last executing test programs: 10.47796052s ago: executing program 3 (id=7379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) timer_delete(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_usb_disconnect(r6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fedbdf25010000fdbb0f1621a1e25253d09792001800018014000276657468305f746f5f746d616d00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 9.652598806s ago: executing program 3 (id=7390): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0xfffffffc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2000000000000382, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0xfffffffffffffe27, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) sendmsg$nl_xfrm(r1, 0x0, 0x20000004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYBLOB="8394db37a2d8c5116c9a3e310fd9b7018beaab44916cee6f21b7ec5dc61b0e1434336b372f7bee569d7db046fd22235f264bbf70e5fdb5e02f7f02797af1dc4c", @ANYBLOB="595d4faef75b461d8af2bc2ecefc6af83be8bf9526e45b810883f268e8834dba0b088ee7044481e631e3e4f276392b19099cab51c446cf978ff8facb6c2edf43073f13236da559def8f818c41eec04bf7b147312493873200c37e0e102bbd4f5a6e6dbac3ad01ea05b4ec018c2", @ANYRESHEX=r2, @ANYRESHEX=r5, @ANYRES64=r1, @ANYRES64=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e8c8860000000000001b000000000000d8689a105abad1de1b75a9a2b50fd82d57bbc5e757fd61c3bf4013dd1e73b9115123fc92543f4209835926bf5fc2ddf5293cb9f9e81f8dbb61adf6ccd83baa7ee548a5c1b3894ea1f1ad0aa48dd5611e07f5e699b56b03fef6d121631f78497388b308aaff1454270a1087a6f7dac2"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 9.571758277s ago: executing program 3 (id=7391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 9.501157538s ago: executing program 3 (id=7392): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 9.371127852s ago: executing program 3 (id=7397): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r0, 0x2, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40010000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x9, 0x17, 0x2000, 0x0, 0x0, 0x0}) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000180)={0x3, 0x2, 'client0\x00', 0x6, "9283037a4cfe53bf", "9bd9569a27730fd7fd5932feb9a9a408d7df27ceb71acf2cde2c2b5c9a8c9b94", 0x5, 0xffff}) getdents(r8, &(0x7f0000000080)=""/208, 0xd0) 9.240990413s ago: executing program 3 (id=7399): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x35) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) recvmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/61, 0x3d}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x40000002, &(0x7f0000001500)={0x77359400}) getdents64(r6, &(0x7f0000001540)=""/2, 0x2) ptrace(0x10, r5) fcntl$setpipe(r2, 0x407, 0x100004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000008c00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0x4, 0x4) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 9.231375594s ago: executing program 32 (id=7399): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x35) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) recvmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/61, 0x3d}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x40000002, &(0x7f0000001500)={0x77359400}) getdents64(r6, &(0x7f0000001540)=""/2, 0x2) ptrace(0x10, r5) fcntl$setpipe(r2, 0x407, 0x100004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000008c00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0x4, 0x4) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 8.304688932s ago: executing program 2 (id=7405): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) 7.536480216s ago: executing program 2 (id=7410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x703d2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x80) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4085, 0xff5}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000200)=""/65, 0x41}], 0x3}, 0x8d}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000054000100040000000000000807"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x40, 0x4, 0xfe, 0x80000009}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0x8}, 0x18) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=ANY=[@ANYBLOB="98943700", @ANYRES16=r9, @ANYBLOB="000329bd7000fbdbdf250900000070000380050008000d000000080005007f000001050008000900000008000500ac1414aa14000600fc00000000000000000000000000000008000300040000000800030003000000140002006272696467655f736c6176655f30000014000600fe88000000000000000000000000010108000600060000000c000380060004000f420000"], 0x98}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0x13) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r11, @ANYBLOB="1938b97acbcc8bac41743e77f12c640928fabf63646a5248170dd6fb19b952cc7525a92b4964e30a6e5e82e98af218fff8d0167072a91e2112d87df30f210a391b4823bd926244fdd0c3bb00c585845c148051d5cd69fd02ec2244f978bd8473494b78a632968edb3b"], 0x28}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001400)={r7, &(0x7f00000012c0)="a0808ae7a6615e91b858d4df8e33ad30f8a5eb8ae301d66fd9c05742a0eca5678af1f2cf8d521c28ac929f4f085297082040c9eedf68a96c7f5630b051bcced5069c349894d2ba6a39279e305c3419151a181aeacfdf30fc0bfcf0d821466cdd7255095ba694277e09ac715c3c1626bfe34ae56d01f9483aa67fab4b90c4a4919c035c122c1cf94d1270d7269b6492436650c4fcccee8f42ef862a39b0e9c37bad3d85bb55daac3664cfed2b10cac5d579c5c8410210f0bbe5b79a2f7563a08ebca8cc5d129a6e60563994a20fb064cba8f8d7a9c1961b87611e1c2a1fe2cdd07cb32d", &(0x7f00000013c0)}, 0x20) 6.639152533s ago: executing program 2 (id=7419): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) 5.681539782s ago: executing program 2 (id=7427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='ext4_ext_remove_space\x00', r6, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 3.905151786s ago: executing program 2 (id=7441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)}], 0x1}}], 0x1, 0x40) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 3.640430211s ago: executing program 5 (id=7446): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8000, 0x0, 0x409, 0x5, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (fail_nth: 1) 3.429973565s ago: executing program 5 (id=7447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x163e, 0x80, 0x1fffff, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) 3.382090306s ago: executing program 4 (id=7449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r4, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="08010e8004"], 0x124}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1c7, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) 3.208745199s ago: executing program 5 (id=7452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='ext4_ext_remove_space\x00', r6, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 2.678378739s ago: executing program 1 (id=7454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200002a22b7d900000000000080"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000680)=""/133, &(0x7f0000000740)=0x85) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6c, 0x93, 0x7, 0x3}, {0x6, 0x8, 0x3, 0x8}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000038000480340001800b000100657874686472000024000280080007400000000508000640000000010500020000000000080003400100001f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a8bcebf75a4511dbd466d6595f60939b3db790b91f7512ba2f19e3d4f2a8cebcf2bd2ec67c26a2d7308c5f605520b5c87924440766571000000000000"], 0x8c}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000580)={0x0, @adiantum, 0x0, @desc4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r11, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) sync_file_range(r3, 0x8, 0xd6f, 0x1) 2.505316843s ago: executing program 4 (id=7455): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x9, 0x0, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8000, 0x0, 0x409, 0x3, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, r0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) 2.430678094s ago: executing program 4 (id=7456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r1, @ANYBLOB="cd3e2cbd7000ffdbdf250100000008000200050000007e01010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8eb"], 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 2.373537055s ago: executing program 4 (id=7458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0xb7cf2fb4c129c423) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r6, 0x9, 0x9b, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0e01000000"], 0x28}}, 0x0) 1.979471363s ago: executing program 5 (id=7459): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 1.443999233s ago: executing program 4 (id=7460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.432745963s ago: executing program 1 (id=7461): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x9, [@enum64={0x8, 0x9, 0x0, 0x13, 0x0, 0x8, [{0xa, 0x3, 0x10001}, {0x8, 0x7, 0x3}, {0x1, 0x10000, 0x85}, {0x1, 0x6, 0x8}, {0x8, 0x7, 0x5}, {0xc, 0x6, 0xb}, {0x9, 0x1ff, 0x4}, {0x10, 0x81, 0xfffffff9}, {0xc, 0x8}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x6, [{0x4, 0x4, 0xfffffffc}, {0x1, 0x0, 0x5}, {0xd, 0x3, 0x2}, {0x4, 0x2, 0x9}, {0xa, 0x3, 0x3}, {0x9, 0x1, 0x9402}, {0x2, 0x4, 0x6}, {0xc, 0x3, 0x1}]}, @fwd={0xe}]}, {0x0, [0x61, 0x0, 0x5f, 0x26, 0x30, 0x30, 0x61]}}, &(0x7f00000002c0)=""/53, 0x111, 0x35, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x400, 0x4, 0x6825, 0x104, r0, 0x7, '\x00', r1, r2, 0x0, 0x4, 0x1, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(0x0) syncfs(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r8, &(0x7f0000000040), 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') readv(r9, &(0x7f0000000000)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) preadv(r9, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/102, 0x66}], 0x1, 0x5, 0xffffc138) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="5000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0610010001007866726d000000001400020b1f0b4526b25d580646b13c80080001000300000008000200020000000a000100ffffffffffff0000"], 0x50}}, 0x0) 1.397151934s ago: executing program 0 (id=7462): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000640), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 1.396561884s ago: executing program 1 (id=7463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010a2800000000ee0101000000c6af1affd50200050009000100735a5f300000000008000240000000032c000000030a01030000e6ff0000000002000000097ea16360f8d66f5e00010073797a220e0000000900030073797a32dd17de0000001500000011000100e6180000000000000067e4d6eb8a1eae6afc177001813b1bfb7981581c86b8bba4823736d88ccc7c94f24acc9a0397ea4b7233e9be2eec7c50801b38c99b61d6091776a2e184358d4e12a67f6bacdc162637b372fd41d3d7a76b3ced511ce819540c682a612ba164aa1898c8a385b848"], 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40454) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 1.239212807s ago: executing program 1 (id=7464): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x295, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r2, 0x567, 0xa1ff, 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVed:\xc4e', 0x0) ustat(0xd, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT, @ANYRESHEX], 0x3, 0x7dc, &(0x7f0000000d80)="$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") stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000000), 0x84880) lstat(&(0x7f0000000440)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.195454308s ago: executing program 4 (id=7465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000feffdfff0000000000110000850000008b000000950000000000d700d37b3011b0a5f000faf208588642c1e443a45d7dc2e6f067cc362250aeb8a44501b2f8b37caef031ec2b9f545839051ad4299e81631dd090fb1decc31c2ad6f2309ced747b104d03f79fa0c725c52316215a4b5c4c02ccd11dbdc5e9dfbb403cb66661043a929c4ff480edd48234e51586d8ebfdf5bfbc1715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.013078261s ago: executing program 2 (id=7467): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0x27) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) 839.229564ms ago: executing program 1 (id=7468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) timer_delete(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_usb_disconnect(r6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fedbdf25010000fdbb0f1621a1e25253d09792001800018014000276657468305f746f5f746d616d00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 797.862885ms ago: executing program 0 (id=7469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0xb7cf2fb4c129c423) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0e01000000"], 0x28}}, 0x0) 580.28621ms ago: executing program 0 (id=7470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010a2800000000ee0101000000c6af1affd50200050009000100735a5f300000000008000240000000032c000000030a01030000e6ff0000000002000000097ea16360f8d66f5e00010073797a220e0000000900030073797a32dd17de0000001500000011000100e6180000000000000067e4d6eb8a1eae6afc177001813b1bfb7981581c86b8bba4823736d88ccc7c94f24acc9a0397ea4b7233e9be2eec7c50801b38c99b61d6091776a2e184358d4e12a67f6bacdc162637b372fd41d3d7a76b3ced511ce819540c682a612ba164aa1898c8a385b848"], 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40454) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 450.165772ms ago: executing program 0 (id=7471): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 38.46381ms ago: executing program 5 (id=7472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='ext4_ext_remove_space\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 36.42758ms ago: executing program 0 (id=7473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000100000}, 0x18) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 17.42023ms ago: executing program 1 (id=7474): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010a2800000000ee0101000000c6af1affd50200050009000100735a5f300000000008000240000000032c000000030a01030000e6ff0000000002000000097ea16360f8d66f5e00010073797a220e0000000900030073797a32dd17de0000001500000011000100e6180000000000000067e4d6eb8a1eae6afc177001813b1bfb7981581c86b8bba4823736d88ccc7c94f24acc9a0397ea4b7233e9be2eec7c50801b38c99b61d6091776a2e184358d4e12a67f6bacdc162637b372fd41d3d7a76b3ced511ce819540c682a612ba164aa1898c8a385b848"], 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40454) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00'}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 