from 0 to 512 [ 109.560773][ T6604] dummy0: entered promiscuous mode [ 109.572670][ T6604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.579572][ T6607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.594256][ T6607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.612194][ T6607] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.666193][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.684226][ T6607] EXT4-fs (loop0): 1 truncate cleaned up [ 109.697950][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.711352][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.728672][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.989'. [ 109.753541][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.999743][ T6621] lo speed is unknown, defaulting to 1000 [ 110.376971][ T6624] siw: device registration error -23 [ 110.467693][ C0] hrtimer: interrupt took 25521 ns [ 110.726180][ T6619] loop3: detected capacity change from 0 to 512 [ 110.774069][ T6634] loop4: detected capacity change from 0 to 512 [ 110.841931][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.894096][ T6634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.964903][ T6646] loop1: detected capacity change from 0 to 512 [ 111.002043][ T6619] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.026466][ T6634] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.039569][ T6642] lo speed is unknown, defaulting to 1000 [ 111.092472][ T6646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.147054][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 111.147070][ T29] audit: type=1400 audit(1758296175.835:2778): avc: denied { create } for pid=6617 comm="syz.3.991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 111.149404][ T6646] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.196410][ T6634] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 111.210321][ T29] audit: type=1400 audit(1758296175.905:2779): avc: denied { mounton } for pid=6617 comm="syz.3.991" path="/227/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.228231][ T6646] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 111.244915][ T6634] bond0: (slave dummy0): Releasing backup interface [ 111.251735][ T6649] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 111.273259][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.283986][ T6634] dummy0: left promiscuous mode [ 111.307056][ T6634] team0: Port device dummy0 added [ 111.314141][ T6646] bond0: (slave dummy0): Releasing backup interface [ 111.333199][ T6653] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 111.334472][ T6646] dummy0: left promiscuous mode [ 111.367746][ T29] audit: type=1326 audit(1758296176.055:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.391252][ T29] audit: type=1326 audit(1758296176.055:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.414730][ T29] audit: type=1326 audit(1758296176.055:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.420962][ T6646] team0: Failed to send options change via netlink (err -105) [ 111.438134][ T29] audit: type=1326 audit(1758296176.055:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.445616][ T6646] team0: Port device dummy0 added [ 111.538276][ T5678] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 111.551956][ T5678] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.563254][ T29] audit: type=1326 audit(1758296176.165:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.563434][ T6649] team0: Port device dummy0 removed [ 111.586764][ T29] audit: type=1326 audit(1758296176.165:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.615467][ T29] audit: type=1326 audit(1758296176.165:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.638882][ T29] audit: type=1326 audit(1758296176.205:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea203ec29 code=0x7ffc0000 [ 111.659380][ T6649] dummy0: entered promiscuous mode [ 111.717673][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 111.721698][ T6649] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.761859][ T6653] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.809539][ T6653] team0: Port device dummy0 removed [ 111.835814][ T6653] dummy0: entered promiscuous mode [ 111.879922][ T6653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.999490][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.015864][ T6668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.396666][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.408986][ T6679] SELinux: failed to load policy [ 112.414650][ T6676] lo speed is unknown, defaulting to 1000 [ 112.472796][ T6681] siw: device registration error -23 [ 112.716382][ T6687] loop4: detected capacity change from 0 to 512 [ 112.822366][ T6694] loop2: detected capacity change from 0 to 512 [ 112.830689][ T6694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.857736][ T6694] EXT4-fs (loop2): 1 truncate cleaned up [ 112.864247][ T6687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.877570][ T6687] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.890164][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.910538][ T6687] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 112.923058][ T6687] bond0: (slave dummy0): Releasing backup interface [ 112.936927][ T6687] dummy0: left promiscuous mode [ 112.943689][ T6687] team0: Port device dummy0 added [ 112.944106][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.956565][ T6687] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 112.978280][ T6687] team0: Port device dummy0 removed [ 112.986192][ T6687] dummy0: entered promiscuous mode [ 112.993223][ T6687] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.070510][ T6701] bond0: (slave dummy0): Releasing backup interface [ 113.090672][ T6701] dummy0: left promiscuous mode [ 113.177860][ T6702] lo speed is unknown, defaulting to 1000 [ 113.271293][ T6709] bond0: (slave dummy0): Releasing backup interface [ 113.302481][ T6709] dummy0: left promiscuous mode [ 113.329145][ T6712] validate_nla: 1 callbacks suppressed [ 113.334671][ T6712] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 113.358929][ T6709] team0: Failed to send options change via netlink (err -105) [ 113.366476][ T6709] team0: Port device dummy0 added [ 113.380700][ T6712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.391647][ T6712] team0: Failed to send options change via netlink (err -105) [ 113.399275][ T6712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.411743][ T5678] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 113.421739][ T6712] team0: Port device dummy0 removed [ 113.433593][ T5678] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.456453][ T6712] dummy0: entered promiscuous mode [ 113.479531][ T6712] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.494407][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.577095][ T6717] random: crng reseeded on system resumption [ 113.580753][ T6721] loop3: detected capacity change from 0 to 512 [ 113.602766][ T6723] loop4: detected capacity change from 0 to 512 [ 113.619760][ T6723] EXT4-fs: Invalid want_extra_isize 109 [ 113.642339][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.669788][ T6721] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.684310][ T6721] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 113.798433][ T6731] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 113.825848][ T3397] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 113.842839][ T6721] bond0: (slave dummy0): Releasing backup interface [ 113.850924][ T6721] dummy0: left promiscuous mode [ 113.892536][ T6721] team0: Failed to send options change via netlink (err -105) [ 113.900062][ T6721] team0: Port device dummy0 added [ 114.071850][ T6731] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.167051][ T6737] loop1: detected capacity change from 0 to 512 [ 114.201244][ T6731] team0: Failed to send options change via netlink (err -105) [ 114.212419][ T6737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.217231][ T3397] hid-generic 0000:0000:0000.002C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 114.257323][ T6738] fido_id[6738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.276450][ T6731] team0: Port device dummy0 removed [ 114.285795][ T6737] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1027: bad orphan inode 131083 [ 114.288957][ T6731] dummy0: entered promiscuous mode [ 114.302151][ T6731] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.332230][ T6735] lo speed is unknown, defaulting to 1000 [ 114.378628][ T6737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.444863][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.465511][ T6737] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6737 comm=syz.1.1027 [ 114.518064][ T6743] bond0: (slave dummy0): Releasing backup interface [ 114.532346][ T6743] dummy0: left promiscuous mode [ 114.658595][ T6748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.724064][ T6758] lo speed is unknown, defaulting to 1000 [ 114.763137][ T6765] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 114.769287][ T6762] loop3: detected capacity change from 0 to 2048 [ 114.781499][ T6765] team0: Port device dummy0 added [ 114.791641][ T6765] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 114.801927][ T6765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.812539][ T6744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.813350][ T6762] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 114.829818][ T6762] System zones: 0-7 [ 114.830123][ T6765] team0: Failed to send options change via netlink (err -105) [ 114.834886][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 114.851638][ T6765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.867639][ T3397] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 114.876052][ T3397] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.903022][ T6765] team0: Port device dummy0 removed [ 115.003069][ T6765] dummy0: entered promiscuous mode [ 115.009027][ T6765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.019264][ T6766] lo speed is unknown, defaulting to 1000 [ 115.033901][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.093207][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.152834][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.185415][ T6773] lo speed is unknown, defaulting to 1000 [ 115.224228][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.301685][ T12] dummy0: left promiscuous mode [ 115.431148][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 115.440101][ T12] bond0 (unregistering): Released all slaves [ 115.467621][ T6773] chnl_net:caif_netlink_parms(): no params data found [ 115.678796][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.685999][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.728644][ T6799] FAULT_INJECTION: forcing a failure. [ 115.728644][ T6799] name failslab, interval 1, probability 0, space 0, times 1 [ 115.741388][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.4.1045 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.741414][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.741477][ T6799] Call Trace: [ 115.741484][ T6799] [ 115.741491][ T6799] __dump_stack+0x1d/0x30 [ 115.741516][ T6799] dump_stack_lvl+0xe8/0x140 [ 115.741532][ T6799] dump_stack+0x15/0x1b [ 115.741568][ T6799] should_fail_ex+0x265/0x280 [ 115.741592][ T6799] should_failslab+0x8c/0xb0 [ 115.741631][ T6799] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 115.741704][ T6799] ? sidtab_sid2str_get+0xa0/0x130 [ 115.741784][ T6799] kmemdup_noprof+0x2b/0x70 [ 115.741805][ T6799] sidtab_sid2str_get+0xa0/0x130 [ 115.741901][ T6799] security_sid_to_context_core+0x1eb/0x2e0 [ 115.741925][ T6799] security_sid_to_context+0x27/0x40 [ 115.741946][ T6799] avc_audit_post_callback+0x10f/0x520 [ 115.741970][ T6799] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 115.742068][ T6799] common_lsm_audit+0x1bb/0x230 [ 115.742101][ T6799] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 115.742129][ T6799] slow_avc_audit+0x104/0x140 [ 115.742161][ T6799] audit_inode_permission+0x111/0x150 [ 115.742186][ T6799] selinux_inode_permission+0x69b/0x740 [ 115.742220][ T6799] security_inode_permission+0x6d/0xb0 [ 115.742349][ T6799] inode_permission+0x106/0x310 [ 115.742372][ T6799] ? may_open+0x243/0x350 [ 115.742391][ T6799] may_open+0x255/0x350 [ 115.742568][ T6799] path_openat+0x1b4a/0x2170 [ 115.742599][ T6799] ? mntput+0x4b/0x80 [ 115.742622][ T6799] ? terminate_walk+0x27f/0x2a0 [ 115.742648][ T6799] do_filp_open+0x109/0x230 [ 115.742684][ T6799] do_open_execat+0xd8/0x260 [ 115.742745][ T6799] alloc_bprm+0x25/0x350 [ 115.742817][ T6799] do_execveat_common+0x12e/0x750 [ 115.742837][ T6799] ? getname_flags+0x154/0x3b0 [ 115.742866][ T6799] __x64_sys_execveat+0x73/0x90 [ 115.742941][ T6799] x64_sys_call+0x1fec/0x2ff0 [ 115.742963][ T6799] do_syscall_64+0xd2/0x200 [ 115.742997][ T6799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.743022][ T6799] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.743079][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.743102][ T6799] RIP: 0033:0x7f68cb94ec29 [ 115.743170][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.743188][ T6799] RSP: 002b:00007f68ca3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 115.743208][ T6799] RAX: ffffffffffffffda RBX: 00007f68cbb95fa0 RCX: 00007f68cb94ec29 [ 115.743219][ T6799] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 115.743279][ T6799] RBP: 00007f68ca3b7090 R08: 0000000000001000 R09: 0000000000000000 [ 115.743292][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.743305][ T6799] R13: 00007f68cbb96038 R14: 00007f68cbb95fa0 R15: 00007ffe4762ffb8 [ 115.743323][ T6799] [ 116.031414][ T6773] bridge_slave_0: entered allmulticast mode [ 116.037410][ T6799] process 'syz.4.1045' launched './file1' with NULL argv: empty string added [ 116.047107][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 116.048072][ T6773] bridge_slave_0: entered promiscuous mode [ 116.073856][ T6792] lo speed is unknown, defaulting to 1000 [ 116.107774][ T12] hsr_slave_0: left promiscuous mode [ 116.115041][ T12] hsr_slave_1: left promiscuous mode [ 116.116275][ T6801] loop3: detected capacity change from 0 to 4096 [ 116.126868][ T12] veth1_macvtap: left promiscuous mode [ 116.144056][ T6801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.148321][ T12] veth0_macvtap: left promiscuous mode [ 116.158464][ T12] veth1_vlan: left promiscuous mode [ 116.163776][ T12] veth0_vlan: left promiscuous mode [ 116.211360][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.278398][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.335062][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.360065][ T6811] netlink: 'syz.4.1050': attribute type 3 has an invalid length. [ 116.367814][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 116.390064][ T6811] Zero length message leads to an empty skb [ 116.435780][ T6817] loop0: detected capacity change from 0 to 512 [ 116.442763][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.449983][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.471868][ T6773] bridge_slave_1: entered allmulticast mode [ 116.473026][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.489287][ T6773] bridge_slave_1: entered promiscuous mode [ 116.529280][ T6817] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.562705][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.573774][ T6820] loop4: detected capacity change from 0 to 512 [ 116.615500][ T6820] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.621127][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.646038][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 116.646051][ T29] audit: type=1400 audit(1758296181.335:2900): avc: denied { read } for pid=6810 comm="syz.4.1050" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.663297][ T6817] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 116.741034][ T6773] team0: Port device team_slave_0 added [ 116.768657][ T6817] team0: Port device dummy0 added [ 116.783020][ T29] audit: type=1400 audit(1758296181.475:2901): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.800022][ T6773] team0: Port device team_slave_1 added [ 116.815385][ T6838] loop2: detected capacity change from 0 to 512 [ 116.828597][ T6817] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 116.846039][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.853042][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.879030][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.907373][ T23] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 116.923184][ T6838] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.934767][ T23] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.951292][ T6838] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 116.963090][ T6817] team0: Port device dummy0 removed [ 116.991570][ T6817] dummy0: entered promiscuous mode [ 116.997476][ T6817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.006534][ T6852] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 117.027434][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.034432][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.060417][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.092915][ T6838] bond0: (slave dummy0): Releasing backup interface [ 117.116955][ T6838] dummy0: left promiscuous mode [ 117.143565][ T6858] loop3: detected capacity change from 0 to 2048 [ 117.154936][ T6838] team0: Failed to send options change via netlink (err -105) [ 117.162554][ T6838] team0: Port device dummy0 added [ 117.181568][ T6858] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 117.189806][ T6858] System zones: 0-7 [ 117.196358][ T6852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.197697][ T6817] syz.0.1051 (6817) used greatest stack depth: 10216 bytes left [ 117.217958][ T6852] team0: Failed to send options change via netlink (err -105) [ 117.234367][ T6852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.299461][ T6852] team0: Port device dummy0 removed [ 117.315193][ T6852] dummy0: entered promiscuous mode [ 117.321452][ T6852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.372752][ T6773] hsr_slave_0: entered promiscuous mode [ 117.468562][ T6773] hsr_slave_1: entered promiscuous mode [ 117.474511][ T6773] debugfs: 'hsr0' already exists in 'hsr' [ 117.480275][ T6773] Cannot create hsr debugfs directory [ 117.554318][ T6877] lo speed is unknown, defaulting to 1000 [ 117.631203][ T6890] lo speed is unknown, defaulting to 1000 [ 117.664202][ T6773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.688457][ T6773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.704299][ T6773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.747020][ T6773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.809511][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.826451][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.843812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.850979][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.866518][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.873714][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.981003][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.155508][ T6773] veth0_vlan: entered promiscuous mode [ 118.168382][ T6773] veth1_vlan: entered promiscuous mode [ 118.185713][ T6773] veth0_macvtap: entered promiscuous mode [ 118.193808][ T6773] veth1_macvtap: entered promiscuous mode [ 118.204360][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.215527][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.227556][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.276615][ T1404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.315236][ T6945] lo speed is unknown, defaulting to 1000 [ 118.407656][ T29] audit: type=1400 audit(1758296183.065:2902): avc: denied { mount } for pid=6773 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.429974][ T29] audit: type=1400 audit(1758296183.085:2903): avc: denied { mounton } for pid=6773 comm="syz-executor" path="/root/syzkaller.r5au0w/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.486728][ T1861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.608539][ T1861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.622607][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 118.638650][ T6955] loop5: detected capacity change from 0 to 512 [ 118.651591][ T6955] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.666491][ T6955] netlink: 'syz.5.1041': attribute type 10 has an invalid length. [ 118.676725][ T6955] team0: Port device dummy0 added [ 118.689433][ T6955] netlink: 'syz.5.1041': attribute type 10 has an invalid length. [ 118.697850][ T6955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.708531][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 118.717688][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 118.726803][ T6955] team0: Failed to send options change via netlink (err -105) [ 118.726836][ T6955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.727094][ T6955] team0: Port device dummy0 removed [ 118.730947][ T6955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.846448][ T29] audit: type=1400 audit(1758296183.535:2904): avc: denied { ioctl } for pid=6964 comm="syz.0.1062" path="socket:[19042]" dev="sockfs" ino=19042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.872584][ T29] audit: type=1400 audit(1758296183.535:2905): avc: denied { read write } for pid=6964 comm="syz.0.1062" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.872725][ T6965] tmpfs: Bad value for 'mpol' [ 118.897553][ T29] audit: type=1400 audit(1758296183.535:2906): avc: denied { open } for pid=6964 comm="syz.0.1062" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.980638][ T29] audit: type=1400 audit(1758296183.595:2907): avc: denied { ioctl } for pid=6964 comm="syz.0.1062" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.009535][ T29] audit: type=1326 audit(1758296183.705:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 119.033086][ T29] audit: type=1326 audit(1758296183.705:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 119.064132][ T6970] loop3: detected capacity change from 0 to 512 [ 119.070803][ T6976] loop0: detected capacity change from 0 to 4096 [ 119.090173][ T6976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.129509][ T6980] loop2: detected capacity change from 0 to 512 [ 119.132590][ T6970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1065: bg 0: block 248: padding at end of block bitmap is not set [ 119.150694][ T6970] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1065: Failed to acquire dquot type 1 [ 119.165859][ T6970] EXT4-fs (loop3): 1 truncate cleaned up [ 119.187793][ T6980] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.215002][ T6970] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.230919][ T6970] syz.3.1065 (6970) used greatest stack depth: 9200 bytes left [ 119.261426][ T6980] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 119.291373][ T6986] loop5: detected capacity change from 0 to 4096 [ 119.328593][ T6990] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 119.346652][ T6986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.349395][ T6980] bond0: (slave dummy0): Releasing backup interface [ 119.367956][ T6980] dummy0: left promiscuous mode [ 119.387105][ T6994] loop3: detected capacity change from 0 to 1024 [ 119.394886][ T6980] team0: Port device dummy0 added [ 119.419055][ T6990] team0: Port device dummy0 removed [ 119.439645][ T6994] EXT4-fs: Ignoring removed oldalloc option [ 119.501527][ T6990] dummy0: entered promiscuous mode [ 119.507333][ T6990] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.566167][ T6998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1070'. [ 119.581188][ T6994] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.611931][ T6994] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1068: lblock 0 mapped to illegal pblock 0 (length 6) [ 119.662187][ T6994] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 119.741151][ T6994] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 119.753616][ T6994] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.753616][ T6994] [ 119.763335][ T6994] EXT4-fs (loop3): Total free blocks count 0 [ 119.769386][ T6994] EXT4-fs (loop3): Free/Dirty block details [ 119.775273][ T6994] EXT4-fs (loop3): free_blocks=4293918720 [ 119.781033][ T6994] EXT4-fs (loop3): dirty_blocks=64 [ 119.786228][ T6994] EXT4-fs (loop3): Block reservation details [ 119.792242][ T6994] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 120.012651][ T7018] bond0: (slave dummy0): Releasing backup interface [ 120.036861][ T7018] dummy0: left promiscuous mode [ 120.189665][ T7015] lo speed is unknown, defaulting to 1000 [ 120.344193][ T7034] loop5: detected capacity change from 0 to 512 [ 120.421631][ T7038] lo speed is unknown, defaulting to 1000 [ 120.433312][ T7037] FAULT_INJECTION: forcing a failure. [ 120.433312][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.446505][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.446608][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.446618][ T7037] Call Trace: [ 120.446624][ T7037] [ 120.446630][ T7037] __dump_stack+0x1d/0x30 [ 120.446647][ T7037] dump_stack_lvl+0xe8/0x140 [ 120.446663][ T7037] dump_stack+0x15/0x1b [ 120.446676][ T7037] should_fail_ex+0x265/0x280 [ 120.446699][ T7037] should_fail+0xb/0x20 [ 120.446782][ T7037] should_fail_usercopy+0x1a/0x20 [ 120.446869][ T7037] _copy_from_user+0x1c/0xb0 [ 120.446944][ T7037] ___sys_sendmsg+0xc1/0x1d0 [ 120.446993][ T7037] __x64_sys_sendmsg+0xd4/0x160 [ 120.447062][ T7037] x64_sys_call+0x191e/0x2ff0 [ 120.447085][ T7037] do_syscall_64+0xd2/0x200 [ 120.447114][ T7037] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.447134][ T7037] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.447189][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.447209][ T7037] RIP: 0033:0x7f68cb94ec29 [ 120.447222][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.447236][ T7037] RSP: 002b:00007f68ca3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.447252][ T7037] RAX: ffffffffffffffda RBX: 00007f68cbb95fa0 RCX: 00007f68cb94ec29 [ 120.447320][ T7037] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 120.447333][ T7037] RBP: 00007f68ca3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.447347][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.447360][ T7037] R13: 00007f68cbb96038 R14: 00007f68cbb95fa0 R15: 00007ffe4762ffb8 [ 120.447397][ T7037] [ 120.709968][ T7046] loop3: detected capacity change from 0 to 512 [ 120.735068][ T7048] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 120.746167][ T7046] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.782076][ T7046] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 120.791839][ T7046] team0: Port device dummy0 added [ 120.797084][ T7057] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 120.806236][ T7046] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 120.814485][ T7048] bond0: (slave dummy0): Releasing backup interface [ 120.824559][ T7048] dummy0: left promiscuous mode [ 120.853681][ T7048] team0: Failed to send options change via netlink (err -105) [ 120.861374][ T7048] team0: Port device dummy0 added [ 120.869102][ T3365] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 120.876893][ T3365] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.887046][ T7057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 120.897918][ T7057] team0: Failed to send options change via netlink (err -105) [ 120.952545][ T7057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 120.999426][ T7057] team0: Port device dummy0 removed [ 121.012554][ T7057] dummy0: entered promiscuous mode [ 121.033979][ T7057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.056518][ T7046] team0: Port device dummy0 removed [ 121.075014][ T7046] dummy0: entered promiscuous mode [ 121.084950][ T7046] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.112672][ T7053] lo speed is unknown, defaulting to 1000 [ 121.241598][ T7071] loop5: detected capacity change from 0 to 512 [ 121.283295][ T7076] atomic_op ffff888124870928 conn xmit_atomic 0000000000000000 [ 121.305136][ T7071] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.439764][ T7071] netlink: 'syz.5.1088': attribute type 10 has an invalid length. [ 121.450730][ T7071] bond0: (slave dummy0): Releasing backup interface [ 121.459985][ T7071] team0: Port device dummy0 added [ 121.479135][ T7071] netlink: 'syz.5.1088': attribute type 10 has an invalid length. [ 121.504465][ T7071] team0: Port device dummy0 removed [ 121.511786][ T7071] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.576774][ T3414] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 121.587613][ T3414] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.954275][ T7102] loop0: detected capacity change from 0 to 512 [ 121.965217][ T7103] lo speed is unknown, defaulting to 1000 [ 121.981126][ T7102] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.005257][ T7100] lo speed is unknown, defaulting to 1000 [ 122.012890][ T7102] bond0: (slave dummy0): Releasing backup interface [ 122.104984][ T7102] dummy0: left promiscuous mode [ 122.118812][ T10] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.122712][ T7102] team0: Failed to send options change via netlink (err -105) [ 122.133700][ T7102] team0: Port device dummy0 added [ 122.140501][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.145064][ T7106] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.160702][ T7106] team0: Failed to send options change via netlink (err -105) [ 122.219375][ T7106] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.228308][ T7106] team0: Port device dummy0 removed [ 122.236463][ T7106] dummy0: entered promiscuous mode [ 122.242376][ T7106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.357362][ T7109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.645239][ T7122] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1101'. [ 122.677078][ T7116] lo speed is unknown, defaulting to 1000 [ 122.757569][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 122.757584][ T29] audit: type=1400 audit(1758296187.445:2949): avc: denied { create } for pid=7124 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.813954][ T29] audit: type=1400 audit(1758296187.475:2950): avc: denied { write } for pid=7124 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.888328][ T29] audit: type=1400 audit(1758296187.575:2951): avc: denied { create } for pid=7127 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.032719][ T3414] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 123.053064][ T7128] bond0: (slave dummy0): Releasing backup interface [ 123.064232][ T3414] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.099129][ T7128] dummy0: left promiscuous mode [ 123.145248][ T7136] atomic_op ffff888119b7e528 conn xmit_atomic 0000000000000000 [ 123.309464][ T7131] bond0: (slave dummy0): Releasing backup interface [ 123.341722][ T7131] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.379636][ T7131] team0: Failed to send options change via netlink (err -105) [ 123.387143][ T7131] team0: Port device dummy0 added [ 123.410549][ T7134] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.439678][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 123.459518][ T7134] team0: Failed to send options change via netlink (err -105) [ 123.482054][ T7134] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.494060][ T7134] team0: Port device dummy0 removed [ 123.501850][ T7134] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.813324][ T7157] siw: device registration error -23 [ 123.926837][ T7159] validate_nla: 4 callbacks suppressed [ 123.926852][ T7159] netlink: 'syz.3.1111': attribute type 10 has an invalid length. [ 124.094350][ T7163] netlink: 'syz.3.1111': attribute type 10 has an invalid length. [ 124.108226][ T7162] loop5: detected capacity change from 0 to 1024 [ 124.130147][ T7159] bond0: (slave dummy0): Releasing backup interface [ 124.137268][ T7162] EXT4-fs: Ignoring removed orlov option [ 124.141959][ T7159] dummy0: left promiscuous mode [ 124.149910][ T3397] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 124.151746][ T7159] team0: Failed to send options change via netlink (err -105) [ 124.161440][ T3397] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.164859][ T7159] team0: Port device dummy0 added [ 124.184110][ T29] audit: type=1400 audit(1758296188.875:2952): avc: denied { read } for pid=7161 comm="syz.5.1112" path="/11/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.251370][ T7163] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.261874][ T7163] team0: Failed to send options change via netlink (err -105) [ 124.269553][ T7163] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.278405][ T7163] team0: Port device dummy0 removed [ 124.287457][ T7163] dummy0: entered promiscuous mode [ 124.293935][ T7163] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.323973][ T7172] lo speed is unknown, defaulting to 1000 [ 124.363718][ T7171] loop2: detected capacity change from 0 to 4096 [ 124.390726][ T7171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.778304][ T7180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.919662][ T7190] lo speed is unknown, defaulting to 1000 [ 125.004405][ T7195] loop3: detected capacity change from 0 to 1024 [ 125.042959][ T7195] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.172841][ T29] audit: type=1400 audit(1758296189.865:2953): avc: denied { read } for pid=7194 comm="syz.3.