last executing test programs: 2m1.766686061s ago: executing program 4 (id=728): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) fstatfs(0xffffffffffffffff, 0x0) inotify_init1(0x800) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 2m1.395046218s ago: executing program 4 (id=738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0xf}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000740)) socket$nl_generic(0x10, 0x3, 0x10) 2m1.118655403s ago: executing program 4 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 2m1.042188935s ago: executing program 32 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) 1m56.01041432s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x4) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x290) close_range(r1, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3ff, &(0x7f0000000500)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002140000001100010000000000000000000100000a4f64fd86ad110b339f86ab6abe860315d2339a661413d74945e609"], 0xb0}}, 0x40) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) 1m55.899826723s ago: executing program 2 (id=805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000800fe880000000200000000000000000101ac1414bb000000000000000000000000000000000a00000064", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r7, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee6990000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x1a2) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000007c0)=0x118648, 0x4) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) 1m55.687337727s ago: executing program 2 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) 1m55.596754689s ago: executing program 2 (id=807): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) fstatfs(0xffffffffffffffff, 0x0) inotify_init1(0x800) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 1m55.477780841s ago: executing program 2 (id=809): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x1c2e0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1m50.908571469s ago: executing program 2 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 1m50.898156359s ago: executing program 33 (id=859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 7.477751897s ago: executing program 3 (id=2222): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 7.142188994s ago: executing program 3 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) 6.970185927s ago: executing program 3 (id=2226): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6.576862015s ago: executing program 3 (id=2234): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") 6.419438948s ago: executing program 3 (id=2237): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) munlock(&(0x7f0000505000/0x2000)=nil, 0x2000) r1 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.33151699s ago: executing program 3 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x9, 0xf00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40040c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, 0x0) 6.33089208s ago: executing program 34 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x9, 0xf00, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40040c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, 0x0) 4.416897466s ago: executing program 7 (id=2239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0x27) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) 3.802518718s ago: executing program 6 (id=2259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010a2800000000ee0101000000c6af1affd50200050009000100735a5f300000000008000240000000032c000000030a01030000e6ff0000000002000000097ea16360f8d66f5e00010073797a220e0000000900030073797a32dd17de0000001500000011000100e6180000000000000067e4d6eb8a1eae6afc177001813b1bfb7981581c86b8bba4823736d88ccc7c94f24acc9a0397ea4b7233e9be2eec7c50801b38c99b61d6091776a2e184358d4e12a67f6bacdc162637b372fd41d3d7a76b3ced511ce819540c682a612ba164aa1898c8a385b848"], 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40454) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 3.792234538s ago: executing program 6 (id=2260): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.757471249s ago: executing program 6 (id=2261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200002a22b7d900000000000080"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000680)=""/133, &(0x7f0000000740)=0x85) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6c, 0x93, 0x7, 0x3}, {0x6, 0x8, 0x3, 0x8}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000038000480340001800b000100657874686472000024000280080007400000000508000640000000010500020000000000080003400100001f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a8bcebf75a4511dbd466d6595f60939b3db790b91f7512ba2f19e3d4f2a8cebcf2bd2ec67c26a2d7308c5f605520b5c87924440766571000000000000"], 0x8c}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000580)={0x0, @adiantum, 0x0, @desc4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r11, 0x2000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) sync_file_range(r3, 0x8, 0xd6f, 0x1) 3.719804429s ago: executing program 0 (id=2262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000800fe880000000200000000000000000101ac1414bb000000000000000000000000000000000a00000064", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r6, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee6990000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x1a2) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000007c0)=0x118648, 0x4) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) 3.625155451s ago: executing program 0 (id=2264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='system.posix_acl_access\x00', &(0x7f0000000380)=""/176, 0xb0) 3.590249492s ago: executing program 0 (id=2265): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0xfffffffc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2000000000000382, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0xfffffffffffffe27, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) sendmsg$nl_xfrm(r1, 0x0, 0x20000004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYBLOB="8394db37a2d8c5116c9a3e310fd9b7018beaab44916cee6f21b7ec5dc61b0e1434336b372f7bee569d7db046fd22235f264bbf70e5fdb5e02f7f02797af1dc4c", @ANYBLOB="595d4faef75b461d8af2bc2ecefc6af83be8bf9526e45b810883f268e8834dba0b088ee7044481e631e3e4f276392b19099cab51c446cf978ff8facb6c2edf43073f13236da559def8f818c41eec04bf7b147312493873200c37e0e102bbd4f5a6e6dbac3ad01ea05b4ec018c2", @ANYRESHEX=r2, @ANYRESHEX=r5, @ANYRES64=r1, @ANYRES64=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e8c8860000000000001b000000000000d8689a105abad1de1b75a9a2b50fd82d57bbc5e757fd61c3bf4013dd1e73b9115123fc92543f4209835926bf5fc2ddf5293cb9f9e81f8dbb61adf6ccd83baa7ee548a5c1b3894ea1f1ad0aa48dd5611e07f5e699b56b03fef6d121631f78497388b308aaff1454270a1087a6f7dac2"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 3.522390463s ago: executing program 0 (id=2266): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.923371965s ago: executing program 1 (id=2268): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000800fe880000000200000000000000000101ac1414bb000000000000000000000000000000000a00000064", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r7, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x1a2) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000007c0)=0x118648, 0x4) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) 2.882347605s ago: executing program 6 (id=2269): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x8000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x3653, {{0x15, 0x4, 0x3, 0x24, 0x54, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @generic={0x94, 0x8, "9fdf4c00dc96"}, @ssrr={0x89, 0x13, 0xab, [@rand_addr=0x64010101, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0xb4, [@remote, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @broadcast, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x8, 0x9, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8000, 0x10, 0x6, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'macvtap0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c00)={@mcast2, 0x0}, &(0x7f0000000c40)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x198, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa1d}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x40) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 2.760824168s ago: executing program 1 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x122) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}, {&(0x7f0000000480)="37c2", 0x2}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r2, 0x0, 0x0) 2.738522358s ago: executing program 6 (id=2272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010a2800000000ee0101000000c6af1affd50200050009000100735a5f300000000008000240000000032c000000030a01030000e6ff0000000002000000097ea16360f8d66f5e00010073797a220e0000000900030073797a32dd17de0000001500000011000100e6180000000000000067e4d6eb8a1eae6afc177001813b1bfb7981581c86b8bba4823736d88ccc7c94f24acc9a0397ea4b7233e9be2eec7c50801b38c99b61d6091776a2e184358d4e12a67f6bacdc162637b372fd41d3d7a76b3ced511ce819540c682a612ba164aa1898c8a385b848"], 0x7c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40454) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 2.66395002s ago: executing program 1 (id=2273): creat(&(0x7f0000000340)='./file0\x00', 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x81, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x7) write(r1, &(0x7f0000000940)="fe16aef2e635759bd5430de9a878d9a57a9869dd63c5a857070230219b2d1c54d59bb5f6bd4ae48bfdea702c6f180da413267e189a443ec7997880f6184c0109f6019ba134af3a5a6989e3e313c715c1df5783d0db7ca67318f1e919ce9a9e606cf35c938a72b6157e5fef590531a6ff81ed844feb0ee78cbc3a3592ea8fdef8521f42f001014cd5fae2454158500f4790e175f2425c609e8173df401ece1fb021ecf7e2bb83377552899c152461f854f1c6df302b8b5bdaec6c0744e411459b8405641e39bd2f718f337dde4c22a04676c28dc81012342b55dd8a70a7ed9f7514610cab4e3fbbc31fda6b990d44497b130c4bcc8545e62d2be41c11bc3cee721e9f141cbe21bb2dd910b563949072c8fbd1b1e17e8b", 0x39) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x2e9aa845) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = dup2(r6, r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x4048855}, 0x20044015) mount(0x0, 0x0, 0x0, 0x1010012, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="f000000000000000120100000800000043c0aa436ee9288a106cfe4940f7f0ffc2605a6defdbed41dbfe2a8b44e8d8d5a6a3a7631d99b96a42fa161a39460deb8d3bcd02efa0a99f45298aca766e6e4d6d7b48cfc3b608bd92f30a7d57346630360239d0f425d09c7c0a52699f7a8bcfccda1bcb97f009c074e2d8af740008370daa1103b09ad46ac44b743d3ed9925a950c59a1c80d20e912a78faac46d6ee77dd2379c71b87b579b447bd1c38fd67dbabe8a38470af892d6e05bbf20b33883ab3f7cdc7668d0c09264abcf06ad9d46c97b507ac921b32586e1bfcc26434aa1e803708313d78f1af366734b00000000f800000000000000d56bbc6107000000180f05548e3026b714671c52d612c705257e52fd393d4a1ec34b16d4454c06070c51ae54433166e57c6269ec7188af60dd3343d0639f856e2ded76214f05de22"], 0x1e8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x18) syz_io_uring_setup(0x7dc9, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c0000002000010300000000000000000200000000000000030000000c000c40000000000000ef0a08000100e000000208000100ac1414aa140003006e72300000000000000000000000000005001500000000000c000c4000000000000000010c001400", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x40014) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x105000) fcntl$getownex(r9, 0x10, &(0x7f0000000100)) 2.64550091s ago: executing program 6 (id=2274): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0x27) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x448, 0xff4, 0x0, 0x7}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) 1.834958555s ago: executing program 1 (id=2277): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 1.398855654s ago: executing program 7 (id=2278): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r7, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee699"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) creat(&(0x7f0000000580)='./bus\x00', 0x1a2) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000007c0)=0x118648, 0x4) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) 775.477996ms ago: executing program 5 (id=2283): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x295, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r2, 0x567, 0xa1ff, 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVed:\xc4e', 0x0) ustat(0xd, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT, @ANYRESHEX], 0x3, 0x7dc, &(0x7f0000000d80)="$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") stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000000), 0x84880) lstat(&(0x7f0000000440)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 531.948341ms ago: executing program 5 (id=2284): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x8000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x3653, {{0x15, 0x4, 0x3, 0x24, 0x54, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @generic={0x94, 0x8, "9fdf4c00dc96"}, @ssrr={0x89, 0x13, 0xab, [@rand_addr=0x64010101, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0xb4, [@remote, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @broadcast, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x8, 0x9, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8000, 0x10, 0x6, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'macvtap0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c00)={@mcast2, 0x0}, &(0x7f0000000c40)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x198, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa1d}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x40) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 437.689472ms ago: executing program 0 (id=2285): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 306.681655ms ago: executing program 5 (id=2286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 239.437926ms ago: executing program 0 (id=2287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0xb7cf2fb4c129c423) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0e01000000"], 0x28}}, 0x0) 101.572719ms ago: executing program 5 (id=2288): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x35) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) recvmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)=""/61, 0x3d}], 0x5, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x40000002, &(0x7f0000001500)={0x77359400}) fcntl$setpipe(r2, 