0s ago: executing program 0 (id=7475): syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) (async) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x1, 0xf) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x3f000000, 0x0) unshare(0x40280) (async) unshare(0x40280) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r2, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752a139c02102c4dae4162e43ac61b7ad3300", [0x4, 0xfcd1]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752a139c02102c4dae4162e43ac61b7ad3300", [0x4, 0xfcd1]}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x4000000a}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x0, 0x201, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a7989b4b5a9873bf9f0cf775b2"}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "771d39f5a8320840bd3f8a98"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4aa8b2e11e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "52c25e3819b9711c22"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) (async) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000440)) (async) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000440)) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x10f8, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e4, 0x1, [@m_police={0x10e0, 0x1, 0x0, 0x0, {{0xb}, {0x10b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x8001, 0x6, 0x9, 0x580, 0x8b1, 0xc, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0xfffffff7, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0x81, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7ff, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0xf, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x9, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10f8}}, 0xc0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x10f8, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e4, 0x1, [@m_police={0x10e0, 0x1, 0x0, 0x0, {{0xb}, {0x10b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x8001, 0x6, 0x9, 0x580, 0x8b1, 0xc, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0xfffffff7, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0x81, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7ff, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0xf, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x9, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10f8}}, 0xc0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) kernel console output (not intermixed with test programs): 70.459438][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 470.459457][ T29] audit: type=1326 audit(1757062627.397:63279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.489316][ T29] audit: type=1326 audit(1757062627.397:63280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.512991][ T29] audit: type=1326 audit(1757062627.397:63281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.536738][ T29] audit: type=1326 audit(1757062627.397:63282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.560542][ T29] audit: type=1326 audit(1757062627.397:63283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.584157][ T29] audit: type=1326 audit(1757062627.397:63284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.607777][ T29] audit: type=1326 audit(1757062627.397:63285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.631439][ T29] audit: type=1326 audit(1757062627.407:63286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.655418][ T29] audit: type=1326 audit(1757062627.407:63287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.679144][ T29] audit: type=1326 audit(1757062627.407:63288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.4.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 470.682652][T25378] loop4: detected capacity change from 0 to 764 [ 470.743339][T25378] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 470.823811][T25386] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 471.620501][T25403] netlink: 'syz.1.6898': attribute type 1 has an invalid length. [ 471.779434][T24214] kernel write not supported for file /350/oom_adj (pid: 24214 comm: kworker/0:7) [ 471.805926][T25422] loop3: detected capacity change from 0 to 512 [ 471.838831][T25422] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.932098][T25419] loop4: detected capacity change from 0 to 764 [ 471.968162][T25419] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 472.027444][T25438] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 472.040408][T25438] loop4: detected capacity change from 0 to 512 [ 472.062260][T25438] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.146423][T25443] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 472.264229][T25449] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.300072][T25449] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.347956][T25449] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.395078][T25449] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.448465][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.461355][T24057] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.472946][T24057] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.484577][T24057] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.625501][T21028] page_pool_release_retry() stalled pool shutdown: id 209, 1 inflight 60 sec [ 473.124993][T25471] random: crng reseeded on system resumption [ 473.448013][ T3472] kernel write not supported for file /407/oom_adj (pid: 3472 comm: kworker/0:4) [ 473.522107][T25477] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 473.650008][T25481] loop1: detected capacity change from 0 to 1024 [ 473.672645][T25481] EXT4-fs: Ignoring removed bh option [ 473.712382][T25475] loop2: detected capacity change from 0 to 764 [ 473.790593][T25485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.821298][T25475] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 473.855242][T25485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.886093][T25488] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 473.913049][T25488] loop1: detected capacity change from 0 to 512 [ 473.951967][T25485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.963961][T25488] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.065855][T25485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.158317][T24052] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.200415][T24044] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.217255][T24050] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.238582][T24050] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.286501][T25511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25511 comm=syz.1.6929 [ 474.300140][T25511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6929'. [ 474.345982][T25516] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.365970][T25513] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 474.385918][T25516] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.446351][T25516] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.490747][T25516] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.552966][T25510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6931'. [ 474.668114][T25519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6934'. [ 474.964108][T25528] loop2: detected capacity change from 0 to 1024 [ 474.975250][T25528] EXT4-fs: Ignoring removed bh option [ 474.994652][T25528] veth0: entered promiscuous mode [ 475.000173][T25528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6936'. [ 475.082019][ T36] kernel write not supported for file /688/oom_adj (pid: 36 comm: kworker/1:1) [ 475.086979][T25535] loop0: detected capacity change from 0 to 1024 [ 475.099190][T25535] EXT4-fs: Ignoring removed bh option [ 475.207322][T25533] loop1: detected capacity change from 0 to 764 [ 475.230665][ T29] kauditd_printk_skb: 860 callbacks suppressed [ 475.230683][ T29] audit: type=1326 audit(1757062632.415:64149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f077c83d84a code=0x7ffc0000 [ 475.269484][T25533] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 475.310583][ T29] audit: type=1326 audit(1757062632.415:64150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f077c83d84a code=0x7ffc0000 [ 475.334113][ T29] audit: type=1326 audit(1757062632.415:64151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f077c83d457 code=0x7ffc0000 [ 475.357823][ T29] audit: type=1326 audit(1757062632.426:64152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f077c84038a code=0x7ffc0000 [ 475.381467][ T29] audit: type=1326 audit(1757062632.478:64153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 475.405006][ T29] audit: type=1326 audit(1757062632.478:64154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 475.428526][ T29] audit: type=1326 audit(1757062632.478:64155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 475.452039][ T29] audit: type=1326 audit(1757062632.478:64156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 475.475657][ T29] audit: type=1326 audit(1757062632.478:64157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 475.475979][T25546] loop0: detected capacity change from 0 to 1024 [ 475.499183][ T29] audit: type=1326 audit(1757062632.478:64158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25532 comm="syz.1.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 475.562975][T25553] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 475.578738][T25553] loop1: detected capacity change from 0 to 512 [ 475.597660][T25546] EXT4-fs: Ignoring removed orlov option [ 475.603467][T25546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.638188][T25553] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.664871][T25555] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 476.071310][ T6281] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.093126][ T6281] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.160276][ T6281] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.229339][ T6281] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.244537][T25574] loop4: detected capacity change from 0 to 1024 [ 476.284784][T25576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25576 comm=syz.3.6949 [ 476.307805][T25574] EXT4-fs: Ignoring removed bh option [ 476.320118][T25576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6949'. [ 476.336030][T25579] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.381178][T25584] loop1: detected capacity change from 0 to 1024 [ 476.390038][T25584] EXT4-fs: Ignoring removed bh option [ 476.398058][T25579] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.424194][T20735] kernel write not supported for file /377/oom_adj (pid: 20735 comm: kworker/1:5) [ 476.446483][T25579] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.500692][T25579] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.545750][T25588] loop4: detected capacity change from 0 to 764 [ 476.764855][T25588] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 477.020832][T25601] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.078863][T25599] loop4: detected capacity change from 0 to 1024 [ 477.085699][T25599] EXT4-fs: Ignoring removed orlov option [ 477.091472][T25599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.111606][T25601] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.156607][T25605] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 477.164716][T25601] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.204967][T25601] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.259548][T24052] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.328716][T24052] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.337306][T24024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.345787][T24024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.384358][T25615] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 477.397742][T25615] loop1: detected capacity change from 0 to 512 [ 477.418657][T25615] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.578004][T25623] random: crng reseeded on system resumption [ 477.702501][ T36] page_pool_release_retry() stalled pool shutdown: id 217, 1 inflight 60 sec [ 477.873390][ T36] kernel write not supported for file /385/oom_adj (pid: 36 comm: kworker/1:1) [ 478.111061][T25634] loop4: detected capacity change from 0 to 764 [ 478.131356][T25634] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 478.187193][T25643] IPVS: length: 220 != 8 [ 478.192084][T24059] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.208491][T24059] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.227192][T24059] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.239034][T25641] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 478.249786][T24059] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.428129][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6966'. [ 478.513709][T25647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6969'. [ 478.856946][ T3472] kernel write not supported for file /442/oom_adj (pid: 3472 comm: kworker/0:4) [ 479.019748][T25666] loop2: detected capacity change from 0 to 764 [ 479.331568][T25666] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 479.543504][T25695] loop0: detected capacity change from 0 to 1024 [ 479.551360][T25695] EXT4-fs: Ignoring removed bh option [ 480.182512][T25720] loop0: detected capacity change from 0 to 1024 [ 480.190179][T25722] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.209849][T25720] EXT4-fs: Ignoring removed bh option [ 480.244041][T25722] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.268940][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6996'. [ 480.325235][T25722] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.341505][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 480.341521][ T29] audit: type=1326 audit(1757062637.780:64732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.379210][ T29] audit: type=1326 audit(1757062637.791:64733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.402821][ T29] audit: type=1326 audit(1757062637.791:64734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.426511][ T29] audit: type=1326 