last executing test programs: 10m52.238037915s ago: executing program 0 (id=7797): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/40, 0x28) getdents64(r0, &(0x7f0000001f80)=""/4097, 0x1001) 10m52.237608985s ago: executing program 0 (id=7798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 10m52.226941997s ago: executing program 0 (id=7800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x94) socket$packet(0x11, 0xa, 0x300) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) epoll_create1(0x80000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) shutdown(r3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m52.015697365s ago: executing program 0 (id=7804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nogrpid}, {@nouid32}, {@resgid}, {@acl}, {@nobh}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='id_resolver\x00', &(0x7f00000004c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setreuid(0xee01, 0x0) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 10m51.941447831s ago: executing program 0 (id=7807): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40880) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000380)={r6}, 0x1) r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r8 = dup(r7) truncate(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_elf64(r8, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0x4, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x501}, [{0x3, 0x81, 0xfe, 0xff5, 0x100000000, 0x1b8, 0x7}], "", ['\x00']}, 0x178) execveat(r8, &(0x7f0000000340)='\x00', 0x0, 0x0, 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x10}]}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='mm_vmscan_lru_isolate\x00', r10, 0x0, 0xc}, 0x18) r11 = syz_io_uring_setup(0x3ea8, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x3010}, &(0x7f0000000040), &(0x7f00000014c0)) poll(&(0x7f0000000000)=[{r11, 0xd010}], 0x1, 0x9) 10m51.449608965s ago: executing program 0 (id=7819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040000000006040000000000f9313200000000c75a872a", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1412, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48800) 10m51.431236537s ago: executing program 32 (id=7819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040000000006040000000000f9313200000000c75a872a", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1412, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48800) 12.720268621s ago: executing program 5 (id=15395): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', 0x5) 12.04367108s ago: executing program 5 (id=15409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x154, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x118, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_FW_ACT={0xf8, 0x4, [@m_sample={0xf4, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x34, 0x3, 0x5, 0x9d, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x75, 0x6, "b78a1b5dd10518eb9ef4cd742a2307b75f64dd00ef8bb2a6debe7972605584a5b0dddd04b55215d4895fc769daad5e9fd1d974b98519d319330c8c1e2a8d487eaf5f1ef7c1155224ff5c9944ddef37a26592be41d2a3160839711a6a11f1453c582a363e049d657542da33d17599488421"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) 10.68105149s ago: executing program 5 (id=15418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 9.330766469s ago: executing program 3 (id=15431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 8.734059101s ago: executing program 1 (id=15432): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0xa, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x2000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.288325959s ago: executing program 1 (id=15435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) write$binfmt_elf64(r5, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 6.627123407s ago: executing program 3 (id=15436): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r0, &(0x7f0000000280)={[0x8000000000000000]}, 0x8, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() tkill(r3, 0x1) rt_sigtimedwait(&(0x7f00000010c0)={[0x401]}, 0x0, 0x0, 0x8) 6.276895488s ago: executing program 3 (id=15438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) (fail_nth: 4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x4, 0x6, [0x200, 0x7, 0x1ff, 0xfffe, 0xd, 0x36e1]}, &(0x7f0000000580)=0x14) shutdown(r4, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) gettid() 6.169857327s ago: executing program 1 (id=15439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 6.037171678s ago: executing program 3 (id=15440): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="a644aebac2f418a026", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 5.639502233s ago: executing program 3 (id=15441): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 5.151598236s ago: executing program 3 (id=15443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 4.577383107s ago: executing program 2 (id=15447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x14c) 3.896086057s ago: executing program 2 (id=15449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r7}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 3.416964809s ago: executing program 1 (id=15451): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0xa, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x2000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.337855546s ago: executing program 4 (id=15452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x10000, 0x5d2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0xd, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x5, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0xc3f3, 0x2, 0x10000, 0x800, 0x5, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x2, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x40000032, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x17b, 0x40000, 0x0, 0xc38, 0x3, 0x1, 0x6, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x6, 0xffbfffff, 0x400, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x4001, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.456635194s ago: executing program 4 (id=15453): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="001f00ffe8000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aba7a9cf22219a0419e4e7e90276c362861ef29fd16517a4acba3f0000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r9, 0x2000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.368101721s ago: executing program 1 (id=15454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000640)='ib_mad_recv_done_handler\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYRES16=r0, @ANYRESDEC=r3, @ANYRESOCT=r0], 0x1c}}, 0xc041) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r9, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.494375078s ago: executing program 2 (id=15455): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="001f00ffe800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0xa, 0x3, 0xff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x2000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.428395774s ago: executing program 4 (id=15456): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000001c0)) 607.222426ms ago: executing program 5 (id=15457): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) 545.962282ms ago: executing program 5 (id=15458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xa7, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) 512.018474ms ago: executing program 5 (id=15459): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f0000000000)=0x1, 0x6, 0x22, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x2, 0x5, 0xfffffffe, 0x0, &(0x7f0000000000)=0x2, 0x4ffffff) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000001000000000"], 0x14}, 0x20040084) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r1, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ad, 0x4}, 0x100000, 0x0, 0x7, 0x7, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0xfffffbe, 0x1880, 0x1}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x4, {0x1, 0x1, 0x4}, 0x1}, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x22d080, &(0x7f0000000340)="bb5fb8efb36dea777845eb719a23f60ff1030748c6f9b4a78709e3c71417db7e1502d1efb916770725241d91d2e1e9620b9d96f0acb9faed4e32a7c07d7567cd502c1c0b2c059aca39b039f2bfe0c0bdf868d31b4fa739fa96674e23a10bcc3780f2e6a1ebc6cde415b8bc6fee3224b6c7eaeee6f0aaa84be132990f5c7c76923ed1f980686ae674f75d75d81ef350ca93389baf3548b45befbb5aeb76ed61", 0x9f, &(0x7f0000000200), &(0x7f0000000400), &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000007000000000000000000007d000000180100002020732600000000002020207b1af8ff00000000bfffffb702000008000000b70300000040cf950ae124508900000095f9800fda9ae20c1daae27bded5f72aabdfa6bdb82a108c4c6884368d8db1ae0d703e0241bb99567aca5fc1be9a28145d2612c1722c6acd15b9d8e0a58ed45fe68bea852713116a483376e2e269cc8203840bcfee4cfad9cbc984e282f9d5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x3}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0xba01, 0x0, 0x20040090}, 0x6c000044) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[], 0x20) socket$packet(0x11, 0x7, 0x300) unshare(0x6a040000) 503.784015ms ago: executing program 2 (id=15460): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000002500)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000e40)={0x0, r1, 0xc052, 0xd, 0xa49e, 0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="178c18cae531efa18ca46190967a9284567f662cb3c41dccbba18dfe2286a8e11a0a9b03a60d18762f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) cachestat(r1, &(0x7f0000000040)={0x4, 0x9}, &(0x7f00000002c0), 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x14, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b5040000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 268.977326ms ago: executing program 2 (id=15461): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="a644aebac2f418a026", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 221.81819ms ago: executing program 4 (id=15462): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000240)=""/31, 0x1f}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 159.529085ms ago: executing program 2 (id=15463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001ec66e7d586e", 0x8}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x804) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 155.980216ms ago: executing program 4 (id=15464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) 68.578483ms ago: executing program 1 (id=15465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x71a, 0x20000000, 0x0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x310000, 0x103f, 0x101, 0x2}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="492a8937bc15"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x100000c1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) 0s ago: executing program 4 (id=15466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000000001c0a00000708000240000000020900010073797a31000000002c000000030a010010000000000000000a0000070900010073797a3100000000090003007379fa320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00d6f70a75d90000000000080000050000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x7, 0x1, 0x9, 0x80a0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.286052][ T29] audit: type=1326 audit(2000000143.320:73518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.309847][ T29] audit: type=1326 audit(2000000143.320:73519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.333869][ T29] audit: type=1326 audit(2000000143.320:73520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.357964][ T29] audit: type=1326 audit(2000000143.320:73521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.381800][ T29] audit: type=1326 audit(2000000143.320:73522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.14580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1144.406005][T12648] vhci_hcd: connection closed [ 1144.406418][T10832] vhci_hcd vhci_hcd.5: stop threads [ 1144.416647][T10832] vhci_hcd vhci_hcd.5: release socket [ 1144.422093][T10832] vhci_hcd vhci_hcd.5: disconnect device [ 1144.449996][ T6437] usb 12-1: enqueue for inactive port 0 [ 1144.522505][T12660] netlink: 'syz.1.14581': attribute type 16 has an invalid length. [ 1144.530596][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14581'. [ 1144.660550][ T6437] usb 12-1: enqueue for inactive port 0 [ 1144.854723][T12666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14586'. [ 1145.048628][T12682] openvswitch: netlink: Flow key attr not present in new flow. [ 1145.419664][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14595'. [ 1145.448524][T26427] IPVS: starting estimator thread 0... [ 1145.560376][T12690] IPVS: using max 3408 ests per chain, 170400 per kthread [ 1145.668531][T12700] netlink: 'syz.4.14599': attribute type 16 has an invalid length. [ 1145.676770][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14599'. [ 1145.886805][T12714] lo speed is unknown, defaulting to 1000 [ 1145.922551][T12714] lo speed is unknown, defaulting to 1000 [ 1146.374230][ T6437] usb usb12-port1: attempt power cycle [ 1146.727791][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1146.840089][T12726] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1146.846923][T12726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1146.855306][T12726] vhci_hcd vhci_hcd.0: Device attached [ 1146.870425][T12726] random: crng reseeded on system resumption [ 1146.892149][T12726] openvswitch: netlink: Flow key attr not present in new flow. [ 1146.921651][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14606'. [ 1146.990132][T12739] 9p: Bad value for 'rfdno' [ 1147.099605][T12742] openvswitch: netlink: Flow key attr not present in new flow. [ 1147.118878][T12727] vhci_hcd: connection closed [ 1147.130121][T10832] vhci_hcd vhci_hcd.5: stop threads [ 1147.140351][T10832] vhci_hcd vhci_hcd.5: release socket [ 1147.145834][T10832] vhci_hcd vhci_hcd.5: disconnect device [ 1147.428237][T12753] vlan2: entered allmulticast mode [ 1147.839266][ T6437] usb 12-1: enqueue for inactive port 0 [ 1148.071588][ T6437] usb 12-1: enqueue for inactive port 0 [ 1148.463703][T12770] lo speed is unknown, defaulting to 1000 [ 1148.530976][T12770] lo speed is unknown, defaulting to 1000 [ 1149.072004][T12775] futex_wake_op: syz.5.14623 tries to shift op by -1; fix this program [ 1149.353449][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 1149.353467][ T29] audit: type=1326 audit(2000000148.520:74365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1149.384462][ T29] audit: type=1326 audit(2000000148.520:74366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb5ba3f783 code=0x7ffc0000 [ 1149.408339][ T29] audit: type=1326 audit(2000000148.520:74367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbb5ba3f807 code=0x7ffc0000 [ 1149.432077][ T29] audit: type=1326 audit(2000000148.520:74368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbb5b9f6bdd code=0x7ffc0000 [ 1149.456215][ T29] audit: type=1326 audit(2000000148.520:74369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbb5ba73e89 code=0x7ffc0000 [ 1149.480134][ T29] audit: type=1326 audit(2000000148.520:74370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbb5b9f6c47 code=0x7ffc0000 [ 1149.504157][ T29] audit: type=1326 audit(2000000148.520:74371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1149.528238][ T29] audit: type=1326 audit(2000000148.520:74372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1149.552423][ T29] audit: type=1326 audit(2000000148.520:74373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbb5b9f6357 code=0x7ffc0000 [ 1149.576323][ T29] audit: type=1326 audit(2000000148.520:74374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12772 comm="syz.3.14624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbb5b9f63b6 code=0x7ffc0000 [ 1150.232928][T12788] openvswitch: netlink: Flow key attr not present in new flow. [ 1150.398168][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14628'. [ 1150.438217][ T6437] usb usb12-port1: unable to enumerate USB device [ 1152.413726][T12816] IPVS: Error connecting to the multicast addr [ 1153.430000][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14649'. [ 1153.847459][T12861] openvswitch: netlink: Flow key attr not present in new flow. [ 1154.296552][T12865] lo speed is unknown, defaulting to 1000 [ 1154.397454][T12865] lo speed is unknown, defaulting to 1000 [ 1155.222704][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 1155.222742][ T29] audit: type=1326 audit(2000000154.390:74969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.264270][T12875] openvswitch: netlink: Flow key attr not present in new flow. [ 1155.306134][T12879] openvswitch: netlink: Flow key attr not present in new flow. [ 1155.369620][ T29] audit: type=1326 audit(2000000154.430:74970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.393832][ T29] audit: type=1326 audit(2000000154.430:74971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.417884][ T29] audit: type=1326 audit(2000000154.430:74972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.441612][ T29] audit: type=1326 audit(2000000154.430:74973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.465579][ T29] audit: type=1326 audit(2000000154.430:74974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.489305][ T29] audit: type=1326 audit(2000000154.430:74975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.513418][ T29] audit: type=1326 audit(2000000154.430:74976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.537282][ T29] audit: type=1326 audit(2000000154.430:74977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1155.561017][ T29] audit: type=1326 audit(2000000154.430:74978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.3.14661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1156.774553][T12895] openvswitch: netlink: Flow key attr not present in new flow. [ 1157.291755][T12905] openvswitch: netlink: Flow key attr not present in new flow. [ 1158.917887][T12934] openvswitch: netlink: Flow key attr not present in new flow. [ 1160.749833][ T29] kauditd_printk_skb: 862 callbacks suppressed [ 1160.749855][ T29] audit: type=1326 audit(2000000159.890:75841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.2.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1160.780406][ T29] audit: type=1326 audit(2000000159.900:75842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.2.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1160.804561][ T29] audit: type=1326 audit(2000000159.900:75843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.2.14693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1160.838149][T12961] lo speed is unknown, defaulting to 1000 [ 1160.852570][ T29] audit: type=1326 audit(2000000160.020:75844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1160.874343][T12961] lo speed is unknown, defaulting to 1000 [ 1160.997329][ T29] audit: type=1326 audit(2000000160.060:75845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1161.021599][ T29] audit: type=1326 audit(2000000160.060:75846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1161.045866][ T29] audit: type=1326 audit(2000000160.060:75847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f757b9bf783 code=0x7ffc0000 [ 1161.069911][ T29] audit: type=1326 audit(2000000160.060:75848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f757b9bf783 code=0x7ffc0000 [ 1161.093399][ T29] audit: type=1326 audit(2000000160.060:75849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1161.117616][ T29] audit: type=1326 audit(2000000160.060:75850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12965 comm="syz.2.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757b9bf749 code=0x7ffc0000 [ 1161.131281][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14698'. [ 1161.441148][T12978] macvtap0: refused to change device tx_queue_len [ 1161.474275][T12982] gre1: entered promiscuous mode [ 1161.479390][T12982] gre1: entered allmulticast mode [ 1161.597032][T12983] lo speed is unknown, defaulting to 1000 [ 1161.634185][T12983] lo speed is unknown, defaulting to 1000 [ 1161.901903][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14702'. [ 1162.109164][T12984] lo speed is unknown, defaulting to 1000 [ 1162.244238][T12984] lo speed is unknown, defaulting to 1000 [ 1162.385030][T10838] bond0 (unregistering): Released all slaves [ 1162.993766][T12984] chnl_net:caif_netlink_parms(): no params data found [ 1163.072154][T13014] lo speed is unknown, defaulting to 1000 [ 1163.131437][T13014] lo speed is unknown, defaulting to 1000 [ 1163.355075][T13025] lo speed is unknown, defaulting to 1000 [ 1163.416032][T13025] lo speed is unknown, defaulting to 1000 [ 1163.880027][T10838] hsr_slave_0: left promiscuous mode [ 1163.887913][T10838] hsr_slave_1: left promiscuous mode [ 1163.919892][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14714'. [ 1164.108138][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.115289][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.131650][T12984] bridge_slave_0: entered allmulticast mode [ 1164.146049][T12984] bridge_slave_0: entered promiscuous mode [ 1164.171220][T12984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.178329][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.210325][T12984] bridge_slave_1: entered allmulticast mode [ 1164.217782][T12984] bridge_slave_1: entered promiscuous mode [ 1164.258542][T12984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.268644][T13050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13050 comm=syz.5.14720 [ 1164.271322][T12984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.327713][T10838] IPVS: stop unused estimator thread 0... [ 1164.339293][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14720'. [ 1164.366110][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14720'. [ 1164.390937][T12984] team0: Port device team_slave_0 added [ 1164.399224][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14720'. [ 1164.399259][T12984] team0: Port device team_slave_1 added [ 1164.452776][T12984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.460187][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.486927][T12984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.501282][T12984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.509011][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.535589][T12984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.626154][T12984] hsr_slave_0: entered promiscuous mode [ 1164.691629][T13061] netlink: 'syz.5.14723': attribute type 16 has an invalid length. [ 1164.700025][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14723'. [ 1164.786908][T12984] hsr_slave_1: entered promiscuous mode [ 1164.792860][T12984] debugfs: 'hsr0' already exists in 'hsr' [ 1164.798605][T12984] Cannot create hsr debugfs directory [ 1164.958661][T13064] lo speed is unknown, defaulting to 1000 [ 1165.019073][T13064] lo speed is unknown, defaulting to 1000 [ 1165.238049][T13076] lo speed is unknown, defaulting to 1000 [ 1165.296993][T13076] lo speed is unknown, defaulting to 1000 [ 1165.440180][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14725'. [ 1165.774768][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 1165.774867][ T29] audit: type=1326 audit(2000000164.940:76360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1165.851674][ T29] audit: type=1326 audit(2000000164.970:76361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1165.875866][ T29] audit: type=1326 audit(2000000164.970:76362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1165.899945][ T29] audit: type=1326 audit(2000000164.980:76363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1165.923641][ T29] audit: type=1326 audit(2000000164.980:76364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.14726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.033534][ T29] audit: type=1326 audit(2000000165.200:76365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.066813][T12984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1166.076639][T12984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1166.102011][T12984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1166.105071][ T29] audit: type=1326 audit(2000000165.220:76366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.132752][ T29] audit: type=1326 audit(2000000165.220:76367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.156968][ T29] audit: type=1326 audit(2000000165.220:76368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.180803][ T29] audit: type=1326 audit(2000000165.220:76369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.4.14733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1166.208359][T12984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1166.330640][T13111] lo: entered allmulticast mode [ 1166.383538][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.416605][T13116] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1166.434635][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.466074][T10829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.473194][T10829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.496650][T10829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.503773][T10829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.944996][T13129] lo speed is unknown, defaulting to 1000 [ 1167.026771][T13129] lo speed is unknown, defaulting to 1000 [ 1167.375337][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.394197][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14739'. [ 1167.563175][T12984] veth0_vlan: entered promiscuous mode [ 1167.571727][T12984] veth1_vlan: entered promiscuous mode [ 1167.595882][T12984] veth0_macvtap: entered promiscuous mode [ 1167.620453][T12984] veth1_macvtap: entered promiscuous mode [ 1167.640197][T12984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.681385][T12984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.717751][T10816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.743758][T10816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.783898][T10816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.803820][T10816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.897133][T13162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1167.903702][T13162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1167.911958][T13162] vhci_hcd vhci_hcd.0: Device attached [ 1167.938195][T13165] random: crng reseeded on system resumption [ 1167.959151][T13162] openvswitch: netlink: Flow key attr not present in new flow. [ 1167.974341][T13163] vhci_hcd: connection closed [ 1167.977180][T10829] vhci_hcd vhci_hcd.1: stop threads [ 1167.987213][T10829] vhci_hcd vhci_hcd.1: release socket [ 1167.992794][T10829] vhci_hcd vhci_hcd.1: disconnect device [ 1168.274067][T13179] lo speed is unknown, defaulting to 1000 [ 1168.311289][T13179] lo speed is