0x407, 0x100004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0x4, 0x4) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 0s ago: executing program 1 (id=2289): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x501082, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r2, &(0x7f00000011c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001180)=""/15, 0xf}, 0x40000100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000001340)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001200)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000001380)='./file0\x00') setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000013c0)={0x9, {{0xa, 0x4e24, 0x10001, @empty, 0x8}}, 0x2, 0x5, [{{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {{0xa, 0x4e20, 0xcbc2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc80b}}, {{0xa, 0x4e21, 0x4, @remote, 0x6}}, {{0xa, 0x4e21, 0x74, @mcast1}}, {{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}}]}, 0x310) r5 = syz_open_dev$sg(&(0x7f0000001700), 0x5, 0xc0000) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000001740)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000017c0)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000001800), 0xfffffffffffffffc, 0x40a801) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f0000001840)={0x9e9, "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"}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000002240)={{0xa, 0x4e23, 0x400, @empty, 0x7}, {0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3d6ad00}, 0xffffffffffffffff, {[0x0, 0x8, 0x7000000, 0xdd5, 0x3, 0x1, 0x5, 0x8]}}, 0x5c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000022c0)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000002300)={0x2, 0x3, 0x4, 0x5, r9}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002340)={0x0, 0xe8, "2c9cdf9492346caa7cc5aac58135948510c9d0b2d9acf673d6d5cf09a6702ba0e19fa737b1a41cd98382034deed3db51faaee43a6d09265b30cff479246551cb52cfa6a1bc0dfe289fc9046db8ac349d9f77e9e54efbe74234064a329e6273beb6cfcc6b362067c4965708e7cd174f925154f53d82f7bc1929ed46755add35de14b484ac42f5eedcfcaf5970298b89c90108e07349c4ffe8022c062dea6fd186eea4d37f4b8a12d2a0450e5da53ce97d51f695550eefa8fb5033d1545d2ae61207833d8d35e5b7c6c2f63e626844fdf959d9d9cb0bf68dad17f55e177f3a8f1b9c84a714c97423f4"}, &(0x7f0000002440)=0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002500)={r10, 0x50, &(0x7f0000002480)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000002540)=0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x18, 0x12, &(0x7f00000025c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_fd={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x22}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002680)='syzkaller\x00', 0x4, 0xaf, &(0x7f00000026c0)=""/175, 0x40f00, 0x9, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002780)={0x0, 0x6, 0x80000000, 0xad2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000027c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002800)=[{0x1, 0x3, 0x5}, {0x1, 0x1, 0x6, 0x6}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002900)={&(0x7f0000002580)='workqueue_execute_end\x00', r11, 0x0, 0x6}, 0x18) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000002940), &(0x7f0000002980)={0x0, 0xfb, 0x35, 0x4, 0x7, "4884dcef55948f943e16e78bc8e57390", "46d182d477a00bc9265536c409bae145d65df372b790eeb8b1c2afa28b2b8436"}, 0x35, 0x2) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@local, @in=@broadcast}}, {{@in6=@ipv4}, 0x0, @in6}}, &(0x7f0000002ac0)=0xe8) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000002b00)={0x8, {{0xa, 0x4e24, 0x4, @loopback, 0x7fff}}}, 0x88) truncate(&(0x7f0000002bc0)='./file0\x00', 0x7f) r12 = accept(r8, &(0x7f0000002c00)=@in={0x2, 0x0, @initdev}, &(0x7f0000002c80)=0x80) ioctl$BTRFS_IOC_START_SYNC(r12, 0x80089418, &(0x7f0000002cc0)) kernel console output (not intermixed with test programs): 614:23632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f33668514a5 code=0x7ffc0000 [ 150.212077][ T9701] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.221940][ T29] audit: type=1326 audit(1757061843.614:23633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f33668514a5 code=0x7ffc0000 [ 150.258581][ T9711] __nla_validate_parse: 2 callbacks suppressed [ 150.258631][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'. [ 150.274911][ T29] audit: type=1326 audit(1757061843.654:23634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 150.313468][ T29] audit: type=1326 audit(1757061843.654:23635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 150.336951][ T29] audit: type=1326 audit(1757061843.654:23636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 150.360460][ T29] audit: type=1326 audit(1757061843.654:23637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f336681d550 code=0x7ffc0000 [ 150.383951][ T29] audit: type=1326 audit(1757061843.654:23638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3366820417 code=0x7ffc0000 [ 150.407427][ T29] audit: type=1326 audit(1757061843.654:23639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 150.430919][ T29] audit: type=1326 audit(1757061843.654:23640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3366820417 code=0x7ffc0000 [ 150.454411][ T29] audit: type=1326 audit(1757061843.654:23641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9709 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f336681d84a code=0x7ffc0000 [ 150.478812][ T9704] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.492238][ T9707] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.516437][ T4815] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.527953][ T4815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.539124][ T7755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.552189][ T7728] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.576748][ T7755] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.588127][ T7755] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.603537][ T7755] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.617941][ T7755] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.636715][ T9719] IPVS: length: 220 != 8 [ 150.645323][ T3560] kernel write not supported for file /431/oom_adj (pid: 3560 comm: kworker/0:7) [ 150.681450][ T9722] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 150.739201][ T9720] loop6: detected capacity change from 0 to 764 [ 150.753709][ T9720] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 150.842833][ T3411] kernel write not supported for file /902/oom_adj (pid: 3411 comm: kworker/0:6) [ 150.942447][ T9735] loop0: detected capacity change from 0 to 764 [ 150.957684][ T9735] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.028017][ T9743] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 151.038697][ T9743] loop6: detected capacity change from 0 to 512 [ 151.054469][ T9743] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.109638][ T9751] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.171609][ T9751] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.220864][ T9756] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 151.232230][ T9751] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.265571][ T3411] kernel write not supported for file /914/oom_adj (pid: 3411 comm: kworker/0:6) [ 151.292286][ T9751] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.330408][ T9760] loop0: detected capacity change from 0 to 764 [ 151.355293][ T9760] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.627191][ T9768] random: crng reseeded on system resumption [ 152.276838][ T9775] loop1: detected capacity change from 0 to 4096 [ 152.292334][ T9775] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.468396][ T9780] loop1: detected capacity change from 0 to 1024 [ 152.489921][ T9780] EXT4-fs: Ignoring removed orlov option [ 152.495666][ T9780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.503471][ T9783] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.551477][ T9783] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.601667][ T9783] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.651729][ T9783] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.367232][ T3362] kernel write not supported for file /923/oom_adj (pid: 3362 comm: kworker/1:2) [ 153.429755][ T9799] loop0: detected capacity change from 0 to 764 [ 153.444490][ T9799] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 153.511567][ T9805] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.561884][ T9805] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.622085][ T9805] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.664722][ T9811] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 153.674282][ T9805] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.676541][ T9811] loop1: detected capacity change from 0 to 512 [ 153.702378][ T9811] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.742874][ T7755] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.757530][ T7755] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.765848][ T7755] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.776723][ T7755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.822703][ T9819] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 153.834174][ T9819] loop0: detected capacity change from 0 to 512 [ 153.841309][ T4815] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.858974][ T4815] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.871138][ T4815] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.884981][ T4815] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.887462][ T9819] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.048000][ T9833] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 154.469019][ T7744] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.480380][ T7744] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.498209][ T7744] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.523818][ T7744] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.559507][ T7744] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.580137][ T7744] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.588501][ T7744] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.598050][ T7744] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.612648][ T9849] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 154.761716][ T9851] loop6: detected capacity change from 0 to 512 [ 154.926061][ T9851] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.152810][ T9868] loop5: detected capacity change from 0 to 4096 [ 155.164024][ T9868] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 155.299607][ T9882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.328780][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 155.328794][ T29] audit: type=1326 audit(1757061848.724:24123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 155.359472][ T29] audit: type=1326 audit(1757061848.724:24124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 155.361423][ T9882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.383020][ T29] audit: type=1326 audit(1757061848.764:24125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.416216][ T29] audit: type=1326 audit(1757061848.764:24126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.451166][ T29] audit: type=1326 audit(1757061848.764:24127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.474796][ T29] audit: type=1326 audit(1757061848.764:24128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.498273][ T29] audit: type=1326 audit(1757061848.764:24129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.521781][ T29] audit: type=1326 audit(1757061848.764:24130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.545333][ T29] audit: type=1326 audit(1757061848.794:24131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.568835][ T29] audit: type=1326 audit(1757061848.794:24132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.1.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 155.628902][ T9891] loop0: detected capacity change from 0 to 1024 [ 155.636176][ T9891] EXT4-fs: Ignoring removed bh option [ 155.652012][ T9882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.671196][ T3306] EXT4-fs unmount: 71 callbacks suppressed [ 155.671207][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.701613][ T9882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.736260][ T7734] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.747323][ T7734] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.761934][ T7734] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.770196][ T7734] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.830986][ T9967] loop1: detected capacity change from 0 to 1024 [ 156.838776][ T9967] EXT4-fs: Ignoring removed orlov option [ 156.844595][ T9967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.862938][ T9967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.941368][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.972425][ T9978] loop1: detected capacity change from 0 to 4096 [ 156.979640][ T9978] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 156.991623][ T9978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.015853][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.040826][ T9981] loop1: detected capacity change from 0 to 1024 [ 157.047754][ T9981] EXT4-fs: Ignoring removed bh option [ 157.064435][ T9981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.079696][ T9981] veth0: entered promiscuous mode [ 157.086080][ T9980] veth0: left promiscuous mode [ 157.100294][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.192643][ T9995] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.231932][ T9995] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.292348][ T9995] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.351947][ T9995] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.796912][T10010] loop3: detected capacity change from 0 to 4096 [ 157.811554][ T7734] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.828432][T10010] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 157.839286][ T8685] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.853108][ T8685] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.861519][ T8685] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.881012][T10012] loop5: detected capacity change from 0 to 1024 [ 157.888331][T10010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.906153][T10012] EXT4-fs: Ignoring removed bh option [ 