audit(1757062637.791:64735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f6c83d550 code=0x7ffc0000 [ 480.450115][ T29] audit: type=1326 audit(1757062637.791:64736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.473961][ T29] audit: type=1326 audit(1757062637.791:64737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.497656][ T29] audit: type=1326 audit(1757062637.791:64738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.521294][ T29] audit: type=1326 audit(1757062637.791:64739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.544926][ T29] audit: type=1326 audit(1757062637.791:64740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.568570][ T29] audit: type=1326 audit(1757062637.791:64741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25737 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 480.605043][T25722] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.640220][T25744] loop2: detected capacity change from 0 to 1024 [ 480.648655][T25744] EXT4-fs: Ignoring removed bh option [ 480.679195][T25741] random: crng reseeded on system resumption [ 480.712945][T24048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.740914][T24048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.756141][T24048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.767866][T24048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.775211][T25782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25782 comm=syz.1.7016 [ 481.887507][T25782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7016'. [ 481.908705][T25786] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 481.958872][T25786] loop0: detected capacity change from 0 to 512 [ 481.999297][T25786] EXT4-fs mount: 32 callbacks suppressed [ 481.999319][T25786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.061581][T25786] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.208917][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.455060][T25804] loop2: detected capacity change from 0 to 1024 [ 482.462726][T25804] EXT4-fs: Ignoring removed bh option [ 482.511524][T25804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.609934][T25808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.712690][T25810] loop1: detected capacity change from 0 to 1024 [ 482.728338][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.745407][T25808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.757935][T25810] EXT4-fs: Ignoring removed bh option [ 482.803604][T25810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.843984][T25808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.855648][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.903913][T25808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.953889][T24026] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.971735][T24026] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.982965][T24026] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.994727][T24026] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.533569][T25843] SELinux: syz.0.7034 (25843) set checkreqprot to 1. This is no longer supported. [ 483.651799][ T3392] page_pool_release_retry() stalled pool shutdown: id 247, 1 inflight 60 sec [ 484.101391][T25859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.177816][T25859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.216238][T25859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.267632][T25859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.351957][T22170] kernel write not supported for file /432/oom_adj (pid: 22170 comm: kworker/0:5) [ 484.442029][T25870] loop4: detected capacity change from 0 to 764 [ 484.463236][T25870] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 485.355136][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 485.355154][ T29] audit: type=1326 audit(1757062643.040:65042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.386597][ T29] audit: type=1326 audit(1757062643.072:65043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.410294][ T29] audit: type=1326 audit(1757062643.072:65044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.433947][ T29] audit: type=1326 audit(1757062643.072:65045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.457577][ T29] audit: type=1326 audit(1757062643.072:65046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.481298][ T29] audit: type=1326 audit(1757062643.072:65047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.505033][ T29] audit: type=1326 audit(1757062643.072:65048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.528969][ T29] audit: type=1326 audit(1757062643.082:65049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.552661][ T29] audit: type=1326 audit(1757062643.082:65050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.576282][ T29] audit: type=1326 audit(1757062643.082:65051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.0.7051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 485.611037][T25896] IPVS: length: 220 != 8 [ 485.728894][T25893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7051'. [ 485.919335][T25911] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 485.940035][T25911] loop4: detected capacity change from 0 to 512 [ 486.034707][T25911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.079862][T25911] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.222286][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.304938][T25925] loop4: detected capacity change from 0 to 1024 [ 486.326682][T25930] loop0: detected capacity change from 0 to 1024 [ 486.335464][T25925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.353559][T25930] EXT4-fs: Ignoring removed bh option [ 486.380341][T25930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.408914][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.439336][T25936] loop0: detected capacity change from 0 to 1024 [ 486.448509][T25936] EXT4-fs: Ignoring removed bh option [ 486.485965][T25936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.541998][ T785] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.560302][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.576454][ T785] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.584977][ T785] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.611382][ T785] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.622784][T25940] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 486.639610][T25940] loop2: detected capacity change from 0 to 512 [ 486.656966][T25940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.683222][T25940] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.775582][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.996930][T25963] loop0: detected capacity change from 0 to 1024 [ 487.022375][T25963] EXT4-fs: Ignoring removed orlov option [ 487.028223][T25963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.079492][T25924] syz.4.7060 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 487.090572][T25924] CPU: 1 UID: 0 PID: 25924 Comm: syz.4.7060 Not tainted syzkaller #0 PREEMPT(voluntary) [ 487.090605][T25924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.090620][T25924] Call Trace: [ 487.090629][T25924] [ 487.090667][T25924] __dump_stack+0x1d/0x30 [ 487.090694][T25924] dump_stack_lvl+0xe8/0x140 [ 487.090717][T25924] dump_stack+0x15/0x1b [ 487.090733][T25924] dump_header+0x81/0x220 [ 487.090777][T25924] oom_kill_process+0x342/0x400 [ 487.090814][T25924] out_of_memory+0x979/0xb80 [ 487.090878][T25924] try_charge_memcg+0x5e6/0x9e0 [ 487.090915][T25924] charge_memcg+0x51/0xc0 [ 487.090993][T25924] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 487.091020][T25924] __read_swap_cache_async+0x1df/0x350 [ 487.091055][T25924] swap_cluster_readahead+0x376/0x3e0 [ 487.091102][T25924] swapin_readahead+0xde/0x6f0 [ 487.091202][T25924] ? __filemap_get_folio+0x4f7/0x6b0 [ 487.091253][T25924] ? __rcu_read_unlock+0x34/0x70 [ 487.091282][T25924] ? swap_cache_get_folio+0x77/0x200 [ 487.091327][T25924] do_swap_page+0x301/0x2430 [ 487.091351][T25924] ? css_rstat_updated+0xb7/0x240 [ 487.091449][T25924] ? __pfx_default_wake_function+0x10/0x10 [ 487.091521][T25924] handle_mm_fault+0x9a5/0x2c20 [ 487.091557][T25924] do_user_addr_fault+0x636/0x1090 [ 487.091606][T25924] exc_page_fault+0x62/0xa0 [ 487.091715][T25924] asm_exc_page_fault+0x26/0x30 [ 487.091738][T25924] RIP: 0033:0x7f5f6c83eb4f [ 487.091758][T25924] Code: 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 31 c0 89 f8 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 [ 487.091780][T25924] RSP: 002b:00007fff1da264c0 EFLAGS: 00010246 [ 487.091800][T25924] RAX: a640d135f960a000 RBX: 00007f5f6ca75fa0 RCX: 000000000007c060 [ 487.091815][T25924] RDX: 00000000000001df RSI: 0000000000000000 RDI: 00000000000003e8 [ 487.091829][T25924] RBP: 00007f5f6ca77da0 R08: 000000001c905805 R09: 7fffffffffffffff [ 487.091916][T25924] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000007c264 [ 487.091928][T25924] R13: 00007fff1da265e0 R14: ffffffffffffffff R15: 00007fff1da26600 [ 487.091950][T25924] [ 487.091968][T25924] memory: usage 307200kB, limit 307200kB, failcnt 950 [ 487.306560][T25924] memory+swap: usage 225476kB, limit 9007199254740988kB, failcnt 0 [ 487.314493][T25924] kmem: usage 222004kB, limit 9007199254740988kB, failcnt 0 [ 487.321872][T25924] Memory cgroup stats for /syz4: [ 487.323037][T25924] cache 8192 [ 487.331247][T25924] rss 0 [ 487.334077][T25924] shmem 0 [ 487.337158][T25924] mapped_file 0 [ 487.340705][T25924] dirty 0 [ 487.343646][T25924] writeback 0 [ 487.346935][T25924] workingset_refault_anon 72 [ 487.351553][T25924] workingset_refault_file 359 [ 487.356300][T25924] swap 708608 [ 487.359635][T25924] swapcached 8192 [ 487.360792][T25963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.363351][T25924] pgpgin 346779 [ 487.363362][T25924] pgpgout 346771 [ 487.363369][T25924] pgfault 418579 [ 487.363386][T25924] pgmajfault 39 [ 487.363392][T25924] inactive_anon 0 [ 487.363399][T25924] active_anon 8192 [ 487.363407][T25924] inactive_file 0 [ 487.400460][T25924] active_file 24576 [ 487.404336][T25924] unevictable 0 [ 487.407843][T25924] hierarchical_memory_limit 314572800 [ 487.413223][T25924] hierarchical_memsw_limit 9223372036854771712 [ 487.419403][T25924] total_cache 8192 [ 487.423197][T25924] total_rss 0 [ 487.426624][T25924] total_shmem 0 [ 487.430082][T25924] total_mapped_file 0 [ 487.434108][T25924] total_dirty 0 [ 487.437658][T25924] total_writeback 0 [ 487.441485][T25924] total_workingset_refault_anon 72 [ 487.446630][T25924] total_workingset_refault_file 359 [ 487.451831][T25924] total_swap 708608 [ 487.455738][T25924] total_swapcached 8192 [ 487.459901][T25924] total_pgpgin 346779 [ 487.463938][T25924] total_pgpgout 346771 [ 487.468044][T25924] total_pgfault 418579 [ 487.472144][T25924] total_pgmajfault 39 [ 487.476139][T25924] total_inactive_anon 0 [ 487.480307][T25924] total_active_anon 8192 [ 487.484579][T25924] total_inactive_file 0 [ 487.488743][T25924] total_active_file 24576 [ 487.493109][T25924] total_unevictable 0 [ 487.497129][T25924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7060,pid=25924,uid=0 [ 487.511868][T25924] Memory cgroup out of memory: Killed process 25924 (syz.4.7060) total-vm:95744kB, anon-rss:932kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 487.574530][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.577232][T25977] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 487.601266][T25977] loop3: detected capacity change from 0 to 512 [ 487.640944][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.641197][T25977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.653719][T25979] loop4: detected capacity change from 0 to 512 [ 487.673234][T25977] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.703638][T25979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.706534][T25987] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 487.730086][T25987] loop0: detected capacity change from 0 to 512 [ 487.741435][T25979] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.778462][T25987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.803253][T25987] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.829790][T25999] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.854360][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.867754][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.878978][T25999] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.916423][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.948814][T25999] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.989435][T25999] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.106282][T26020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26020 comm=syz.0.7085 [ 488.118026][T25613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.137675][T26020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7085'. [ 488.147493][T25613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.180558][T25613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.200921][T25613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.252438][T26023] FAULT_INJECTION: forcing a failure. [ 488.252438][T26023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 488.265868][T26023] CPU: 1 UID: 0 PID: 26023 Comm: syz.2.7086 Not tainted syzkaller #0 PREEMPT(voluntary) [ 488.265901][T26023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.265917][T26023] Call Trace: [ 488.265926][T26023] [ 488.265935][T26023] __dump_stack+0x1d/0x30 [ 488.265962][T26023] dump_stack_lvl+0xe8/0x140 [ 488.265985][T26023] dump_stack+0x15/0x1b [ 488.266073][T26023] should_fail_ex+0x265/0x280 [ 488.266097][T26023] should_fail_alloc_page+0xf2/0x100 [ 488.266130][T26023] __alloc_frozen_pages_noprof+0xff/0x360 [ 488.266259][T26023] alloc_pages_mpol+0xb3/0x250 [ 488.266295][T26023] vma_alloc_folio_noprof+0x1aa/0x300 [ 488.266328][T26023] handle_mm_fault+0xec2/0x2c20 [ 488.266403][T26023] ? __rcu_read_unlock+0x4f/0x70 [ 488.266461][T26023] do_user_addr_fault+0x3fe/0x1090 [ 488.266495][T26023] ? _raw_spin_unlock_irq+0x26/0x50 [ 488.266517][T26023] exc_page_fault+0x62/0xa0 [ 488.266549][T26023] asm_exc_page_fault+0x26/0x30 [ 488.266579][T26023] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 488.266608][T26023] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 