unknown, defaulting to 1000 [ 1168.716677][T13190] lo speed is unknown, defaulting to 1000 [ 1168.867442][T13190] lo speed is unknown, defaulting to 1000 [ 1170.780714][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 1170.780767][ T29] audit: type=1326 audit(2000000169.950:76742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1170.811481][ T29] audit: type=1326 audit(2000000169.950:76743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1170.835299][ T29] audit: type=1326 audit(2000000169.950:76744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1170.989975][ T29] audit: type=1326 audit(2000000169.950:76745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.013813][ T29] audit: type=1326 audit(2000000169.950:76746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.037782][ T29] audit: type=1326 audit(2000000169.950:76747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.061617][ T29] audit: type=1326 audit(2000000170.040:76748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.085715][ T29] audit: type=1326 audit(2000000170.110:76749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.109586][ T29] audit: type=1326 audit(2000000170.130:76750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.133521][ T29] audit: type=1326 audit(2000000170.130:76751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.14765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1171.324941][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14767'. [ 1171.486378][T13224] lo speed is unknown, defaulting to 1000 [ 1171.523952][T13224] lo speed is unknown, defaulting to 1000 [ 1172.324312][T13226] lo speed is unknown, defaulting to 1000 [ 1172.366613][T13226] lo speed is unknown, defaulting to 1000 [ 1172.880429][T13227] lo speed is unknown, defaulting to 1000 [ 1173.059439][T13227] lo speed is unknown, defaulting to 1000 [ 1173.066859][T13235] lo speed is unknown, defaulting to 1000 [ 1173.112598][T13235] lo speed is unknown, defaulting to 1000 [ 1173.439011][T13239] FAULT_INJECTION: forcing a failure. [ 1173.439011][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.452384][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.5.14770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1173.452416][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.452428][T13239] Call Trace: [ 1173.452501][T13239] [ 1173.452510][T13239] __dump_stack+0x1d/0x30 [ 1173.452535][T13239] dump_stack_lvl+0x95/0xd0 [ 1173.452555][T13239] dump_stack+0x15/0x1b [ 1173.452579][T13239] should_fail_ex+0x265/0x280 [ 1173.452622][T13239] should_fail+0xb/0x20 [ 1173.452646][T13239] should_fail_usercopy+0x1a/0x20 [ 1173.452669][T13239] copy_folio_from_iter_atomic+0x26a/0x1150 [ 1173.452703][T13239] ? shmem_write_begin+0xfc/0x1f0 [ 1173.452792][T13239] ? shmem_write_begin+0x135/0x1f0 [ 1173.452824][T13239] generic_perform_write+0x2c2/0x490 [ 1173.452860][T13239] shmem_file_write_iter+0xc5/0xf0 [ 1173.452891][T13239] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1173.453033][T13239] vfs_write+0x52a/0x960 [ 1173.453150][T13239] __x64_sys_pwrite64+0xfd/0x150 [ 1173.453172][T13239] x64_sys_call+0x9f7/0x3000 [ 1173.453200][T13239] do_syscall_64+0xca/0x2b0 [ 1173.453241][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.453266][T13239] RIP: 0033:0x7febe89df749 [ 1173.453328][T13239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.453346][T13239] RSP: 002b:00007febe7447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1173.453378][T13239] RAX: ffffffffffffffda RBX: 00007febe8c35fa0 RCX: 00007febe89df749 [ 1173.453393][T13239] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 1173.453406][T13239] RBP: 00007febe7447090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.453421][T13239] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 1173.453570][T13239] R13: 00007febe8c36038 R14: 00007febe8c35fa0 R15: 00007ffecdd7b098 [ 1173.453593][T13239] [ 1173.805988][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14778'. [ 1173.830726][T13263] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.873608][T13263] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.885684][T13269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14782'. [ 1173.895075][T13269] netlink: 108 bytes leftover after parsing attributes in process `syz.5.14782'. [ 1173.904603][T13269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14782'. [ 1173.913934][T13269] netlink: 108 bytes leftover after parsing attributes in process `syz.5.14782'. [ 1173.923096][T13269] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14782'. [ 1173.953502][T13263] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.974481][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14781'. [ 1174.051289][T13263] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.063329][T13261] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.14780'. [ 1174.137947][T10820] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.155761][T10820] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.180490][T10820] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.189300][T10820] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.425179][T13290] netlink: 'syz.4.14792': attribute type 10 has an invalid length. [ 1174.433240][T13290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14792'. [ 1174.443596][T13290] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1175.373494][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14793'. [ 1175.441843][T26427] IPVS: starting estimator thread 0... [ 1175.459658][T13306] netlink: 'syz.4.14795': attribute type 16 has an invalid length. [ 1175.539862][T13305] IPVS: using max 2496 ests per chain, 124800 per kthread [ 1175.805918][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 1175.805956][ T29] audit: type=1400 audit(2000000174.970:77245): avc: denied { create } for pid=13318 comm="syz.4.14801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1175.928794][ T29] audit: type=1400 audit(2000000175.050:77246): avc: denied { mount } for pid=13318 comm="syz.4.14801" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1175.951965][ T29] audit: type=1326 audit(2000000175.050:77247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1175.976274][ T29] audit: type=1326 audit(2000000175.050:77248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.000236][ T29] audit: type=1326 audit(2000000175.050:77249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.024196][ T29] audit: type=1326 audit(2000000175.050:77250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.048373][ T29] audit: type=1326 audit(2000000175.050:77251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.072701][ T29] audit: type=1326 audit(2000000175.050:77252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.097098][ T29] audit: type=1326 audit(2000000175.050:77253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.122026][ T29] audit: type=1326 audit(2000000175.050:77254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13318 comm="syz.4.14801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1176.488880][T13350] netlink: 'syz.3.14811': attribute type 16 has an invalid length. [ 1176.515830][T13357] vlan2: entered allmulticast mode [ 1176.594024][T13355] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 1176.600683][T13355] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1176.608866][T13355] vhci_hcd vhci_hcd.0: Device attached [ 1176.623587][T13363] vhci_hcd: connection closed [ 1176.623730][T10816] vhci_hcd vhci_hcd.5: stop threads [ 1176.633841][T10816] vhci_hcd vhci_hcd.5: release socket [ 1176.639547][T10816] vhci_hcd vhci_hcd.5: disconnect device [ 1176.657342][T13370] vlan3: entered allmulticast mode [ 1176.748165][T13375] futex_wake_op: syz.2.14820 tries to shift op by -1; fix this program [ 1177.164536][T13379] lo speed is unknown, defaulting to 1000 [ 1177.200489][T13379] lo speed is unknown, defaulting to 1000 [ 1178.870716][T13406] __nla_validate_parse: 3 callbacks suppressed [ 1178.870735][T13406] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14830'. [ 1179.442984][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14834'. [ 1179.602377][T13414] lo speed is unknown, defaulting to 1000 [ 1179.663215][T13414] lo speed is unknown, defaulting to 1000 [ 1180.196027][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14836'. [ 1180.716083][T13450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14848'. [ 1180.812260][ T29] kauditd_printk_skb: 816 callbacks suppressed [ 1180.812280][ T29] audit: type=1326 audit(2000000179.970:78071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febe8a12005 code=0x7ffc0000 [ 1180.914605][ T29] audit: type=1326 audit(2000000180.010:78072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febe8a12005 code=0x7ffc0000 [ 1180.938913][ T29] audit: type=1326 audit(2000000180.010:78073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febe8a12005 code=0x7ffc0000 [ 1180.962856][ T29] audit: type=1326 audit(2000000180.020:78075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1180.987033][ T29] audit: type=1326 audit(2000000180.020:78076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1181.011018][ T29] audit: type=1326 audit(2000000180.010:78074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febe8a12005 code=0x7ffc0000 [ 1181.035683][ T29] audit: type=1326 audit(2000000180.040:78077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1181.059809][ T29] audit: type=1326 audit(2000000180.040:78078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1181.083834][ T29] audit: type=1326 audit(2000000180.040:78079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febe8a12005 code=0x7ffc0000 [ 1181.108391][ T29] audit: type=1326 audit(2000000180.070:78080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13441 comm="syz.5.14845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1182.135883][T10820] tipc: Disabling bearer [ 1182.954321][T10820] bond0 (unregistering): Released all slaves [ 1183.008316][T10820] bond0 (unregistering): Released all slaves [ 1183.026224][T13465] lo speed is unknown, defaulting to 1000 [ 1183.064074][T13465] lo speed is unknown, defaulting to 1000 [ 1183.237973][T10820] tipc: Disabling bearer [ 1183.243342][T10820] tipc: Left network mode [ 1183.336998][T10820] IPVS: stopping master sync thread 4214 ... [ 1183.515436][T13490] vhci_hcd vhci_hcd.0: failed to lookup sock [ 1183.560165][T13493] netlink: 'syz.1.14863': attribute type 16 has an invalid length. [ 1183.568182][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14863'. [ 1183.619905][T13493] bridge_slave_1: left allmulticast mode [ 1183.625599][T13493] bridge_slave_1: left promiscuous mode [ 1183.631558][T13493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.871737][T13493] bridge_slave_0: left promiscuous mode [ 1183.877510][T13493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.091675][T10820] hsr_slave_0: left promiscuous mode [ 1184.099123][T10820] hsr_slave_1: left promiscuous mode [ 1184.122744][T10820] hsr_slave_0: left promiscuous mode [ 1184.152579][T10820] hsr_slave_1: left promiscuous mode [ 1184.211221][T10820] veth1_macvtap: left promiscuous mode [ 1184.245607][T10820] veth0_macvtap: left promiscuous mode [ 1184.314280][T10820] veth1_vlan: left promiscuous mode [ 1184.359352][T10820] veth0_vlan: left promiscuous mode [ 1184.537595][T13517] SELinux: failed to load policy [ 1184.567388][T10848] smc: removing ib device !yz! [ 1184.579348][T13522] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1184.585960][T13522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1184.594251][T13522] vhci_hcd vhci_hcd.0: Device attached [ 1184.657314][T13528] random: crng reseeded on system resumption [ 1184.662424][T10838] smc: removing ib device syz1 [ 1184.676730][T13528] openvswitch: netlink: Flow key attr not present in new flow. [ 1184.841460][T13523] vhci_hcd: connection closed [ 1184.842318][T10816] vhci_hcd vhci_hcd.5: stop threads [ 1184.852289][T10816] vhci_hcd vhci_hcd.5: release socket [ 1184.857691][T10816] vhci_hcd vhci_hcd.5: disconnect device [ 1184.973466][T13536] netlink: 'syz.4.14876': attribute type 16 has an invalid length. [ 1184.981674][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14876'. [ 1185.429610][T10820] IPVS: stop unused estimator thread 0... [ 1185.791029][T13561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1185.797592][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1185.805820][T13561] vhci_hcd vhci_hcd.0: Device attached [ 1185.995359][T13561] random: crng reseeded on system resumption [ 1186.036558][T13566] IPVS: Error connecting to the multicast addr [ 1186.042878][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 1186.042892][ T29] audit: type=1400 audit(2000000185.190:78243): avc: denied { write } for pid=13564 comm="syz.3.14884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1186.070092][ T29] audit: type=1400 audit(2000000185.190:78244): avc: denied { nlmsg_write } for pid=13564 comm="syz.3.14884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1186.091376][ T29] audit: type=1400 audit(2000000185.190:78245): avc: denied { create } for pid=13564 comm="syz.3.14884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1186.111364][ T29] audit: type=1400 audit(2000000185.200:78246): avc: denied { setopt } for pid=13564 comm="syz.3.14884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1186.397776][T13561] openvswitch: netlink: Flow key attr not present in new flow. [ 1186.429828][ T3492] usb 4-1: SetAddress Request (2) to port 0 [ 1186.435958][ T3492] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1186.444118][T13562] vhci_hcd: connection closed [ 1186.446044][T19528] vhci_hcd vhci_hcd.1: stop threads [ 1186.456144][T19528] vhci_hcd vhci_hcd.1: release socket [ 1186.461571][T19528] vhci_hcd vhci_hcd.1: disconnect device [ 1186.487721][ T3492] usb 4-1: enqueue for inactive port 0 [ 1186.503653][ T3492] usb 4-1: enqueue for inactive port 0 [ 1186.509870][T13572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1186.516659][T13572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1186.524952][T13572] vhci_hcd vhci_hcd.0: Device attached [ 1186.544271][ T3492] usb 4-1: enqueue for inactive port 0 [ 1186.583474][T13573] vhci_hcd: connection closed [ 1186.583652][T10820] vhci_hcd vhci_hcd.5: stop threads [ 1186.593810][T10820] vhci_hcd vhci_hcd.5: release socket [ 1186.599281][T10820] vhci_hcd vhci_hcd.5: disconnect device [ 1186.632180][ T29] audit: type=1400 audit(2000000185.520:78247): avc: denied { map } for pid=13564 comm="syz.3.14884" path="socket:[178761]" dev="sockfs" ino=178761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1186.656372][ T29] audit: type=1400 audit(2000000185.520:78248): avc: denied { read } for pid=13564 comm="syz.3.14884" path="socket:[178761]" dev="sockfs" ino=178761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1186.680522][ T29] audit: type=1326 audit(2000000185.550:78249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.1.14883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1186.704436][ T29] audit: type=1326 audit(2000000185.550:78250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.1.14883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1186.728412][ T29] audit: type=1326 audit(2000000185.550:78251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.1.14883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1186.752548][ T29] audit: type=1326 audit(2000000185.550:78252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13560 comm="syz.1.14883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1186.777052][ T3492] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1186.829806][ T3492] usb 4-1: enqueue for inactive port 0 [ 1186.840165][ T3492] usb 4-1: enqueue for inactive port 0 [ 1186.849769][ T3492] usb 4-1: enqueue for inactive port 0 [ 1188.129483][ T3492] usb usb4-port1: attempt power cycle [ 1188.519780][T13592] program syz.5.14890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1188.535310][T13592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1188.550800][T13592] lo speed is unknown, defaulting to 1000 [ 1188.556892][T13592] lo speed is unknown, defaulting to 1000 [ 1188.810168][T13592] lo speed is unknown, defaulting to 1000 [ 1188.817928][T13592] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1188.831723][T13592] lo speed is unknown, defaulting to 1000 [ 1189.788477][T13592] lo speed is unknown, defaulting to 1000 [ 1189.794772][T13592] lo speed is unknown, defaulting to 1000 [ 1189.800960][T13592] lo speed is unknown, defaulting to 1000 [ 1189.807043][T13592] lo speed is unknown, defaulting to 1000 [ 1189.813688][T13592] lo speed is unknown, defaulting to 1000 [ 1190.802275][T13626] IPVS: Error connecting to the multicast addr [ 1190.968366][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14905'. [ 1191.116717][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 1191.116732][ T29] audit: type=1400 audit(2000000190.280:78521): avc: denied { execmem } for pid=13639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1191.245698][ T29] audit: type=1400 audit(2000000190.380:78522): avc: denied { read } for pid=13644 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1191.267442][ T29] audit: type=1400 audit(2000000190.380:78523): avc: denied { open } for pid=13644 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1191.291273][ T29] audit: type=1400 audit(2000000190.380:78524): avc: denied { mounton } for pid=13644 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1191.313149][ T29] audit: type=1400 audit(2000000190.390:78525): avc: denied { module_request } for pid=13644 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1191.627838][ T29] audit: type=1326 audit(2000000190.500:78526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13640 comm="syz.4.14909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1191.651869][ T29] audit: type=1326 audit(2000000190.500:78527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13640 comm="syz.4.14909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1191.675955][ T29] audit: type=1326 audit(2000000190.500:78528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13640 comm="syz.4.14909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1191.700053][ T29] audit: type=1326 audit(2000000190.500:78529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13640 comm="syz.4.14909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1191.724069][ T29] audit: type=1326 audit(2000000190.500:78530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13640 comm="syz.4.14909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1192.070810][T13666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14915'. [ 1192.107944][T13668] IPVS: Error connecting to the multicast addr [ 1192.123662][T13644] lo speed is unknown, defaulting to 1000 [ 1192.159840][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14919'. [ 1192.438802][ T3492] usb usb4-port1: unable to enumerate USB device [ 1192.916183][T13700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14929'. [ 1193.102515][T13644] chnl_net:caif_netlink_parms(): no params data found [ 1193.244716][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14933'. [ 1193.257716][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14931'. [ 1193.274928][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.282483][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.306523][T13644] bridge_slave_0: entered allmulticast mode [ 1193.320849][T13644] bridge_slave_0: entered promiscuous mode [ 1193.337824][T10816] team0: Port device ip6gre0 removed [ 1193.371736][T13715] program syz.1.14934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.382708][T13715] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1193.396507][T10816] bond0 (unregistering): Released all slaves [ 1193.405087][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.412268][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.433592][T13715] siw: device registration error -23 [ 1193.445807][T13644] bridge_slave_1: entered allmulticast mode [ 1193.480732][T13644] bridge_slave_1: entered promiscuous mode [ 1193.590670][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.631317][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.672259][T10816] hsr_slave_0: left promiscuous mode [ 1193.710358][T10816] hsr_slave_1: left promiscuous mode [ 1193.827475][T19528] smc: removing ib device syz! [ 1194.047835][T13644] team0: Port device team_slave_0 added [ 1194.081837][T13644] team0: Port device team_slave_1 added [ 1194.166133][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.173217][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.199247][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.221652][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.228975][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.255505][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.291590][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14944'. [ 1194.366324][T13644] hsr_slave_0: entered promiscuous mode [ 1194.375275][T13644] hsr_slave_1: entered promiscuous mode [ 1194.381801][T13644] debugfs: 'hsr0' already exists in 'hsr' [ 1194.387647][T13644] Cannot create hsr debugfs directory [ 1194.397035][T13752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1194.403729][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1194.411953][T13752] vhci_hcd vhci_hcd.0: Device attached [ 1194.423987][T13756] netlink: 'syz.3.14946': attribute type 16 has an invalid length. [ 1194.432325][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14946'. [ 1194.452931][T13752] random: crng reseeded on system resumption [ 1194.468732][T10816] IPVS: stop unused estimator thread 0... [ 1194.494271][T13752] openvswitch: netlink: Flow key attr not present in new flow. [ 1194.516948][T13753] vhci_hcd: connection closed [ 1194.517275][T19528] vhci_hcd vhci_hcd.1: stop threads [ 1194.527424][T19528] vhci_hcd vhci_hcd.1: release socket [ 1194.532998][T19528] vhci_hcd vhci_hcd.1: disconnect device [ 1195.032167][T13644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1195.043313][T13644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1195.053787][T13644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1195.064393][T13644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1195.117826][T13644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.225738][T13644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.258186][T13773] macvtap0: refused to change device tx_queue_len [ 1195.274288][T19528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.281568][T19528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.405572][T19528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.413026][T19528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.472141][T13644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.482746][T13644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.665898][T13644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.914437][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14957'. [ 1195.956486][T13644] veth0_vlan: entered promiscuous mode [ 1195.997113][T13644] veth1_vlan: entered promiscuous mode [ 1196.055276][T13644] veth0_macvtap: entered promiscuous mode [ 1196.090530][T13644] veth1_macvtap: entered promiscuous mode [ 1196.135963][T13809] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1196.142697][T13809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1196.151502][T13809] vhci_hcd vhci_hcd.0: Device attached [ 1196.159580][T13644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.167509][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 1196.167527][ T29] audit: type=1326 audit(2000000195.330:79088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.4.14959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1196.230119][T13644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.281784][T10820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.294738][T13809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.301527][T13809] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 1196.309272][T13809] audit: backlog limit exceeded [ 1196.314199][T13809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1196.320780][T13809] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 1196.328508][T13809] audit: backlog limit exceeded [ 1196.336084][T13805] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.354014][ T29] audit: type=1326 audit(2000000195.360:79089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.4.14959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1196.378549][ T29] audit: type=1326 audit(2000000195.360:79090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.4.14959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1196.402733][ T29] audit: type=1326 audit(2000000195.360:79091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13801 comm="syz.4.14959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff068f749 code=0x7ffc0000 [ 1196.411928][T13809] random: crng reseeded on system resumption [ 1196.435211][T10813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.465648][T10813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.488835][T10813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.499830][ T3411] usb 4-1: SetAddress Request (6) to port 0 [ 1196.506251][ T3411] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1196.537058][T13809] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.551241][T13810] vhci_hcd: connection reset by peer [ 1196.557449][T10838] vhci_hcd vhci_hcd.1: stop threads [ 1196.562974][T10838] vhci_hcd vhci_hcd.1: release socket [ 1196.568658][T10838] vhci_hcd vhci_hcd.1: disconnect device [ 1196.671779][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14963'. [ 1196.802002][T13825] lo speed is unknown, defaulting to 1000 [ 1196.852445][T13825] chnl_net:caif_netlink_parms(): no params data found [ 1196.923855][T13825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.931022][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.000610][T13825] bridge_slave_0: entered allmulticast mode [ 1197.011250][T13825] bridge_slave_0: entered promiscuous mode [ 1197.155644][T13825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.163052][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.170608][T13825] bridge_slave_1: entered allmulticast mode [ 1197.177476][T13825] bridge_slave_1: entered promiscuous mode [ 1197.222524][T13825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.233887][T13825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.287991][T13849] lo speed is unknown, defaulting to 1000 [ 1197.339378][T19528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.348910][T19528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.358478][T19528] bond0 (unregistering): Released all slaves [ 1197.385899][T13825] team0: Port device team_slave_0 added [ 1197.407243][T13825] team0: Port device team_slave_1 added [ 1197.414266][T13850] lo speed is unknown, defaulting to 1000 [ 1197.493894][T13825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.501055][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.527499][T13825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.577290][T19528] hsr_slave_0: left promiscuous mode [ 1197.607876][T19528] hsr_slave_1: left promiscuous mode [ 1197.617915][T19528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.633767][T13865] netlink: 'syz.3.14975': attribute type 16 has an invalid length. [ 1197.641895][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14975'. [ 1197.700642][T19528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.822008][T19528] team0 (unregistering): Port device team_slave_1 removed [ 1197.832297][T19528] team0 (unregistering): Port device team_slave_0 removed [ 1197.844902][T10846] smc: removing ib device syû [ 1197.872906][T13825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.879975][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.906123][T13825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.919644][T13878] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1197.946845][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14978'. [ 1197.994763][T13825] hsr_slave_0: entered promiscuous mode [ 1198.013341][T13825] hsr_slave_1: entered promiscuous mode [ 1198.029209][T13825] debugfs: 'hsr0' already exists in 'hsr' [ 1198.035047][T13825] Cannot create hsr debugfs directory [ 1198.061063][T13880] loop2: detected capacity change from 0 to 1024 [ 1198.092333][T13880] EXT4-fs: Ignoring removed orlov option [ 1198.115546][T13880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.325582][T19528] IPVS: stop unused estimator thread 0... [ 1198.387807][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.612944][T13825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1198.628512][T13825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1198.643323][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14983'. [ 1198.646755][T13825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1198.689131][T13825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1198.762647][T13908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14986'. [ 1198.763599][T13825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.783936][T13825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.801142][T13908] loop2: detected capacity change from 0 to 1764 [ 1198.810655][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.817785][T10846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.830693][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.837872][T10816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.084550][T13825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.704316][T13917] lo speed is unknown, defaulting to 1000 [ 1199.860701][T13927] lo speed is unknown, defaulting to 1000 [ 1199.915833][T13925] netlink: 'syz.3.14989': attribute type 16 has an invalid length. [ 1199.923474][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14990'. [ 1199.924074][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14989'. [ 1200.296649][T13825] veth0_vlan: entered promiscuous mode [ 1200.328568][T13825] veth1_vlan: entered promiscuous mode [ 1200.370169][T13825] veth0_macvtap: entered promiscuous mode [ 1200.385927][T13825] veth1_macvtap: entered promiscuous mode [ 1200.421850][T13825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1200.458732][T13825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.493057][T10820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.525594][T10820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.549224][T10820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.558198][T13968] IPVS: Error connecting to the multicast addr [ 1200.573728][T10820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.613162][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15001'. [ 1200.682737][T13982] xt_policy: output policy not valid in PREROUTING and INPUT [ 1200.691876][ T3482] IPVS: starting estimator thread 0... [ 1200.822659][T13990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13990 comm=syz.4.15007 [ 1200.835835][T13990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13990 comm=syz.4.15007 [ 1200.869915][T13983] IPVS: using max 2592 ests per chain, 129600 per kthread [ 1201.073279][T13995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.171679][ T29] kauditd_printk_skb: 861 callbacks suppressed [ 1201.171698][ T29] audit: type=1326 audit(2000000200.340:79953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.205788][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15009'. [ 1201.215065][T14004] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15009'. [ 1201.408125][T13995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.426728][ T29] audit: type=1400 audit(2000000200.490:79954): avc: denied { mounton } for pid=14006 comm="syz.1.15012" path="/51/file0" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1201.450031][ T29] audit: type=1326 audit(2000000200.530:79955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.474199][ T29] audit: type=1326 audit(2000000200.530:79956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.498510][ T29] audit: type=1326 audit(2000000200.530:79957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.522497][ T29] audit: type=1326 audit(2000000200.530:79958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.546549][ T29] audit: type=1326 audit(2000000200.530:79959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.570355][ T29] audit: type=1326 audit(2000000200.530:79960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.594669][ T29] audit: type=1326 audit(2000000200.530:79961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.618604][ T29] audit: type=1326 audit(2000000200.530:79962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13992 comm="syz.2.15009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1201.761814][T14011] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1201.811770][T13995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.934511][T13995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.048535][T10838] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.096210][T10838] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.157653][T10838] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.203697][T10838] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.407753][ T3411] usb 4-1: device descriptor read/8, error -110 [ 1202.529818][ T3411] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1202.554208][T14031] __nla_validate_parse: 3 callbacks suppressed [ 1202.554228][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15021'. [ 1202.576785][ T3411] usb 4-1: enqueue for inactive port 0 [ 1202.584558][ T3411] usb 4-1: enqueue for inactive port 0 [ 1202.590270][ T3411] usb 4-1: enqueue for inactive port 0 [ 1202.692782][T14036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1202.699365][T14036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1202.711696][T14036] vhci_hcd vhci_hcd.0: Device attached [ 1202.733411][T14039] vhci_hcd: connection closed [ 1202.733562][T10838] vhci_hcd vhci_hcd.2: stop threads [ 1202.743629][T10838] vhci_hcd vhci_hcd.2: release socket [ 1202.749104][T10838] vhci_hcd vhci_hcd.2: disconnect device [ 1202.887970][T14049] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1202.894530][T14049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1202.902793][T14049] vhci_hcd vhci_hcd.0: Device attached [ 1202.934162][T14049] random: crng reseeded on system resumption [ 1202.948657][T14049] openvswitch: netlink: Flow key attr not present in new flow. [ 1202.957562][T14050] vhci_hcd: connection closed [ 1202.957733][ T53] vhci_hcd vhci_hcd.1: stop threads [ 1202.967752][ T53] vhci_hcd vhci_hcd.1: release socket [ 1202.973336][ T53] vhci_hcd vhci_hcd.1: disconnect device [ 1203.388636][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15032'. [ 1203.550774][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15033'. [ 1204.127983][T14073] lo speed is unknown, defaulting to 1000 [ 1205.317630][T14086] FAULT_INJECTION: forcing a failure. [ 1205.317630][T14086] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.330447][T14086] CPU: 0 UID: 0 PID: 14086 Comm: syz.2.15038 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1205.330481][T14086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1205.330551][T14086] Call Trace: [ 1205.330580][T14086] [ 1205.330591][T14086] __dump_stack+0x1d/0x30 [ 1205.330622][T14086] dump_stack_lvl+0x95/0xd0 [ 1205.330644][T14086] dump_stack+0x15/0x1b [ 1205.330665][T14086] should_fail_ex+0x265/0x280 [ 1205.330687][T14086] should_failslab+0x8c/0xb0 [ 1205.330713][T14086] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 1205.330737][T14086] ? __alloc_skb+0x2ff/0x4b0 [ 1205.330794][T14086] __alloc_skb+0x2ff/0x4b0 [ 1205.330822][T14086] ? __alloc_skb+0x228/0x4b0 [ 1205.330865][T14086] audit_log_start+0x3a0/0x720 [ 1205.330890][T14086] audit_seccomp+0x48/0x100 [ 1205.330934][T14086] ? __seccomp_filter+0x832/0x1260 [ 1205.330964][T14086] __seccomp_filter+0x843/0x1260 [ 1205.330992][T14086] ? update_curr+0x9c/0x150 [ 1205.331098][T14086] ? fair_server_pick_task+0x5f/0xa0 [ 1205.331149][T14086] __secure_computing+0x82/0x150 [ 1205.331249][T14086] syscall_trace_enter+0xcf/0x1e0 [ 1205.331273][T14086] do_syscall_64+0xa4/0x2b0 [ 1205.331358][T14086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.331383][T14086] RIP: 0033:0x7f70f219f749 [ 1205.331400][T14086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.331419][T14086] RSP: 002b:00007f70f0c06e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1205.331511][T14086] RAX: ffffffffffffffda RBX: 0000000000000483 RCX: 00007f70f219f749 [ 1205.331527][T14086] RDX: 00007f70f0c06ef0 RSI: 0000000000000000 RDI: 00007f70f2224960 [ 1205.331540][T14086] RBP: 0000200000001040 R08: 00007f70f0c06bb7 R09: 00007f70f0c06e40 [ 1205.331556][T14086] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 1205.331569][T14086] R13: 00007f70f0c06ef0 R14: 00007f70f0c06eb0 R15: 00002000000002c0 [ 1205.331586][T14086] [ 1205.635662][T14086] loop2: detected capacity change from 0 to 512 [ 1205.683557][T14088] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1205.693230][T14088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1205.704605][T14092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1205.711221][T14092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1205.719707][T14092] vhci_hcd vhci_hcd.0: Device attached [ 1205.736948][T14086] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.15038: EA inode hash validation failed [ 1205.760596][T14086] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15038: corrupted inode contents [ 1205.781588][T14095] vhci_hcd: connection closed [ 1205.781762][T10812] vhci_hcd vhci_hcd.1: stop threads [ 1205.791834][T10812] vhci_hcd vhci_hcd.1: release socket [ 1205.797231][T10812] vhci_hcd vhci_hcd.1: disconnect device [ 1205.803691][T14086] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.15038: mark_inode_dirty error [ 1205.821530][T14103] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15043'. [ 1205.833294][T14086] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15038: corrupted inode contents [ 1205.851115][T14103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.862497][T14086] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.15038: mark_inode_dirty error [ 1205.877490][T14086] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.15038: mark inode dirty (error -117) [ 1205.890638][T14086] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 1205.901536][T14086] EXT4-fs (loop2): 1 orphan inode deleted [ 1205.907801][T14086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.942249][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.170522][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15045'. [ 1206.197569][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 1206.197588][ T29] audit: type=1400 audit(2000000205.360:80578): avc: denied { module_request } for pid=14107 comm="syz.3.15045" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1206.246287][ T29] audit: type=1326 audit(2000000205.390:80579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1206.270387][ T29] audit: type=1326 audit(2000000205.390:80580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70f219f783 code=0x7ffc0000 [ 1206.294201][ T29] audit: type=1326 audit(2000000205.390:80581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70f219f807 code=0x7ffc0000 [ 1206.317985][ T29] audit: type=1326 audit(2000000205.390:80582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70f2156bdd code=0x7ffc0000 [ 1206.342034][ T29] audit: type=1326 audit(2000000205.390:80583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f70f21d3e89 code=0x7ffc0000 [ 1206.366149][ T29] audit: type=1326 audit(2000000205.390:80584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70f2156c47 code=0x7ffc0000 [ 1206.390123][ T29] audit: type=1326 audit(2000000205.390:80585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1206.414202][ T29] audit: type=1326 audit(2000000205.390:80586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1206.438044][ T29] audit: type=1326 audit(2000000205.390:80587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14105 comm="syz.2.15044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f70f2156357 code=0x7ffc0000 [ 1206.672476][T14103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.743385][T14103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.883359][T14103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.069297][T14132] netlink: 'syz.2.15054': attribute type 16 has an invalid length. [ 1207.077396][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15054'. [ 1207.096207][T14132] bridge_slave_1: left allmulticast mode [ 1207.101978][T14132] bridge_slave_1: left promiscuous mode [ 1207.107838][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.148007][T14136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15055'. [ 1207.202655][T14132] bridge_slave_0: left allmulticast mode [ 1207.208583][T14132] bridge_slave_0: left promiscuous mode [ 1207.214394][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.303392][T10838] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.337447][T10838] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.402546][T10838] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.429967][T10838] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.180880][T14154] lo speed is unknown, defaulting to 1000 [ 1208.241368][T14160] lo speed is unknown, defaulting to 1000 [ 1208.758418][T14170] block device autoloading is deprecated and will be removed. [ 1209.185654][T14183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1209.192480][T14183] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1209.200650][T14183] vhci_hcd vhci_hcd.0: Device attached [ 1209.220473][T14187] vhci_hcd: connection closed [ 1209.220655][T10801] vhci_hcd vhci_hcd.5: stop threads [ 1209.230664][T10801] vhci_hcd vhci_hcd.5: release socket [ 1209.236320][T10801] vhci_hcd vhci_hcd.5: disconnect device [ 1209.302532][T14196] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1209.309062][T14196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1209.317322][T14196] vhci_hcd vhci_hcd.0: Device attached [ 1209.326356][T14196] random: crng reseeded on system resumption [ 1209.340443][T14196] openvswitch: netlink: Flow key attr not present in new flow. [ 1209.349052][T14197] vhci_hcd: connection closed [ 1209.349127][T10838] vhci_hcd vhci_hcd.1: stop threads [ 1209.359515][T10838] vhci_hcd vhci_hcd.1: release socket [ 1209.364921][T10838] vhci_hcd vhci_hcd.1: disconnect device [ 1209.471995][T14193] netlink: 1168 bytes leftover after parsing attributes in process `syz.4.15073'. [ 1209.962679][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15078'. [ 1210.456625][T14240] xt_policy: output policy not valid in PREROUTING and INPUT [ 1210.776744][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15097'. [ 1211.074661][T14261] FAULT_INJECTION: forcing a failure. [ 1211.074661][T14261] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.087525][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.4.15102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1211.087554][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.087569][T14261] Call Trace: [ 1211.087577][T14261] [ 1211.087586][T14261] __dump_stack+0x1d/0x30 [ 1211.087657][T14261] dump_stack_lvl+0x95/0xd0 [ 1211.087680][T14261] dump_stack+0x15/0x1b [ 1211.087699][T14261] should_fail_ex+0x265/0x280 [ 1211.087720][T14261] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1211.087793][T14261] should_failslab+0x8c/0xb0 [ 1211.087813][T14261] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 1211.087835][T14261] ? shmem_alloc_inode+0x34/0x50 [ 1211.088008][T14261] ? kstrtouint_from_user+0x9f/0xf0 [ 1211.088037][T14261] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1211.088071][T14261] shmem_alloc_inode+0x34/0x50 [ 1211.088126][T14261] alloc_inode+0x40/0x170 [ 1211.088179][T14261] new_inode+0x1d/0xe0 [ 1211.088256][T14261] shmem_get_inode+0x246/0x750 [ 1211.088358][T14261] __shmem_file_setup+0x113/0x210 [ 1211.088388][T14261] shmem_file_setup+0x3b/0x50 [ 1211.088430][T14261] __se_sys_memfd_create+0x2f7/0x6b0 [ 1211.088471][T14261] __x64_sys_memfd_create+0x31/0x40 [ 1211.088504][T14261] x64_sys_call+0x28cb/0x3000 [ 1211.088529][T14261] do_syscall_64+0xca/0x2b0 [ 1211.088635][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.088662][T14261] RIP: 0033:0x7f4be72cf749 [ 1211.088678][T14261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.088740][T14261] RSP: 002b:00007f4be5d2ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1211.088765][T14261] RAX: ffffffffffffffda RBX: 0000000000000617 RCX: 00007f4be72cf749 [ 1211.088780][T14261] RDX: 00007f4be5d2eef0 RSI: 0000000000000000 RDI: 00007f4be7354960 [ 1211.088859][T14261] RBP: 0000200000001100 R08: 00007f4be5d2ebb7 R09: 00007f4be5d2ee40 [ 1211.088871][T14261] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 1211.088883][T14261] R13: 00007f4be5d2eef0 R14: 00007f4be5d2eeb0 R15: 0000200000000100 [ 1211.088904][T14261] [ 1211.389800][ T29] kauditd_printk_skb: 863 callbacks suppressed [ 1211.389821][ T29] audit: type=1326 audit(2000000210.500:81451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.420048][ T29] audit: type=1326 audit(2000000210.500:81452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.444365][ T29] audit: type=1326 audit(2000000210.500:81453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.469058][ T29] audit: type=1326 audit(2000000210.510:81454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.493367][ T29] audit: type=1326 audit(2000000210.520:81455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.517466][ T29] audit: type=1326 audit(2000000210.530:81456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.541310][ T29] audit: type=1326 audit(2000000210.530:81457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.565595][ T29] audit: type=1326 audit(2000000210.540:81458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.589425][ T29] audit: type=1326 audit(2000000210.540:81459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.613476][ T29] audit: type=1326 audit(2000000210.540:81460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz.2.15098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70f21d2005 code=0x7ffc0000 [ 1211.934469][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15110'. [ 1212.077916][T14303] xt_policy: output policy not valid in PREROUTING and INPUT [ 1212.116553][T14289] loop2: detected capacity change from 0 to 512 [ 1212.116601][T14300] lo speed is unknown, defaulting to 1000 [ 1212.147215][T14289] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.15114: EA inode hash validation failed [ 1212.271270][T14289] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15114: corrupted inode contents [ 1212.283490][T14289] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.15114: mark_inode_dirty error [ 1212.295459][T14289] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.15114: corrupted inode contents [ 1212.317443][T14289] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.15114: mark_inode_dirty error [ 1212.446974][T14289] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.15114: mark inode dirty (error -117) [ 1212.493695][T14289] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 1212.504096][T14289] EXT4-fs (loop2): 1 orphan inode deleted [ 1212.518260][T14289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.948580][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.191781][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15128'. [ 1214.368475][T14344] xt_policy: output policy not valid in PREROUTING and INPUT [ 1214.404762][T14347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43475 sclass=netlink_route_socket pid=14347 comm=syz.1.15135 [ 1215.007760][T14363] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1215.014867][T14363] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1215.023253][T14363] vhci_hcd vhci_hcd.0: Device attached [ 1215.031459][T14364] vhci_hcd: connection closed [ 1215.031637][T10812] vhci_hcd vhci_hcd.5: stop threads [ 1215.041773][T10812] vhci_hcd vhci_hcd.5: release socket [ 1215.047297][T10812] vhci_hcd vhci_hcd.5: disconnect device [ 1215.231410][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15144'. [ 1215.588533][T14385] loop2: detected capacity change from 0 to 1024 [ 1215.613363][T14385] EXT4-fs: Ignoring removed oldalloc option [ 1215.830754][T14385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.858895][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15156'. [ 1216.023198][T14385] netlink: 1168 bytes leftover after parsing attributes in process `syz.2.15149'. [ 1216.441229][ T29] kauditd_printk_skb: 1140 callbacks suppressed [ 1216.441328][ T29] audit: type=1400 audit(2000000215.350:82601): avc: denied { prog_run } for pid=14422 comm="syz.4.15162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1216.467262][ T29] audit: type=1400 audit(2000000215.400:82602): avc: denied { execmem } for pid=14422 comm="syz.4.15162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1216.566673][T14425] lo speed is unknown, defaulting to 1000 [ 1216.625108][T14427] lo speed is unknown, defaulting to 1000 [ 1216.739770][ T29] audit: type=1326 audit(2000000215.790:82603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1216.763959][ T29] audit: type=1326 audit(2000000215.790:82604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d20a5f783 code=0x7ffc0000 [ 1216.787829][ T29] audit: type=1326 audit(2000000215.790:82605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5d20a5f807 code=0x7ffc0000 [ 1216.812582][ T29] audit: type=1326 audit(2000000215.790:82606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5d20a16bdd code=0x7ffc0000 [ 1216.836493][ T29] audit: type=1326 audit(2000000215.790:82607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5d20a93e89 code=0x7ffc0000 [ 1216.860490][ T29] audit: type=1326 audit(2000000215.790:82608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5d20a16c47 code=0x7ffc0000 [ 1216.884236][ T29] audit: type=1326 audit(2000000215.790:82609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1216.907903][ T29] audit: type=1326 audit(2000000215.790:82610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14418 comm="syz.1.15160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1217.690355][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.246658][T14440] lo speed is unknown, defaulting to 1000 [ 1218.254183][T14443] lo speed is unknown, defaulting to 1000 [ 1218.352977][T14452] loop2: detected capacity change from 0 to 512 [ 1218.371144][T14452] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1218.384397][T14452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1218.405437][T14452] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 2: comm syz.2.15166: invalid block [ 1218.409513][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15171'. [ 1218.426145][T14452] EXT4-fs (loop2): Remounting filesystem read-only [ 1218.435428][T14452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.448408][T14452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.955350][T14489] lo speed is unknown, defaulting to 1000 [ 1218.993055][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15184'. [ 1219.073464][T14494] lo speed is unknown, defaulting to 1000 [ 1219.316570][T14489] usb usb1: usbfs: interface 0 claimed by hub while 'wÞ£ÿ' sets config #1 [ 1219.680184][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15196'. [ 1219.936522][T14532] netlink: 'syz.3.15199': attribute type 16 has an invalid length. [ 1219.944700][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15199'. [ 1219.955985][T14538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1219.962773][T14538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1219.971186][T14538] vhci_hcd vhci_hcd.0: Device attached [ 1219.982611][T14538] random: crng reseeded on system resumption [ 1219.996630][T14538] openvswitch: netlink: Flow key attr not present in new flow. [ 1220.005184][T14539] vhci_hcd: connection closed [ 1220.005824][T19528] vhci_hcd vhci_hcd.4: stop threads [ 1220.015989][T19528] vhci_hcd vhci_hcd.4: release socket [ 1220.021661][T19528] vhci_hcd vhci_hcd.4: disconnect device [ 1220.225266][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15208'. [ 1220.307223][T14564] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.15210'. [ 1220.658401][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15220'. [ 1220.876087][T14604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1220.882642][T14604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1220.890957][T14604] vhci_hcd vhci_hcd.0: Device attached [ 1220.925713][T14604] random: crng reseeded on system resumption [ 1220.944857][T14602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14602 comm=syz.3.15225 [ 1220.966582][T14604] openvswitch: netlink: Flow key attr not present in new flow. [ 1220.975198][T14605] vhci_hcd: connection closed [ 1220.975342][T10813] vhci_hcd vhci_hcd.4: stop threads [ 1220.985519][T10813] vhci_hcd vhci_hcd.4: release socket [ 1220.991059][T10813] vhci_hcd vhci_hcd.4: disconnect device [ 1221.451399][ T29] kauditd_printk_skb: 1189 callbacks suppressed [ 1221.451420][ T29] audit: type=1326 audit(2000000220.620:83800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.732188][ T29] audit: type=1326 audit(2000000220.650:83801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.756121][ T29] audit: type=1326 audit(2000000220.650:83802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.779973][ T29] audit: type=1326 audit(2000000220.650:83803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.804222][ T29] audit: type=1326 audit(2000000220.650:83804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.828752][ T29] audit: type=1326 audit(2000000220.650:83805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.852615][ T29] audit: type=1326 audit(2000000220.650:83806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.876561][ T29] audit: type=1326 audit(2000000220.650:83807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.900431][ T29] audit: type=1326 audit(2000000220.830:83808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1221.924432][ T29] audit: type=1326 audit(2000000220.830:83809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.1.15229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20a5f749 code=0x7ffc0000 [ 1222.092168][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15233'. [ 1222.166725][ T3492] IPVS: starting estimator thread 0... [ 1222.288499][T14639] IPVS: using max 1968 ests per chain, 98400 per kthread [ 1223.126283][T14673] loop2: detected capacity change from 0 to 1024 [ 1223.134593][T14673] EXT4-fs: inline encryption not supported [ 1223.144079][T14673] ext4: Bad value for 'mb_optimize_scan' [ 1223.296651][T14679] loop2: detected capacity change from 0 to 1024 [ 1223.316355][T14679] EXT4-fs: Ignoring removed orlov option [ 1223.348283][T14679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.540158][T14679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1223.547049][T14679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1223.556177][T14679] vhci_hcd vhci_hcd.0: Device attached [ 1223.594244][T14684] vhci_hcd: connection closed [ 1223.594432][T10838] vhci_hcd vhci_hcd.2: stop threads [ 1223.604588][T10838] vhci_hcd vhci_hcd.2: release socket [ 1223.610965][T10838] vhci_hcd vhci_hcd.2: disconnect device [ 1224.278758][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.784892][T14704] netlink: 'syz.2.15259': attribute type 1 has an invalid length. [ 1224.792910][T14704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15259'. [ 1224.924504][T14704] lo speed is unknown, defaulting to 1000 [ 1225.754959][T14726] xt_policy: output policy not valid in PREROUTING and INPUT [ 1225.952953][T14731] xt_policy: output policy not valid in PREROUTING and INPUT [ 1226.192683][T14739] xt_policy: output policy not valid in PREROUTING and INPUT [ 1226.310558][T14734] lo speed is unknown, defaulting to 1000 [ 1226.374972][T14744] lo speed is unknown, defaulting to 1000 [ 1226.900167][T14748] loop2: detected capacity change from 0 to 1024 [ 1226.925629][T14748] EXT4-fs: inline encryption not supported [ 1227.054500][T14748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.062744][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15278'. [ 1227.096446][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 1227.096466][ T29] audit: type=1400 audit(2000000226.260:84311): avc: denied { read write } for pid=14746 comm="syz.2.15273" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1227.113733][T14762] lo speed is unknown, defaulting to 1000 [ 1227.126190][ T29] audit: type=1400 audit(2000000226.260:84312): avc: denied { open } for pid=14746 comm="syz.2.15273" path="/61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1227.220126][ T29] audit: type=1400 audit(2000000226.270:84313): avc: denied { write } for pid=14761 comm="syz.1.15276" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1227.243713][ T29] audit: type=1400 audit(2000000226.270:84314): avc: denied { open } for pid=14761 comm="syz.1.15276" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1227.267879][ T29] audit: type=1400 audit(2000000226.270:84315): avc: denied { ioctl } for pid=14761 comm="syz.1.15276" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1227.333829][T14771] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1227.392506][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.394613][ T29] audit: type=1400 audit(2000000226.500:84316): avc: denied { remount } for pid=14746 comm="syz.2.15273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1227.422160][ T29] audit: type=1326 audit(2000000226.510:84317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.15279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1227.445992][ T29] audit: type=1326 audit(2000000226.510:84318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.15279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1227.469956][ T29] audit: type=1326 audit(2000000226.510:84319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.15279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbb5ba3f749 code=0x7ffc0000 [ 1227.493805][ T29] audit: type=1326 audit(2000000226.510:84320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.15279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb5ba3f783 code=0x7ffc0000 [ 1227.897560][T14764] usb usb1: usbfs: interface 0 claimed by hub while 'wÞ£ÿ' sets config #1 [ 1228.498620][T14783] netlink: 1168 bytes leftover after parsing attributes in process `syz.3.15283'. [ 1228.513171][T14801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1228.519946][T14801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1228.525679][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15290'. [ 1228.528240][T14801] vhci_hcd vhci_hcd.0: Device attached [ 1228.571588][T14803] vhci_hcd: connection closed [ 1228.577057][T19528] vhci_hcd vhci_hcd.2: stop threads [ 1228.587821][T19528] vhci_hcd vhci_hcd.2: release socket [ 1228.593620][T19528] vhci_hcd vhci_hcd.2: disconnect device [ 1228.815181][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15295'. [ 1228.927589][T14821] FAULT_INJECTION: forcing a failure. [ 1228.927589][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.941130][T14821] CPU: 0 UID: 0 PID: 14821 Comm: syz.1.15297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1228.941214][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.941227][T14821] Call Trace: [ 1228.941234][T14821] [ 1228.941242][T14821] __dump_stack+0x1d/0x30 [ 1228.941268][T14821] dump_stack_lvl+0x95/0xd0 [ 1228.941403][T14821] dump_stack+0x15/0x1b [ 1228.941427][T14821] should_fail_ex+0x265/0x280 [ 1228.941456][T14821] should_failslab+0x8c/0xb0 [ 1228.941483][T14821] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 1228.941512][T14821] ? __alloc_skb+0x2ff/0x4b0 [ 1228.941565][T14821] __alloc_skb+0x2ff/0x4b0 [ 1228.941600][T14821] ? __alloc_skb+0x228/0x4b0 [ 1228.941628][T14821] audit_log_start+0x3a0/0x720 [ 1228.941653][T14821] ? kstrtouint+0x76/0xc0 [ 1228.941677][T14821] audit_seccomp+0x48/0x100 [ 1228.941831][T14821] ? __seccomp_filter+0x832/0x1260 [ 1228.941864][T14821] __seccomp_filter+0x843/0x1260 [ 1228.941897][T14821] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1228.941974][T14821] ? vfs_write+0x7e8/0x960 [ 1228.942001][T14821] __secure_computing+0x82/0x150 [ 1228.942032][T14821] syscall_trace_enter+0xcf/0x1e0 [ 1228.942061][T14821] do_syscall_64+0xa4/0x2b0 [ 1228.942170][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.942196][T14821] RIP: 0033:0x7f5d20a5f749 [ 1228.942213][T14821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.942231][T14821] RSP: 002b:00007f5d1f4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1228.942318][T14821] RAX: ffffffffffffffda RBX: 00007f5d20cb5fa0 RCX: 00007f5d20a5f749 [ 1228.942331][T14821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1228.942346][T14821] RBP: 00007f5d1f4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.942385][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.942400][T14821] R13: 00007f5d20cb6038 R14: 00007f5d20cb5fa0 R15: 00007ffe13478ed8 [ 1228.942483][T14821] [ 1229.296250][T14837] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1229.302924][T14837] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1229.312180][T14837] vhci_hcd vhci_hcd.0: Device attached [ 1229.322417][T14837] random: crng reseeded on system resumption [ 1229.338226][T14837] openvswitch: netlink: Flow key attr not present in new flow. [ 1229.348257][T14838] vhci_hcd: connection closed [ 1229.348556][T10816] vhci_hcd vhci_hcd.2: stop threads [ 1229.358584][T10816] vhci_hcd vhci_hcd.2: release socket [ 1229.364104][T10816] vhci_hcd vhci_hcd.2: disconnect device [ 1229.772316][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15308'. [ 1229.810334][T14842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15305'. [ 1230.049099][T14856] loop2: detected capacity change from 0 to 1024 [ 1230.140519][T14852] lo speed is unknown, defaulting to 1000 [ 1230.187884][T14856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1230.200873][T14856] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.225265][T14856] netlink: 'syz.2.15310': attribute type 13 has an invalid length. [ 1230.902660][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1231.008219][T14874] lo speed is unknown, defaulting to 1000 [ 1231.576805][T14890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1231.583524][T14890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1231.592489][T14890] vhci_hcd vhci_hcd.0: Device attached [ 1231.623857][T14890] random: crng reseeded on system resumption [ 1231.641886][T14890] openvswitch: netlink: Flow key attr not present in new flow. [ 1231.658119][T14891] vhci_hcd: connection closed [ 1231.658337][T10838] vhci_hcd vhci_hcd.2: stop threads [ 1231.668531][T10838] vhci_hcd vhci_hcd.2: release socket [ 1231.674175][T10838] vhci_hcd vhci_hcd.2: disconnect device [ 1231.745638][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15320'. [ 1232.158891][ T29] kauditd_printk_skb: 1057 callbacks suppressed [ 1232.158910][ T29] audit: type=1326 audit(2000000231.320:85376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.193575][ T29] audit: type=1326 audit(2000000231.360:85377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.217647][ T29] audit: type=1326 audit(2000000231.360:85378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.242073][ T29] audit: type=1326 audit(2000000231.360:85379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.269020][ T29] audit: type=1326 audit(2000000231.360:85380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.293199][ T29] audit: type=1326 audit(2000000231.360:85381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.317301][ T29] audit: type=1326 audit(2000000231.360:85382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.341205][ T29] audit: type=1326 audit(2000000231.360:85383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.365458][ T29] audit: type=1326 audit(2000000231.360:85384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.389767][ T29] audit: type=1326 audit(2000000231.360:85385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.15326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe89df749 code=0x7ffc0000 [ 1232.434558][T14905] lo speed is unknown, defaulting to 1000 [ 1232.583955][T14912] lo speed is unknown, defaulting to 1000 [ 1232.774410][T14916] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15330'. [ 1232.785665][T14916] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15330'. [ 1233.084994][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15335'. [ 1233.496290][T14945] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1233.502935][T14945] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1233.511936][T14945] vhci_hcd vhci_hcd.0: Device attached [ 1233.529457][T14949] random: crng reseeded on system resumption [ 1233.589690][T14945] openvswitch: netlink: Flow key attr not present in new flow. [ 1233.602662][T14947] vhci_hcd: connection closed [ 1233.602869][T10793] vhci_hcd vhci_hcd.5: stop threads [ 1233.613134][T10793] vhci_hcd vhci_hcd.5: release socket [ 1233.618912][T10793] vhci_hcd vhci_hcd.5: disconnect device [ 1234.781360][T14965] lo speed is unknown, defaulting to 1000 [ 1235.386676][T14975] lo speed is unknown, defaulting to 1000 [ 1235.569501][T14984] netlink: 'syz.5.15354': attribute type 16 has an invalid length. [ 1235.577608][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15354'. [ 1235.631289][T14995] netlink: 'syz.1.15358': attribute type 16 has an invalid length. [ 1235.639254][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15358'. [ 1236.216604][T15016] lo speed is unknown, defaulting to 1000 [ 1239.280101][T15045] netlink: 'syz.5.15373': attribute type 16 has an invalid length. [ 1239.288158][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15373'. [ 1239.519362][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 1239.519380][ T29] audit: type=1326 audit(2000000238.680:85957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.562067][T15048] FAULT_INJECTION: forcing a failure. [ 1239.562067][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.575209][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.1.15375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1239.575263][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.575278][T15048] Call Trace: [ 1239.575286][T15048] [ 1239.575296][T15048] __dump_stack+0x1d/0x30 [ 1239.575324][T15048] dump_stack_lvl+0x95/0xd0 [ 1239.575345][T15048] dump_stack+0x15/0x1b [ 1239.575364][T15048] should_fail_ex+0x265/0x280 [ 1239.575422][T15048] should_fail+0xb/0x20 [ 1239.575446][T15048] should_fail_usercopy+0x1a/0x20 [ 1239.575475][T15048] _copy_from_user+0x1c/0xb0 [ 1239.575509][T15048] ucma_query+0x56/0xd60 [ 1239.575553][T15048] ? __rcu_read_unlock+0x4f/0x70 [ 1239.575574][T15048] ? path_openat+0x1d88/0x23b0 [ 1239.575653][T15048] ? path_openat+0x1e82/0x23b0 [ 1239.575684][T15048] ? _parse_integer_limit+0x170/0x190 [ 1239.575788][T15048] ? __import_iovec+0x428/0x540 [ 1239.575876][T15048] ? should_fail_ex+0xdb/0x280 [ 1239.575925][T15048] ucma_write+0x1b3/0x250 [ 1239.575972][T15048] vfs_writev+0x406/0x8b0 [ 1239.576003][T15048] ? __pfx_ucma_write+0x10/0x10 [ 1239.576078][T15048] do_writev+0xe7/0x210 [ 1239.576109][T15048] __x64_sys_writev+0x45/0x50 [ 1239.576129][T15048] x64_sys_call+0x1ba5/0x3000 [ 1239.576170][T15048] do_syscall_64+0xca/0x2b0 [ 1239.576210][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.576236][T15048] RIP: 0033:0x7f5d20a5f749 [ 1239.576254][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.576321][T15048] RSP: 002b:00007f5d1f4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1239.576345][T15048] RAX: ffffffffffffffda RBX: 00007f5d20cb5fa0 RCX: 00007f5d20a5f749 [ 1239.576361][T15048] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000015 [ 1239.576377][T15048] RBP: 00007f5d1f4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.576393][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.576408][T15048] R13: 00007f5d20cb6038 R14: 00007f5d20cb5fa0 R15: 00007ffe13478ed8 [ 1239.576508][T15048] [ 1239.791264][ T29] audit: type=1326 audit(2000000238.720:85958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.815207][ T29] audit: type=1326 audit(2000000238.720:85959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.839545][ T29] audit: type=1326 audit(2000000238.720:85960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4be72cf783 code=0x7ffc0000 [ 1239.864030][ T29] audit: type=1326 audit(2000000238.720:85961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4be72cf783 code=0x7ffc0000 [ 1239.887752][ T29] audit: type=1326 audit(2000000238.720:85962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.912412][ T29] audit: type=1326 audit(2000000238.720:85963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.936781][ T29] audit: type=1326 audit(2000000238.740:85964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.961901][ T29] audit: type=1326 audit(2000000238.740:85965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1239.985919][ T29] audit: type=1326 audit(2000000238.740:85966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15046 comm="syz.4.15374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4be72cf749 code=0x7ffc0000 [ 1240.617283][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15382'. [ 1240.692256][T15073] SELinux: Context › is not valid (left unmapped). [ 1240.701632][T15073] loop2: detected capacity change from 0 to 128 [ 1240.938402][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15387'. [ 1241.009142][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15388'. [ 1241.097689][T15095] loop2: detected capacity change from 0 to 512 [ 1241.109140][T15095] EXT4-fs: inline encryption not supported [ 1241.115948][T15095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1241.136626][T15095] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 2: comm syz.2.15393: invalid block [ 1241.151341][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15394'. [ 1241.170213][T15095] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.15393: couldn't read orphan inode 11 (err -117) [ 1241.209325][T15095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.259665][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.291624][T15109] lo speed is unknown, defaulting to 1000 [ 1241.382751][T15119] FAULT_INJECTION: forcing a failure. [ 1241.382751][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.395545][T15119] CPU: 1 UID: 0 PID: 15119 Comm: syz.1.15402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1241.395575][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1241.395589][T15119] Call Trace: [ 1241.395733][T15119] [ 1241.395742][T15119] __dump_stack+0x1d/0x30 [ 1241.395836][T15119] dump_stack_lvl+0x95/0xd0 [ 1241.395860][T15119] dump_stack+0x15/0x1b [ 1241.395882][T15119] should_fail_ex+0x265/0x280 [ 1241.395928][T15119] should_failslab+0x8c/0xb0 [ 1241.395950][T15119] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1241.395973][T15119] ? audit_log_start+0x342/0x720 [ 1241.395996][T15119] audit_log_start+0x342/0x720 [ 1241.396030][T15119] ? kstrtouint+0x76/0xc0 [ 1241.396087][T15119] audit_seccomp+0x48/0x100 [ 1241.396118][T15119] ? __seccomp_filter+0x832/0x1260 [ 1241.396155][T15119] __seccomp_filter+0x843/0x1260 [ 1241.396215][T15119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1241.396245][T15119] ? vfs_write+0x7e8/0x960 [ 1241.396269][T15119] __secure_computing+0x82/0x150 [ 1241.396317][T15119] syscall_trace_enter+0xcf/0x1e0 [ 1241.396342][T15119] do_syscall_64+0xa4/0x2b0 [ 1241.396376][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.396443][T15119] RIP: 0033:0x7f5d20a5f749 [ 1241.396461][T15119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.396482][T15119] RSP: 002b:00007f5d1f49e038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1241.396505][T15119] RAX: ffffffffffffffda RBX: 00007f5d20cb6090 RCX: 00007f5d20a5f749 [ 1241.396519][T15119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.396535][T15119] RBP: 00007f5d1f49e090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.396549][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.396636][T15119] R13: 00007f5d20cb6128 R14: 00007f5d20cb6090 R15: 00007ffe13478ed8 [ 1241.396657][T15119] [ 1241.596611][T15117] lo speed is unknown, defaulting to 1000 [ 1241.655618][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15403'. [ 1241.683088][T15124] lo speed is unknown, defaulting to 1000 [ 1241.785384][T15139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1241.791955][T15139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1241.800155][T15139] vhci_hcd vhci_hcd.0: Device attached [ 1241.814670][T15139] random: crng reseeded on system resumption [ 1241.831200][T15139] openvswitch: netlink: Flow key attr not present in new flow. [ 1241.840237][T15140] vhci_hcd: connection closed [ 1241.840541][T10820] vhci_hcd vhci_hcd.4: stop threads [ 1241.851133][T10820] vhci_hcd vhci_hcd.4: release socket [ 1241.856660][T10820] vhci_hcd vhci_hcd.4: disconnect device [ 1242.862316][T15158] lo speed is unknown, defaulting to 1000 [ 1243.390599][T15157] lo speed is unknown, defaulting to 1000 [ 1243.457018][T15168] lo speed is unknown, defaulting to 1000 [ 1244.014436][T15186] loop2: detected capacity change from 0 to 1024 [ 1244.084622][T15186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1244.164549][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.243628][T15200] loop2: detected capacity change from 0 to 512 [ 1244.278902][T15200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1244.310334][T15200] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 2: comm syz.2.15427: invalid block [ 1244.343808][T15200] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.353922][T15200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1244.377019][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.759935][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 1244.759954][ T29] audit: type=1326 audit(2000000243.930:86747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1244.835217][ T29] audit: type=1326 audit(2000000243.960:86748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70f219f783 code=0x7ffc0000 [ 1244.859681][ T29] audit: type=1326 audit(2000000243.960:86749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70f219f807 code=0x7ffc0000 [ 1244.884322][ T29] audit: type=1326 audit(2000000243.960:86750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70f2156bdd code=0x7ffc0000 [ 1244.908136][ T29] audit: type=1326 audit(2000000243.960:86751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f70f21d3e89 code=0x7ffc0000 [ 1244.932804][ T29] audit: type=1326 audit(2000000243.960:86752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70f2156c47 code=0x7ffc0000 [ 1244.957259][ T29] audit: type=1326 audit(2000000243.960:86753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1244.981978][ T29] audit: type=1326 audit(2000000243.960:86754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1245.222416][ T29] audit: type=1326 audit(2000000244.170:86755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f70f2156357 code=0x7ffc0000 [ 1245.246240][ T29] audit: type=1326 audit(2000000244.180:86756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.2.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1245.786000][T15220] lo speed is unknown, defaulting to 1000 [ 1248.634133][T15245] x_tables: duplicate underflow at hook 1 [ 1249.368524][T15257] lo speed is unknown, defaulting to 1000 [ 1249.704670][T15259] loop2: detected capacity change from 0 to 1024 [ 1249.743846][T15259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.990374][T13644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.106746][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15448'. [ 1250.148127][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 1250.148147][ T29] audit: type=1400 audit(2000000249.310:86852): avc: denied { ioctl } for pid=15266 comm="syz.4.15448" path="socket:[187133]" dev="sockfs" ino=187133 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1250.184911][T15267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15448'. [ 1250.306175][ T29] audit: type=1400 audit(2000000249.350:86853): avc: denied { bind } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1250.326943][ T29] audit: type=1400 audit(2000000249.350:86854): avc: denied { setopt } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1250.347644][ T29] audit: type=1400 audit(2000000249.350:86855): avc: denied { create } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1250.367534][ T29] audit: type=1400 audit(2000000249.350:86856): avc: denied { write } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1250.387533][ T29] audit: type=1400 audit(2000000249.350:86857): avc: denied { write } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1250.408352][ T29] audit: type=1400 audit(2000000249.350:86858): avc: denied { nlmsg_write } for pid=15266 comm="syz.4.15448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1250.792169][T15278] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1250.802487][ T29] audit: type=1326 audit(2000000249.910:86859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.15452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4be72cf749 code=0x0 [ 1250.826027][ T29] audit: type=1326 audit(2000000249.960:86860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.2.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1250.850157][ T29] audit: type=1326 audit(2000000249.960:86861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.2.15449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f70f219f749 code=0x7ffc0000 [ 1250.968880][T15277] lo speed is unknown, defaulting to 1000 [ 1251.899088][T15283] lo speed is unknown, defaulting to 1000 [ 1251.960029][T15285] lo speed is unknown, defaulting to 1000 [ 1252.076154][T15288] IPv6: NLM_F_CREATE should be specified when creating new route [ 1252.821614][T15292] lo speed is unknown, defaulting to 1000 [ 1253.194269][T15298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1253.421715][T15309] loop2: detected capacity change from 0 to 128 [ 1253.440806][T15309] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1253.463175][T15309] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.561392][T13644] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1253.658087][T15312] lo speed is unknown, defaulting to 1000 [ 1253.854002][T15324] ================================================================== [ 1253.862308][T15324] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 1253.869878][T15324] [ 1253.872201][T15324] write to 0xffff888104e3ba00 of 8 bytes by task 15322 on cpu 1: [ 1253.879919][T15324] mas_wr_store_entry+0x1e0d/0x2750 [ 1253.885141][T15324] mas_store_prealloc+0x760/0xa90 [ 1253.890184][T15324] vma_iter_store_new+0x1c5/0x200 [ 1253.895215][T15324] vma_complete+0x125/0x580 [ 1253.900004][T15324] __split_vma+0x59b/0x660 [ 1253.904507][T15324] vma_modify+0xb53/0xd50 [ 1253.908957][T15324] vma_modify_flags+0x10c/0x190 [ 1253.913852][T15324] mprotect_fixup+0x30f/0x5e0 [ 1253.918635][T15324] do_mprotect_pkey+0x6d6/0x980 [ 1253.923487][T15324] __x64_sys_mprotect+0x48/0x60 [ 1253.928356][T15324] x64_sys_call+0x2c3b/0x3000 [ 1253.933127][T15324] do_syscall_64+0xca/0x2b0 [ 1253.937820][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.943898][T15324] [ 1253.946309][T15324] read to 0xffff888104e3ba00 of 8 bytes by task 15324 on cpu 0: [ 1253.954215][T15324] mas_state_walk+0x485/0x650 [ 1253.959005][T15324] mas_walk+0x60/0x150 [ 1253.963084][T15324] lock_vma_under_rcu+0x95/0x1b0 [ 1253.968024][T15324] do_user_addr_fault+0x233/0x1080 [ 1253.973340][T15324] exc_page_fault+0x62/0xa0 [ 1253.977852][T15324] asm_exc_page_fault+0x26/0x30 [ 1253.982710][T15324] [ 1253.985029][T15324] value changed: 0xffff8881237f400e -> 0xffff888104e3ba00 [ 1253.992308][T15324] [ 1253.994644][T15324] Reported by Kernel Concurrency Sanitizer on: [ 1254.000831][T15324] CPU: 0 UID: 0 PID: 15324 Comm: syz.1.15465 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1254.011076][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1254.021233][T15324] ================================================================== [ 1254.097317][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15465'.