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.272270][ T7206] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1118'. [ 125.299413][ T29] audit: type=1400 audit(1758296189.965:2954): avc: denied { ioctl } for pid=7194 comm="syz.3.1118" path="/256/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.314683][ T7207] lo speed is unknown, defaulting to 1000 [ 125.395679][ T7208] lo speed is unknown, defaulting to 1000 [ 125.504894][ T7210] loop4: detected capacity change from 0 to 1764 [ 125.526672][ T29] audit: type=1400 audit(1758296190.215:2955): avc: denied { mount } for pid=7209 comm="syz.4.1121" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 125.579644][ T29] audit: type=1400 audit(1758296190.255:2956): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 125.813422][ T7223] lo speed is unknown, defaulting to 1000 [ 126.060593][ T7228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.165465][ T7231] bond0: (slave dummy0): Releasing backup interface [ 126.165752][ T7237] loop2: detected capacity change from 0 to 512 [ 126.194253][ T7237] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.206911][ T7231] bridge_slave_0: left allmulticast mode [ 126.212614][ T7231] bridge_slave_0: left promiscuous mode [ 126.213849][ T7233] loop0: detected capacity change from 0 to 4096 [ 126.218352][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.228598][ T7237] netlink: 'syz.2.1131': attribute type 10 has an invalid length. [ 126.233001][ T7233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.247256][ T7231] bridge_slave_1: left allmulticast mode [ 126.253062][ T7231] bridge_slave_1: left promiscuous mode [ 126.258748][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.270101][ T7231] bond0: (slave bond_slave_0): Releasing backup interface [ 126.280473][ T7241] netlink: 'syz.2.1131': attribute type 10 has an invalid length. [ 126.288671][ T7231] bond0: (slave bond_slave_1): Releasing backup interface [ 126.304157][ T7231] team0: Port device team_slave_0 removed [ 126.313465][ T7231] team0: Port device team_slave_1 removed [ 126.320534][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.327921][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.337635][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.345127][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.418242][ T7235] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1130'. [ 126.498189][ T7237] bond0: (slave dummy0): Releasing backup interface [ 126.546695][ T7252] loop3: detected capacity change from 0 to 512 [ 126.555020][ T7237] dummy0: left promiscuous mode [ 126.603111][ T7252] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.607706][ T7237] team0: Port device dummy0 added [ 126.617199][ T7252] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 126.705033][ T7265] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 126.769605][ T3397] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 126.786255][ T7241] team0: Port device dummy0 removed [ 126.787211][ T3397] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.806340][ T7241] dummy0: entered promiscuous mode [ 126.828177][ T7241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.857125][ T7252] bond0: (slave dummy0): Releasing backup interface [ 126.890325][ T3301] EXT4-fs unmount: 35 callbacks suppressed [ 126.890341][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.891661][ T7252] dummy0: left promiscuous mode [ 126.953098][ T7252] team0: Port device dummy0 added [ 126.973194][ T7265] team0: Port device dummy0 removed [ 127.000546][ T7265] dummy0: entered promiscuous mode [ 127.026726][ T7265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.056024][ T7267] lo speed is unknown, defaulting to 1000 [ 127.062330][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.141686][ T7277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.171169][ T7282] lo speed is unknown, defaulting to 1000 [ 127.397760][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.520011][ T29] audit: type=1326 audit(1758296192.195:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.529668][ T7286] lo speed is unknown, defaulting to 1000 [ 127.543480][ T29] audit: type=1326 audit(1758296192.195:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.623462][ T7293] netlink: 566 bytes leftover after parsing attributes in process `syz.5.1146'. [ 127.643170][ T7295] lo speed is unknown, defaulting to 1000 [ 127.675117][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1148'. [ 127.694849][ T7300] loop3: detected capacity change from 0 to 1024 [ 127.702696][ T7300] EXT4-fs: Ignoring removed orlov option [ 127.714964][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.763964][ T7303] loop5: detected capacity change from 0 to 4096 [ 127.824905][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 127.824945][ T29] audit: type=1326 audit(1758296192.515:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.845287][ T7303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.854489][ T29] audit: type=1326 audit(1758296192.515:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.854573][ T29] audit: type=1326 audit(1758296192.515:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.907878][ T29] audit: type=1326 audit(1758296192.515:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.907926][ T29] audit: type=1326 audit(1758296192.515:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.907955][ T29] audit: type=1326 audit(1758296192.515:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.907975][ T29] audit: type=1326 audit(1758296192.515:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.908000][ T29] audit: type=1326 audit(1758296192.515:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 127.908024][ T29] audit: type=1326 audit(1758296192.515:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 128.048402][ T29] audit: type=1326 audit(1758296192.515:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7285 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 128.124899][ T7313] siw: device registration error -23 [ 128.248522][ T7303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.336800][ T7320] loop4: detected capacity change from 0 to 512 [ 128.427439][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.473768][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.489719][ T7320] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.541749][ T7330] loop3: detected capacity change from 0 to 512 [ 128.557435][ T7320] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 128.567635][ T7320] bond0: (slave dummy0): Releasing backup interface [ 128.577749][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.599411][ T7330] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.611495][ T7320] dummy0: left promiscuous mode [ 128.619748][ T7336] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 128.632636][ T7330] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 128.641986][ T7320] team0: Failed to send options change via netlink (err -105) [ 128.649565][ T7320] team0: Port device dummy0 added [ 128.657402][ T7336] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.691934][ T3397] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 128.701747][ T3397] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.719797][ T23] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 128.749328][ T23] hid-generic 0000:0000:0000.0036: hidraw1: HID v0.00 Device [syz1] on syz0 [ 128.794646][ T7336] team0: Failed to send options change via netlink (err -105) [ 128.877844][ T7336] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.902802][ T7336] team0: Port device dummy0 removed [ 128.923475][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.947526][ T7336] dummy0: entered promiscuous mode [ 128.959819][ T7336] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.046670][ T7356] lo speed is unknown, defaulting to 1000 [ 129.106939][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.130895][ T7357] lo speed is unknown, defaulting to 1000 [ 129.193547][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.252869][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 129.293299][ T7375] loop4: detected capacity change from 0 to 512 [ 129.296905][ T7379] loop3: detected capacity change from 0 to 512 [ 129.327437][ T7379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.346517][ T7379] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.368250][ T7375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.389580][ T7375] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.395467][ T7379] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 129.405098][ T7375] netlink: 'syz.4.1158': attribute type 10 has an invalid length. [ 129.416014][ T7379] bond0: (slave dummy0): Releasing backup interface [ 129.424305][ T7379] dummy0: left promiscuous mode [ 129.434564][ T7379] team0: Port device dummy0 added [ 129.444830][ T7379] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 129.453061][ T7375] bond0: (slave dummy0): Releasing backup interface [ 129.468073][ T7393] netlink: 'syz.4.1158': attribute type 10 has an invalid length. [ 129.473924][ T7375] dummy0: left promiscuous mode [ 129.483932][ T7375] team0: Failed to send options change via netlink (err -105) [ 129.491486][ T7375] team0: Port device dummy0 added [ 129.508974][ T7379] team0: Port device dummy0 removed [ 129.548975][ T7379] dummy0: entered promiscuous mode [ 129.549003][ T10] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 129.561888][ T10] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.645604][ T7379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.699803][ T7393] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.771640][ T7393] team0: Failed to send options change via netlink (err -105) [ 129.830451][ T7393] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.846840][ T7402] loop5: detected capacity change from 0 to 1024 [ 129.855523][ T7393] team0: Port device dummy0 removed [ 129.877387][ T7402] EXT4-fs: Ignoring removed orlov option [ 129.892475][ T7402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.907173][ T7393] dummy0: entered promiscuous mode [ 129.914114][ T7393] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.937690][ T7404] bond0: (slave dummy0): Releasing backup interface [ 129.961160][ T7404] dummy0: left promiscuous mode [ 130.099092][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.128591][ T7412] lo speed is unknown, defaulting to 1000 [ 130.153510][ T7414] loop2: detected capacity change from 0 to 4096 [ 130.161126][ T7414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.164455][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.170902][ T7414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.225048][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.341398][ T7429] FAULT_INJECTION: forcing a failure. [ 130.341398][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.354580][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.3.1171 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.354608][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.354619][ T7429] Call Trace: [ 130.354626][ T7429] [ 130.354633][ T7429] __dump_stack+0x1d/0x30 [ 130.354654][ T7429] dump_stack_lvl+0xe8/0x140 [ 130.354673][ T7429] dump_stack+0x15/0x1b [ 130.354688][ T7429] should_fail_ex+0x265/0x280 [ 130.354908][ T7429] should_fail+0xb/0x20 [ 130.354926][ T7429] should_fail_usercopy+0x1a/0x20 [ 130.354947][ T7429] _copy_from_user+0x1c/0xb0 [ 130.355047][ T7429] ___sys_recvmsg+0xaa/0x370 [ 130.355070][ T7429] ? 0xffffffff81000000 [ 130.355082][ T7429] ? __rcu_read_unlock+0x4f/0x70 [ 130.355114][ T7429] __x64_sys_recvmsg+0xd1/0x160 [ 130.355262][ T7429] x64_sys_call+0x2b42/0x2ff0 [ 130.355282][ T7429] do_syscall_64+0xd2/0x200 [ 130.355406][ T7429] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.355428][ T7429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.355529][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.355547][ T7429] RIP: 0033:0x7fdea203ec29 [ 130.355559][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.355585][ T7429] RSP: 002b:00007fdea0a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 130.355604][ T7429] RAX: ffffffffffffffda RBX: 00007fdea2285fa0 RCX: 00007fdea203ec29 [ 130.355616][ T7429] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 130.355628][ T7429] RBP: 00007fdea0a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.355639][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.355651][ T7429] R13: 00007fdea2286038 R14: 00007fdea2285fa0 R15: 00007ffd46e60a18 [ 130.355741][ T7429] [ 130.640890][ T7437] FAULT_INJECTION: forcing a failure. [ 130.640890][ T7437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.654036][ T7437] CPU: 1 UID: 0 PID: 7437 Comm: syz.5.1174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.654103][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.654114][ T7437] Call Trace: [ 130.654121][ T7437] [ 130.654129][ T7437] __dump_stack+0x1d/0x30 [ 130.654150][ T7437] dump_stack_lvl+0xe8/0x140 [ 130.654171][ T7437] dump_stack+0x15/0x1b [ 130.654188][ T7437] should_fail_ex+0x265/0x280 [ 130.654218][ T7437] should_fail+0xb/0x20 [ 130.654303][ T7437] should_fail_usercopy+0x1a/0x20 [ 130.654364][ T7437] _copy_to_user+0x20/0xa0 [ 130.654391][ T7437] simple_read_from_buffer+0xb5/0x130 [ 130.654413][ T7437] proc_fail_nth_read+0x10e/0x150 [ 130.654438][ T7437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.654476][ T7437] vfs_read+0x1a5/0x770 [ 130.654497][ T7437] ? __rcu_read_unlock+0x4f/0x70 [ 130.654538][ T7437] ? __fget_files+0x184/0x1c0 [ 130.654563][ T7437] ksys_read+0xda/0x1a0 [ 130.654646][ T7437] __x64_sys_read+0x40/0x50 [ 130.654735][ T7437] x64_sys_call+0x27bc/0x2ff0 [ 130.654757][ T7437] do_syscall_64+0xd2/0x200 [ 130.654788][ T7437] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.654810][ T7437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.654895][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.654969][ T7437] RIP: 0033:0x7f8d88ccd63c [ 130.654984][ T7437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.655002][ T7437] RSP: 002b:00007f8d87737030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.655049][ T7437] RAX: ffffffffffffffda RBX: 00007f8d88f15fa0 RCX: 00007f8d88ccd63c [ 130.655070][ T7437] RDX: 000000000000000f RSI: 00007f8d877370a0 RDI: 0000000000000007 [ 130.655083][ T7437] RBP: 00007f8d87737090 R08: 0000000000000000 R09: 0000000000000000 [ 130.655096][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.655170][ T7437] R13: 00007f8d88f16038 R14: 00007f8d88f15fa0 R15: 00007ffd342fe378 [ 130.655189][ T7437] [ 131.047702][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.057785][ T7456] random: crng reseeded on system resumption [ 131.095310][ T7465] loop2: detected capacity change from 0 to 1024 [ 131.102200][ T7465] EXT4-fs: Ignoring removed orlov option [ 131.117836][ T7465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.401246][ T7478] loop3: detected capacity change from 0 to 128 [ 131.436128][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.465245][ T7478] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.529965][ T7478] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.652071][ T7493] random: crng reseeded on system resumption [ 131.681375][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 131.729985][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.846979][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 132.051458][ T7535] FAULT_INJECTION: forcing a failure. [ 132.051458][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.064609][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.3.1196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.064632][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.064695][ T7535] Call Trace: [ 132.064702][ T7535] [ 132.064710][ T7535] __dump_stack+0x1d/0x30 [ 132.064729][ T7535] dump_stack_lvl+0xe8/0x140 [ 132.064745][ T7535] dump_stack+0x15/0x1b [ 132.064759][ T7535] should_fail_ex+0x265/0x280 [ 132.064834][ T7535] should_fail+0xb/0x20 [ 132.064855][ T7535] should_fail_usercopy+0x1a/0x20 [ 132.064880][ T7535] _copy_from_user+0x1c/0xb0 [ 132.064958][ T7535] ___sys_recvmsg+0xaa/0x370 [ 132.064983][ T7535] ? 0xffffffff81000000 [ 132.064994][ T7535] ? __rcu_read_unlock+0x4f/0x70 [ 132.065018][ T7535] __x64_sys_recvmsg+0xd1/0x160 [ 132.065126][ T7535] x64_sys_call+0x2b42/0x2ff0 [ 132.065148][ T7535] do_syscall_64+0xd2/0x200 [ 132.065177][ T7535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.065230][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.065250][ T7535] RIP: 0033:0x7fdea203ec29 [ 132.065266][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.065284][ T7535] RSP: 002b:00007fdea0a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 132.065378][ T7535] RAX: ffffffffffffffda RBX: 00007fdea2285fa0 RCX: 00007fdea203ec29 [ 132.065388][ T7535] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000008 [ 132.065401][ T7535] RBP: 00007fdea0a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.065414][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.065428][ T7535] R13: 00007fdea2286038 R14: 00007fdea2285fa0 R15: 00007ffd46e60a18 [ 132.065447][ T7535] [ 132.302662][ T7537] loop0: detected capacity change from 0 to 1024 [ 132.338684][ T7537] EXT4-fs: Ignoring removed orlov option [ 132.444636][ T7547] lo speed is unknown, defaulting to 1000 [ 132.481029][ T7537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.952204][ T7557] lo speed is unknown, defaulting to 1000 [ 133.192947][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.568007][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 133.568022][ T29] audit: type=1400 audit(1758296198.255:3076): avc: denied { write } for pid=7571 comm="syz.5.1204" name="vlan0" dev="proc" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.681933][ T7578] lo speed is unknown, defaulting to 1000 [ 133.726691][ T29] audit: type=1326 audit(1758296198.355:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.750183][ T29] audit: type=1326 audit(1758296198.355:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.773640][ T29] audit: type=1326 audit(1758296198.355:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.797043][ T29] audit: type=1326 audit(1758296198.355:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.820485][ T29] audit: type=1326 audit(1758296198.355:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.843940][ T29] audit: type=1326 audit(1758296198.355:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.867373][ T29] audit: type=1326 audit(1758296198.355:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.890657][ T29] audit: type=1326 audit(1758296198.365:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 133.914094][ T29] audit: type=1326 audit(1758296198.365:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb978b8ec29 code=0x7ffc0000 [ 134.213111][ T7589] lo speed is unknown, defaulting to 1000 [ 134.423025][ T7595] lo speed is unknown, defaulting to 1000 [ 134.597444][ T7602] loop3: detected capacity change from 0 to 1764 [ 134.664397][ T7606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1213'. [ 134.684332][ T7606] loop0: detected capacity change from 0 to 1024 [ 134.697186][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 134.708406][ T7606] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 134.715328][ T7611] netlink: 'syz.4.1214': attribute type 13 has an invalid length. [ 134.735422][ T7611] gretap0: refused to change device tx_queue_len [ 134.747896][ T7611] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.781272][ T7617] random: crng reseeded on system resumption [ 134.787817][ T7611] siw: device registration error -23 [ 134.802406][ T7606] loop0: detected capacity change from 0 to 512 [ 134.809098][ T7606] EXT4-fs: Ignoring removed orlov option [ 134.835190][ T7621] loop4: detected capacity change from 0 to 512 [ 134.841980][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 134.851285][ T7606] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 134.871528][ T7606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 134.881696][ T7621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.900522][ T7606] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1213: corrupted in-inode xattr: e_value size too large [ 134.914751][ T7627] loop3: detected capacity change from 0 to 4096 [ 134.921277][ T7621] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.922883][ T7627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.939454][ T7606] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1213: couldn't read orphan inode 15 (err -117) [ 134.942738][ T7621] netlink: 'syz.4.1216': attribute type 10 has an invalid length. [ 134.952016][ T7606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.971514][ T7621] bond0: (slave dummy0): Releasing backup interface [ 134.980226][ T7621] dummy0: left promiscuous mode [ 134.986331][ T7621] team0: Port device dummy0 added [ 134.986691][ T7606] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1213: corrupted in-inode xattr: e_value size too large [ 135.009949][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.160242][ T7606] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1213: corrupted in-inode xattr: e_value size too large [ 135.242458][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.281405][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.570235][ T7645] lo speed is unknown, defaulting to 1000 [ 135.734933][ T7649] lo speed is unknown, defaulting to 1000 [ 135.873511][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.934297][ T7667] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 135.991739][ T7667] bond0: (slave dummy0): Releasing backup interface [ 136.000552][ T7667] dummy0: left promiscuous mode [ 136.006787][ T7667] team0: Failed to send options change via netlink (err -105) [ 136.014293][ T7667] team0: Port device dummy0 added [ 136.033190][ T7669] netlink: 'syz.3.1229': attribute type 10 has an invalid length. [ 136.066166][ T7669] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.077227][ T10] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 136.101173][ T7669] team0: Failed to send options change via netlink (err -105) [ 136.128924][ T7669] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.199267][ T7669] team0: Port device dummy0 removed [ 136.204672][ T10] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.236863][ T7669] dummy0: entered promiscuous mode [ 136.254746][ T7671] fido_id[7671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.269477][ T7669] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.313071][ T7674] loop4: detected capacity change from 0 to 512 [ 136.411037][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.463273][ T7674] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.477044][ T7674] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 136.487764][ T7674] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 136.549790][ T7674] team0: Port device dummy0 removed [ 136.586183][ T7674] dummy0: entered promiscuous mode [ 136.616340][ T7674] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.639249][ T7683] lo speed is unknown, defaulting to 1000 [ 136.676076][ T7690] FAULT_INJECTION: forcing a failure. [ 136.676076][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.689218][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.689244][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.689254][ T7690] Call Trace: [ 136.689260][ T7690] [ 136.689268][ T7690] __dump_stack+0x1d/0x30 [ 136.689286][ T7690] dump_stack_lvl+0xe8/0x140 [ 136.689302][ T7690] dump_stack+0x15/0x1b [ 136.689348][ T7690] should_fail_ex+0x265/0x280 [ 136.689369][ T7690] should_fail+0xb/0x20 [ 136.689389][ T7690] should_fail_usercopy+0x1a/0x20 [ 136.689506][ T7690] _copy_from_user+0x1c/0xb0 [ 136.689592][ T7690] ___sys_sendmsg+0xc1/0x1d0 [ 136.689623][ T7690] __x64_sys_sendmsg+0xd4/0x160 [ 136.689651][ T7690] x64_sys_call+0x191e/0x2ff0 [ 136.689673][ T7690] do_syscall_64+0xd2/0x200 [ 136.689711][ T7690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.689805][ T7690] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.689832][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.689850][ T7690] RIP: 0033:0x7fb978b8ec29 [ 136.689863][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.689915][ T7690] RSP: 002b:00007fb9775ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.689931][ T7690] RAX: ffffffffffffffda RBX: 00007fb978dd5fa0 RCX: 00007fb978b8ec29 [ 136.689942][ T7690] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 136.689955][ T7690] RBP: 00007fb9775ef090 R08: 0000000000000000 R09: 0000000000000000 [ 136.689968][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.690032][ T7690] R13: 00007fb978dd6038 R14: 00007fb978dd5fa0 R15: 00007ffded660da8 [ 136.690051][ T7690] [ 136.968452][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.029661][ T7703] loop5: detected capacity change from 0 to 512 [ 137.065379][ T7705] openvswitch: netlink: Message has 6 unknown bytes. [ 137.095382][ T7703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.100334][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 137.114302][ T7703] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.178364][ T7710] siw: device registration error -23 [ 137.213796][ T7703] netlink: 'syz.5.1240': attribute type 10 has an invalid length. [ 137.223639][ T7703] team0: Port device dummy0 added [ 137.274535][ T7712] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 137.371715][ T7715] loop3: detected capacity change from 0 to 1024 [ 137.427291][ T7715] EXT4-fs: Ignoring removed orlov option [ 137.433656][ T7712] bond0: (slave dummy0): Releasing backup interface [ 137.459228][ T7716] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 137.500727][ T7715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.513411][ T7712] dummy0: left promiscuous mode [ 137.519735][ T7712] team0: Failed to send options change via netlink (err -105) [ 137.527205][ T7712] team0: Port device dummy0 added [ 137.542294][ T5678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 137.564181][ T7716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.575567][ T5678] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.618980][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.696982][ T7716] team0: Port device dummy0 removed [ 137.714325][ T7716] dummy0: entered promiscuous mode [ 137.721240][ T7716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.864647][ T7732] loop0: detected capacity change from 0 to 512 [ 137.886093][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.905621][ T7732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.906467][ T7736] lo speed is unknown, defaulting to 1000 [ 137.924191][ T7732] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.953919][ T7732] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 137.963697][ T7732] team0: Port device dummy0 added [ 137.972620][ T7732] team0: Port device dummy0 removed [ 137.981066][ T7732] dummy0: entered promiscuous mode [ 137.986820][ T7732] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.163476][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.182239][ T7749] loop3: detected capacity change from 0 to 1024 [ 138.204538][ T7749] ext4: Unknown parameter 'nouser_xattr' [ 138.230205][ T7751] bond0: (slave dummy0): Releasing backup interface [ 138.238236][ T7751] dummy0: left promiscuous mode [ 138.315335][ T7756] lo speed is unknown, defaulting to 1000 [ 138.415882][ T7761] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1255'. [ 138.646558][ T7765] bond0: (slave dummy0): Releasing backup interface [ 138.693591][ T7765] dummy0: left promiscuous mode [ 138.700078][ T7765] team0: Failed to send options change via netlink (err -105) [ 138.707560][ T7765] team0: Port device dummy0 added [ 138.728062][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 138.728076][ T29] audit: type=1400 audit(1758296203.415:3214): avc: denied { bind } for pid=7766 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.755536][ T7765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.766843][ T7765] team0: Failed to send options change via netlink (err -105) [ 138.770428][ T1035] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 138.781816][ T7765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 138.790888][ T29] audit: type=1400 audit(1758296203.445:3215): avc: denied { setopt } for pid=7766 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.810885][ T29] audit: type=1400 audit(1758296203.445:3216): avc: denied { read } for pid=7766 comm="syz.4.1259" path="socket:[21521]" dev="sockfs" ino=21521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.812327][ T1035] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.844302][ T7765] team0: Port device dummy0 removed [ 138.858943][ T7774] delete_channel: no stack [ 138.877902][ T7765] dummy0: entered promiscuous mode [ 138.878019][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 138.922809][ T7777] loop0: detected capacity change from 0 to 1024 [ 138.924076][ T7765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.944501][ T7778] loop2: detected capacity change from 0 to 512 [ 138.959801][ T7777] EXT4-fs: Ignoring removed orlov option [ 138.965555][ T29] audit: type=1400 audit(1758296203.545:3217): avc: denied { create } for pid=7773 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.985161][ T29] audit: type=1400 audit(1758296203.565:3218): avc: denied { write } for pid=7773 comm="syz.2.1260" path="socket:[21530]" dev="sockfs" ino=21530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.008465][ T29] audit: type=1326 audit(1758296203.625:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 139.031947][ T29] audit: type=1326 audit(1758296203.625:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 139.055452][ T29] audit: type=1326 audit(1758296203.625:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 139.078970][ T29] audit: type=1326 audit(1758296203.635:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 139.080743][ T7778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.102380][ T29] audit: type=1326 audit(1758296203.635:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 139.191629][ T7777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.208099][ T7778] EXT4-fs (loop2): 1 truncate cleaned up [ 139.218914][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.366429][ T7788] loop5: detected capacity change from 0 to 512 [ 139.389514][ T7788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.411546][ T7788] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.423614][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.448587][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.458863][ T7788] team0: Port device dummy0 removed [ 139.467486][ T7788] dummy0: entered promiscuous mode [ 139.468038][ T7788] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.478847][ T7796] loop2: detected capacity change from 0 to 2048 [ 139.512439][ T7799] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1266'. [ 139.520849][ T7796] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 139.549263][ T7796] System zones: 0-7 [ 139.559577][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.727188][ T7813] FAULT_INJECTION: forcing a failure. [ 139.727188][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 139.739981][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.0.1269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.740005][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.740015][ T7813] Call Trace: [ 139.740020][ T7813] [ 139.740027][ T7813] __dump_stack+0x1d/0x30 [ 139.740045][ T7813] dump_stack_lvl+0xe8/0x140 [ 139.740073][ T7813] dump_stack+0x15/0x1b [ 139.740090][ T7813] should_fail_ex+0x265/0x280 [ 139.740113][ T7813] should_failslab+0x8c/0xb0 [ 139.740142][ T7813] kmem_cache_alloc_noprof+0x50/0x310 [ 139.740184][ T7813] ? audit_log_start+0x365/0x6c0 [ 139.740216][ T7813] audit_log_start+0x365/0x6c0 [ 139.740248][ T7813] audit_seccomp+0x48/0x100 [ 139.740316][ T7813] ? __seccomp_filter+0x68c/0x10d0 [ 139.740387][ T7813] __seccomp_filter+0x69d/0x10d0 [ 139.740411][ T7813] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.740439][ T7813] ? vfs_write+0x7e8/0x960 [ 139.740472][ T7813] ? __rcu_read_unlock+0x4f/0x70 [ 139.740490][ T7813] ? __fget_files+0x184/0x1c0 [ 139.740514][ T7813] __secure_computing+0x82/0x150 [ 139.740532][ T7813] syscall_trace_enter+0xcf/0x1e0 [ 139.740553][ T7813] do_syscall_64+0xac/0x200 [ 139.740658][ T7813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.740741][ T7813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.740822][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.740844][ T7813] RIP: 0033:0x7fb978b8ec29 [ 139.740860][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.740877][ T7813] RSP: 002b:00007fb9775ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 139.740893][ T7813] RAX: ffffffffffffffda RBX: 00007fb978dd5fa0 RCX: 00007fb978b8ec29 [ 139.740942][ T7813] RDX: 0000000000000000 RSI: 00000000000005c0 RDI: 0000000000000000 [ 139.740953][ T7813] RBP: 00007fb9775ef090 R08: 0000000000000000 R09: 0000000000000000 [ 139.740964][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.740974][ T7813] R13: 00007fb978dd6038 R14: 00007fb978dd5fa0 R15: 00007ffded660da8 [ 139.740991][ T7813] [ 139.956797][ T7814] siw: device registration error -23 [ 140.081482][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.279945][ T7836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=7836 comm=syz.0.1278 [ 140.332094][ T7841] lo speed is unknown, defaulting to 1000 [ 140.438635][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 140.475271][ T7845] loop4: detected capacity change from 0 to 512 [ 140.501761][ T7845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.515945][ T7854] FAULT_INJECTION: forcing a failure. [ 140.515945][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.526865][ T7852] loop2: detected capacity change from 0 to 512 [ 140.529041][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.529109][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.529121][ T7854] Call Trace: [ 140.529128][ T7854] [ 140.529136][ T7854] __dump_stack+0x1d/0x30 [ 140.529157][ T7854] dump_stack_lvl+0xe8/0x140 [ 140.529180][ T7854] dump_stack+0x15/0x1b [ 140.529196][ T7854] should_fail_ex+0x265/0x280 [ 140.529244][ T7854] should_fail+0xb/0x20 [ 140.529264][ T7854] should_fail_usercopy+0x1a/0x20 [ 140.529288][ T7854] _copy_from_user+0x1c/0xb0 [ 140.529339][ T7854] ___sys_sendmsg+0xc1/0x1d0 [ 140.529377][ T7854] __x64_sys_sendmsg+0xd4/0x160 [ 140.529405][ T7854] x64_sys_call+0x191e/0x2ff0 [ 140.529424][ T7854] do_syscall_64+0xd2/0x200 [ 140.529489][ T7854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.529513][ T7854] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.529541][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.529562][ T7854] RIP: 0033:0x7fb978b8ec29 [ 140.529612][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.529628][ T7854] RSP: 002b:00007fb9775ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.529647][ T7854] RAX: ffffffffffffffda RBX: 00007fb978dd5fa0 RCX: 00007fb978b8ec29 [ 140.529659][ T7854] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 140.529736][ T7854] RBP: 00007fb9775ef090 R08: 0000000000000000 R09: 0000000000000000 [ 140.529748][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.529760][ T7854] R13: 00007fb978dd6038 R14: 00007fb978dd5fa0 R15: 00007ffded660da8 [ 140.529840][ T7854] [ 140.712547][ T7845] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1280: bad orphan inode 131083 [ 140.727647][ T7845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.739806][ T7852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.845004][ T7852] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1282: bad orphan inode 131083 [ 140.856146][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.989783][ T7852] FAULT_INJECTION: forcing a failure. [ 140.989783][ T7852] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 141.003103][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.003131][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.003143][ T7852] Call Trace: [ 141.003150][ T7852] [ 141.003158][ T7852] __dump_stack+0x1d/0x30 [ 141.003177][ T7852] dump_stack_lvl+0xe8/0x140 [ 141.003274][ T7852] dump_stack+0x15/0x1b [ 141.003289][ T7852] should_fail_ex+0x265/0x280 [ 141.003309][ T7852] should_fail_alloc_page+0xf2/0x100 [ 141.003333][ T7852] __alloc_frozen_pages_noprof+0xff/0x360 [ 141.003389][ T7852] alloc_pages_mpol+0xb3/0x250 [ 141.003479][ T7852] folio_alloc_noprof+0x97/0x150 [ 141.003510][ T7852] filemap_alloc_folio_noprof+0x66/0x210 [ 141.003572][ T7852] __filemap_get_folio+0x28f/0x6b0 [ 141.003589][ T7852] ext4_convert_inline_data_to_extent+0x1f5/0x7d0 [ 141.003615][ T7852] ext4_try_to_write_inline_data+0x54/0x90 [ 141.003676][ T7852] ext4_write_begin+0x1b3/0xeb0 [ 141.003697][ T7852] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 141.003720][ T7852] ? inode_to_bdi+0x47/0xa0 [ 141.003774][ T7852] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 141.003822][ T7852] generic_perform_write+0x184/0x490 [ 141.003845][ T7852] ext4_buffered_write_iter+0x1ee/0x3c0 [ 141.003876][ T7852] ext4_file_write_iter+0x383/0xf00 [ 141.003943][ T7852] ? 0xffffffff81000000 [ 141.003954][ T7852] ? __rcu_read_unlock+0x4f/0x70 [ 141.003975][ T7852] ? avc_policy_seqno+0x15/0x30 [ 141.003995][ T7852] ? selinux_file_permission+0x1e4/0x320 [ 141.004047][ T7852] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 141.004097][ T7852] vfs_write+0x527/0x960 [ 141.004124][ T7852] __x64_sys_pwrite64+0xfd/0x150 [ 141.004148][ T7852] x64_sys_call+0xc4d/0x2ff0 [ 141.004170][ T7852] do_syscall_64+0xd2/0x200 [ 141.004239][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.004334][ T7852] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.004364][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.004398][ T7852] RIP: 0033:0x7f5f8be3ec29 [ 141.004412][ T7852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.004434][ T7852] RSP: 002b:00007f5f8a8a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 141.004520][ T7852] RAX: ffffffffffffffda RBX: 00007f5f8c085fa0 RCX: 00007f5f8be3ec29 [ 141.004533][ T7852] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000008 [ 141.004545][ T7852] RBP: 00007f5f8a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.004557][ T7852] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 141.004570][ T7852] R13: 00007f5f8c086038 R14: 00007f5f8c085fa0 R15: 00007fff002bf058 [ 141.004587][ T7852] [ 141.158347][ T7874] lo speed is unknown, defaulting to 1000 [ 141.260609][ T7876] loop5: detected capacity change from 0 to 4096 [ 141.319251][ T7880] syz.0.1288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.338120][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.357979][ T7876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.387989][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 141.396929][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 141.474351][ T7876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.519273][ T7880] lo speed is unknown, defaulting to 1000 [ 141.672104][ T7887] validate_nla: 6 callbacks suppressed [ 141.672119][ T7887] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 141.746387][ T7892] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 141.751358][ T7894] loop2: detected capacity change from 0 to 1024 [ 141.763880][ T7896] loop0: detected capacity change from 0 to 512 [ 141.768057][ T7894] EXT4-fs: Ignoring removed orlov option [ 141.776106][ T7887] bond0: (slave dummy0): Releasing backup interface [ 141.791174][ T7887] dummy0: left promiscuous mode [ 141.805598][ T7896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.825479][ T5678] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 141.839729][ T5678] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.843485][ T7896] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1293: bad orphan inode 131083 [ 141.891888][ T7894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.900046][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.929339][ T7887] team0: Failed to send options change via netlink (err -105) [ 141.936839][ T7887] team0: Port device dummy0 added [ 141.987670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.997056][ T7898] FAT-fs (loop7): unable to read boot sector [ 142.042200][ T7892] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.082190][ T7892] team0: Failed to send options change via netlink (err -105) [ 142.103338][ T7892] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.112953][ T7892] team0: Port device dummy0 removed [ 142.121431][ T7892] dummy0: entered promiscuous mode [ 142.127435][ T7892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.319080][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.332982][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.346348][ T7925] loop4: detected capacity change from 0 to 128 [ 142.391276][ T7923] lo speed is unknown, defaulting to 1000 [ 142.525776][ T7937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1545 sclass=netlink_tcpdiag_socket pid=7937 comm=syz.5.1304 [ 142.547503][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1304'. [ 142.556568][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1304'. [ 142.599931][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.664082][ T7945] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 142.681678][ T7947] FAULT_INJECTION: forcing a failure. [ 142.681678][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.694824][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.4.1308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.694848][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.694858][ T7947] Call Trace: [ 142.694864][ T7947] [ 142.694871][ T7947] __dump_stack+0x1d/0x30 [ 142.694911][ T7947] dump_stack_lvl+0xe8/0x140 [ 142.694930][ T7947] dump_stack+0x15/0x1b [ 142.694955][ T7947] should_fail_ex+0x265/0x280 [ 142.694976][ T7947] should_fail+0xb/0x20 [ 142.694992][ T7947] should_fail_usercopy+0x1a/0x20 [ 142.695017][ T7947] _copy_from_user+0x1c/0xb0 [ 142.695162][ T7947] sock_do_ioctl+0xe6/0x220 [ 142.695189][ T7947] sock_ioctl+0x41b/0x610 [ 142.695215][ T7947] ? __pfx_sock_ioctl+0x10/0x10 [ 142.695368][ T7947] __se_sys_ioctl+0xce/0x140 [ 142.695465][ T7947] __x64_sys_ioctl+0x43/0x50 [ 142.695483][ T7947] x64_sys_call+0x1816/0x2ff0 [ 142.695505][ T7947] do_syscall_64+0xd2/0x200 [ 142.695554][ T7947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.695579][ T7947] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.695603][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.695632][ T7947] RIP: 0033:0x7f68cb94ec29 [ 142.695646][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.695659][ T7947] RSP: 002b:00007f68ca3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.695676][ T7947] RAX: ffffffffffffffda RBX: 00007f68cbb95fa0 RCX: 00007f68cb94ec29 [ 142.695739][ T7947] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 142.695751][ T7947] RBP: 00007f68ca3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.695761][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.695852][ T7947] R13: 00007f68cbb96038 R14: 00007f68cbb95fa0 R15: 00007ffe4762ffb8 [ 142.695871][ T7947] [ 142.930035][ T7956] netlink: 'syz.5.1311': attribute type 10 has an invalid length. [ 142.966714][ T7958] bond0: (slave dummy0): Releasing backup interface [ 142.980076][ T7958] dummy0: left promiscuous mode [ 142.980642][ T7961] netlink: 'syz.5.1311': attribute type 10 has an invalid length. [ 143.032943][ T5678] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 143.042269][ T5678] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.119366][ T7967] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1315'. [ 143.151116][ T7956] bond0: (slave dummy0): Releasing backup interface [ 143.185264][ T7970] loop4: detected capacity change from 0 to 512 [ 143.194916][ T7956] dummy0: left promiscuous mode [ 143.202265][ T7970] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.218251][ T7956] team0: Failed to send options change via netlink (err -105) [ 143.225824][ T7956] team0: Port device dummy0 added [ 143.236736][ T7970] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1316: Failed to acquire dquot type 1 [ 143.259680][ T7970] EXT4-fs (loop4): 1 truncate cleaned up [ 143.269375][ T7943] loop2: detected capacity change from 0 to 512 [ 143.271999][ T7961] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.276009][ T7943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.286423][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.322268][ T7943] EXT4-fs: inline encryption not supported [ 143.328203][ T7943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.334458][ T7961] team0: Failed to send options change via netlink (err -105) [ 143.348621][ T7943] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.348854][ T7961] team0: Port device dummy0 removed [ 143.364939][ T7961] dummy0: entered promiscuous mode [ 143.370798][ T7961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.396216][ T7976] lo speed is unknown, defaulting to 1000 [ 143.452724][ T7943] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 143.497983][ T7943] loop2: detected capacity change from 0 to 1764 [ 143.522716][ T7978] lo speed is unknown, defaulting to 1000 [ 143.895983][ T8006] lo speed is unknown, defaulting to 1000 [ 144.325753][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 144.325766][ T29] audit: type=1326 audit(1758296209.015:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.326763][ T8009] loop3: detected capacity change from 0 to 1024 [ 144.343551][ T29] audit: type=1326 audit(1758296209.025:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.386223][ T29] audit: type=1326 audit(1758296209.075:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.409853][ T29] audit: type=1326 audit(1758296209.075:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.433380][ T29] audit: type=1326 audit(1758296209.075:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.456916][ T29] audit: type=1326 audit(1758296209.075:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.480449][ T29] audit: type=1326 audit(1758296209.075:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.503829][ T29] audit: type=1326 audit(1758296209.075:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.599953][ T29] audit: type=1326 audit(1758296209.075:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.623437][ T29] audit: type=1326 audit(1758296209.075:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.2.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5f8be3ec29 code=0x7ffc0000 [ 144.654740][ T8019] capability: warning: `syz.5.1323' uses 32-bit capabilities (legacy support in use) [ 145.000349][ T8042] FAULT_INJECTION: forcing a failure. [ 145.000349][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 145.013074][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.3.1326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.013157][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.013167][ T8042] Call Trace: [ 145.013174][ T8042] [ 145.013181][ T8042] __dump_stack+0x1d/0x30 [ 145.013202][ T8042] dump_stack_lvl+0xe8/0x140 [ 145.013222][ T8042] dump_stack+0x15/0x1b [ 145.013240][ T8042] should_fail_ex+0x265/0x280 [ 145.013343][ T8042] should_failslab+0x8c/0xb0 [ 145.013368][ T8042] kmem_cache_alloc_node_noprof+0x57/0x320 [ 145.013401][ T8042] ? dup_task_struct+0x70/0x6a0 [ 145.013424][ T8042] dup_task_struct+0x70/0x6a0 [ 145.013468][ T8042] ? _parse_integer+0x27/0x40 [ 145.013558][ T8042] copy_process+0x399/0x2000 [ 145.013578][ T8042] ? kstrtouint+0x76/0xc0 [ 145.013596][ T8042] ? kstrtouint_from_user+0x9f/0xf0 [ 145.013623][ T8042] ? __rcu_read_unlock+0x4f/0x70 [ 145.013644][ T8042] kernel_clone+0x16c/0x5c0 [ 145.013683][ T8042] ? vfs_write+0x7e8/0x960 [ 145.013706][ T8042] __x64_sys_clone+0xe6/0x120 [ 145.013814][ T8042] x64_sys_call+0x119c/0x2ff0 [ 145.013835][ T8042] do_syscall_64+0xd2/0x200 [ 145.013863][ T8042] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.013883][ T8042] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.013962][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.014052][ T8042] RIP: 0033:0x7fdea203ec29 [ 145.014065][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.014083][ T8042] RSP: 002b:00007fdea0a5cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 145.014102][ T8042] RAX: ffffffffffffffda RBX: 00007fdea2286180 RCX: 00007fdea203ec29 [ 145.014115][ T8042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 145.014134][ T8042] RBP: 00007fdea0a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.014146][ T8042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 145.014159][ T8042] R13: 00007fdea2286218 R14: 00007fdea2286180 R15: 00007ffd46e60a18 [ 145.014179][ T8042] [ 145.252915][ T8044] netlink: 4140 bytes leftover after parsing attributes in process `syz.5.1328'. [ 145.297697][ T8045] netlink: 4140 bytes leftover after parsing attributes in process `syz.5.1328'. [ 145.344231][ T8049] loop0: detected capacity change from 0 to 764 [ 145.350807][ T8049] iso9660: Unknown parameter '' [ 145.360564][ T8049] smc: net device bond0 applied user defined pnetid SYZ0 [ 145.368767][ T8049] smc: net device bond0 erased user defined pnetid SYZ0 [ 145.464346][ T8056] netlink: 'syz.0.1332': attribute type 3 has an invalid length. [ 145.489635][ T7781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 145.519292][ T8062] bridge0: entered allmulticast mode [ 145.706301][ T8066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.990172][ T8074] FAULT_INJECTION: forcing a failure. [ 145.990172][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 146.002930][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.5.1335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.002955][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.002965][ T8074] Call Trace: [ 146.002971][ T8074] [ 146.002978][ T8074] __dump_stack+0x1d/0x30 [ 146.002995][ T8074] dump_stack_lvl+0xe8/0x140 [ 146.003013][ T8074] dump_stack+0x15/0x1b [ 146.003067][ T8074] should_fail_ex+0x265/0x280 [ 146.003095][ T8074] should_failslab+0x8c/0xb0 [ 146.003117][ T8074] kmem_cache_alloc_node_noprof+0x57/0x320 [ 146.003177][ T8074] ? dup_task_struct+0x70/0x6a0 [ 146.003205][ T8074] dup_task_struct+0x70/0x6a0 [ 146.003274][ T8074] ? _parse_integer+0x27/0x40 [ 146.003356][ T8074] copy_process+0x399/0x2000 [ 146.003422][ T8074] ? kstrtouint+0x76/0xc0 [ 146.003445][ T8074] ? kstrtouint_from_user+0x9f/0xf0 [ 146.003465][ T8074] ? __rcu_read_unlock+0x4f/0x70 [ 146.003484][ T8074] kernel_clone+0x16c/0x5c0 [ 146.003529][ T8074] ? vfs_write+0x7e8/0x960 [ 146.003551][ T8074] __x64_sys_clone+0xe6/0x120 [ 146.003584][ T8074] x64_sys_call+0x119c/0x2ff0 [ 146.003602][ T8074] do_syscall_64+0xd2/0x200 [ 146.003666][ T8074] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.003688][ T8074] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.003714][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.003801][ T8074] RIP: 0033:0x7f8d88ccec29 [ 146.003816][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.003833][ T8074] RSP: 002b:00007f8d876f4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 146.003931][ T8074] RAX: ffffffffffffffda RBX: 00007f8d88f16180 RCX: 00007f8d88ccec29 [ 146.003941][ T8074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 146.003952][ T8074] RBP: 00007f8d876f5090 R08: 0000000000000000 R09: 0000000000000000 [ 146.003977][ T8074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 146.003988][ T8074] R13: 00007f8d88f16218 R14: 00007f8d88f16180 R15: 00007ffd342fe378 [ 146.004007][ T8074] [ 146.372698][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.393852][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.587894][ T8082] loop2: detected capacity change from 0 to 512 [ 146.668838][ T8082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.695745][ T8082] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.743713][ T8082] EXT4-fs (loop2): shut down requested (0) [ 146.784051][ T8082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.926085][ T8082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.980919][ T8101] lo speed is unknown, defaulting to 1000 [ 147.012823][ T8082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.061130][ T8105] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 147.076468][ T8082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.111083][ T8105] bond0: (slave dummy0): Releasing backup interface [ 147.117849][ T8106] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 147.128340][ T8105] dummy0: left promiscuous mode [ 147.136786][ T8105] team0: Failed to send options change via netlink (err -105) [ 147.144383][ T8105] team0: Port device dummy0 added [ 147.153533][ T8106] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.164146][ T8106] team0: Failed to send options change via netlink (err -105) [ 147.173037][ T8106] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.183604][ T5678] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 147.193614][ T5678] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.203284][ T8106] team0: Port device dummy0 removed [ 147.211018][ T8106] dummy0: entered promiscuous mode [ 147.244346][ T8106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.266836][ T353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.291394][ T353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.390110][ T7713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.403140][ T353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.458929][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.511417][ T8112] loop4: detected capacity change from 0 to 512 [ 147.525028][ T8112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.537749][ T8112] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.556037][ T8110] siw: device registration error -23 [ 147.564109][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.574953][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.593132][ T8117] loop2: detected capacity change from 0 to 512 [ 147.610988][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.623810][ T8117] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.711453][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 147.830103][ T8138] loop5: detected capacity change from 0 to 2048 [ 147.844239][ T8138] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 147.852502][ T8138] System zones: 0-7 [ 148.005265][ T8144] loop4: detected capacity change from 0 to 512 [ 148.012032][ T8144] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.018781][ T8144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.030658][ T8144] EXT4-fs (loop4): 1 truncate cleaned up [ 148.091776][ T8147] ================================================================== [ 148.099882][ T8147] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 148.108114][ T8147] [ 148.110422][ T8147] write to 0xffff8881004acb3c of 4 bytes by task 8144 on cpu 0: [ 148.118037][ T8147] xas_set_mark+0x12b/0x140 [ 148.122535][ T8147] __folio_start_writeback+0x1dd/0x440 [ 148.127977][ T8147] ext4_bio_write_folio+0x5ad/0x9f0 [ 148.133157][ T8147] mpage_process_page_bufs+0x4a1/0x620 [ 148.138593][ T8147] mpage_prepare_extent_to_map+0x786/0xc00 [ 148.144382][ T8147] ext4_do_writepages+0xa05/0x2750 [ 148.149497][ T8147] ext4_writepages+0x176/0x300 [ 148.154271][ T8147] do_writepages+0x1c3/0x310 [ 148.158842][ T8147] file_write_and_wait_range+0x156/0x2c0 [ 148.164455][ T8147] generic_buffers_fsync_noflush+0x45/0x120 [ 148.170338][ T8147] ext4_sync_file+0x1ab/0x690 [ 148.174998][ T8147] vfs_fsync_range+0x10a/0x130 [ 148.179739][ T8147] ext4_buffered_write_iter+0x34f/0x3c0 [ 148.185272][ T8147] ext4_file_write_iter+0xdbf/0xf00 [ 148.190465][ T8147] iter_file_splice_write+0x666/0xa60 [ 148.195830][ T8147] direct_splice_actor+0x156/0x2a0 [ 148.200916][ T8147] splice_direct_to_actor+0x312/0x680 [ 148.206270][ T8147] do_splice_direct+0xda/0x150 [ 148.211029][ T8147] do_sendfile+0x380/0x650 [ 148.215429][ T8147] __x64_sys_sendfile64+0x105/0x150 [ 148.220641][ T8147] x64_sys_call+0x2bb0/0x2ff0 [ 148.225298][ T8147] do_syscall_64+0xd2/0x200 [ 148.229784][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.235659][ T8147] [ 148.237976][ T8147] read to 0xffff8881004acb3c of 4 bytes by task 8147 on cpu 1: [ 148.245502][ T8147] filemap_write_and_wait_range+0xfc/0x340 [ 148.251292][ T8147] filemap_invalidate_pages+0xa4/0x1a0 [ 148.256727][ T8147] kiocb_invalidate_pages+0x6e/0x80 [ 148.262041][ T8147] __iomap_dio_rw+0x5d4/0x1250 [ 148.266795][ T8147] iomap_dio_rw+0x40/0x90 [ 148.271137][ T8147] ext4_file_write_iter+0xad9/0xf00 [ 148.276340][ T8147] iter_file_splice_write+0x666/0xa60 [ 148.281696][ T8147] direct_splice_actor+0x156/0x2a0 [ 148.286800][ T8147] splice_direct_to_actor+0x312/0x680 [ 148.292165][ T8147] do_splice_direct+0xda/0x150 [ 148.296915][ T8147] do_sendfile+0x380/0x650 [ 148.301321][ T8147] __x64_sys_sendfile64+0x105/0x150 [ 148.306525][ T8147] x64_sys_call+0x2bb0/0x2ff0 [ 148.311197][ T8147] do_syscall_64+0xd2/0x200 [ 148.315685][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.321555][ T8147] [ 148.323863][ T8147] value changed: 0x0a000021 -> 0x04000021 [ 148.329554][ T8147] [ 148.331854][ T8147] Reported by Kernel Concurrency Sanitizer on: [ 148.338090][ T8147] CPU: 1 UID: 0 PID: 8147 Comm: syz.4.1354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.347871][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.357906][ T8147] ==================================================================