488.266626][T26023] RSP: 0018:ffffc90008c03d58 EFLAGS: 00050246 [ 488.266641][T26023] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 488.266653][T26023] RDX: 0000000000000000 RSI: ffffc90008c03d98 RDI: 0000200000002700 [ 488.266665][T26023] RBP: 0000000000000000 R08: 0000000000000429 R09: 0000000000000000 [ 488.266679][T26023] R10: 0001c90008c03d98 R11: 0001c90008c03d9f R12: 0000200000002708 [ 488.266702][T26023] R13: 00007ffffffff000 R14: 0000200000002700 R15: ffffc90008c03d98 [ 488.266723][T26023] _copy_to_user+0x7c/0xa0 [ 488.266752][T26023] msr_read+0xc9/0x160 [ 488.266785][T26023] ? __pfx_msr_read+0x10/0x10 [ 488.266819][T26023] vfs_read+0x1a8/0x770 [ 488.266876][T26023] ? __rcu_read_unlock+0x4f/0x70 [ 488.266901][T26023] ? __fget_files+0x184/0x1c0 [ 488.266938][T26023] ksys_read+0xda/0x1a0 [ 488.266985][T26023] __x64_sys_read+0x40/0x50 [ 488.267027][T26023] x64_sys_call+0x27bc/0x2ff0 [ 488.267048][T26023] do_syscall_64+0xd2/0x200 [ 488.267235][T26023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.267267][T26023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 488.267302][T26023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.267323][T26023] RIP: 0033:0x7fca82eeebe9 [ 488.267337][T26023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.267398][T26023] RSP: 002b:00007fca81957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.267421][T26023] RAX: ffffffffffffffda RBX: 00007fca83125fa0 RCX: 00007fca82eeebe9 [ 488.267437][T26023] RDX: 0000000000018ff8 RSI: 0000200000002700 RDI: 0000000000000003 [ 488.267452][T26023] RBP: 00007fca81957090 R08: 0000000000000000 R09: 0000000000000000 [ 488.267467][T26023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.267518][T26023] R13: 00007fca83126038 R14: 00007fca83125fa0 R15: 00007ffd44b33258 [ 488.267542][T26023] [ 488.754575][T26032] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 488.770375][T26032] loop3: detected capacity change from 0 to 512 [ 488.794305][T26032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.815321][ T10] kernel write not supported for file /455/oom_adj (pid: 10 comm: kworker/0:1) [ 488.816804][T26032] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.861076][T26042] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 488.903265][T26045] loop0: detected capacity change from 0 to 512 [ 488.913289][T26042] loop2: detected capacity change from 0 to 512 [ 488.946892][T26045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.966310][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.981424][T26042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.004505][T26045] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.033458][T26042] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.154397][T26036] loop4: detected capacity change from 0 to 764 [ 489.178705][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.188090][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.234359][T26036] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 489.286438][T26066] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.311339][T26067] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 489.379450][T26066] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.444434][T26066] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.502337][T26066] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.548574][T24075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.582256][T24075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.606205][T24066] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.625521][T24072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.794096][T26088] loop3: detected capacity change from 0 to 512 [ 489.823485][T26088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.840761][T26088] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.937090][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.980443][T26098] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 490.009093][T26098] loop3: detected capacity change from 0 to 512 [ 490.039508][T26098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.064724][T26098] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.141760][ T29] kauditd_printk_skb: 1126 callbacks suppressed [ 490.141776][ T29] audit: type=1326 audit(1757062648.069:66178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.181950][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.220468][ T29] audit: type=1326 audit(1757062648.069:66179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.243924][ T29] audit: type=1326 audit(1757062648.069:66180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.267082][ T29] audit: type=1326 audit(1757062648.069:66181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.290246][ T29] audit: type=1326 audit(1757062648.069:66182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.313614][ T29] audit: type=1326 audit(1757062648.069:66183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.336717][ T29] audit: type=1326 audit(1757062648.069:66184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.359982][ T29] audit: type=1326 audit(1757062648.069:66185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.383181][ T29] audit: type=1326 audit(1757062648.069:66186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.406419][ T29] audit: type=1326 audit(1757062648.069:66187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26097 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9aba85ebe9 code=0x7ffc0000 [ 490.465282][T26106] loop3: detected capacity change from 0 to 1024 [ 490.473306][T26106] EXT4-fs: Ignoring removed orlov option [ 490.478999][T26106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.534745][T26106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.547398][T26113] loop2: detected capacity change from 0 to 4096 [ 490.583325][T26113] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 490.587912][T26123] FAULT_INJECTION: forcing a failure. [ 490.587912][T26123] name failslab, interval 1, probability 0, space 0, times 0 [ 490.594452][T26118] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 490.606179][T26123] CPU: 0 UID: 0 PID: 26123 Comm: syz.1.7115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 490.606234][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.606278][T26123] Call Trace: [ 490.606288][T26123] [ 490.606299][T26123] __dump_stack+0x1d/0x30 [ 490.606337][T26123] dump_stack_lvl+0xe8/0x140 [ 490.606364][T26123] dump_stack+0x15/0x1b [ 490.606386][T26123] should_fail_ex+0x265/0x280 [ 490.606477][T26123] should_failslab+0x8c/0xb0 [ 490.606513][T26123] kmem_cache_alloc_node_noprof+0x57/0x320 [ 490.606554][T26123] ? __alloc_skb+0x101/0x320 [ 490.606587][T26123] __alloc_skb+0x101/0x320 [ 490.606690][T26123] netlink_alloc_large_skb+0xba/0xf0 [ 490.606779][T26123] netlink_sendmsg+0x3cf/0x6b0 [ 490.606814][T26123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.606934][T26123] __sock_sendmsg+0x145/0x180 [ 490.606977][T26123] ____sys_sendmsg+0x31e/0x4e0 [ 490.607014][T26123] ___sys_sendmsg+0x17b/0x1d0 [ 490.607082][T26123] __x64_sys_sendmsg+0xd4/0x160 [ 490.607121][T26123] x64_sys_call+0x191e/0x2ff0 [ 490.607166][T26123] do_syscall_64+0xd2/0x200 [ 490.607206][T26123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 490.607240][T26123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 490.607355][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.607384][T26123] RIP: 0033:0x7f077c83ebe9 [ 490.607464][T26123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.607489][T26123] RSP: 002b:00007f077b2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.607516][T26123] RAX: ffffffffffffffda RBX: 00007f077ca75fa0 RCX: 00007f077c83ebe9 [ 490.607534][T26123] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 490.607551][T26123] RBP: 00007f077b2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 490.607569][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.607626][T26123] R13: 00007f077ca76038 R14: 00007f077ca75fa0 R15: 00007ffd982ca648 [ 490.607656][T26123] [ 490.847487][T26113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.903125][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.964941][T26139] loop2: detected capacity change from 0 to 1024 [ 490.973740][T26139] EXT4-fs: Ignoring removed bh option [ 490.991591][T26139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.004388][T26145] random: crng reseeded on system resumption [ 491.044783][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.082635][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7120'. [ 491.137421][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.237822][T26154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26154 comm=syz.2.7124 [ 491.250946][T26154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7124'. [ 491.340426][T26158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26158 comm=syz.0.7126 [ 491.353342][T26158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7126'. [ 491.731123][T26160] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.778243][T26160] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.817257][T26160] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.873468][T26160] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.947535][ T6281] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.964555][ T3472] kernel write not supported for file /471/oom_adj (pid: 3472 comm: kworker/0:4) [ 491.977900][ T6281] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.005338][ T6281] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.029170][ T6281] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.098141][T26165] loop4: detected capacity change from 0 to 764 [ 492.123304][T26168] loop2: detected capacity change from 0 to 4096 [ 492.170154][T26168] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 492.199810][T26168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.230966][T26165] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 492.246079][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.342320][T26188] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 492.375938][T26188] loop2: detected capacity change from 0 to 512 [ 492.407318][T26188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.424178][T26188] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.484520][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.562426][T26203] loop0: detected capacity change from 0 to 1024 [ 492.569369][T26203] EXT4-fs: Ignoring removed orlov option [ 492.575056][T26203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 492.585156][T26209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26209 comm=syz.2.7142 [ 492.598490][T26209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7142'. [ 492.610288][T26191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7137'. [ 492.610762][T26203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.665772][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.778695][T26217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26217 comm=syz.0.7144 [ 492.791766][T26217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7144'. [ 493.036334][T26219] loop1: detected capacity change from 0 to 4096 [ 493.052372][T26219] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 493.078001][T26219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.126148][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.215224][T26224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7147'. [ 493.504528][T26244] loop1: detected capacity change from 0 to 1024 [ 493.529879][T26244] EXT4-fs: Ignoring removed bh option [ 493.593115][T26244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.660941][T26252] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 493.674973][T26254] loop2: detected capacity change from 0 to 4096 [ 493.693319][T26254] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 493.709052][T26252] loop3: detected capacity change from 0 to 512 [ 493.709425][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.723147][T26254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.750611][T26252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.770259][T26252] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.788970][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.859507][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.937895][T26250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7155'. [ 493.999710][T26279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26279 comm=syz.4.7162 [ 494.012540][T26279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7162'. [ 494.028741][T26261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7158'. [ 494.572549][T26284] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 494.587503][T26284] loop1: detected capacity change from 0 to 512 [ 494.609840][T26284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.632189][T26284] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.676042][T26289] dns_resolver: Unsupported content type (231) [ 494.725180][T26289] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 494.745125][ T3406] kernel write not supported for file /586/oom_adj (pid: 3406 comm: kworker/0:3) [ 494.874073][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.915882][T26299] loop2: detected capacity change from 0 to 4096 [ 494.942229][T26299] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 494.992226][T26299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.008298][T26302] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.056094][T26292] loop3: detected capacity change from 0 to 764 [ 495.096286][T26302] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.120613][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.147686][T26292] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 495.174610][T26302] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.228931][T26302] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.332697][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 495.332770][ T29] audit: type=1400 audit(1757062653.518:67291): avc: denied { create } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 495.394596][ T29] audit: type=1400 audit(1757062653.550:67292): avc: denied { create } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 495.415329][ T29] audit: type=1400 audit(1757062653.550:67293): avc: denied { setopt } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 495.437447][T26320] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.437475][T26321] loop4: detected capacity change from 0 to 1024 [ 495.475124][T26321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 495.480488][T26324] tap0: tun_chr_ioctl cmd 1074025676 [ 495.489644][T26321] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.492714][T26324] tap0: owner set to 1 [ 495.509615][T26320] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.526182][ T29] audit: type=1400 audit(1757062653.718:67294): avc: denied { module_load } for pid=26313 comm="syz.4.7174" path="/sys/power/wakeup_count" dev="sysfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 495.550942][ T29] audit: type=1400 audit(1757062653.718:67295): avc: denied { create } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 495.551099][T26324] loop2: detected capacity change from 0 to 512 [ 495.572455][ T29] audit: type=1400 audit(1757062653.718:67296): avc: denied { create } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 495.599987][ T29] audit: type=1400 audit(1757062653.718:67297): avc: denied { write } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 495.601935][T26324] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 495.621159][ T29] audit: type=1400 audit(1757062653.718:67298): avc: denied { read } for pid=26313 comm="syz.4.7174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 495.651498][T26314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7174'. [ 495.678504][ T29] audit: type=1400 audit(1757062653.886:67299): avc: denied { getopt } for pid=26323 comm="syz.2.7177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 495.678818][T26324] binfmt_misc: register: failed to install interpreter file ./file2 [ 495.716206][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.717314][T26320] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.751598][ T36] kernel write not supported for file /497/oom_adj (pid: 36 comm: kworker/1:1) [ 495.769783][T26320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.798310][ T29] audit: type=1326 audit(1757062654.012:67300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26327 comm="syz.4.7178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6c83ebe9 code=0x7ffc0000 [ 495.860482][T26328] loop4: detected capacity change from 0 to 764 [ 495.864654][T24065] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.892349][T24065] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.905552][T26328] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 495.918929][T26330] loop2: detected capacity change from 0 to 512 [ 495.935357][T24065] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.961066][T24065] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.974663][T26330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.984946][T26332] loop1: detected capacity change from 0 to 1024 [ 495.993648][T24065] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.007408][T26332] EXT4-fs: Ignoring removed bh option [ 496.009102][T26330] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.023796][T24065] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.032094][T24065] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.043232][T24052] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.071298][T26332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.083819][T26340] 9pnet_fd: Insufficient options for proto=fd [ 496.091660][T26336] loop4: detected capacity change from 0 to 4096 [ 496.116076][T26336] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 496.140200][T26336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.186162][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.210224][T26346] loop3: detected capacity change from 0 to 512 [ 496.253633][T26340] loop0: detected capacity change from 0 to 764 [ 496.279799][T26340] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 496.291392][T26346] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.860749][T26379] loop4: detected capacity change from 0 to 512 [ 496.876904][T26379] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.961446][T26383] loop3: detected capacity change from 0 to 1024 [ 496.968432][T26383] EXT4-fs: Ignoring removed orlov option [ 496.974139][T26383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.160162][T26397] loop3: detected capacity change from 0 to 4096 [ 497.171209][T26397] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 497.709248][T26414] __nla_validate_parse: 2 callbacks suppressed [ 497.709266][T26414] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 497.727497][T26414] loop0: detected capacity change from 0 to 512 [ 497.747637][T26414] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.770886][T26418] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 497.770886][T26418] program syz.4.7201 not setting count and/or reply_len properly [ 497.812988][T26424] FAULT_INJECTION: forcing a failure. [ 497.812988][T26424] name failslab, interval 1, probability 0, space 0, times 0 [ 497.825824][T26424] CPU: 1 UID: 0 PID: 26424 Comm: syz.2.7203 Not tainted syzkaller #0 PREEMPT(voluntary) [ 497.825856][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.825872][T26424] Call Trace: [ 497.825881][T26424] [ 497.825890][T26424] __dump_stack+0x1d/0x30 [ 497.825978][T26424] dump_stack_lvl+0xe8/0x140 [ 497.825996][T26424] dump_stack+0x15/0x1b [ 497.826012][T26424] should_fail_ex+0x265/0x280 [ 497.826039][T26424] should_failslab+0x8c/0xb0 [ 497.826067][T26424] __kmalloc_noprof+0xa5/0x3e0 [ 497.826096][T26424] ? alloc_pipe_info+0x1c9/0x350 [ 497.826173][T26424] alloc_pipe_info+0x1c9/0x350 [ 497.826206][T26424] splice_direct_to_actor+0x592/0x680 [ 497.826233][T26424] ? kstrtouint_from_user+0x9f/0xf0 [ 497.826324][T26424] ? __pfx_direct_splice_actor+0x10/0x10 [ 497.826350][T26424] ? __rcu_read_unlock+0x4f/0x70 [ 497.826377][T26424] ? get_pid_task+0x96/0xd0 [ 497.826401][T26424] ? avc_policy_seqno+0x15/0x30 [ 497.826487][T26424] ? selinux_file_permission+0x1e4/0x320 [ 497.826516][T26424] do_splice_direct+0xda/0x150 [ 497.826541][T26424] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 497.826574][T26424] do_sendfile+0x380/0x650 [ 497.826637][T26424] __x64_sys_sendfile64+0x105/0x150 [ 497.826677][T26424] x64_sys_call+0x2bb0/0x2ff0 [ 497.826705][T26424] do_syscall_64+0xd2/0x200 [ 497.826742][T26424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.826782][T26424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 497.826809][T26424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.826833][T26424] RIP: 0033:0x7fca82eeebe9 [ 497.826852][T26424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.826924][T26424] RSP: 002b:00007fca81957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 497.826947][T26424] RAX: ffffffffffffffda RBX: 00007fca83125fa0 RCX: 00007fca82eeebe9 [ 497.826959][T26424] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 497.826971][T26424] RBP: 00007fca81957090 R08: 0000000000000000 R09: 0000000000000000 [ 497.826983][T26424] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 497.826994][T26424] R13: 00007fca83126038 R14: 00007fca83125fa0 R15: 00007ffd44b33258 [ 497.827013][T26424] [ 497.839588][T26423] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 497.933921][T26427] loop4: detected capacity change from 0 to 512 [ 498.102531][T26427] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.115595][T26434] loop3: detected capacity change from 0 to 4096 [ 498.123620][T26434] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 498.301402][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7213'. [ 498.310562][T26457] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7213'. [ 498.324673][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7213'. [ 498.347840][T26457] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7213'. [ 498.357095][T26457] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7213'. [ 498.395882][T26462] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 498.431281][T26462] loop4: detected capacity change from 0 to 512 [ 498.455570][T26462] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.566727][T26483] FAULT_INJECTION: forcing a failure. [ 498.566727][T26483] name failslab, interval 1, probability 0, space 0, times 0 [ 498.579583][T26483] CPU: 0 UID: 0 PID: 26483 Comm: syz.4.7220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 498.579693][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.579711][T26483] Call Trace: [ 498.579720][T26483] [ 498.579730][T26483] __dump_stack+0x1d/0x30 [ 498.579759][T26483] dump_stack_lvl+0xe8/0x140 [ 498.579786][T26483] dump_stack+0x15/0x1b [ 498.579873][T26483] should_fail_ex+0x265/0x280 [ 498.579904][T26483] should_failslab+0x8c/0xb0 [ 498.579964][T26483] kmem_cache_alloc_node_noprof+0x57/0x320 [ 498.580068][T26483] ? __alloc_skb+0x101/0x320 [ 498.580096][T26483] __alloc_skb+0x101/0x320 [ 498.580120][T26483] ? audit_log_start+0x365/0x6c0 [ 498.580201][T26483] audit_log_start+0x380/0x6c0 [ 498.580323][T26483] audit_seccomp+0x48/0x100 [ 498.580393][T26483] ? __seccomp_filter+0x68c/0x10d0 [ 498.580424][T26483] __seccomp_filter+0x69d/0x10d0 [ 498.580468][T26483] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 498.580509][T26483] ? vfs_write+0x7e8/0x960 [ 498.580534][T26483] ? __rcu_read_unlock+0x4f/0x70 [ 498.580594][T26483] ? __fget_files+0x184/0x1c0 [ 498.580669][T26483] __secure_computing+0x82/0x150 [ 498.580741][T26483] syscall_trace_enter+0xcf/0x1e0 [ 498.580807][T26483] do_syscall_64+0xac/0x200 [ 498.580846][T26483] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 498.580880][T26483] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 498.580922][T26483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.580952][T26483] RIP: 0033:0x7f5f6c83ebe9 [ 498.580973][T26483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.581009][T26483] RSP: 002b:00007f5f6b2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.581036][T26483] RAX: ffffffffffffffda RBX: 00007f5f6ca75fa0 RCX: 00007f5f6c83ebe9 [ 498.581053][T26483] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 498.581070][T26483] RBP: 00007f5f6b2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 498.581086][T26483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.581103][T26483] R13: 00007f5f6ca76038 R14: 00007f5f6ca75fa0 R15: 00007fff1da26388 [ 498.581129][T26483] [ 498.988600][T26493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26493 comm=syz.4.7223 [ 499.001642][T26493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7223'. [ 499.281389][T26504] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 499.317372][T26504] loop3: detected capacity change from 0 to 512 [ 499.360927][T26504] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.572369][T26533] loop0: detected capacity change from 0 to 1024 [ 499.601712][T26538] loop1: detected capacity change from 0 to 1024 [ 499.609440][T26538] EXT4-fs: Ignoring removed bh option [ 499.628317][T26533] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.136984][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 500.137002][ T29] audit: type=1326 audit(1757062658.558:67978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.166440][ T29] audit: type=1326 audit(1757062658.558:67979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.181739][T26553] loop0: detected capacity change from 0 to 512 [ 500.216770][ T29] audit: type=1326 audit(1757062658.558:67980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.239943][ T29] audit: type=1326 audit(1757062658.558:67981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.263041][ T29] audit: type=1326 audit(1757062658.558:67982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.286156][ T29] audit: type=1326 audit(1757062658.568:67983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.309257][ T29] audit: type=1326 audit(1757062658.568:67984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.313405][T26553] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.332352][ T29] audit: type=1326 audit(1757062658.568:67985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.332389][ T29] audit: type=1326 audit(1757062658.568:67986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.388920][ T29] audit: type=1326 audit(1757062658.568:67987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 500.418864][T26567] loop2: detected capacity change from 0 to 512 [ 500.438280][T26567] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.498252][T26578] FAULT_INJECTION: forcing a failure. [ 500.498252][T26578] name failslab, interval 1, probability 0, space 0, times 0 [ 500.510988][T26578] CPU: 0 UID: 0 PID: 26578 Comm: syz.0.7246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 500.511020][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.511034][T26578] Call Trace: [ 500.511041][T26578] [ 500.511050][T26578] __dump_stack+0x1d/0x30 [ 500.511121][T26578] dump_stack_lvl+0xe8/0x140 [ 500.511145][T26578] dump_stack+0x15/0x1b [ 500.511166][T26578] should_fail_ex+0x265/0x280 [ 500.511221][T26578] should_failslab+0x8c/0xb0 [ 500.511252][T26578] __kmalloc_cache_node_noprof+0x54/0x320 [ 500.511291][T26578] ? __get_vm_area_node+0x106/0x1d0 [ 500.511426][T26578] __get_vm_area_node+0x106/0x1d0 [ 500.511463][T26578] __vmalloc_node_range_noprof+0x273/0xe00 [ 500.511494][T26578] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.511562][T26578] ? avc_has_perm_noaudit+0x1b1/0x200 [ 500.511600][T26578] ? cred_has_capability+0x210/0x280 [ 500.511627][T26578] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.511663][T26578] __vmalloc_noprof+0x83/0xc0 [ 500.511702][T26578] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.511748][T26578] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.511783][T26578] ? bpf_prog_alloc+0x2a/0x150 [ 500.511849][T26578] bpf_prog_alloc+0x3c/0x150 [ 500.511883][T26578] bpf_prog_load+0x514/0x1070 [ 500.511930][T26578] ? security_bpf+0x2b/0x90 [ 500.512018][T26578] __sys_bpf+0x462/0x7b0 [ 500.512060][T26578] __x64_sys_bpf+0x41/0x50 [ 500.512087][T26578] x64_sys_call+0x2aea/0x2ff0 [ 500.512157][T26578] do_syscall_64+0xd2/0x200 [ 500.512194][T26578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 