157.932198][T10012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.958810][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.003088][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.293019][T10034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10034 comm=syz.3.1861 [ 158.308664][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1861'. [ 158.414918][T10038] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 158.426543][T10038] loop5: detected capacity change from 0 to 512 [ 158.442390][T10038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.454932][T10038] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.500347][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.535376][T10048] loop5: detected capacity change from 0 to 1024 [ 158.553807][T10048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.569528][T10049] loop0: detected capacity change from 0 to 4096 [ 158.602197][T10049] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.618699][T10049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.645755][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.995160][ T5911] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 159.006274][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.006338][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.006349][ T5911] Call Trace: [ 159.006355][ T5911] [ 159.006362][ T5911] __dump_stack+0x1d/0x30 [ 159.006384][ T5911] dump_stack_lvl+0xe8/0x140 [ 159.006421][ T5911] dump_stack+0x15/0x1b [ 159.006439][ T5911] dump_header+0x81/0x220 [ 159.006489][ T5911] oom_kill_process+0x342/0x400 [ 159.006518][ T5911] out_of_memory+0x979/0xb80 [ 159.006553][ T5911] try_charge_memcg+0x5e6/0x9e0 [ 159.006584][ T5911] charge_memcg+0x51/0xc0 [ 159.006683][ T5911] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 159.006843][ T5911] __read_swap_cache_async+0x1df/0x350 [ 159.006951][ T5911] swap_cluster_readahead+0x277/0x3e0 [ 159.007060][ T5911] swapin_readahead+0xde/0x6f0 [ 159.007143][ T5911] ? __filemap_get_folio+0x4f7/0x6b0 [ 159.007174][ T5911] ? ktime_get+0x1eb/0x210 [ 159.007202][ T5911] ? swap_cache_get_folio+0x77/0x200 [ 159.007254][ T5911] do_swap_page+0x301/0x2430 [ 159.007279][ T5911] ? finish_task_switch+0xad/0x2b0 [ 159.007300][ T5911] ? __pfx_default_wake_function+0x10/0x10 [ 159.007338][ T5911] handle_mm_fault+0x9a5/0x2c20 [ 159.007370][ T5911] do_user_addr_fault+0x636/0x1090 [ 159.007449][ T5911] ? fpregs_restore_userregs+0xe2/0x1d0 [ 159.007477][ T5911] ? switch_fpu_return+0xe/0x20 [ 159.007505][ T5911] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.007591][ T5911] exc_page_fault+0x62/0xa0 [ 159.007690][ T5911] asm_exc_page_fault+0x26/0x30 [ 159.007837][ T5911] RIP: 0033:0x7f24de181465 [ 159.007855][ T5911] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 159.007870][ T5911] RSP: 002b:00007ffdce459678 EFLAGS: 00010246 [ 159.007887][ T5911] RAX: 0000000000000000 RBX: 000000000000022d RCX: 00007f24de181463 [ 159.007901][ T5911] RDX: 00007ffdce459690 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.007918][ T5911] RBP: 00007ffdce4596fc R08: 0000000036a95fe3 R09: 0000000000000000 [ 159.007929][ T5911] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 159.007941][ T5911] R13: 00000000000927c0 R14: 0000000000026b71 R15: 00007ffdce459750 [ 159.007957][ T5911] [ 159.007963][ T5911] memory: usage 307200kB, limit 307200kB, failcnt 192 [ 159.238108][ T5911] memory+swap: usage 307872kB, limit 9007199254740988kB, failcnt 0 [ 159.245998][ T5911] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 159.253287][ T5911] Memory cgroup stats for /syz5: [ 159.320563][ T5911] cache 8192 [ 159.328732][ T5911] rss 8192 [ 159.331865][ T5911] shmem 0 [ 159.334790][ T5911] mapped_file 0 [ 159.338235][ T5911] dirty 0 [ 159.341213][ T5911] writeback 8192 [ 159.344751][ T5911] workingset_refault_anon 2 [ 159.349317][ T5911] workingset_refault_file 0 [ 159.353836][ T5911] swap 708608 [ 159.357107][ T5911] swapcached 8192 [ 159.360751][ T5911] pgpgin 50221 [ 159.364102][ T5911] pgpgout 50217 [ 159.367546][ T5911] pgfault 63818 [ 159.371127][ T5911] pgmajfault 1 [ 159.374489][ T5911] inactive_anon 8192 [ 159.378372][ T5911] active_anon 0 [ 159.381892][ T5911] inactive_file 4096 [ 159.385773][ T5911] active_file 4096 [ 159.389522][ T5911] unevictable 0 [ 159.392987][ T5911] hierarchical_memory_limit 314572800 [ 159.398345][ T5911] hierarchical_memsw_limit 9223372036854771712 [ 159.404520][ T5911] total_cache 8192 [ 159.408220][ T5911] total_rss 8192 [ 159.411821][ T5911] total_shmem 0 [ 159.415271][ T5911] total_mapped_file 0 [ 159.419239][ T5911] total_dirty 0 [ 159.422746][ T5911] total_writeback 8192 [ 159.426797][ T5911] total_workingset_refault_anon 2 [ 159.431853][ T5911] total_workingset_refault_file 0 [ 159.436905][ T5911] total_swap 708608 [ 159.440723][ T5911] total_swapcached 8192 [ 159.444914][ T5911] total_pgpgin 50221 [ 159.448968][ T5911] total_pgpgout 50217 [ 159.452963][ T5911] total_pgfault 63818 [ 159.456930][ T5911] total_pgmajfault 1 [ 159.460866][ T5911] total_inactive_anon 8192 [ 159.465273][ T5911] total_active_anon 0 [ 159.469237][ T5911] total_inactive_file 4096 [ 159.472211][ T3412] kernel write not supported for file /469/oom_adj (pid: 3412 comm: kworker/1:3) [ 159.473697][ T5911] total_active_file 4096 [ 159.487092][ T5911] total_unevictable 0 [ 159.491101][ T5911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1866,pid=10046,uid=0 [ 159.496117][T10064] loop6: detected capacity change from 0 to 764 [ 159.505861][ T5911] Memory cgroup out of memory: Killed process 10046 (syz.5.1866) total-vm:93696kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 159.540981][T10064] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 159.552150][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.658622][ T3411] kernel write not supported for file /981/oom_adj (pid: 3411 comm: kworker/0:6) [ 159.663036][T10083] loop5: detected capacity change from 0 to 512 [ 159.707567][T10083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.720301][T10083] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.764113][T10093] loop6: detected capacity change from 0 to 1024 [ 159.773897][T10093] EXT4-fs: Ignoring removed bh option [ 159.795789][T10093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.809619][T10078] loop0: detected capacity change from 0 to 764 [ 159.817316][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.830073][T10078] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 159.887149][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.889292][ T3411] kernel write not supported for file /983/oom_adj (pid: 3411 comm: kworker/0:6) [ 159.966770][T10102] loop0: detected capacity change from 0 to 764 [ 159.987800][T10102] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.024947][T10107] loop0: detected capacity change from 0 to 1024 [ 160.032308][T10107] EXT4-fs: Ignoring removed bh option [ 160.042517][T10107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.064147][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.157493][T10114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10114 comm=syz.0.1886 [ 160.170362][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'. [ 160.341677][T10123] loop1: detected capacity change from 0 to 1024 [ 160.348440][T10123] EXT4-fs: Ignoring removed orlov option [ 160.354181][T10123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.371748][T10123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.448681][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.492771][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 160.492785][ T29] audit: type=1326 audit(1757061853.894:24723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.498463][T10133] loop3: detected capacity change from 0 to 512 [ 160.498977][ T29] audit: type=1326 audit(1757061853.894:24724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.553676][ T29] audit: type=1326 audit(1757061853.894:24725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="syz.3.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.558903][T10133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.577341][ T29] audit: type=1326 audit(1757061853.894:24726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.590663][T10133] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.612895][ T29] audit: type=1326 audit(1757061853.894:24727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.646429][ T29] audit: type=1326 audit(1757061853.894:24728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.670389][ T29] audit: type=1326 audit(1757061853.894:24729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.693937][ T29] audit: type=1326 audit(1757061853.894:24730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.717034][ T29] audit: type=1326 audit(1757061853.894:24731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.740087][ T29] audit: type=1326 audit(1757061853.894:24732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10132 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f05beeeebe9 code=0x7ffc0000 [ 160.754158][T10140] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1892'. [ 160.784028][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.819031][T10139] loop5: detected capacity change from 0 to 512 [ 160.831290][ T3411] kernel write not supported for file /1007/oom_adj (pid: 3411 comm: kworker/0:6) [ 160.873410][T10139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.929082][T10139] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.968458][T10156] loop6: detected capacity change from 0 to 1024 [ 160.995344][T10156] EXT4-fs: Ignoring removed bh option [ 161.034982][T10156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.055932][T10144] loop3: detected capacity change from 0 to 764 [ 161.075740][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.090073][T10144] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 161.198148][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.277606][T10173] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 161.305813][T10173] loop6: detected capacity change from 0 to 512 [ 161.357199][T10173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.397726][T10173] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.548021][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.917097][T10188] loop5: detected capacity change from 0 to 512 [ 162.004353][T10188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.029827][T10189] loop1: detected capacity change from 0 to 1024 [ 162.036609][T10188] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.049522][T10189] EXT4-fs: Ignoring removed orlov option [ 162.055268][T10189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.085395][T10189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.129267][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.138800][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.189534][T10205] FAULT_INJECTION: forcing a failure. [ 162.189534][T10205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.202650][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.1.1908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.202675][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.202736][T10205] Call Trace: [ 162.202742][T10205] [ 162.202749][T10205] __dump_stack+0x1d/0x30 [ 162.202770][T10205] dump_stack_lvl+0xe8/0x140 [ 162.202905][T10205] dump_stack+0x15/0x1b [ 162.202924][T10205] should_fail_ex+0x265/0x280 [ 162.202947][T10205] should_fail+0xb/0x20 [ 162.202984][T10205] should_fail_usercopy+0x1a/0x20 [ 162.203009][T10205] strncpy_from_user+0x25/0x230 [ 162.203040][T10205] ? kmem_cache_alloc_noprof+0x186/0x310 [ 162.203074][T10205] ? getname_flags+0x80/0x3b0 [ 162.203100][T10205] getname_flags+0xae/0x3b0 [ 162.203189][T10205] user_path_at+0x28/0x130 [ 162.203219][T10205] __se_sys_quotactl+0xb6/0x670 [ 162.203240][T10205] __x64_sys_quotactl+0x55/0x70 [ 162.203257][T10205] x64_sys_call+0x15d6/0x2ff0 [ 162.203278][T10205] do_syscall_64+0xd2/0x200 [ 162.203359][T10205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.203381][T10205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.203453][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.203472][T10205] RIP: 0033:0x7fc680edebe9 [ 162.203484][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.203500][T10205] RSP: 002b:00007fc67f947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 162.203517][T10205] RAX: ffffffffffffffda RBX: 00007fc681115fa0 RCX: 00007fc680edebe9 [ 162.203530][T10205] RDX: 0000000000000000 RSI: 0000200000004080 RDI: ffffffff80000200 [ 162.203541][T10205] RBP: 00007fc67f947090 R08: 0000000000000000 R09: 0000000000000000 [ 162.203585][T10205] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 162.203597][T10205] R13: 00007fc681116038 R14: 00007fc681115fa0 R15: 00007ffe5706e028 [ 162.203615][T10205] [ 162.466555][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10212 comm=syz.5.1909 [ 162.485189][T10212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1909'. [ 162.505276][T10215] loop3: detected capacity change from 0 to 1024 [ 162.532513][T10215] EXT4-fs: Ignoring removed bh option [ 162.562430][T10215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.577570][T10215] veth0: entered promiscuous mode [ 162.584250][T10213] veth0: left promiscuous mode [ 162.601247][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.628290][T10221] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 162.640197][T10221] loop3: detected capacity change from 0 to 512 [ 162.652388][T10221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.656453][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1910'. [ 162.665352][T10221] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.726685][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.797949][T10233] loop6: detected capacity change from 0 to 512 [ 162.813938][T10233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.841662][T10233] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.906801][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.074893][T10243] loop6: detected capacity change from 0 to 1024 [ 163.082302][T10243] EXT4-fs: Ignoring removed orlov option [ 163.088018][T10243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.113005][T10243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.146349][T10248] loop5: detected capacity change from 0 to 1024 [ 163.158462][T10248] EXT4-fs: Ignoring removed bh option [ 163.168375][T10248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.207677][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.244365][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.758992][T10267] loop3: detected capacity change from 0 to 1024 [ 163.771539][T10267] EXT4-fs: Ignoring removed bh option [ 163.803820][T10267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.820021][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 163.871598][T10275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10275 comm=syz.6.1926 [ 163.884433][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1926'. [ 163.906685][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.957913][T10281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.981733][T10281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.043988][T10281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.103956][T10281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.178881][ T7728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.217779][ T7728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.230381][ T7728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.238568][ T7728] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.321683][T10298] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 164.335234][T10295] loop5: detected capacity change from 0 to 1024 [ 164.342076][T10295] EXT4-fs: Ignoring removed orlov option [ 164.347748][T10295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.351908][T10286] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 164.375822][T10295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.440178][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.580692][T10308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10308 comm=syz.5.1936 [ 164.608271][T10308] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1936'. [ 164.614202][T10310] loop0: detected capacity change from 0 to 1024 [ 164.627307][T10310] EXT4-fs: Ignoring removed bh option [ 164.645018][T10310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.674875][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 164.723494][T10314] FAULT_INJECTION: forcing a failure. [ 164.723494][T10314] name failslab, interval 1, probability 0, space 0, times 0 [ 164.736240][T10314] CPU: 0 UID: 0 PID: 10314 Comm: syz.6.1939 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.736269][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.736281][T10314] Call Trace: [ 164.736286][T10314] [ 164.736326][T10314] __dump_stack+0x1d/0x30 [ 164.736348][T10314] dump_stack_lvl+0xe8/0x140 [ 164.736399][T10314] dump_stack+0x15/0x1b [ 164.736493][T10314] should_fail_ex+0x265/0x280 [ 164.736513][T10314] should_failslab+0x8c/0xb0 [ 164.736547][T10314] kmem_cache_alloc_node_noprof+0x57/0x320 [ 164.736573][T10314] ? __alloc_skb+0x101/0x320 [ 164.736591][T10314] __alloc_skb+0x101/0x320 [ 164.736667][T10314] netlink_alloc_large_skb+0xba/0xf0 [ 164.736756][T10314] netlink_sendmsg+0x3cf/0x6b0 [ 164.736847][T10314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.736871][T10314] __sock_sendmsg+0x145/0x180 [ 164.736900][T10314] ____sys_sendmsg+0x31e/0x4e0 [ 164.736991][T10314] ___sys_sendmsg+0x17b/0x1d0 [ 164.737067][T10314] __x64_sys_sendmsg+0xd4/0x160 [ 164.737101][T10314] x64_sys_call+0x191e/0x2ff0 [ 164.737123][T10314] do_syscall_64+0xd2/0x200 [ 164.737151][T10314] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.737237][T10314] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.737264][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.737285][T10314] RIP: 0033:0x7fd32368ebe9 [ 164.737301][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.737347][T10314] RSP: 002b:00007fd3220ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.737365][T10314] RAX: ffffffffffffffda RBX: 00007fd3238c5fa0 RCX: 00007fd32368ebe9 [ 164.737377][T10314] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 164.737387][T10314] RBP: 00007fd3220ef090 R08: 0000000000000000 R09: 0000000000000000 [ 164.737398][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.737409][T10314] R13: 00007fd3238c6038 R14: 00007fd3238c5fa0 R15: 00007ffd2c71e938 [ 164.737425][T10314] [ 164.976386][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.011656][T10319] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 165.036731][T10319] loop6: detected capacity change from 0 to 512 [ 165.066778][T10319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.127798][T10319] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.191823][T10330] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1944'. [ 165.221508][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.227938][T10334] loop1: detected capacity change from 0 to 1024 [ 165.238184][T10334] EXT4-fs: Ignoring removed bh option [ 165.247597][T10334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.308224][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.357084][T10344] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1948'. [ 165.367387][ T4732] kernel write not supported for file /898/oom_adj (pid: 4732 comm: kworker/1:5) [ 165.498684][T10343] loop1: detected capacity change from 0 to 764 [ 165.508343][ T29] kauditd_printk_skb: 990 callbacks suppressed [ 165.508395][ T29] audit: type=1326 audit(1757061858.904:25723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc680edd84a code=0x7ffc0000 [ 165.538592][ T29] audit: type=1326 audit(1757061858.904:25724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc680edd84a code=0x7ffc0000 [ 165.546333][T10343] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.562138][ T29] audit: type=1326 audit(1757061858.904:25725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc680edd457 code=0x7ffc0000 [ 165.562171][ T29] audit: type=1326 audit(1757061858.904:25726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc680ee038a code=0x7ffc0000 [ 165.620635][ T29] audit: type=1326 audit(1757061859.014:25727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc680edd550 code=0x7ffc0000 [ 165.648274][ T29] audit: type=1326 audit(1757061859.044:25728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc680edd937 code=0x7ffc0000 [ 165.671859][ T29] audit: type=1326 audit(1757061859.044:25729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc680edd550 code=0x7ffc0000 [ 165.695485][ T29] audit: type=1326 audit(1757061859.044:25730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 165.719233][ T29] audit: type=1326 audit(1757061859.044:25731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 165.746971][ T29] audit: type=1326 audit(1757061859.144:25732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 165.788934][T10371] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 165.821940][T10379] loop1: detected capacity change from 0 to 1024 [ 165.828871][T10379] EXT4-fs: Ignoring removed bh option [ 165.845680][T10379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.866967][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.678462][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 166.689568][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.689604][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.689615][ T3302] Call Trace: [ 166.689622][ T3302] [ 166.689629][ T3302] __dump_stack+0x1d/0x30 [ 166.689652][ T3302] dump_stack_lvl+0xe8/0x140 [ 166.689670][ T3302] dump_stack+0x15/0x1b [ 166.689761][ T3302] dump_header+0x81/0x220 [ 166.689793][ T3302] oom_kill_process+0x342/0x400 [ 166.689827][ T3302] out_of_memory+0x979/0xb80 [ 166.689858][ T3302] try_charge_memcg+0x5e6/0x9e0 [ 166.689928][ T3302] charge_memcg+0x51/0xc0 [ 166.689945][ T3302] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 166.689968][ T3302] __read_swap_cache_async+0x1df/0x350 [ 166.690074][ T3302] swap_cluster_readahead+0x376/0x3e0 [ 166.690110][ T3302] swapin_readahead+0xde/0x6f0 [ 166.690214][ T3302] ? __filemap_get_folio+0x4f7/0x6b0 [ 166.690252][ T3302] ? swap_cache_get_folio+0x77/0x200 [ 166.690392][ T3302] do_swap_page+0x301/0x2430 [ 166.690414][ T3302] ? css_rstat_updated+0xb7/0x240 [ 166.690503][ T3302] ? __pfx_default_wake_function+0x10/0x10 [ 166.690529][ T3302] handle_mm_fault+0x9a5/0x2c20 [ 166.690636][ T3302] do_user_addr_fault+0x636/0x1090 [ 166.690671][ T3302] exc_page_fault+0x62/0xa0 [ 166.690719][ T3302] asm_exc_page_fault+0x26/0x30 [ 166.690795][ T3302] RIP: 0033:0x7fc680db5bf7 [ 166.690810][ T3302] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a8 fb e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 fa e8 00 48 01 d1 39 7c 24 [ 166.690827][ T3302] RSP: 002b:00007ffe5706e3b0 EFLAGS: 00010202 [ 166.690843][ T3302] RAX: 0000001b32e24000 RBX: 000000000000038c RCX: 0000000000028870 [ 166.690856][ T3302] RDX: 00000000092b5815 RSI: 00007ffe5706e440 RDI: 0000000000000002 [ 166.690868][ T3302] RBP: 00007ffe5706e3ec R08: 0000000022fa6835 R09: 7fffffffffffffff [ 166.690880][ T3302] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 166.690912][ T3302] R13: 00000000000927c0 R14: 00000000000287f5 R15: 00007ffe5706e440 [ 166.690929][ T3302] [ 166.892777][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 205 [ 166.899603][ T3302] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 [ 166.907540][ T3302] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 166.914849][ T3302] Memory cgroup stats for /syz1: [ 166.926938][ T3302] cache 0 [ 166.934986][ T3302] rss 0 [ 166.937828][ T3302] shmem 0 [ 166.940846][ T3302] mapped_file 0 [ 166.944295][ T3302] dirty 0 [ 166.947299][ T3302] writeback 4096 [ 166.951033][ T3302] workingset_refault_anon 11 [ 166.955619][ T3302] workingset_refault_file 385 [ 166.960384][ T3302] swap 114688 [ 166.963746][ T3302] swapcached 8192 [ 166.967407][ T3302] pgpgin 93732 [ 166.970883][ T3302] pgpgout 93730 [ 166.974332][ T3302] pgfault 125469 [ 166.977857][ T3302] pgmajfault 11 [ 166.981391][ T3302] inactive_anon 8192 [ 166.985272][ T3302] active_anon 0 [ 166.988705][ T3302] inactive_file 0 [ 166.992393][ T3302] active_file 0 [ 166.995835][ T3302] unevictable 0 [ 166.999268][ T3302] hierarchical_memory_limit 314572800 [ 167.004715][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 167.010960][ T3302] total_cache 0 [ 167.014408][ T3302] total_rss 0 [ 167.017666][ T3302] total_shmem 0 [ 167.021275][ T3302] total_mapped_file 0 [ 167.025266][ T3302] total_dirty 0 [ 167.028776][ T3302] total_writeback 4096 [ 167.032919][ T3302] total_workingset_refault_anon 11 [ 167.038010][ T3302] total_workingset_refault_file 385 [ 167.043325][ T3302] total_swap 114688 [ 167.047195][ T3302] total_swapcached 8192 [ 167.051441][ T3302] total_pgpgin 93732 [ 167.055344][ T3302] total_pgpgout 93730 [ 167.059298][ T3302] total_pgfault 125469 [ 167.063483][ T3302] total_pgmajfault 11 [ 167.067446][ T3302] total_inactive_anon 8192 [ 167.071977][ T3302] total_active_anon 0 [ 167.075974][ T3302] total_inactive_file 0 [ 167.080107][ T3302] total_active_file 0 [ 167.084176][ T3302] total_unevictable 0 [ 167.088163][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1958,pid=10383,uid=0 [ 167.102941][ T3302] Memory cgroup out of memory: Killed process 10383 (syz.1.1958) total-vm:103936kB, anon-rss:1008kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 167.163564][T10407] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.192296][T10410] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.232570][T10407] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.282009][T10410] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.333034][T10407] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.366130][T10414] loop1: detected capacity change from 0 to 1024 [ 167.367771][T10417] loop6: detected capacity change from 0 to 1024 [ 167.379839][T10417] EXT4-fs: Ignoring removed bh option [ 167.387244][T10410] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.408516][T10417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.421379][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.433673][T10414] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.444993][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.448121][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 167.466664][T10407] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.479972][T10424] FAULT_INJECTION: forcing a failure. [ 167.479972][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.493125][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.6.1969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.493150][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.493161][T10424] Call Trace: [ 167.493166][T10424] [ 167.493174][T10424] __dump_stack+0x1d/0x30 [ 167.493245][T10424] dump_stack_lvl+0xe8/0x140 [ 167.493312][T10424] dump_stack+0x15/0x1b [ 167.493329][T10424] should_fail_ex+0x265/0x280 [ 167.493351][T10424] should_fail+0xb/0x20 [ 167.493379][T10424] should_fail_usercopy+0x1a/0x20 [ 167.493414][T10424] copy_to_user_nofault+0x7f/0x120 [ 167.493439][T10424] bpf_probe_write_user+0x83/0xc0 [ 167.493542][T10424] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 167.493563][T10424] bpf_trace_run2+0x104/0x1c0 [ 167.493584][T10424] ? xfrm_user_rcv_msg+0x60c/0x660 [ 167.493610][T10424] ? xfrm_user_rcv_msg+0x60c/0x660 [ 167.493672][T10424] kfree+0x27b/0x320 [ 167.493698][T10424] xfrm_user_rcv_msg+0x60c/0x660 [ 167.493741][T10424] ? __kfree_skb+0x109/0x150 [ 167.493758][T10424] ? nlmon_xmit+0x4f/0x60 [ 167.493833][T10424] ? consume_skb+0x49/0x150 [ 167.493866][T10424] netlink_rcv_skb+0x120/0x220 [ 167.493936][T10424] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 167.493964][T10424] xfrm_netlink_rcv+0x48/0x60 [ 167.494017][T10424] netlink_unicast+0x5c0/0x690 [ 167.494040][T10424] netlink_sendmsg+0x58b/0x6b0 [ 167.494063][T10424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.494156][T10424] __sock_sendmsg+0x145/0x180 [ 167.494186][T10424] ____sys_sendmsg+0x31e/0x4e0 [ 167.494212][T10424] ___sys_sendmsg+0x17b/0x1d0 [ 167.494304][T10424] __x64_sys_sendmsg+0xd4/0x160 [ 167.494328][T10424] x64_sys_call+0x191e/0x2ff0 [ 167.494347][T10424] do_syscall_64+0xd2/0x200 [ 167.494428][T10424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.494506][T10424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.494531][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.494550][T10424] RIP: 0033:0x7fd32368ebe9 [ 167.494569][T10424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.494584][T10424] RSP: 002b:00007fd3220ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.494606][T10424] RAX: ffffffffffffffda RBX: 00007fd3238c5fa0 RCX: 00007fd32368ebe9 [ 167.494620][T10424] RDX: 0000000004004810 RSI: 00002000000035c0 RDI: 0000000000000003 [ 167.494633][T10424] RBP: 00007fd3220ef090 R08: 0000000000000000 R09: 0000000000000000 [ 167.494646][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.494660][T10424] R13: 00007fd3238c6038 R14: 00007fd3238c5fa0 R15: 00007ffd2c71e938 [ 167.494676][T10424] [ 167.758907][T10410] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.769403][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.804684][T10430] IPVS: length: 220 != 8 [ 167.835799][ T7752] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.861927][ T7735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.874500][ T7735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.886129][ T7735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.984161][T10432] random: crng reseeded on system resumption [ 168.741164][ T7735] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.797267][ T7735] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.823592][ T7735] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.850417][ T7752] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.861072][T10450] 9pnet_fd: Insufficient options for proto=fd [ 168.868046][T10451] loop5: detected capacity change from 0 to 1024 [ 168.883699][T10451] EXT4-fs: Ignoring removed bh option [ 168.926402][T10451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.152362][T10465] loop0: detected capacity change from 0 to 512 [ 169.180938][T10450] loop3: detected capacity change from 0 to 764 [ 169.203689][T10450] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.226373][T10465] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.289814][T10472] tap0: tun_chr_ioctl cmd 1074025676 [ 169.295190][T10472] tap0: owner set to 1 [ 169.314528][T10472] loop5: detected capacity change from 0 to 512 [ 169.327976][T10472] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 169.361108][T10472] binfmt_misc: register: failed to install interpreter file ./file2 [ 169.831237][T10499] random: crng reseeded on system resumption [ 170.244895][T10522] loop0: detected capacity change from 0 to 512 [ 170.262325][T10522] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.410294][T10543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10543 comm=syz.1.2004 [ 170.428944][T10543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2004'. [ 170.466487][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.476503][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.620171][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 170.620184][ T29] audit: type=1326 audit(1757061864.014:26148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.650055][ T29] audit: type=1326 audit(1757061864.014:26149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.652658][T10549] FAULT_INJECTION: forcing a failure. [ 170.652658][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 170.673770][ T29] audit: type=1326 audit(1757061864.014:26150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.686464][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.5.2007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.686533][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.686547][T10549] Call Trace: [ 170.686573][T10549] [ 170.686581][T10549] __dump_stack+0x1d/0x30 [ 170.686603][T10549] dump_stack_lvl+0xe8/0x140 [ 170.686623][T10549] dump_stack+0x15/0x1b [ 170.686640][T10549] should_fail_ex+0x265/0x280 [ 170.686685][T10549] should_failslab+0x8c/0xb0 [ 170.686710][T10549] kmem_cache_alloc_noprof+0x50/0x310 [ 170.686738][T10549] ? getname_flags+0x80/0x3b0 [ 170.686766][T10549] getname_flags+0x80/0x3b0 [ 170.686873][T10549] user_path_at+0x28/0x130 [ 170.686974][T10549] __se_sys_name_to_handle_at+0xff/0x630 [ 170.687016][T10549] __x64_sys_name_to_handle_at+0x67/0x80 [ 170.687044][T10549] x64_sys_call+0x1552/0x2ff0 [ 170.687099][T10549] do_syscall_64+0xd2/0x200 [ 170.687167][T10549] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.687205][T10549] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.687283][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.687311][T10549] RIP: 0033:0x7f24de14ebe9 [ 170.687327][T10549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.687370][T10549] RSP: 002b:00007f24dcbaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 170.687389][T10549] RAX: ffffffffffffffda RBX: 00007f24de385fa0 RCX: 00007f24de14ebe9 [ 170.687401][T10549] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 170.687414][T10549] RBP: 00007f24dcbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 170.687426][T10549] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 170.687438][T10549] R13: 00007f24de386038 R14: 00007f24de385fa0 R15: 00007ffdce459338 [ 170.687503][T10549] [ 170.746153][ T4732] kernel write not supported for file /639/oom_adj (pid: 4732 comm: kworker/1:5) [ 170.749112][ T29] audit: type=1326 audit(1757061864.014:26151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.831297][T10551] loop5: detected capacity change from 0 to 764 [ 170.840809][ T29] audit: type=1326 audit(1757061864.044:26152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.880072][ T29] audit: type=1326 audit(1757061864.054:26153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.880127][ T29] audit: type=1326 audit(1757061864.054:26154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.880153][ T29] audit: type=1326 audit(1757061864.054:26155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.889644][T10551] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 170.891181][ T29] audit: type=1326 audit(1757061864.054:26156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 170.891210][ T29] audit: type=1326 audit(1757061864.054:26157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.5.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24de14ebe9 code=0x7ffc0000 [ 171.134194][T10555] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.172680][T10555] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.203873][T10561] loop0: detected capacity change from 0 to 512 [ 171.236287][T10561] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.255179][T10566] loop1: detected capacity change from 0 to 1024 [ 171.272352][T10555] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.301629][T10566] EXT4-fs: Ignoring removed bh option [ 171.320457][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 171.348984][T10555] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.439528][T10576] loop0: detected capacity change from 0 to 1024 [ 171.473957][T10576] EXT4-fs: Ignoring removed bh option [ 172.013620][ T4732] kernel write not supported for file /574/oom_adj (pid: 4732 comm: kworker/1:5) [ 172.078094][T10586] loop6: detected capacity change from 0 to 764 [ 172.091202][T10586] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 172.130670][T10588] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 172.142164][T10588] loop6: detected capacity change from 0 to 512 [ 172.152904][T10588] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.207510][ T3411] kernel write not supported for file /578/oom_adj (pid: 3411 comm: kworker/0:6) [ 172.275385][T10594] loop6: detected capacity change from 0 to 764 [ 172.288551][T10594] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 172.464518][T10611] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.562238][T10611] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.602107][T10611] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.661650][T10611] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.680385][T10615] loop6: detected capacity change from 0 to 1024 [ 172.688993][T10615] EXT4-fs: Ignoring removed orlov option [ 172.694810][T10615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.711273][ T7740] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.721303][ T7740] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.753884][ T7740] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.783385][ T7740] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.869891][ T7740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.893212][T10624] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 172.913829][T10624] loop6: detected capacity change from 0 to 512 [ 172.922738][ T7740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.933689][ T290] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.944501][ T290] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.954162][T10624] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.060002][ T3411] kernel write not supported for file /594/oom_adj (pid: 3411 comm: kworker/0:6) [ 173.164525][T10636] loop6: detected capacity change from 0 to 764 [ 173.179081][T10636] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 173.270705][T10648] FAULT_INJECTION: forcing a failure. [ 173.270705][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 173.283411][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.1.2039 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.283444][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.283457][T10648] Call Trace: [ 173.283461][T10648] [ 173.283466][T10648] __dump_stack+0x1d/0x30 [ 173.283480][T10648] dump_stack_lvl+0xe8/0x140 [ 173.283595][T10648] dump_stack+0x15/0x1b [ 173.283613][T10648] should_fail_ex+0x265/0x280 [ 173.283627][T10648] should_failslab+0x8c/0xb0 [ 173.283669][T10648] kmem_cache_alloc_node_noprof+0x57/0x320 [ 173.283728][T10648] ? __alloc_skb+0x101/0x320 [ 173.283740][T10648] __alloc_skb+0x101/0x320 [ 173.283751][T10648] netlink_alloc_large_skb+0xba/0xf0 [ 173.283771][T10648] netlink_sendmsg+0x3cf/0x6b0 [ 173.283793][T10648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.283806][T10648] __sock_sendmsg+0x145/0x180 [ 173.283823][T10648] ____sys_sendmsg+0x31e/0x4e0 [ 173.283837][T10648] ___sys_sendmsg+0x17b/0x1d0 [ 173.283863][T10648] __x64_sys_sendmsg+0xd4/0x160 [ 173.283949][T10648] x64_sys_call+0x191e/0x2ff0 [ 173.283960][T10648] do_syscall_64+0xd2/0x200 [ 173.283977][T10648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.284071][T10648] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.284086][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.284099][T10648] RIP: 0033:0x7fc680edebe9 [ 173.284155][T10648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.284225][T10648] RSP: 002b:00007fc67f947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.284237][T10648] RAX: ffffffffffffffda RBX: 00007fc681115fa0 RCX: 00007fc680edebe9 [ 173.284244][T10648] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 173.284251][T10648] RBP: 00007fc67f947090 R08: 0000000000000000 R09: 0000000000000000 [ 173.284258][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.284324][T10648] R13: 00007fc681116038 R14: 00007fc681115fa0 R15: 00007ffe5706e028 [ 173.284334][T10648] [ 173.515237][T10652] loop1: detected capacity change from 0 to 512 [ 173.541681][T10652] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.958072][T10663] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 173.970176][T10663] loop5: detected capacity change from 0 to 512 [ 173.978697][T10664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10664 comm=syz.0.2043 [ 173.992361][T10664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2043'. [ 174.011631][T10663] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.211287][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2049'. [ 174.283562][T10682] loop3: detected capacity change from 0 to 1024 [ 174.307270][T10682] EXT4-fs: Ignoring removed bh option [ 174.468531][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2052'. [ 174.510084][T10689] loop3: detected capacity change from 0 to 1024 [ 174.531242][T10689] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 174.542240][T10689] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 174.560276][T10689] JBD2: no valid journal superblock found [ 174.565990][T10689] EXT4-fs (loop3): Could not load journal inode [ 175.483991][T10710] FAULT_INJECTION: forcing a failure. [ 175.483991][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.497104][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.1.2059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.497134][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.497146][T10710] Call Trace: [ 175.497152][T10710] [ 175.497159][T10710] __dump_stack+0x1d/0x30 [ 175.497180][T10710] dump_stack_lvl+0xe8/0x140 [ 175.497197][T10710] dump_stack+0x15/0x1b [ 175.497214][T10710] should_fail_ex+0x265/0x280 [ 175.497274][T10710] should_fail+0xb/0x20 [ 175.497290][T10710] should_fail_usercopy+0x1a/0x20 [ 175.497311][T10710] _copy_to_user+0x20/0xa0 [ 175.497337][T10710] simple_read_from_buffer+0xb5/0x130 [ 175.497360][T10710] proc_fail_nth_read+0x10e/0x150 [ 175.497434][T10710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.497462][T10710] vfs_read+0x1a8/0x770 [ 175.497483][T10710] ? __rcu_read_unlock+0x4f/0x70 [ 175.497567][T10710] ? __fget_files+0x184/0x1c0 [ 175.497649][T10710] ksys_read+0xda/0x1a0 [ 175.497730][T10710] __x64_sys_read+0x40/0x50 [ 175.497753][T10710] x64_sys_call+0x27bc/0x2ff0 [ 175.497778][T10710] do_syscall_64+0xd2/0x200 [ 175.497805][T10710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.497831][T10710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.497912][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.497936][T10710] RIP: 0033:0x7fc680edd5fc [ 175.497952][T10710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.497970][T10710] RSP: 002b:00007fc67f947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.497987][T10710] RAX: ffffffffffffffda RBX: 00007fc681115fa0 RCX: 00007fc680edd5fc [ 175.498017][T10710] RDX: 000000000000000f RSI: 00007fc67f9470a0 RDI: 0000000000000004 [ 175.498031][T10710] RBP: 00007fc67f947090 R08: 0000000000000000 R09: 0000000000000000 [ 175.498044][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.498104][T10710] R13: 00007fc681116038 R14: 00007fc681115fa0 R15: 00007ffe5706e028 [ 175.498119][T10710] [ 175.770891][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 175.770906][ T29] audit: type=1326 audit(1757061869.164:26806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.774018][T10718] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 175.777169][ T29] audit: type=1326 audit(1757061869.174:26807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.777203][ T29] audit: type=1326 audit(1757061869.174:26808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.777283][ T29] audit: type=1326 audit(1757061869.174:26809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.777305][ T29] audit: type=1326 audit(1757061869.174:26810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.807049][T10718] loop1: detected capacity change from 0 to 512 [ 175.809357][ T29] audit: type=1326 audit(1757061869.174:26811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.809384][ T29] audit: type=1326 audit(1757061869.174:26812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.943583][T10718] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.954958][ T29] audit: type=1326 audit(1757061869.174:26813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 175.988409][ T29] audit: type=1326 audit(1757061869.174:26814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 176.011509][ T29] audit: type=1326 audit(1757061869.174:26815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10717 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 176.260812][T10742] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 176.274983][T10740] loop6: detected capacity change from 0 to 1024 [ 176.289265][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'. [ 176.297701][T10740] EXT4-fs: Ignoring removed orlov option [ 176.298285][T10744] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2071'. [ 176.304044][T10740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.353129][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'. [ 176.390612][T10744] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2071'. [ 176.399677][T10744] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2071'. [ 176.488519][T10749] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 176.515566][T10749] loop0: detected capacity change from 0 to 512 [ 176.552866][T10749] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.639507][T10757] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 176.660495][T10757] loop0: detected capacity change from 0 to 512 [ 176.660705][T10759] FAULT_INJECTION: forcing a failure. [ 176.660705][T10759] name failslab, interval 1, probability 0, space 0, times 0 [ 176.679405][T10759] CPU: 1 UID: 0 PID: 10759 Comm: syz.1.2075 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.679434][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.679458][T10759] Call Trace: [ 176.679465][T10759] [ 176.679472][T10759] __dump_stack+0x1d/0x30 [ 176.679494][T10759] dump_stack_lvl+0xe8/0x140 [ 176.679521][T10759] dump_stack+0x15/0x1b [ 176.679536][T10759] should_fail_ex+0x265/0x280 [ 176.679555][T10759] should_failslab+0x8c/0xb0 [ 176.679577][T10759] kmem_cache_alloc_node_noprof+0x57/0x320 [ 176.679678][T10759] ? __alloc_skb+0x101/0x320 [ 176.679700][T10759] __alloc_skb+0x101/0x320 [ 176.679721][T10759] netlink_alloc_large_skb+0xba/0xf0 [ 176.679776][T10759] netlink_sendmsg+0x3cf/0x6b0 [ 176.679867][T10759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.679920][T10759] __sock_sendmsg+0x145/0x180 [ 176.680079][T10759] ____sys_sendmsg+0x31e/0x4e0 [ 176.680104][T10759] ___sys_sendmsg+0x17b/0x1d0 [ 176.680214][T10759] __x64_sys_sendmsg+0xd4/0x160 [ 176.680265][T10759] x64_sys_call+0x191e/0x2ff0 [ 176.680288][T10759] do_syscall_64+0xd2/0x200 [ 176.680374][T10759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.680396][T10759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.680419][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.680442][T10759] RIP: 0033:0x7fc680edebe9 [ 176.680526][T10759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.680594][T10759] RSP: 002b:00007fc67f947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.680691][T10759] RAX: ffffffffffffffda RBX: 00007fc681115fa0 RCX: 00007fc680edebe9 [ 176.680702][T10759] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 176.680775][T10759] RBP: 00007fc67f947090 R08: 0000000000000000 R09: 0000000000000000 [ 176.680786][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.680797][T10759] R13: 00007fc681116038 R14: 00007fc681115fa0 R15: 00007ffe5706e028 [ 176.680812][T10759] [ 176.892196][T10757] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.958442][T10767] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.974199][T10769] loop0: detected capacity change from 0 to 4096 [ 177.015008][T10769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.026776][T10767] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.060651][T10772] syz.6.2079 uses obsolete (PF_INET,SOCK_PACKET) [ 177.091731][T10767] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.092755][T10772] loop6: detected capacity change from 0 to 512 [ 177.133572][T10772] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.140231][T10772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.147417][T10772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.147902][T10767] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.155949][T10772] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.187263][T10772] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2079: Allocating blocks 41-42 which overlap fs metadata [ 177.201788][T10772] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2079: Allocating blocks 41-42 which overlap fs metadata [ 177.216734][T10772] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2079: Failed to acquire dquot type 1 [ 177.228815][T10772] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 177.244284][T10772] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.2079: corrupted inode contents [ 177.257394][T10772] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #12: comm syz.6.2079: mark_inode_dirty error [ 177.269478][ T7734] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.278020][ T7734] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.293701][ T7734] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.312201][ T7734] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.321812][T10772] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.2079: corrupted inode contents [ 177.334623][T10772] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.2079: mark_inode_dirty error [ 177.346900][T10772] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.2079: corrupted inode contents [ 177.358957][T10772] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 177.370284][T10772] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #12: comm syz.6.2079: corrupted inode contents [ 177.392874][T10772] EXT4-fs error (device loop6): ext4_truncate:4666: inode #12: comm syz.6.2079: mark_inode_dirty error [ 177.410767][T10772] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 177.433303][ T3411] kernel write not supported for file /669/oom_adj (pid: 3411 comm: kworker/0:6) [ 177.443465][T10772] EXT4-fs (loop6): 1 truncate cleaned up [ 177.497808][T10785] loop1: detected capacity change from 0 to 8192 [ 177.509966][T10772] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 177.519340][T10786] random: crng reseeded on system resumption [ 177.548462][T10785] msdos: Unknown parameter 'A' [ 177.579323][T10788] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 177.617851][T10788] loop6: detected capacity change from 0 to 512 [ 177.654865][T10788] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.686132][T10783] loop5: detected capacity change from 0 to 764 [ 177.716128][T10783] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 177.928240][T10807] loop6: detected capacity change from 0 to 1024 [ 177.943359][T10807] EXT4-fs: Ignoring removed orlov option [ 177.949079][T10807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.962405][T10810] Falling back ldisc for ttyS3. [ 178.083905][T10817] loop5: detected capacity change from 0 to 1024 [ 178.099437][T10817] EXT4-fs: Ignoring removed bh option [ 178.133794][T10819] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2092'. [ 178.236658][T10829] loop5: detected capacity change from 0 to 1024 [ 178.256946][T10829] EXT4-fs: Ignoring removed bh option [ 178.362414][T10841] loop5: detected capacity change from 0 to 512 [ 178.377738][T10836] loop6: detected capacity change from 0 to 764 [ 178.389327][T10836] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.407063][T10841] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.785211][ T4733] kernel write not supported for file /1094/oom_adj (pid: 4733 comm: kworker/1:6) [ 179.067964][T10861] loop3: detected capacity change from 0 to 764 [ 179.129944][T10861] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.239177][ T3411] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 179.246677][ T3411] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 179.254231][ T3411] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 179.286801][ T3411] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 179.310866][T10869] tmpfs: Unknown parameter '18446744073709551615ÿ' [ 179.320686][T10869] loop3: detected capacity change from 0 to 512 [ 179.328788][T10869] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.362156][ T2993] udevd[2993]: worker [4148] terminated by signal 33 (Unknown signal 33) [ 179.383850][ T2993] udevd[2993]: worker [4148] failed while handling '/devices/virtual/misc/uhid/0003:0004:0000.0001/hidraw/hidraw0' [ 179.402223][T10879] FAULT_INJECTION: forcing a failure. [ 179.402223][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.403594][T10869] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 179.415410][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.5.2109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.415437][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.415507][T10879] Call Trace: [ 179.415515][T10879] [ 179.415524][T10879] __dump_stack+0x1d/0x30 [ 179.415546][T10879] dump_stack_lvl+0xe8/0x140 [ 179.415566][T10879] dump_stack+0x15/0x1b [ 179.415582][T10879] should_fail_ex+0x265/0x280 [ 179.415635][T10879] should_fail+0xb/0x20 [ 179.415659][T10879] should_fail_usercopy+0x1a/0x20 [ 179.415682][T10879] strncpy_from_user+0x25/0x230 [ 179.415719][T10879] ? kmem_cache_alloc_noprof+0x186/0x310 [ 179.415747][T10879] ? getname_flags+0x80/0x3b0 [ 179.415849][T10879] getname_flags+0xae/0x3b0 [ 179.415877][T10879] do_sys_openat2+0x60/0x110 [ 179.415958][T10879] __x64_sys_openat+0xf2/0x120 [ 179.415990][T10879] x64_sys_call+0x2e9c/0x2ff0 [ 179.416011][T10879] do_syscall_64+0xd2/0x200 [ 179.416112][T10879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.416182][T10879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.416269][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.416291][T10879] RIP: 0033:0x7f24de14ebe9 [ 179.416307][T10879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.416404][T10879] RSP: 002b:00007f24dcbaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.416492][T10879] RAX: ffffffffffffffda RBX: 00007f24de385fa0 RCX: 00007f24de14ebe9 [ 179.416564][T10879] RDX: 0000000000000001 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 179.416577][T10879] RBP: 00007f24dcbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 179.416589][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.416667][T10879] R13: 00007f24de386038 R14: 00007f24de385fa0 R15: 00007ffdce459338 [ 179.416684][T10879] [ 179.612949][T10886] FAULT_INJECTION: forcing a failure. [ 179.612949][T10886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.624279][T10869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2107: bg 0: block 248: padding at end of block bitmap is not set [ 179.629018][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.5.2110 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.629043][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.629053][T10886] Call Trace: [ 179.629060][T10886] [ 179.629121][T10886] __dump_stack+0x1d/0x30 [ 179.629143][T10886] dump_stack_lvl+0xe8/0x140 [ 179.629163][T10886] dump_stack+0x15/0x1b [ 179.629180][T10886] should_fail_ex+0x265/0x280 [ 179.629245][T10886] should_fail+0xb/0x20 [ 179.629262][T10886] should_fail_usercopy+0x1a/0x20 [ 179.629285][T10886] _copy_from_user+0x1c/0xb0 [ 179.629313][T10886] ucma_write+0xd9/0x250 [ 179.629338][T10886] vfs_writev+0x403/0x8b0 [ 179.629472][T10886] ? __pfx_ucma_write+0x10/0x10 [ 179.629501][T10886] do_writev+0xe7/0x210 [ 179.629530][T10886] __x64_sys_writev+0x45/0x50 [ 179.629568][T10886] x64_sys_call+0x1e9a/0x2ff0 [ 179.629589][T10886] do_syscall_64+0xd2/0x200 [ 179.629619][T10886] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.629643][T10886] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.629795][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.629817][T10886] RIP: 0033:0x7f24de14ebe9 [ 179.629833][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.629898][T10886] RSP: 002b:00007f24dcbaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 179.629923][T10886] RAX: ffffffffffffffda RBX: 00007f24de385fa0 RCX: 00007f24de14ebe9 [ 179.629935][T10886] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.629948][T10886] RBP: 00007f24dcbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 179.629960][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.629972][T10886] R13: 00007f24de386038 R14: 00007f24de385fa0 R15: 00007ffdce459338 [ 179.630028][T10886] [ 179.729279][T10889] loop1: detected capacity change from 0 to 1024 [ 179.838308][T10889] EXT4-fs: Ignoring removed bh option [ 179.838596][T10869] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2107: Failed to acquire dquot type 1 [ 179.872698][T10869] EXT4-fs (loop3): 1 truncate cleaned up [ 179.938073][ T4732] kernel write not supported for file /1076/oom_adj (pid: 4732 comm: kworker/1:5) [ 179.990158][T10905] loop3: detected capacity change from 0 to 512 [ 180.025732][T10905] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.108466][T10902] loop0: detected capacity change from 0 to 764 [ 180.127090][T10902] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 180.144820][T10913] loop5: detected capacity change from 0 to 1024 [ 180.151745][T10913] EXT4-fs: Ignoring removed bh option [ 180.194583][T10878] Process accounting resumed [ 180.452857][T10942] loop0: detected capacity change from 0 to 512 [ 180.503732][T10942] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.847116][T10961] loop1: detected capacity change from 0 to 1024 [ 180.864969][T10961] EXT4-fs: Ignoring removed bh option [ 181.077602][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 181.077616][ T29] audit: type=1326 audit(1757061874.474:27527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.122683][ T29] audit: type=1326 audit(1757061874.474:27528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.146286][ T29] audit: type=1326 audit(1757061874.474:27529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.170283][ T29] audit: type=1326 audit(1757061874.474:27530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.193824][ T29] audit: type=1326 audit(1757061874.474:27531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.217375][ T29] audit: type=1326 audit(1757061874.474:27532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.240974][ T29] audit: type=1326 audit(1757061874.474:27533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.264634][ T29] audit: type=1326 audit(1757061874.474:27534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.288223][ T29] audit: type=1326 audit(1757061874.514:27535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.295254][T10980] __nla_validate_parse: 5 callbacks suppressed [ 181.295267][T10980] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 181.312057][ T29] audit: type=1326 audit(1757061874.524:27536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10970 comm="syz.1.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 181.406004][T10980] loop3: detected capacity change from 0 to 512 [ 181.413341][T10982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10982 comm=syz.1.2134 [ 181.432842][T10982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2134'. [ 181.450905][T10980] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.463624][T10983] loop6: detected capacity change from 0 to 2048 [ 181.535079][T10992] FAULT_INJECTION: forcing a failure. [ 181.535079][T10992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.548255][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.5.2139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.548280][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.548317][T10992] Call Trace: [ 181.548324][T10992] [ 181.548360][T10992] __dump_stack+0x1d/0x30 [ 181.548446][T10992] dump_stack_lvl+0xe8/0x140 [ 181.548463][T10992] dump_stack+0x15/0x1b [ 181.548477][T10992] should_fail_ex+0x265/0x280 [ 181.548500][T10992] should_fail+0xb/0x20 [ 181.548564][T10992] should_fail_usercopy+0x1a/0x20 [ 181.548586][T10992] _copy_from_iter+0xd2/0xe80 [ 181.548614][T10992] ? __build_skb_around+0x1a0/0x200 [ 181.548635][T10992] ? __alloc_skb+0x223/0x320 [ 181.548656][T10992] netlink_sendmsg+0x471/0x6b0 [ 181.548699][T10992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.548762][T10992] __sock_sendmsg+0x145/0x180 [ 181.548788][T10992] ____sys_sendmsg+0x31e/0x4e0 [ 181.548887][T10992] ___sys_sendmsg+0x17b/0x1d0 [ 181.548922][T10992] __x64_sys_sendmsg+0xd4/0x160 [ 181.548951][T10992] x64_sys_call+0x191e/0x2ff0 [ 181.548975][T10992] do_syscall_64+0xd2/0x200 [ 181.549046][T10992] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.549068][T10992] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.549138][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.549160][T10992] RIP: 0033:0x7f24de14ebe9 [ 181.549178][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.549235][T10992] RSP: 002b:00007f24dcbaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.549254][T10992] RAX: ffffffffffffffda RBX: 00007f24de385fa0 RCX: 00007f24de14ebe9 [ 181.549266][T10992] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 181.549280][T10992] RBP: 00007f24dcbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 181.549293][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.549336][T10992] R13: 00007f24de386038 R14: 00007f24de385fa0 R15: 00007ffdce459338 [ 181.549352][T10992] [ 181.593583][T10953] kexec: Could not allocate control_code_buffer [ 181.597258][T10983] Alternate GPT is invalid, using primary GPT. [ 181.706036][T10998] vhci_hcd: invalid port number 96 [ 181.714046][T10983] loop6: p1 p2 p3 [ 181.721934][T10998] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 181.807349][T11001] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 181.832553][T11001] loop3: detected capacity change from 0 to 512 [ 181.848163][T11003] loop6: detected capacity change from 0 to 4096 [ 181.858056][T11003] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 181.874324][T11001] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.887127][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 181.897567][T10483] udevd[10483]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 181.908664][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 181.981591][T11014] loop1: detected capacity change from 0 to 1024 [ 181.993233][T11014] EXT4-fs: Ignoring removed bh option [ 182.061815][T11015] loop3: detected capacity change from 0 to 1024 [ 182.071619][T11015] EXT4-fs: Ignoring removed orlov option [ 182.077408][T11015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.098008][T11025] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 182.115124][T11025] loop1: detected capacity change from 0 to 512 [ 182.144171][T11025] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.198786][T11034] loop1: detected capacity change from 0 to 1024 [ 182.206449][T11034] EXT4-fs: Ignoring removed bh option [ 182.225150][T11034] veth0: entered promiscuous mode [ 182.230736][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 182.394942][T11040] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 182.512756][T11046] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 182.524818][T11046] loop1: detected capacity change from 0 to 512 [ 182.542968][T11046] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.591535][T11048] loop0: detected capacity change from 0 to 1024 [ 182.598299][T11048] EXT4-fs: Ignoring removed orlov option [ 182.604138][T11048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.626773][T11053] loop5: detected capacity change from 0 to 1024 [ 182.633516][T11053] EXT4-fs: Ignoring removed orlov option [ 182.639314][T11053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.744860][T11067] loop5: detected capacity change from 0 to 1024 [ 182.751896][T11067] EXT4-fs: Ignoring removed bh option [ 182.775055][T11070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11070 comm=syz.0.2157 [ 182.788098][T11070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2157'. [ 183.013553][T11088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11088 comm=syz.5.2162 [ 183.026506][T11088] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2162'. [ 183.099102][T11090] loop6: detected capacity change from 0 to 1024 [ 183.106064][T11090] EXT4-fs: Ignoring removed bh option [ 183.134714][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2163'. [ 183.161473][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2164'. [ 183.605877][T11101] loop0: detected capacity change from 0 to 1024 [ 183.612996][T11101] EXT4-fs: Ignoring removed bh option [ 183.777354][T11108] loop0: detected capacity change from 0 to 1024 [ 183.784379][T11108] EXT4-fs: Ignoring removed orlov option [ 183.790127][T11108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.167730][T11129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11129 comm=syz.6.2174 [ 184.474095][T11131] loop3: detected capacity change from 0 to 1024 [ 184.484969][T11131] EXT4-fs: Ignoring removed bh option [ 184.633030][T11137] loop3: detected capacity change from 0 to 1024 [ 184.648021][T11137] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.786854][T11143] loop5: detected capacity change from 0 to 764 [ 184.801218][T11143] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 184.845104][T11148] loop5: detected capacity change from 0 to 4096 [ 184.855961][T11148] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.953456][T11158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11158 comm=syz.5.2180 [ 185.606809][T11169] loop1: detected capacity change from 0 to 512 [ 185.626128][T11169] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.687861][T11179] loop1: detected capacity change from 0 to 1024 [ 185.696887][T11179] EXT4-fs: Ignoring removed bh option [ 185.711883][T11179] EXT4-fs mount: 93 callbacks suppressed [ 185.711896][T11179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.741456][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.812294][T11185] loop6: detected capacity change from 0 to 4096 [ 185.822830][T11185] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.823494][T11187] loop1: detected capacity change from 0 to 512 [ 185.848058][T11185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.879132][T11187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.919013][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.921548][T11187] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.020952][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.050506][T11198] loop5: detected capacity change from 0 to 1024 [ 186.074477][T11205] random: crng reseeded on system resumption [ 186.088554][T11198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.111512][T11198] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.129691][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 186.129768][ T29] audit: type=1326 audit(1757061879.524:28338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 186.167500][ T29] audit: type=1326 audit(1757061879.564:28339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336681ebe9 code=0x7ffc0000 [ 186.205025][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.303224][ T29] audit: type=1326 audit(1757061879.694:28340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.310013][ T3362] kernel write not supported for file /751/oom_adj (pid: 3362 comm: kworker/1:2) [ 186.326902][ T29] audit: type=1326 audit(1757061879.694:28341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.361433][ T29] audit: type=1326 audit(1757061879.704:28342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.385078][ T29] audit: type=1326 audit(1757061879.704:28343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.408818][ T29] audit: type=1326 audit(1757061879.704:28344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.432482][ T29] audit: type=1326 audit(1757061879.704:28345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.456100][ T29] audit: type=1326 audit(1757061879.704:28346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.459150][T11226] loop5: detected capacity change from 0 to 764 [ 186.479723][ T29] audit: type=1326 audit(1757061879.704:28347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.1.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 186.518435][T11226] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.530277][ T10] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec [ 186.567449][ T3362] kernel write not supported for file /753/oom_adj (pid: 3362 comm: kworker/1:2) [ 186.632680][T11229] loop5: detected capacity change from 0 to 764 [ 186.647470][T11229] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.857863][T11235] 9pnet_fd: Insufficient options for proto=fd [ 186.949359][T11235] loop6: detected capacity change from 0 to 764 [ 186.968380][T11235] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.983754][T11238] loop0: detected capacity change from 0 to 1024 [ 187.003195][T11238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.015584][T11238] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.028521][T11238] __nla_validate_parse: 14 callbacks suppressed [ 187.028535][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 187.054410][T11244] FAULT_INJECTION: forcing a failure. [ 187.054410][T11244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.067520][T11244] CPU: 0 UID: 0 PID: 11244 Comm: syz.6.2209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.067545][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.067556][T11244] Call Trace: [ 187.067562][T11244] [ 187.067568][T11244] __dump_stack+0x1d/0x30 [ 187.067613][T11244] dump_stack_lvl+0xe8/0x140 [ 187.067630][T11244] dump_stack+0x15/0x1b [ 187.067711][T11244] should_fail_ex+0x265/0x280 [ 187.067734][T11244] should_fail+0xb/0x20 [ 187.067810][T11244] should_fail_usercopy+0x1a/0x20 [ 187.067834][T11244] _copy_to_user+0x20/0xa0 [ 187.067860][T11244] simple_read_from_buffer+0xb5/0x130 [ 187.067881][T11244] proc_fail_nth_read+0x10e/0x150 [ 187.067956][T11244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.067985][T11244] vfs_read+0x1a8/0x770 [ 187.068074][T11244] ? __rcu_read_unlock+0x4f/0x70 [ 187.068096][T11244] ? __fget_files+0x184/0x1c0 [ 187.068125][T11244] ksys_read+0xda/0x1a0 [ 187.068161][T11244] __x64_sys_read+0x40/0x50 [ 187.068246][T11244] x64_sys_call+0x27bc/0x2ff0 [ 187.068270][T11244] do_syscall_64+0xd2/0x200 [ 187.068297][T11244] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.068318][T11244] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.068370][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.068394][T11244] RIP: 0033:0x7fd32368d5fc [ 187.068410][T11244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.068428][T11244] RSP: 002b:00007fd3220ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.068478][T11244] RAX: ffffffffffffffda RBX: 00007fd3238c5fa0 RCX: 00007fd32368d5fc [ 187.068491][T11244] RDX: 000000000000000f RSI: 00007fd3220ef0a0 RDI: 0000000000000007 [ 187.068502][T11244] RBP: 00007fd3220ef090 R08: 0000000000000000 R09: 0000000000000000 [ 187.068513][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.068524][T11244] R13: 00007fd3238c6038 R14: 00007fd3238c5fa0 R15: 00007ffd2c71e938 [ 187.068594][T11244] [ 187.069920][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.274314][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 187.432808][T11265] 9pnet_virtio: no channels available for device [ 187.659542][T11271] random: crng reseeded on system resumption [ 187.853835][T11283] loop3: detected capacity change from 0 to 4096 [ 187.894258][T11283] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 187.932058][T11283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.003660][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.152796][T11286] loop3: detected capacity change from 0 to 1024 [ 188.159489][T11286] EXT4-fs: Ignoring removed orlov option [ 188.165256][T11286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.244286][T11286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.337775][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.390883][T11291] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 188.533227][T11303] 9pnet_fd: Insufficient options for proto=fd [ 188.746552][T11303] loop5: detected capacity change from 0 to 764 [ 188.777762][T11303] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 188.987919][T11323] loop3: detected capacity change from 0 to 1024 [ 188.994553][T11324] Falling back ldisc for ttyS3. [ 189.007411][T11323] EXT4-fs: Ignoring removed orlov option [ 189.013270][T11323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.036049][T11323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.054688][ T10] kernel write not supported for file /718/oom_adj (pid: 10 comm: kworker/0:1) [ 189.087463][T11320] can0: slcan on ttyS3. [ 189.090420][T11328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.141027][ T7727] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.193184][ T7727] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.206697][T11334] loop6: detected capacity change from 0 to 764 [ 189.215130][T11340] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.234932][T11334] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 189.244918][ T7727] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.282084][T11340] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.333135][ T7727] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.361564][T11340] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.436743][T11336] chnl_net:caif_netlink_parms(): no params data found [ 189.467210][T11340] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.490540][T11355] can0 (unregistered): slcan off ttyS3. [ 189.652395][ T7727] bond0 (unregistering): Released all slaves [ 189.680527][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.687594][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.695801][T11336] bridge_slave_0: entered allmulticast mode [ 189.702534][T11336] bridge_slave_0: entered promiscuous mode [ 189.709137][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.716363][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.724199][T11336] bridge_slave_1: entered allmulticast mode [ 189.731090][T11336] bridge_slave_1: entered promiscuous mode [ 189.749920][ T7744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.770255][T11336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.779427][ T7744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.794537][ T7727] veth1_macvtap: left promiscuous mode [ 189.801568][T11372] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 189.803329][ T7727] veth0_macvtap: left promiscuous mode [ 189.817402][T11372] loop6: detected capacity change from 0 to 512 [ 189.824858][ T7727] veth1_vlan: left promiscuous mode [ 189.830169][ T7727] veth0_vlan: left promiscuous mode [ 189.842456][T11372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.858977][T11372] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.908483][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.928108][ T7744] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.938541][T11336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.950706][ T7707] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.989323][T11336] team0: Port device team_slave_0 added [ 189.989851][T11381] loop1: detected capacity change from 0 to 1024 [ 189.995878][T11336] team0: Port device team_slave_1 added [ 190.003089][T11381] EXT4-fs: Ignoring removed nobh option [ 190.012573][T11381] EXT4-fs: Ignoring removed bh option [ 190.024292][T11381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.039422][T11336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.046474][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.072536][T11336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.083895][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.084016][T11336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.099810][T11336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.125843][T11336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.162936][T11336] hsr_slave_0: entered promiscuous mode [ 190.168952][T11336] hsr_slave_1: entered promiscuous mode [ 190.174929][T11336] debugfs: 'hsr0' already exists in 'hsr' [ 190.180729][T11336] Cannot create hsr debugfs directory [ 190.189677][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2247'. [ 190.307155][T11336] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 190.316102][T11336] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.331934][T11336] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.341123][T11336] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.433999][T11336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.449106][T11336] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.459129][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.466229][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.482346][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.489454][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.575637][T11336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.611660][T11405] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 190.631322][T11405] loop0: detected capacity change from 0 to 512 [ 190.644680][T11405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.660335][T11405] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.733735][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.801841][T11422] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.854919][T11422] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.875577][T11336] veth0_vlan: entered promiscuous mode [ 190.883239][T11336] veth1_vlan: entered promiscuous mode [ 190.891904][T11422] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.911166][T11336] veth0_macvtap: entered promiscuous mode [ 190.918576][T11336] veth1_macvtap: entered promiscuous mode [ 190.929779][T11336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.943340][T11422] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.954680][T11336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.965057][ T7707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.974507][ T7707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.993086][ T7735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.013990][ T7707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.037425][ T7707] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.045939][ T7707] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.054356][ T7707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.068852][ T7735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.128686][T11429] loop0: detected capacity change from 0 to 1024 [ 191.151965][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 191.151978][ T29] audit: type=1326 audit(1757061884.554:28811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.152781][T11429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.158325][ T29] audit: type=1326 audit(1757061884.554:28812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.192897][T11429] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.200185][T11433] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 191.221942][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 191.245023][T11433] loop1: detected capacity change from 0 to 512 [ 191.245748][ T29] audit: type=1326 audit(1757061884.594:28813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.262856][T11433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.275343][ T29] audit: type=1326 audit(1757061884.594:28814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.293596][T11433] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.310786][ T29] audit: type=1326 audit(1757061884.594:28815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.344661][ T29] audit: type=1326 audit(1757061884.594:28816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.367776][ T29] audit: type=1326 audit(1757061884.594:28817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.390798][ T29] audit: type=1326 audit(1757061884.594:28818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.413912][ T29] audit: type=1326 audit(1757061884.594:28819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.437026][ T29] audit: type=1326 audit(1757061884.594:28820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11432 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc680edebe9 code=0x7ffc0000 [ 191.474716][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.485669][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.533729][T11444] 9pnet_fd: Insufficient options for proto=fd [ 191.598993][T11444] loop0: detected capacity change from 0 to 764 [ 191.637595][T11444] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 191.645613][ T3362] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 191.653408][ T3362] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 191.660842][ T3362] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 191.668795][ T3362] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 191.690861][T11447] random: crng reseeded on system resumption [ 191.738219][T11454] netlink: 'syz.6.2261': attribute type 3 has an invalid length. [ 191.745585][T11452] fido_id[11452]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.773977][T11456] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 191.785578][T11456] loop0: detected capacity change from 0 to 512 [ 191.802690][T11456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.815397][T11456] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.861924][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.965108][T11473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.012181][T11473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.062651][T11473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.083923][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2263'. [ 192.111811][T11473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.566798][T11477] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 192.578161][T11477] loop1: detected capacity change from 0 to 512 [ 192.615982][T11479] loop6: detected capacity change from 0 to 1024 [ 192.622894][T11479] EXT4-fs: Ignoring removed bh option [ 192.630241][T11477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.644212][T11477] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.656375][T11479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.709514][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2269'. [ 192.719914][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.742211][ T6347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.779541][ T3384] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 192.787005][ T3384] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 192.794414][ T3384] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 192.811136][ T3384] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 192.835582][T11497] fido_id[11497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.870755][T11501] loop5: detected capacity change from 0 to 1764 [ 193.504899][T11505] loop5: detected capacity change from 0 to 4096 [ 193.513205][T11505] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 193.525539][T11505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.550704][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.255304][T11515] random: crng reseeded on system resumption [ 194.467924][T11519] loop5: detected capacity change from 0 to 1024 [ 194.483716][T11519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.496738][T11519] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.546548][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.594709][T11527] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 194.607187][T11527] loop5: detected capacity change from 0 to 512 [ 194.625653][T11527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.638443][T11527] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.705270][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.753022][ T3560] kernel write not supported for file /791/oom_adj (pid: 3560 comm: kworker/0:7) [ 194.882516][T11534] loop5: detected capacity change from 0 to 764 [ 194.906147][T11534] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 194.978335][T11536] loop5: detected capacity change from 0 to 1024 [ 194.986861][T11536] EXT4-fs: Ignoring removed bh option [ 194.997157][T11536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.010688][ T7740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.044914][ T7753] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.059066][ T7735] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.079583][T11541] loop0: detected capacity change from 0 to 1024 [ 195.095045][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2284'. [ 195.106428][ T7735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.106921][T11541] EXT4-fs: Ignoring removed bh option [ 195.142562][T11541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.163142][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.224921][T11547] loop5: detected capacity change from 0 to 1024 [ 195.241279][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.257424][T11547] EXT4-fs: Ignoring removed bh option [ 195.298049][T11547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.381304][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.451534][T11551] loop0: detected capacity change from 0 to 1024 [ 195.493616][ T2993] ================================================================== [ 195.501729][ T2993] BUG: KCSAN: data-race in d_delete / lookup_fast [ 195.508176][ T2993] [ 195.510502][ T2993] read-write to 0xffff8881076173c0 of 4 bytes by task 3296 on cpu 1: [ 195.518573][ T2993] d_delete+0x15a/0x180 [ 195.522740][ T2993] d_delete_notify+0x32/0x100 [ 195.527416][ T2993] vfs_unlink+0x30b/0x420 [ 195.531741][ T2993] do_unlinkat+0x24e/0x480 [ 195.536152][ T2993] __x64_sys_unlink+0x2e/0x40 [ 195.540819][ T2993] x64_sys_call+0x2dc0/0x2ff0 [ 195.545924][ T2993] do_syscall_64+0xd2/0x200 [ 195.550424][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.556304][ T2993] [ 195.558611][ T2993] read to 0xffff8881076173c0 of 4 bytes by task 2993 on cpu 0: [ 195.566136][ T2993] lookup_fast+0xf0/0x320 [ 195.570459][ T2993] walk_component+0x3f/0x220 [ 195.575037][ T2993] path_lookupat+0xfe/0x2a0 [ 195.579535][ T2993] filename_lookup+0x147/0x340 [ 195.584291][ T2993] do_readlinkat+0x7d/0x320 [ 195.588775][ T2993] __x64_sys_readlink+0x47/0x60 [ 195.593624][ T2993] x64_sys_call+0x28da/0x2ff0 [ 195.598287][ T2993] do_syscall_64+0xd2/0x200 [ 195.602783][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.608659][ T2993] [ 195.610969][ T2993] value changed: 0x00300180 -> 0x00000080 [ 195.616665][ T2993] [ 195.618966][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 195.625098][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.634376][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.644425][ T2993] ================================================================== [ 195.659481][T11551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.673855][T11551] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.686741][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 195.713774][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.