500.512289][T26578] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.512331][T26578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.512355][T26578] RIP: 0033:0x7f2c63c2ebe9 [ 500.512377][T26578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.512394][T26578] RSP: 002b:00007f2c62697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.512413][T26578] RAX: ffffffffffffffda RBX: 00007f2c63e65fa0 RCX: 00007f2c63c2ebe9 [ 500.512436][T26578] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 500.512452][T26578] RBP: 00007f2c62697090 R08: 0000000000000000 R09: 0000000000000000 [ 500.512614][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.512683][T26578] R13: 00007f2c63e66038 R14: 00007f2c63e65fa0 R15: 00007ffc0d23b2c8 [ 500.512781][T26578] [ 500.512789][T26578] syz.0.7246: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 500.702086][T26589] loop4: detected capacity change from 0 to 1024 [ 500.708058][T26578] ,cpuset=/ [ 500.720612][T26589] EXT4-fs: Ignoring removed bh option [ 500.724078][T26578] ,mems_allowed=0 [ 500.783501][T26578] CPU: 0 UID: 0 PID: 26578 Comm: syz.0.7246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 500.783536][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.783552][T26578] Call Trace: [ 500.783620][T26578] [ 500.783630][T26578] __dump_stack+0x1d/0x30 [ 500.783658][T26578] dump_stack_lvl+0xe8/0x140 [ 500.783680][T26578] dump_stack+0x15/0x1b [ 500.783696][T26578] warn_alloc+0x12b/0x1a0 [ 500.783804][T26578] __vmalloc_node_range_noprof+0x297/0xe00 [ 500.783855][T26578] ? avc_has_perm_noaudit+0x1b1/0x200 [ 500.783914][T26578] ? cred_has_capability+0x210/0x280 [ 500.783946][T26578] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.783983][T26578] __vmalloc_noprof+0x83/0xc0 [ 500.784079][T26578] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.784115][T26578] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 500.784150][T26578] ? bpf_prog_alloc+0x2a/0x150 [ 500.784244][T26578] bpf_prog_alloc+0x3c/0x150 [ 500.784271][T26578] bpf_prog_load+0x514/0x1070 [ 500.784326][T26578] ? security_bpf+0x2b/0x90 [ 500.784409][T26578] __sys_bpf+0x462/0x7b0 [ 500.784499][T26578] __x64_sys_bpf+0x41/0x50 [ 500.784573][T26578] x64_sys_call+0x2aea/0x2ff0 [ 500.784601][T26578] do_syscall_64+0xd2/0x200 [ 500.784638][T26578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 500.784758][T26578] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.784810][T26578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.784838][T26578] RIP: 0033:0x7f2c63c2ebe9 [ 500.784855][T26578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.784878][T26578] RSP: 002b:00007f2c62697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.784905][T26578] RAX: ffffffffffffffda RBX: 00007f2c63e65fa0 RCX: 00007f2c63c2ebe9 [ 500.784922][T26578] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 500.784939][T26578] RBP: 00007f2c62697090 R08: 0000000000000000 R09: 0000000000000000 [ 500.784955][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.784971][T26578] R13: 00007f2c63e66038 R14: 00007f2c63e65fa0 R15: 00007ffc0d23b2c8 [ 500.785058][T26578] [ 500.785068][T26578] Mem-Info: [ 500.999013][T26578] active_anon:9217 inactive_anon:9 isolated_anon:0 [ 500.999013][T26578] active_file:19343 inactive_file:2709 isolated_file:0 [ 500.999013][T26578] unevictable:0 dirty:422 writeback:0 [ 500.999013][T26578] slab_reclaimable:3528 slab_unreclaimable:17380 [ 500.999013][T26578] mapped:29845 shmem:2406 pagetables:1428 [ 500.999013][T26578] sec_pagetables:0 bounce:0 [ 500.999013][T26578] kernel_misc_reclaimable:0 [ 500.999013][T26578] free:1878715 free_pcp:9541 free_cma:0 [ 501.044148][T26578] Node 0 active_anon:36868kB inactive_anon:36kB active_file:77372kB inactive_file:10836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119380kB dirty:1688kB writeback:0kB shmem:9624kB kernel_stack:4752kB pagetables:5712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 501.071619][T26578] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.100326][T26578] lowmem_reserve[]: 0 2883 7862 7862 [ 501.105686][T26578] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 501.135938][T26578] lowmem_reserve[]: 0 0 4978 4978 [ 501.141084][T26578] Node 0 Normal free:4550312kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36752kB inactive_anon:36kB active_file:77372kB inactive_file:10836kB unevictable:0kB writepending:1688kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:34392kB local_pcp:6716kB free_cma:0kB [ 501.173205][T26578] lowmem_reserve[]: 0 0 0 0 [ 501.177867][T26578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.190667][T26578] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 501.206839][T26578] Node 0 Normal: 3454*4kB (UME) 2313*8kB (UME) 1284*16kB (UME) 588*32kB (UME) 448*64kB (UME) 499*128kB (UME) 456*256kB (UME) 250*512kB (UME) 156*1024kB (UME) 42*2048kB (UM) 951*4096kB (UM) = 4550016kB [ 501.226888][T26578] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 501.236215][T26578] 24455 total pagecache pages [ 501.240901][T26578] 17 pages in swap cache [ 501.245194][T26578] Free swap = 124928kB [ 501.249517][T26578] Total swap = 124996kB [ 501.253851][T26578] 2097051 pages RAM [ 501.257667][T26578] 0 pages HighMem/MovableOnly [ 501.262384][T26578] 80446 pages reserved [ 501.280355][T26599] loop1: detected capacity change from 0 to 8192 [ 501.288611][T26599] msdos: Unknown parameter 'A' [ 501.334307][T26603] loop0: detected capacity change from 0 to 512 [ 501.374318][ T3406] kernel write not supported for file /552/oom_adj (pid: 3406 comm: kworker/0:3) [ 501.391989][T26603] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.495247][T26616] loop4: detected capacity change from 0 to 764 [ 501.509213][T26616] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 501.775695][T26624] Falling back ldisc for ttyS3. [ 501.976508][T26634] loop0: detected capacity change from 0 to 1024 [ 502.013428][T26634] EXT4-fs: Ignoring removed bh option [ 502.147665][T26643] loop0: detected capacity change from 0 to 1024 [ 502.179398][T26643] EXT4-fs: Ignoring removed bh option [ 502.320047][T26657] loop2: detected capacity change from 0 to 512 [ 502.344709][T26657] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 502.384928][T26662] loop3: detected capacity change from 0 to 512 [ 502.402122][T26662] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.475579][T26671] __nla_validate_parse: 8 callbacks suppressed [ 502.475595][T26671] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 502.497335][T26671] loop0: detected capacity change from 0 to 512 [ 502.515175][T26671] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.658669][T26687] loop0: detected capacity change from 0 to 1024 [ 502.668126][T26674] loop2: detected capacity change from 0 to 764 [ 502.681054][T26687] EXT4-fs: Ignoring removed bh option [ 502.703398][T26674] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 502.868708][T20735] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 502.876353][T20735] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 502.883886][T20735] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 502.911942][T20735] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 502.958645][T26700] tmpfs: Unknown parameter '18446744073709551615' [ 503.025246][T26700] loop0: detected capacity change from 0 to 512 [ 503.043571][T26700] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.077917][T26700] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 503.108862][T26698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7280'. [ 503.125218][T26700] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7281: bg 0: block 248: padding at end of block bitmap is not set [ 503.140775][T26700] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7281: Failed to acquire dquot type 1 [ 503.153731][T26700] EXT4-fs (loop0): 1 truncate cleaned up [ 503.228922][T26724] loop0: detected capacity change from 0 to 512 [ 503.236792][T26726] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 503.237891][T26724] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.251769][T26726] loop4: detected capacity change from 0 to 512 [ 503.252262][T26724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.270009][T26724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.278538][T26724] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.284818][T26726] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.293748][T26724] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.7287: Allocating blocks 41-42 which overlap fs metadata [ 503.312196][T26724] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.7287: Allocating blocks 41-42 which overlap fs metadata [ 503.326164][T26724] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7287: Failed to acquire dquot type 1 [ 503.337915][T26724] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 503.352438][T26724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.7287: corrupted inode contents [ 503.364576][T26724] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.7287: mark_inode_dirty error [ 503.376251][T26724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.7287: corrupted inode contents [ 503.388478][T26724] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.7287: mark_inode_dirty error [ 503.399993][T26724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.7287: corrupted inode contents [ 503.412057][T26724] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 503.422041][T26724] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.7287: corrupted inode contents [ 503.434171][T26724] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.7287: mark_inode_dirty error [ 503.446925][T26724] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 503.456316][T26724] EXT4-fs (loop0): 1 truncate cleaned up [ 503.476620][T26724] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 503.542314][T26737] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 503.555725][T26737] loop0: detected capacity change from 0 to 512 [ 503.574852][T26737] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.702601][T26743] loop3: detected capacity change from 0 to 764 [ 503.733541][T26743] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 503.802986][T26752] loop2: detected capacity change from 0 to 1024 [ 503.809995][T26752] EXT4-fs: Ignoring removed orlov option [ 503.815743][T26752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.903018][ T3406] kernel write not supported for file /626/oom_adj (pid: 3406 comm: kworker/0:3) [ 503.963026][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.978338][T26774] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 503.988243][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.005571][T26775] loop0: detected capacity change from 0 to 764 [ 504.018985][T26774] loop2: detected capacity change from 0 to 512 [ 504.033976][T26775] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 504.066280][T26774] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.369391][T26788] loop2: detected capacity change from 0 to 1024 [ 504.406074][T26788] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.587448][T26793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26793 comm=syz.4.7305 [ 504.651970][T26793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7305'. [ 504.828840][T26795] loop1: detected capacity change from 0 to 764 [ 504.915735][T26795] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 504.939443][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 504.939460][ T29] audit: type=1400 audit(1757062663.608:69096): avc: denied { create } for pid=26802 comm="syz.2.7308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 504.979164][ T29] audit: type=1326 audit(1757062663.608:69097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 505.002886][ T29] audit: type=1326 audit(1757062663.608:69098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 505.026441][ T29] audit: type=1326 audit(1757062663.608:69099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 505.050101][ T29] audit: type=1326 audit(1757062663.618:69100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 505.073637][ T29] audit: type=1326 audit(1757062663.618:69101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 505.097246][ T29] audit: type=1326 audit(1757062663.618:69102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 505.120916][ T29] audit: type=1326 audit(1757062663.629:69103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f077c83d550 code=0x7ffc0000 [ 505.144658][ T29] audit: type=1326 audit(1757062663.629:69104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f077c83d937 code=0x7ffc0000 [ 505.151829][T26810] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7311'. [ 505.168229][ T29] audit: type=1326 audit(1757062663.629:69105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26794 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f077c83d550 code=0x7ffc0000 [ 505.168744][T26808] random: crng reseeded on system resumption [ 505.250096][T26817] random: crng reseeded on system resumption [ 505.289264][ T3472] kernel write not supported for file /893/oom_adj (pid: 3472 comm: kworker/0:4) [ 505.367657][T26825] loop4: detected capacity change from 0 to 1024 [ 505.396001][T26825] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.445493][T26819] loop1: detected capacity change from 0 to 764 [ 505.525772][T26819] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 505.926459][T26843] loop4: detected capacity change from 0 to 1024 [ 505.948978][T26843] EXT4-fs: Ignoring removed orlov option [ 505.954734][T26843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.088156][T26849] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 506.146857][T26849] loop4: detected capacity change from 0 to 512 [ 506.207352][T26849] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.443719][T26866] loop3: detected capacity change from 0 to 1024 [ 506.468122][T26866] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.623185][T26882] loop4: detected capacity change from 0 to 1024 [ 506.630169][T26882] EXT4-fs: Ignoring removed bh option [ 507.183996][T26900] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 507.197317][T26900] loop2: detected capacity change from 0 to 512 [ 507.209375][T26900] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.431130][T26909] loop2: detected capacity change from 0 to 764 [ 507.500090][T26909] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 507.571553][ T3375] kernel write not supported for file /627/oom_adj (pid: 3375 comm: kworker/1:3) [ 507.700463][T26915] loop2: detected capacity change from 0 to 764 [ 507.721857][T26915] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 507.736776][T26912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7341'. [ 507.873667][T26922] loop4: detected capacity change from 0 to 1024 [ 507.880546][T26922] EXT4-fs: Ignoring removed bh option [ 508.028274][T26938] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 508.050370][T26938] loop0: detected capacity change from 0 to 512 [ 508.246134][T26938] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.539473][T26951] loop3: detected capacity change from 0 to 764 [ 508.557262][T26951] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 508.628108][T26953] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 508.681862][T26954] loop0: detected capacity change from 0 to 512 [ 508.724270][T26954] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.866867][T26961] loop2: detected capacity change from 0 to 1024 [ 508.883341][T26961] EXT4-fs: Ignoring removed bh option [ 509.176914][T26989] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 509.220359][T26989] loop4: detected capacity change from 0 to 512 [ 509.256291][T26989] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.330912][T26997] random: crng reseeded on system resumption [ 509.349528][T26999] loop4: detected capacity change from 0 to 1024 [ 509.357413][T26999] EXT4-fs: Ignoring removed bh option [ 510.201902][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 510.201930][ T29] audit: type=1400 audit(1757062669.130:69926): avc: denied { bind } for pid=27012 comm="syz.3.7368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.228761][ T29] audit: type=1400 audit(1757062669.130:69927): avc: denied { setopt } for pid=27012 comm="syz.3.7368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.239292][T27013] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.295188][T27013] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.344096][T27013] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.391023][T27013] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.489713][ T29] audit: type=1400 audit(1757062669.435:69928): avc: denied { read write } for pid=27020 comm="syz.2.7371" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 510.514214][ T29] audit: type=1400 audit(1757062669.435:69929): avc: denied { open } for pid=27020 comm="syz.2.7371" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 510.573048][ T29] audit: type=1400 audit(1757062669.508:69930): avc: denied { write } for pid=27015 comm="syz.4.7369" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 510.588266][T27027] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 510.603094][T24026] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.618679][T24026] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.665458][T24045] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.687358][T24045] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.730178][ T29] audit: type=1326 audit(1757062669.687:69931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27033 comm="syz.0.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c63c25ba7 code=0x7ffc0000 [ 510.753767][ T29] audit: type=1326 audit(1757062669.687:69932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27033 comm="syz.0.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c63bcadb9 code=0x7ffc0000 [ 510.777502][ T29] audit: type=1326 audit(1757062669.687:69933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27033 comm="syz.0.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c63c25ba7 code=0x7ffc0000 [ 510.801629][ T29] audit: type=1326 audit(1757062669.687:69934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27033 comm="syz.0.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c63bcadb9 code=0x7ffc0000 [ 510.828887][T27035] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 510.859048][T27038] loop3: detected capacity change from 0 to 1024 [ 510.865577][ T29] audit: type=1326 audit(1757062669.687:69935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27033 comm="syz.0.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c63c2ebe9 code=0x7ffc0000 [ 510.890164][T27038] EXT4-fs: Ignoring removed bh option [ 510.902042][T27035] loop0: detected capacity change from 0 to 512 [ 510.932705][T27038] EXT4-fs mount: 80 callbacks suppressed [ 510.932723][T27038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.975520][T27035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.995056][T27035] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.007391][T22522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.084285][T27052] loop4: detected capacity change from 0 to 1024 [ 511.100763][T27052] EXT4-fs: Ignoring removed bh option [ 511.146635][T27052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.162728][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.242348][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7378'. [ 511.294151][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.408310][T27054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7379'. [ 511.465920][T27074] loop1: detected capacity change from 0 to 1024 [ 511.473224][T27074] EXT4-fs: Ignoring removed orlov option [ 511.479034][T27074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.496941][T27074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.541789][T27083] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.580086][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.597619][T27083] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.646514][T27083] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.713297][T27083] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.730178][T27089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27089 comm=syz.1.7386 [ 511.743332][T27089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7386'. [ 511.784610][T24045] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.811081][T24045] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.824187][T24045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.852179][T24045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.878610][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7387'. [ 511.887661][T27091] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7387'. [ 512.152002][T27107] loop3: detected capacity change from 0 to 1024 [ 512.160785][T27107] EXT4-fs: Ignoring removed orlov option [ 512.166609][T27107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.191902][T27107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.204924][T27118] loop2: detected capacity change from 0 to 1024 [ 512.237730][T27118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 512.250266][T27118] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.297718][T27114] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.348169][T24071] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.417610][T24071] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.432815][T22259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 512.484534][T24071] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.542978][T27147] random: crng reseeded on system resumption [ 512.554633][T24071] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.651003][T27134] chnl_net:caif_netlink_parms(): no params data found [ 512.688416][T27134] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.695575][T27134] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.703177][T27134] bridge_slave_0: entered allmulticast mode [ 512.709673][T27134] bridge_slave_0: entered promiscuous mode [ 512.716721][T27134] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.723823][T27134] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.731296][T27134] bridge_slave_1: entered allmulticast mode [ 512.737750][T27134] bridge_slave_1: entered promiscuous mode [ 512.756415][T27134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.766855][T27134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.787568][T27134] team0: Port device team_slave_0 added [ 512.794532][T27134] team0: Port device team_slave_1 added [ 512.810588][T27134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.817718][T27134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.843662][T27134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.855422][T27134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.862453][T27134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.888404][T27134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.915603][T27134] hsr_slave_0: entered promiscuous mode [ 512.921690][T27134] hsr_slave_1: entered promiscuous mode [ 512.927610][T27134] debugfs: 'hsr0' already exists in 'hsr' [ 512.933378][T27134] Cannot create hsr debugfs directory [ 513.005504][T27134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 513.015280][T27134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 513.024345][T27134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.033619][T27134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.077463][T27134] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.084767][T27134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.092187][T27134] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.099316][T27134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.134184][T27134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.147541][T24045] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.156033][T24045] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.168295][T27134] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.195401][T24068] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.202608][T24068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.215714][T24076] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.222877][T24076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.281873][T27134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.361497][T27134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.876772][T27134] veth0_vlan: entered promiscuous mode [ 513.911419][T27134] veth1_vlan: entered promiscuous mode [ 513.929456][T27134] veth0_macvtap: entered promiscuous mode [ 513.946801][T27134] veth1_macvtap: entered promiscuous mode [ 513.971162][T27134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.988840][T27134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.008346][T24059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.029194][T24059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.075646][T24059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.098755][T24059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.138882][T24214] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 514.146349][T24214] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 514.153794][T24214] hid-generic 0003:0004:0000.002B: unknown main item tag 0x0 [ 514.165497][T24214] hid-generic 0003:0004:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 514.215294][T27207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27207 comm=syz.2.7410 [ 514.236976][T27204] fido_id[27204]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.271090][T27207] __nla_validate_parse: 4 callbacks suppressed [ 514.271104][T27207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7410'. [ 514.313004][T27213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27213 comm=syz.5.7412 [ 514.353467][T27213] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7412'. [ 514.621711][T27229] loop1: detected capacity change from 0 to 1024 [ 514.634396][T27229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 514.662711][T27229] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.681273][T27226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7417'. [ 514.753955][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 514.819504][T27234] 9pnet_fd: Insufficient options for proto=fd [ 514.889911][T24071] bridge_slave_1: left allmulticast mode [ 514.895701][T24071] bridge_slave_1: left promiscuous mode [ 514.901437][T24071] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.932760][T24071] bridge_slave_0: left allmulticast mode [ 514.938650][T24071] bridge_slave_0: left promiscuous mode [ 514.944367][T24071] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.968812][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 514.968831][ T29] audit: type=1326 audit(1757062674.128:70457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 515.004772][ T29] audit: type=1326 audit(1757062674.138:70458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 515.028485][ T29] audit: type=1326 audit(1757062674.138:70459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 515.052038][ T29] audit: type=1326 audit(1757062674.138:70460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 515.075665][T27235] loop1: detected capacity change from 0 to 764 [ 515.075714][ T29] audit: type=1326 audit(1757062674.138:70461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 515.075745][ T29] audit: type=1326 audit(1757062674.138:70462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 515.139232][ T29] audit: type=1326 audit(1757062674.170:70463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f077c835ba7 code=0x7ffc0000 [ 515.163037][ T29] audit: type=1326 audit(1757062674.201:70464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27208 comm="syz.5.7412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bcdeebe9 code=0x7ffc0000 [ 515.186741][ T29] audit: type=1326 audit(1757062674.201:70465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27208 comm="syz.5.7412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bcdeebe9 code=0x7ffc0000 [ 515.210368][ T29] audit: type=1326 audit(1757062674.233:70466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27233 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f077c7dadb9 code=0x7ffc0000 [ 515.247578][T27235] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 515.342836][T27246] loop5: detected capacity change from 0 to 1024 [ 515.354324][T24071] bond1 (unregistering): (slave geneve2): Releasing active interface [ 515.381058][T27246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.386465][T27243] loop0: detected capacity change from 0 to 1024 [ 515.413746][T27246] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.414206][T27243] EXT4-fs: Ignoring removed orlov option [ 515.429859][T27243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.451153][T24071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.465345][T24071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.475401][T24071] bond0 (unregistering): Released all slaves [ 515.484837][T27243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.501834][T24071] bond1 (unregistering): Released all slaves [ 515.524964][T24071] bond2 (unregistering): Released all slaves [ 515.579492][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.598799][T24071] bond3 (unregistering): Released all slaves [ 515.606470][T27134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 515.739300][T24071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.746804][T24071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.817224][T24071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.824663][T24071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.874599][T27267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27267 comm=syz.5.7426 [ 515.900373][T24071] veth1_macvtap: left promiscuous mode [ 515.946474][T24071] veth0_macvtap: left promiscuous mode [ 515.992446][T24071] veth1_vlan: left promiscuous mode [ 516.029186][T24071] veth0_vlan: left promiscuous mode [ 516.342970][T24071] team0 (unregistering): Port device team_slave_1 removed [ 516.381016][T24071] team0 (unregistering): Port device team_slave_0 removed [ 516.400614][T24043] smc: removing ib device syz! [ 516.409609][ T3472] kernel write not supported for file /644/oom_adj (pid: 3472 comm: kworker/0:4) [ 516.529421][T24071] team0 (unregistering): Port device dummy0 removed [ 516.598777][T27267] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7426'. [ 516.653074][T27282] loop1: detected capacity change from 0 to 1024 [ 516.676030][T27278] loop4: detected capacity change from 0 to 764 [ 516.693564][T27282] EXT4-fs: Ignoring removed bh option [ 516.737841][T27278] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 516.739902][T27282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.787707][T27288] FAULT_INJECTION: forcing a failure. [ 516.787707][T27288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.800919][T27288] CPU: 0 UID: 0 PID: 27288 Comm: syz.5.7431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 516.800950][T27288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.800964][T27288] Call Trace: [ 516.801001][T27288] [ 516.801021][T27288] __dump_stack+0x1d/0x30 [ 516.801047][T27288] dump_stack_lvl+0xe8/0x140 [ 516.801073][T27288] dump_stack+0x15/0x1b [ 516.801094][T27288] should_fail_ex+0x265/0x280 [ 516.801120][T27288] should_fail+0xb/0x20 [ 516.801157][T27288] should_fail_usercopy+0x1a/0x20 [ 516.801183][T27288] _copy_from_iter+0xd2/0xe80 [ 516.801210][T27288] ? __build_skb_around+0x1a0/0x200 [ 516.801230][T27288] ? __alloc_skb+0x223/0x320 [ 516.801275][T27288] netlink_sendmsg+0x471/0x6b0 [ 516.801334][T27288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.801363][T27288] __sock_sendmsg+0x145/0x180 [ 516.801399][T27288] ____sys_sendmsg+0x31e/0x4e0 [ 516.801431][T27288] ___sys_sendmsg+0x17b/0x1d0 [ 516.801515][T27288] __x64_sys_sendmsg+0xd4/0x160 [ 516.801551][T27288] x64_sys_call+0x191e/0x2ff0 [ 516.801577][T27288] do_syscall_64+0xd2/0x200 [ 516.801611][T27288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 516.801635][T27288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 516.801669][T27288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.801695][T27288] RIP: 0033:0x7f08bcdeebe9 [ 516.801755][T27288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.801775][T27288] RSP: 002b:00007f08bb84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.801794][T27288] RAX: ffffffffffffffda RBX: 00007f08bd025fa0 RCX: 00007f08bcdeebe9 [ 516.801806][T27288] RDX: 0000000000008840 RSI: 0000200000000140 RDI: 0000000000000003 [ 516.801885][T27288] RBP: 00007f08bb84f090 R08: 0000000000000000 R09: 0000000000000000 [ 516.801897][T27288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.801909][T27288] R13: 00007f08bd026038 R14: 00007f08bd025fa0 R15: 00007ffd07bee5b8 [ 516.801928][T27288] [ 517.094528][T20752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.540995][T27313] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 517.558645][T27313] loop5: detected capacity change from 0 to 512 [ 517.588994][T27316] 9pnet_fd: Insufficient options for proto=fd [ 517.615859][T27313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.634558][T27313] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.711440][T27134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.728501][T27316] loop0: detected capacity change from 0 to 764 [ 517.752645][T27316] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 517.758481][T27326] 9pnet_fd: Insufficient options for proto=fd [ 517.852286][T27326] loop5: detected capacity change from 0 to 764 [ 517.870120][T27326] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 517.912585][T27332] loop5: detected capacity change from 0 to 1024 [ 517.919642][T27332] EXT4-fs: Ignoring removed bh option [ 517.934671][T27332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.966562][T27134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.988667][T27339] FAULT_INJECTION: forcing a failure. [ 517.988667][T27339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.002215][T27339] CPU: 1 UID: 0 PID: 27339 Comm: syz.5.7446 Not tainted syzkaller #0 PREEMPT(voluntary) [ 518.002274][T27339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.002291][T27339] Call Trace: [ 518.002337][T27339] [ 518.002348][T27339] __dump_stack+0x1d/0x30 [ 518.002371][T27339] dump_stack_lvl+0xe8/0x140 [ 518.002396][T27339] dump_stack+0x15/0x1b [ 518.002416][T27339] should_fail_ex+0x265/0x280 [ 518.002444][T27339] should_fail+0xb/0x20 [ 518.002542][T27339] should_fail_usercopy+0x1a/0x20 [ 518.002563][T27339] _copy_from_user+0x1c/0xb0 [ 518.002590][T27339] do_seccomp+0x118/0xa40 [ 518.002609][T27339] ? perf_pending_task+0x1e0/0x210 [ 518.002638][T27339] __x64_sys_seccomp+0x40/0x50 [ 518.002657][T27339] x64_sys_call+0x2ad4/0x2ff0 [ 518.002712][T27339] do_syscall_64+0xd2/0x200 [ 518.002774][T27339] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 518.002799][T27339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.002818][T27339] RIP: 0033:0x7f08bcdeebe9 [ 518.002833][T27339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.002849][T27339] RSP: 002b:00007f08bb84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 518.002922][T27339] RAX: ffffffffffffffda RBX: 00007f08bd025fa0 RCX: 00007f08bcdeebe9 [ 518.002934][T27339] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 518.002944][T27339] RBP: 00007f08bb84f090 R08: 0000000000000000 R09: 0000000000000000 [ 518.002955][T27339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.002965][T27339] R13: 00007f08bd026038 R14: 00007f08bd025fa0 R15: 00007ffd07bee5b8 [ 518.002982][T27339] [ 518.195549][T27342] loop0: detected capacity change from 0 to 1024 [ 518.210738][T27342] EXT4-fs: Ignoring removed orlov option [ 518.216613][T27342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.274729][T27342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.349294][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.516216][T27363] 9pnet_fd: Insufficient options for proto=fd [ 518.634783][T27359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7451'. [ 518.784172][T27363] loop1: detected capacity change from 0 to 764 [ 518.837973][T27363] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 518.973195][T27367] netlink: 'syz.1.7454': attribute type 3 has an invalid length. [ 519.058877][T27368] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7454'. [ 519.185285][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7456'. [ 519.360202][T27382] loop4: detected capacity change from 0 to 1024 [ 519.411521][T27382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 519.432412][T27382] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.474734][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7458'. [ 520.151835][T22986] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 520.183814][T27391] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7461'. [ 520.195988][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 520.196044][ T29] audit: type=1326 audit(1757062679.609:70811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.226010][ T29] audit: type=1326 audit(1757062679.609:70812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.246880][T21027] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 520.249599][ T29] audit: type=1326 audit(1757062679.609:70813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.257001][T21027] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 520.280475][ T29] audit: type=1326 audit(1757062679.609:70814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.287939][T21027] hid-generic 0003:0004:0000.002C: unknown main item tag 0x0 [ 520.311933][ T29] audit: type=1326 audit(1757062679.609:70815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.324274][T21027] hid-generic 0003:0004:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 520.342460][ T29] audit: type=1326 audit(1757062679.609:70816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.375172][ T29] audit: type=1326 audit(1757062679.609:70817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.398833][ T29] audit: type=1326 audit(1757062679.609:70818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.422467][ T29] audit: type=1326 audit(1757062679.609:70819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.446179][ T29] audit: type=1326 audit(1757062679.609:70820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27389 comm="syz.1.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f077c83ebe9 code=0x7ffc0000 [ 520.472200][T27400] 9pnet_fd: Insufficient options for proto=fd [ 520.502864][T27401] fido_id[27401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 520.604593][T27402] loop0: detected capacity change from 0 to 1024 [ 520.616220][T27399] loop1: detected capacity change from 0 to 764 [ 520.640138][T27399] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 520.655996][T27402] EXT4-fs: Ignoring removed orlov option [ 520.661870][T27402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.725984][T27402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.808064][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.917640][T27422] loop0: detected capacity change from 0 to 1024 [ 520.943897][T27422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 520.956703][T27422] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.975271][T27422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7469'. [ 521.027869][T22055] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.052337][T27419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7468'. [ 521.072822][T22170] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 521.080412][T22170] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 521.087901][T22170] hid-generic 0003:0004:0000.002D: unknown main item tag 0x0 [ 521.098249][T22170] hid-generic 0003:0004:0000.002D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 521.164051][T27429] fido_id[27429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 521.184931][T27431] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.237646][T27431] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.295185][T27431] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.404429][T27431] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.501727][T24068] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.530190][T24068] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.553099][T24068] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.572784][T24068] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.600943][ T2994] ================================================================== [ 521.609087][ T2994] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 521.616329][ T2994] [ 521.618660][ T2994] write to 0xffff88811985c330 of 8 bytes by task 4081 on cpu 1: [ 521.626301][ T2994] dentry_unlink_inode+0x65/0x260 [ 521.631367][ T2994] d_delete+0x164/0x180 [ 521.635574][ T2994] d_delete_notify+0x32/0x100 [ 521.640381][ T2994] vfs_unlink+0x30b/0x420 [ 521.644728][ T2994] do_unlinkat+0x24e/0x480 [ 521.649161][ T2994] __x64_sys_unlink+0x2e/0x40 [ 521.653846][ T2994] x64_sys_call+0x2dc0/0x2ff0 [ 521.658542][ T2994] do_syscall_64+0xd2/0x200 [ 521.663064][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.668978][ T2994] [ 521.671303][ T2994] read to 0xffff88811985c330 of 8 bytes by task 2994 on cpu 0: [ 521.678935][ T2994] step_into+0x122/0x820 [ 521.683198][ T2994] walk_component+0x162/0x220 [ 521.687981][ T2994] path_lookupat+0xfe/0x2a0 [ 521.692500][ T2994] filename_lookup+0x147/0x340 [ 521.697281][ T2994] do_readlinkat+0x7d/0x320 [ 521.701789][ T2994] __x64_sys_readlink+0x47/0x60 [ 521.706656][ T2994] x64_sys_call+0x28da/0x2ff0 [ 521.711343][ T2994] do_syscall_64+0xd2/0x200 [ 521.715858][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.721769][ T2994] [ 521.724106][ T2994] value changed: 0xffff888104628c20 -> 0x0000000000000000 [ 521.731208][ T2994] [ 521.733530][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 521.739680][ T2994] CPU: 0 UID: 0 PID: 2994 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 521.748968][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.759027][ T2994] ================================================================== [ 521.771212][T20735] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 521.778636][T20735] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 521.786120][T20735] hid-generic 0003:0004:0000.002E: unknown main item tag 0x0 [ 521.880862][T20735] hid-generic 0003:0004:0000.002E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 522.177317][T27444] fido_id[27444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory