last executing test programs: 2.785675441s ago: executing program 3 (id=5077): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') ioctl$TIOCGSID(r2, 0x5429, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/197, 0xc5, 0x4, &(0x7f0000000000)={0x0, 0x3938700}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x2000}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2.664867712s ago: executing program 0 (id=5082): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000022b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000180)=ANY=[@ANYRESOCT]) 2.639747842s ago: executing program 0 (id=5083): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, 0x0, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r1, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f00000003c0)=0x9b, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000000780)=ANY=[@ANYBLOB="2b6370752041e20ce6d6cf91fe128c6bd83f5906d5066f06232c84c3c3089073699747d72513dd86ac4ab0d59754f627723253ae48cec97e3dcdb9b6781adb5ecb3d0a6660848f23f24ed34a00a55fe7b86422c3f7f19ab0f45526a53d103ddded83943a750378d0e9631867e3f6edcbac078a20417fc5a1aa972b5d113c12b8f573fd0fc3c02ced7c1583fbd578814916d1db07a05fa675ff01ea1bbc98f34e019a2473ad753e0def4c572d8cc2757b846f8b264c567122ef8967dbc65357cc23c7d2e28da9b0bf7c1a89f508e16704ca29a56284372a27ffc914e7df0bdc927e1a546c703d7646fcdc786b57ce40069be8c4eaa2"], 0x5) 2.493514193s ago: executing program 0 (id=5085): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000640)={{}, {0x1, 0x3}, [], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x7}, {0x8, 0x7}]}, 0x3c, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 2.483272863s ago: executing program 0 (id=5087): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x4c, r1, 0x1, 0xf6, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000885}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f6ffffff000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = gettid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) keyctl$describe(0x6, r6, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x1a4243c, &(0x7f0000003f40)=ANY=[@ANYRES16=r10, @ANYRES64=r11, @ANYRES16=r6, @ANYRESOCT=r11, @ANYRESDEC=r7, @ANYRES16=r9, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r13, 0x0, 0xffffffffffffff0b}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f00000d5300)={0x8, [{0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {r8}], 0x6, "986ac63f3a5b75"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000d7300)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f00000d7500)={0x5, [{}, {}, {}, {}, {}, {0x0, r26}, {r22}, {}, {}, {}, {}, {r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r25}, {}, {}, {}, {0x0, r36}, {}, {}, {}, {}, {r30}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r46}, {}, {}, {r43}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {0x0, r42}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r29}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r38}, {0x0, r45}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {0x0, r34}, {0x0, r21}, {}, {}, {r40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r39}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r32}, {}, {}, {}, {}, {r37}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r28}, {r18}, {}, {0x0, r33}, {}, {0x0, r35}, {}, {}, {}, {}, {r47}, {}, {}, {0x0, r31}, {}, {}, {}, {}, {0x0, r44}, {0x0, r20}, {0x0, r41}, {}, {r48}], 0x7f, "82c5a292a4bb6c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000c2100)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8e, "82f5c2833b5229"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c3100)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r48, r49}], 0xa9, "dc279663e1459c"}) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r3, 0x1b) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x0) 1.904027247s ago: executing program 3 (id=5096): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x8, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') ioctl$TIOCGSID(r2, 0x5429, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/197, 0xc5, 0x4, &(0x7f0000000000)={0x0, 0x3938700}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.633448829s ago: executing program 0 (id=5098): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2710, &(0x7f0000019440)=""/102400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000040000000000000e0200000000000000000000005f5f006cc84fee7d03de87904e878db9a88c29e93d1ce5be740cb8a0202cee6ae0f83ccd702a7b773d73e26df272519a5f0140f14161a801bb2bc8d61dc0059c7f4c2fd5d6b647ab474ccf7c3cf6179082cc943dfa302f703f3f2a80d10dadfef8d81540ce21317fd8e1e32c8de388c78b43dc32cbf5197c579791b192c82e6a6642dad08f568d8602f5b1fec7836877017a8d8075014954094e"], 0x0, 0x2f}, 0x28) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x10802) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000140)={[{@nogrpid}, {@errors_remount}, {@block_validity}, {@nobarrier}, {@nodiscard}, {@norecovery}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000082c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './control\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r3], 0x9) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xffffffffffffffff, 0x0) statx(r2, &(0x7f0000008440)='./file2\x00', 0x800, 0x40, &(0x7f0000008480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xdf21}, 0x18) statx(r2, &(0x7f0000000640)='./file2\x00', 0x100, 0x100, &(0x7f0000008600)) syz_open_dev$vcsu(&(0x7f0000008740), 0x54e, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.285428861s ago: executing program 2 (id=5106): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={{0x77359400}}) 1.269915741s ago: executing program 2 (id=5108): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2710, &(0x7f0000019440)=""/102400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000040000000000000e0200000000000000000000005f5f006cc84fee7d03de87904e878db9a88c29e93d1ce5be740cb8a0202cee6ae0f83ccd702a7b773d73e26df272519a5f0140f14161a801bb2bc8d61dc0059c7f4c2fd5d6b647ab474ccf7c3cf6179082cc943dfa302f703f3f2a80d10dadfef8d81540ce21317fd8e1e32c8de388c78b43dc32cbf5197c579791b192c82e6a6642dad08f568d8602f5b1fec7836877017a8d8075014954094e"], 0x0, 0x2f}, 0x28) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x10802) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000140)={[{@nogrpid}, {@errors_remount}, {@block_validity}, {@nobarrier}, {@nodiscard}, {@norecovery}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000082c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './control\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r4], 0x9) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r5, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000083c0)) statx(r3, &(0x7f0000008440)='./file2\x00', 0x800, 0x40, &(0x7f0000008480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xdf21}, 0x18) statx(r3, &(0x7f0000000640)='./file2\x00', 0x100, 0x100, &(0x7f0000008600)) syz_open_dev$vcsu(&(0x7f0000008740), 0x54e, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.047767243s ago: executing program 1 (id=5112): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x0) 1.045724413s ago: executing program 3 (id=5113): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 1.025137083s ago: executing program 3 (id=5114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) syz_clone3(&(0x7f0000000640)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x22}, &(0x7f0000000580)=""/162, 0xa2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0], 0x7}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000"], 0x39) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="12"]) 1.008334973s ago: executing program 1 (id=5115): r0 = socket(0x10, 0x2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019680)={0x11, 0x2000000000000077, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019380)={&(0x7f0000019200)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300050000000004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES64=r4], 0xb4}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000340)=0xa, 0x4) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000019740)=""/227, &(0x7f0000019500)=0xe3) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r7}) bpf$PROG_LOAD(0x5, &(0x7f0000019840)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') bpf$MAP_CREATE(0x0, &(0x7f0000019840)=ANY=[], 0x50) getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f00000193c0)={@private1}, &(0x7f0000019340)=0x14) 994.500813ms ago: executing program 4 (id=5116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@fuse_with_parent={0x18, 0x82, {{0x7, 0x2, 0xe8f5}, {0x1, 0x0, 0x80000000}}}, &(0x7f00000002c0), 0x1c00) 982.271223ms ago: executing program 4 (id=5117): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendfile(r4, r4, 0x0, 0x40000f63c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c40002000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082cbd7000fcdbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000001c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="08000000000000000000000007020000f8ffffffb7030000083a2600b704800000000000050000000100"/52], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r10}, 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 860.337414ms ago: executing program 1 (id=5118): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={{0x77359400}}) 860.001694ms ago: executing program 1 (id=5119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) getgroups(0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x7, 0x80, &(0x7f00000006c0)=""/128, 0x41100, 0x34, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x10, 0x1ff}, 0x94) stat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000001700)='./file2\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001880)={0xffffffffffffffff, 0x2, 0x3, 0x6}) setregid(0x0, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') 859.512284ms ago: executing program 1 (id=5120): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000007d000000950400000000000042460a0afc17ec72d8ddaf4efb56f205105e5325a7f2c70de8cd46c2a5a7b4824cc3d592755d49be6abd09027c335b8d11a37358f262bfc5c9bde99680804c95475ca773f7d87022dc1f22763d66d83aab929b506e7349e9be8dd5463f1ffd776beed74fdb2131c5f77448f192d61890d5f3e538f991d6b50e41d6e2c23afa5eea4f970cc0fc5ae71ada51cfda92b8406b1967df1b64b700830c79dda17c57de878c7f7b8be1387e"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x14, 0x0, &(0x7f0000000100)="c1dfa780cd21d308098a000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='fsi_slave_invalid_cfam\x00', r5, 0x0, 0x3}, 0x18) memfd_create(&(0x7f0000000840)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRES64, @ANYRES16=r0], 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0xc880) unlinkat(0xffffffffffffffff, &(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 781.136485ms ago: executing program 0 (id=5121): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=""/194, 0xc2}, {&(0x7f0000000c40)=""/207, 0xcf}], 0x2, &(0x7f0000000580)=""/164, 0xa4}, 0x6}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/111, 0x6f}], 0x1, &(0x7f0000000b80)=""/74, 0x4a}, 0xc}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000002380)=[{0x0}, {0x0}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/245, 0xf5}, {0x0}, {&(0x7f0000001080)=""/65, 0x41}], 0x6, &(0x7f0000002c00)=""/107, 0x6b}, 0x4}], 0x4, 0x40000001, 0x0) 420.177917ms ago: executing program 2 (id=5122): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) 402.365298ms ago: executing program 2 (id=5123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) timerfd_create(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffff68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x1fd, 0x2, 0x0, 0x100, &(0x7f0000000440)="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"}) 313.876658ms ago: executing program 2 (id=5124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000140001000008000000000000020000ff1f14b030016b15951d6df33ade4e74a4e3781c64f8c053ad8d08ee90617c8879a86911f723d99963fd860728a3f8e5f493628333da2d835e5346b99d13b3cf3dc656616f997489a2e8dcdcbc1fbcd7cce316ed41b9d621dbdadd76922d61118c79515732ee812e1b54e07c", @ANYRES32=r7, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r10, 0x0, 0x23, 0x0, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x8}, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r3, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r13}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f00000003c0)=0x9b, 0x0) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r12, &(0x7f0000000780)=ANY=[@ANYBLOB="2b6370752041e20ce6d6cf91fe128c6bd83f5906d5066f06232c84c3c3089073699747d72513dd86ac4ab0d59754f627723253ae48cec97e3dcdb9b6781adb5ecb3d0a6660848f23f24ed34a00a55fe7b86422c3f7f19ab0f45526a53d103ddded83943a750378d0e9631867e3f6edcbac078a20417fc5a1aa972b5d113c12b8f573fd0fc3c02ced7c1583fbd578814916d1db07a05fa675ff01ea1bbc98f34e019a2473ad753e0def4c572d8cc2757b846f8b264c567122ef8967dbc65357cc23c7d2e28da9b0bf7c1a89f508e16704ca29a56284372a27ffc914e7df0bdc927e1a546c703d7646fcdc786b57ce40069be8c4eaa2"], 0x5) socket$nl_audit(0x10, 0x3, 0x9) 175.667479ms ago: executing program 3 (id=5125): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000140001000008000000000000020000ff1f14b030016b15951d6df33ade4e74a4e3781c64f8c053ad8d08ee90617c8879a86911f723d99963fd860728a3f8e5f493628333da2d835e5346b99d13b3cf3dc656616f997489a2e8dcdcbc1fbcd7cce316ed41b9d621dbdadd76922d61118c79515732ee812e1b54e07cef88aa64b0553937f58b03028c71456930aa5015967b010718f30acdc48b3a5e2f0f8d470e48f82f6ab7", @ANYRES32=r7], 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r10, 0x0, 0x23, 0x0, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x8}, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r3, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r13}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f00000003c0)=0x9b, 0x0) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r12, &(0x7f0000000780)=ANY=[@ANYBLOB="2b6370752041e20ce6d6cf91fe128c6bd83f5906d5066f06232c84c3c3089073699747d72513dd86ac4ab0d59754f627723253ae48cec97e3dcdb9b6781adb5ecb3d0a6660848f23f24ed34a00a55fe7b86422c3f7f19ab0f45526a53d103ddded83943a750378d0e9631867e3f6edcbac078a20417fc5a1aa972b5d113c12b8f573fd0fc3c02ced7c1583fbd578814916d1db07a05fa675ff01ea1bbc98f34e019a2473ad753e0def4c572d8cc2757b846f8b264c567122ef8967dbc65357cc23c7d2e28da9b0bf7c1a89f508e16704ca29a56284372a27ffc914e7df0bdc927e1a546c703d7646fcdc786b57ce40069be8c4eaa2"], 0x5) socket$nl_audit(0x10, 0x3, 0x9) 131.173929ms ago: executing program 2 (id=5126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, 0x0, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r1, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x9b, 0x7b, ""/123}, &(0x7f00000003c0)=0x9b, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000000780)=ANY=[@ANYBLOB="2b6370752041e20ce6d6cf91fe128c6bd83f5906d5066f06232c84c3c3089073699747d72513dd86ac4ab0d59754f627723253ae48cec97e3dcdb9b6781adb5ecb3d0a6660848f23f24ed34a00a55fe7b86422c3f7f19ab0f45526a53d103ddded83943a750378d0e9631867e3f6edcbac078a20417fc5a1aa972b5d113c12b8f573fd0fc3c02ced7c1583fbd578814916d1db07a05fa675ff01ea1bbc98f34e019a2473ad753e0def4c572d8cc2757b846f8b264c567122ef8967dbc65357cc23c7d2e28da9b0bf7c1a89f508e16704ca29a56284372a27ffc914e7df0bdc927e1a546c703d7646fcdc786b57ce40069be8c4eaa2"], 0x5) 104.625269ms ago: executing program 4 (id=5127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c8", 0x2, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) 47.63662ms ago: executing program 4 (id=5128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000a7037aae9402002abd7000fedbdf", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0x80c5}, 0x40008880) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000228bd7000ffdbc140e1df252c00"/25], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r10], 0x22c}}, 0x0) 17.97761ms ago: executing program 3 (id=5129): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}}, 0x0) 16.33157ms ago: executing program 4 (id=5130): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={{0x77359400}}) 3.41811ms ago: executing program 4 (id=5131): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2710, &(0x7f0000019440)=""/102400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000040000000000000e0200000000000000000000005f5f006cc84fee7d03de87904e878db9a88c29e93d1ce5be740cb8a0202cee6ae0f83ccd702a7b773d73e26df272519a5f0140f14161a801bb2bc8d61dc0059c7f4c2fd5d6b647ab474ccf7c3cf6179082cc943dfa302f703f3f2a80d10dadfef8d81540ce21317fd8e1e32c8de388c78b43dc32cbf5197c579791b192c82e6a6642dad08f568d8602f5b1fec7836877017a8d8075014954094e"], 0x0, 0x2f}, 0x28) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x10802) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000140)={[{@nogrpid}, {@errors_remount}, {@block_validity}, {@nobarrier}, {@nodiscard}, {@norecovery}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000082c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './control\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r3], 0x9) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xffffffffffffffff, 0x0) statx(r2, &(0x7f0000008440)='./file2\x00', 0x800, 0x40, &(0x7f0000008480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xdf21}, 0x18) statx(r2, &(0x7f0000000640)='./file2\x00', 0x100, 0x100, &(0x7f0000008600)) syz_open_dev$vcsu(&(0x7f0000008740), 0x54e, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 0s ago: executing program 1 (id=5132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000700000001000100490000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0xa, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000200)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)={0x328, 0x26, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x317, 0xf2, 0x0, 0x1, [@nested={0x20d, 0xa4, 0x0, 0x1, [@generic="8f6fa8011441f76d434ada7ee3", @nested={0x1f9, 0x31, 0x0, 0x1, [@nested={0x4, 0x9a}, @typed={0x8, 0x71, 0x0, 0x0, @uid=r5}, @generic="748cb5e095f8007f0a26311ac2e161ba93cb4a6547548166dc895f1ca5de638f14b11157714d413ee522e5691c", @generic="39d051d846a8b522", @generic="8dee52daf7afb19a6b77", @nested={0x4, 0x29}, @generic="abe68975127217e1aeb1326690b90c6bd831bf1b519f57099338e74962e845359f31365206c32d210ff0cf4a650fbd4b67de33e256c58bcd7b18b96ed5b53613150017e7f3451b27c5ff890bf48a1ad7c3100701667f4b68a6481957a3ea54ec977436fc0faa40da2a2a3da3f79729394be8445941c23ed6c2213fad0c4ccdab4586", @generic="9695bb21a6a789c6b51f33f2317b25b8d212f168abb2572476b2c697c04e7fdf3c792b28fa2326e625666c2ba717a64fa46f3f326a9190c4ee0a094a7da153a16f3f1e740ddcf0d6256fed6a62ffb699e9f85d81e3cdab616ea6894028cea32074d5434df7f269408f460cb9822b2bd17ca9252536193eb8b43e0f4bc4e0e73be78c460511a2eea8b19597cce4b26f7494c569b9848a3207", @generic="1a79f70af5277ca9441e0396838e7bd28d0017bb308202600498a1dc6de6036dfde9ffa8bda6c17cb066372ffc04e44e60d612d41f27039d74084b01a069a2e8f786a0160bef251a9bb469f05f54f7a83d18cdfb1d42fa3182f646cd7dcea11393a405e6784d9457203720433a4e2f11e210b1b95ffe99fe1a4fbaab40b05679a60b1cdc61a705dcb6854164"]}]}, @typed={0x24, 0x1, 0x0, 0x0, @binary="0cd748895781e32c152d52ca0952aba6f499493610cacf071956a96da8bfa56d"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bae3697bd7b85b3a682167c43dbf137115a49ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dd45817c80000000000", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x328}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={{0x77359400}, {r8, r9/1000+60000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000002c0)='GPL\x00', 0x62f5, 0xcd, &(0x7f0000000600)=""/205, 0x40f00, 0x18, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x894}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x0, 0x10, 0x12c4}, 0x94) kernel console output (not intermixed with test programs): e0 [ 272.538085][T13518] ? __rcu_read_unlock+0x4f/0x70 [ 272.538108][T13518] ? mt_find+0x208/0x320 [ 272.538165][T13518] do_user_addr_fault+0x3fe/0x1080 [ 272.538192][T13518] exc_page_fault+0x62/0xa0 [ 272.538221][T13518] asm_exc_page_fault+0x26/0x30 [ 272.538240][T13518] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 272.538269][T13518] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f9 01 00 66 2e [ 272.538301][T13518] RSP: 0018:ffffc9000146fc48 EFLAGS: 00050202 [ 272.538319][T13518] RAX: ffff888119204ca0 RBX: 0000000000000004 RCX: 0000000000000004 [ 272.538332][T13518] RDX: 0000000000000001 RSI: 0000200000001440 RDI: ffffc9000146fcd4 [ 272.538345][T13518] RBP: 0000000000000001 R08: 000000000000082c R09: 0000000000000000 [ 272.538358][T13518] R10: 0001c9000146fcd4 R11: 0001c9000146fcd7 R12: 0000200000001440 [ 272.538373][T13518] R13: 0000000000000036 R14: ffffc9000146fcd4 R15: 0000200000001440 [ 272.538460][T13518] _copy_from_user+0x6f/0xb0 [ 272.538488][T13518] do_ipv6_setsockopt+0x124/0x2160 [ 272.538523][T13518] ? __rcu_read_unlock+0x4f/0x70 [ 272.538550][T13518] ? calipso_sock_getattr+0x224/0x340 [ 272.538597][T13518] ? __rcu_read_unlock+0x4f/0x70 [ 272.538641][T13518] ? ip6_datagram_release_cb+0xf8/0x160 [ 272.538668][T13518] ? _raw_spin_unlock_bh+0x36/0x40 [ 272.538745][T13518] ? release_sock+0x116/0x150 [ 272.538785][T13518] ? selinux_netlbl_socket_setsockopt+0x255/0x2d0 [ 272.538819][T13518] ipv6_setsockopt+0x59/0x130 [ 272.538851][T13518] udpv6_setsockopt+0x99/0xb0 [ 272.538876][T13518] sock_common_setsockopt+0x69/0x80 [ 272.538898][T13518] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.538924][T13518] __sys_setsockopt+0x184/0x200 [ 272.539027][T13518] __x64_sys_setsockopt+0x64/0x80 [ 272.539121][T13518] x64_sys_call+0x20ec/0x3000 [ 272.539141][T13518] do_syscall_64+0xd2/0x200 [ 272.539180][T13518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.539214][T13518] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.539244][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.539264][T13518] RIP: 0033:0x7f48fafdf6c9 [ 272.539351][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.539370][T13518] RSP: 002b:00007f48f9a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.539389][T13518] RAX: ffffffffffffffda RBX: 00007f48fb235fa0 RCX: 00007f48fafdf6c9 [ 272.539402][T13518] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000003 [ 272.539413][T13518] RBP: 00007f48f9a47090 R08: 00000000000000c0 R09: 0000000000000000 [ 272.539442][T13518] R10: 0000200000001440 R11: 0000000000000246 R12: 0000000000000001 [ 272.539452][T13518] R13: 00007f48fb236038 R14: 00007f48fb235fa0 R15: 00007fff7a2b3bb8 [ 272.539468][T13518] [ 272.927982][T13526] SELinux: failed to load policy [ 272.995263][T13534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3656'. [ 273.004357][T13534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3656'. [ 273.013341][T13534] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3656'. [ 273.034066][T13536] netlink: 'syz.3.3657': attribute type 3 has an invalid length. [ 273.155845][T13554] random: crng reseeded on system resumption [ 273.225101][T13560] SELinux: failed to load policy [ 273.614523][T13593] SELinux: failed to load policy [ 273.833955][T13608] FAULT_INJECTION: forcing a failure. [ 273.833955][T13608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.837631][T13606] SELinux: failed to load policy [ 273.847114][T13608] CPU: 1 UID: 0 PID: 13608 Comm: syz.1.3683 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.847138][T13608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.847151][T13608] Call Trace: [ 273.847225][T13608] [ 273.847233][T13608] __dump_stack+0x1d/0x30 [ 273.847337][T13608] dump_stack_lvl+0xe8/0x140 [ 273.847358][T13608] dump_stack+0x15/0x1b [ 273.847376][T13608] should_fail_ex+0x265/0x280 [ 273.847396][T13608] should_fail+0xb/0x20 [ 273.847490][T13608] should_fail_usercopy+0x1a/0x20 [ 273.847511][T13608] strncpy_from_user+0x25/0x230 [ 273.847538][T13608] ? kmem_cache_alloc_noprof+0x242/0x480 [ 273.847567][T13608] ? getname_flags+0x80/0x3b0 [ 273.847643][T13608] getname_flags+0xae/0x3b0 [ 273.847673][T13608] io_mkdirat_prep+0x12d/0x190 [ 273.847702][T13608] io_submit_sqes+0x5ef/0x1060 [ 273.847741][T13608] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 273.847856][T13608] ? 0xffffffff81000000 [ 273.847907][T13608] ? __rcu_read_unlock+0x4f/0x70 [ 273.847954][T13608] ? get_pid_task+0x96/0xd0 [ 273.847978][T13608] ? proc_fail_nth_write+0x13b/0x160 [ 273.848043][T13608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.848074][T13608] ? vfs_write+0x7e8/0x960 [ 273.848099][T13608] ? __rcu_read_unlock+0x4f/0x70 [ 273.848157][T13608] ? __fget_files+0x184/0x1c0 [ 273.848185][T13608] ? fput+0x8f/0xc0 [ 273.848282][T13608] __x64_sys_io_uring_enter+0x78/0x90 [ 273.848322][T13608] x64_sys_call+0x2df0/0x3000 [ 273.848422][T13608] do_syscall_64+0xd2/0x200 [ 273.848516][T13608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.848544][T13608] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 273.848576][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.848597][T13608] RIP: 0033:0x7f9269e0f6c9 [ 273.848620][T13608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.848638][T13608] RSP: 002b:00007f9268877038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 273.848697][T13608] RAX: ffffffffffffffda RBX: 00007f926a065fa0 RCX: 00007f9269e0f6c9 [ 273.848710][T13608] RDX: 0000000000003acd RSI: 0000000000005535 RDI: 0000000000000003 [ 273.848722][T13608] RBP: 00007f9268877090 R08: 0000000000000000 R09: 0000000000000000 [ 273.848734][T13608] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 273.848751][T13608] R13: 00007f926a066038 R14: 00007f926a065fa0 R15: 00007ffc05e7c868 [ 273.848770][T13608] [ 274.159806][T13622] 9pnet_fd: Insufficient options for proto=fd [ 274.277786][T13637] block device autoloading is deprecated and will be removed. [ 274.505868][T13642] SELinux: policydb magic number 0xfff70003 does not match expected magic number 0xf97cff8c [ 274.516162][T13642] SELinux: failed to load policy [ 274.639479][T13655] SELinux: failed to load policy [ 274.703400][ T29] kauditd_printk_skb: 1391 callbacks suppressed [ 274.703415][ T29] audit: type=1400 audit(1762276072.013:113072): avc: denied { bind } for pid=13661 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.714639][T13662] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 274.730660][ T29] audit: type=1400 audit(1762276072.013:113073): avc: denied { setopt } for pid=13661 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.754061][T13662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.782886][T13662] bond1 (unregistering): Released all slaves [ 274.844103][T13665] netlink: 'syz.2.3707': attribute type 3 has an invalid length. [ 274.929101][T13667] SELinux: failed to load policy [ 274.951866][ T29] audit: type=1400 audit(1762276072.263:113074): avc: denied { create } for pid=13668 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.972787][ T29] audit: type=1400 audit(1762276072.263:113075): avc: denied { write } for pid=13668 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.993429][ T29] audit: type=1400 audit(1762276072.263:113076): avc: denied { nlmsg_write } for pid=13668 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.017649][ T29] audit: type=1400 audit(1762276072.283:113077): avc: denied { read } for pid=13668 comm="syz.2.3709" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 275.039362][ T29] audit: type=1400 audit(1762276072.283:113078): avc: denied { open } for pid=13668 comm="syz.2.3709" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 275.063158][ T29] audit: type=1400 audit(1762276072.283:113079): avc: denied { allowed } for pid=13668 comm="syz.2.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 275.083055][ T29] audit: type=1400 audit(1762276072.303:113080): avc: denied { create } for pid=13668 comm="syz.2.3709" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.113175][ T29] audit: type=1400 audit(1762276072.423:113081): avc: denied { write } for pid=13670 comm="syz.4.3710" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.298109][T13671] SELinux: failed to load policy [ 275.487957][T13695] SELinux: failed to load policy [ 275.559651][T13711] block device autoloading is deprecated and will be removed. [ 275.569452][T13713] 9pnet_fd: Insufficient options for proto=fd [ 275.931398][T13735] usb usb8: usbfs: process 13735 (syz.2.3738) did not claim interface 0 before use [ 276.210321][T13744] __nla_validate_parse: 24 callbacks suppressed [ 276.210338][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'. [ 276.311637][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 276.411286][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 276.420567][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 276.430347][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 276.611827][T13767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3750'. [ 276.651204][T13767] netlink: 'syz.1.3750': attribute type 3 has an invalid length. [ 276.827636][T13785] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 276.907702][T13789] Illegal XDP return value 4294967274 on prog (id 2555) dev N/A, expect packet loss! [ 277.033540][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 277.068599][T13794] block device autoloading is deprecated and will be removed. [ 277.115800][T13798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3762'. [ 277.125151][T13798] netlink: 'syz.1.3762': attribute type 3 has an invalid length. [ 277.188259][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 277.212986][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 277.457469][T13826] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 277.472105][T13828] netlink: 'syz.4.3774': attribute type 3 has an invalid length. [ 277.582437][T13834] netlink: 'syz.3.3775': attribute type 3 has an invalid length. [ 277.712472][T13852] 9pnet_fd: Insufficient options for proto=fd [ 277.754383][T13862] netlink: 'syz.2.3787': attribute type 3 has an invalid length. [ 277.792599][T13867] netlink: 'syz.4.3790': attribute type 3 has an invalid length. [ 277.928202][T13888] 9pnet_fd: Insufficient options for proto=fd [ 278.147934][T13897] netlink: 'syz.4.3801': attribute type 3 has an invalid length. [ 278.171532][T13899] netlink: 'syz.4.3802': attribute type 3 has an invalid length. [ 278.433514][T13923] netlink: 'syz.4.3812': attribute type 3 has an invalid length. [ 278.455682][T13925] netlink: 'syz.4.3813': attribute type 3 has an invalid length. [ 278.552438][T13942] syzkaller0: entered promiscuous mode [ 278.557972][T13942] syzkaller0: entered allmulticast mode [ 278.603376][T13948] 9pnet: Could not find request transport: fd0x0000000000000005 [ 278.703755][T13964] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13964 comm=syz.3.3827 [ 278.738353][T13968] 9pnet_fd: Insufficient options for proto=fd [ 278.901207][T13984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13984 comm=syz.2.3838 [ 279.391842][T14027] block device autoloading is deprecated and will be removed. [ 279.414751][T14029] FAULT_INJECTION: forcing a failure. [ 279.414751][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.427945][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.1.3854 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.427999][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.428011][T14029] Call Trace: [ 279.428017][T14029] [ 279.428023][T14029] __dump_stack+0x1d/0x30 [ 279.428045][T14029] dump_stack_lvl+0xe8/0x140 [ 279.428067][T14029] dump_stack+0x15/0x1b [ 279.428144][T14029] should_fail_ex+0x265/0x280 [ 279.428161][T14029] should_fail+0xb/0x20 [ 279.428240][T14029] should_fail_usercopy+0x1a/0x20 [ 279.428264][T14029] copy_to_user_nofault+0x7f/0x120 [ 279.428283][T14029] bpf_probe_write_user+0x83/0xc0 [ 279.428305][T14029] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 279.428320][T14029] bpf_trace_run2+0x107/0x1c0 [ 279.428415][T14029] ? ghash_exit_tfm+0x2c/0x40 [ 279.428431][T14029] ? rep_movs_alternative+0x1e/0x90 [ 279.428454][T14029] ? ghash_exit_tfm+0x2c/0x40 [ 279.428488][T14029] ? __pfx_ghash_exit_tfm+0x10/0x10 [ 279.428504][T14029] kfree+0x351/0x400 [ 279.428527][T14029] ? __pfx_ghash_exit_tfm+0x10/0x10 [ 279.428543][T14029] ghash_exit_tfm+0x2c/0x40 [ 279.428559][T14029] crypto_destroy_tfm+0xca/0x240 [ 279.428602][T14029] ? __pfx_crypto_exit_ahash_using_shash+0x10/0x10 [ 279.428625][T14029] crypto_exit_ahash_using_shash+0x22/0x30 [ 279.428676][T14029] crypto_destroy_tfm+0x10e/0x240 [ 279.428702][T14029] ? __pfx_crypto_aead_exit_tfm+0x10/0x10 [ 279.428795][T14029] crypto_gcm_exit_tfm+0x29/0x50 [ 279.428821][T14029] crypto_aead_exit_tfm+0x36/0x40 [ 279.428843][T14029] crypto_destroy_tfm+0x10e/0x240 [ 279.428870][T14029] tls_sw_release_resources_tx+0x27b/0x310 [ 279.428938][T14029] tls_sk_proto_close+0x1aa/0x520 [ 279.428961][T14029] inet_release+0xce/0xf0 [ 279.428980][T14029] inet6_release+0x3e/0x60 [ 279.429024][T14029] sock_close+0x6b/0x150 [ 279.429044][T14029] ? __pfx_sock_close+0x10/0x10 [ 279.429062][T14029] __fput+0x29b/0x650 [ 279.429101][T14029] ____fput+0x1c/0x30 [ 279.429118][T14029] task_work_run+0x131/0x1a0 [ 279.429147][T14029] exit_to_user_mode_loop+0xed/0x110 [ 279.429191][T14029] do_syscall_64+0x1d6/0x200 [ 279.429211][T14029] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.429313][T14029] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.429340][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.429402][T14029] RIP: 0033:0x7f9269e0f6c9 [ 279.429415][T14029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.429431][T14029] RSP: 002b:00007f9268877038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 279.429448][T14029] RAX: 0000000000000000 RBX: 00007f926a065fa0 RCX: 00007f9269e0f6c9 [ 279.429459][T14029] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 279.429544][T14029] RBP: 00007f9268877090 R08: 0000000000000000 R09: 0000000000000000 [ 279.429555][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.429566][T14029] R13: 00007f926a066038 R14: 00007f926a065fa0 R15: 00007ffc05e7c868 [ 279.429581][T14029] [ 279.746034][ T29] kauditd_printk_skb: 4266 callbacks suppressed [ 279.746048][ T29] audit: type=1400 audit(1762276077.053:117348): avc: denied { read write } for pid=11992 comm="syz-executor" name="loop3" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.775967][ T29] audit: type=1400 audit(1762276077.053:117349): avc: denied { open } for pid=11992 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.858912][ T29] audit: type=1400 audit(1762276077.113:117350): avc: denied { ioctl } for pid=11992 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=709 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.883930][ T29] audit: type=1400 audit(1762276077.123:117351): avc: denied { create } for pid=14032 comm="syz.3.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.904866][ T29] audit: type=1400 audit(1762276077.123:117352): avc: denied { write } for pid=14032 comm="syz.3.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.925284][ T29] audit: type=1400 audit(1762276077.123:117353): avc: denied { nlmsg_write } for pid=14032 comm="syz.3.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.946324][ T29] audit: type=1400 audit(1762276077.123:117354): avc: denied { read } for pid=14032 comm="+}[@" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.970545][ T29] audit: type=1400 audit(1762276077.123:117355): avc: denied { open } for pid=14032 comm="+}[@" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 279.995211][ T29] audit: type=1400 audit(1762276077.133:117356): avc: denied { ioctl } for pid=14032 comm="+}[@" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.026316][ T29] audit: type=1400 audit(1762276077.303:117357): avc: denied { create } for pid=14039 comm="syz.4.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.145981][T14052] 9pnet_fd: Insufficient options for proto=fd [ 280.300475][T14063] sel_write_load: 4 callbacks suppressed [ 280.300784][T14063] SELinux: failed to load policy [ 280.303944][T14067] 9pnet_fd: Insufficient options for proto=fd [ 280.305087][T14066] 9pnet_fd: Insufficient options for proto=fd [ 280.435578][T14076] FAULT_INJECTION: forcing a failure. [ 280.435578][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 280.448297][T14076] CPU: 1 UID: 0 PID: 14076 Comm: syz.3.3875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.448371][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.448383][T14076] Call Trace: [ 280.448389][T14076] [ 280.448395][T14076] __dump_stack+0x1d/0x30 [ 280.448461][T14076] dump_stack_lvl+0xe8/0x140 [ 280.448529][T14076] dump_stack+0x15/0x1b [ 280.448548][T14076] should_fail_ex+0x265/0x280 [ 280.448620][T14076] should_failslab+0x8c/0xb0 [ 280.448648][T14076] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 280.448684][T14076] ? __d_alloc+0x3d/0x340 [ 280.448714][T14076] __d_alloc+0x3d/0x340 [ 280.448804][T14076] ? __rcu_read_unlock+0x4f/0x70 [ 280.448828][T14076] d_alloc_parallel+0x58/0xc70 [ 280.448845][T14076] ? lockref_get_not_dead+0x120/0x1c0 [ 280.448938][T14076] ? __rcu_read_unlock+0x4f/0x70 [ 280.448965][T14076] __lookup_slow+0x8c/0x250 [ 280.448986][T14076] lookup_slow+0x3c/0x60 [ 280.449002][T14076] walk_component+0x1ec/0x220 [ 280.449086][T14076] path_lookupat+0xfe/0x2a0 [ 280.449114][T14076] filename_lookup+0x147/0x340 [ 280.449155][T14076] user_path_at+0x3e/0x130 [ 280.449271][T14076] do_sys_truncate+0x5c/0x130 [ 280.449296][T14076] __x64_sys_truncate+0x31/0x40 [ 280.449442][T14076] x64_sys_call+0x1a2f/0x3000 [ 280.449462][T14076] do_syscall_64+0xd2/0x200 [ 280.449486][T14076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.449515][T14076] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.449623][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.449717][T14076] RIP: 0033:0x7f1daf72f6c9 [ 280.449755][T14076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.449771][T14076] RSP: 002b:00007f1dae18f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 280.449792][T14076] RAX: ffffffffffffffda RBX: 00007f1daf985fa0 RCX: 00007f1daf72f6c9 [ 280.449805][T14076] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000200000002540 [ 280.449831][T14076] RBP: 00007f1dae18f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.449844][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.449855][T14076] R13: 00007f1daf986038 R14: 00007f1daf985fa0 R15: 00007ffe634f2468 [ 280.449873][T14076] [ 280.607152][T14092] SELinux: failed to load policy [ 281.015179][T14113] 9pnet_fd: Insufficient options for proto=fd [ 281.117115][T14121] SELinux: failed to load policy [ 281.909089][T14152] __nla_validate_parse: 25 callbacks suppressed [ 281.909105][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3905'. [ 281.924939][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3905'. [ 281.934503][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3905'. [ 281.999638][T14154] SELinux: failed to load policy [ 282.069510][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 282.079717][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3912'. [ 282.081934][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3910'. [ 282.106983][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3910'. [ 282.127621][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3910'. [ 282.136808][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3910'. [ 282.145850][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3910'. [ 282.155394][T14162] validate_nla: 3 callbacks suppressed [ 282.155429][T14162] netlink: 'syz.2.3910': attribute type 6 has an invalid length. [ 282.189315][T14175] 9pnet_fd: Insufficient options for proto=fd [ 282.311757][T14196] netlink: 'syz.1.3927': attribute type 1 has an invalid length. [ 282.327519][T14196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.343560][T14196] bond2 (unregistering): Released all slaves [ 282.412396][T14208] netlink: 'syz.4.3932': attribute type 3 has an invalid length. [ 282.449897][T14217] netlink: 'syz.4.3935': attribute type 3 has an invalid length. [ 282.625469][T14235] SELinux: failed to load policy [ 282.662554][T14239] netlink: 'syz.4.3943': attribute type 6 has an invalid length. [ 283.276800][T14259] SELinux: failed to load policy [ 283.339940][T14266] netlink: 'syz.1.3956': attribute type 6 has an invalid length. [ 283.418492][T14272] netlink: 'syz.1.3958': attribute type 3 has an invalid length. [ 283.541016][T14293] netlink: 'syz.3.3968': attribute type 6 has an invalid length. [ 283.610589][T14298] netlink: 'syz.2.3970': attribute type 3 has an invalid length. [ 283.774653][T14322] netlink: 'syz.3.3982': attribute type 3 has an invalid length. [ 284.555151][T14339] SELinux: failed to load policy [ 284.560882][T14339] SELinux: failed to load policy [ 284.594634][T14342] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 284.648477][T14348] 9pnet_fd: Insufficient options for proto=fd [ 284.772409][ T29] kauditd_printk_skb: 2735 callbacks suppressed [ 284.772422][ T29] audit: type=1400 audit(1762276082.083:120093): avc: denied { create } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.798771][ T29] audit: type=1400 audit(1762276082.083:120094): avc: denied { bind } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.818479][ T29] audit: type=1400 audit(1762276082.083:120095): avc: denied { listen } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.838329][ T29] audit: type=1400 audit(1762276082.083:120096): avc: denied { connect } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.858335][ T29] audit: type=1400 audit(1762276082.083:120097): avc: denied { accept } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.878300][ T29] audit: type=1400 audit(1762276082.083:120098): avc: denied { write } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.898292][ T29] audit: type=1400 audit(1762276082.083:120099): avc: denied { read } for pid=14356 comm="syz.2.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.186563][ T29] audit: type=1400 audit(1762276082.493:120100): avc: denied { block_suspend } for pid=14358 comm="syz.4.3997" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.223955][ T29] audit: type=1400 audit(1762276082.533:120101): avc: denied { write } for pid=14360 comm="syz.0.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.245288][ T29] audit: type=1400 audit(1762276082.533:120102): avc: denied { read } for pid=14360 comm="syz.0.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.316542][T14368] SELinux: failed to load policy [ 285.554787][T14375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.583323][T14375] bond3 (unregistering): Released all slaves [ 285.713378][T14388] smc: net device bond0 erased user defined pnetid SYZ0 [ 285.977821][T14395] SELinux: security_context_str_to_sid () failed with errno=-22 [ 286.033217][T14397] FAULT_INJECTION: forcing a failure. [ 286.033217][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 286.045883][T14397] CPU: 0 UID: 0 PID: 14397 Comm: syz.4.4012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.045909][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.045922][T14397] Call Trace: [ 286.045929][T14397] [ 286.045936][T14397] __dump_stack+0x1d/0x30 [ 286.046011][T14397] dump_stack_lvl+0xe8/0x140 [ 286.046031][T14397] dump_stack+0x15/0x1b [ 286.046047][T14397] should_fail_ex+0x265/0x280 [ 286.046107][T14397] should_failslab+0x8c/0xb0 [ 286.046133][T14397] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 286.046159][T14397] ? __alloc_skb+0x101/0x320 [ 286.046185][T14397] __alloc_skb+0x101/0x320 [ 286.046290][T14397] netlink_alloc_large_skb+0xbf/0xf0 [ 286.046319][T14397] netlink_sendmsg+0x3cf/0x6b0 [ 286.046337][T14397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.046407][T14397] __sock_sendmsg+0x145/0x180 [ 286.046503][T14397] ____sys_sendmsg+0x31e/0x4e0 [ 286.046574][T14397] ___sys_sendmsg+0x17b/0x1d0 [ 286.046606][T14397] __x64_sys_sendmsg+0xd4/0x160 [ 286.046625][T14397] x64_sys_call+0x191e/0x3000 [ 286.046762][T14397] do_syscall_64+0xd2/0x200 [ 286.046779][T14397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.046859][T14397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 286.046886][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.046905][T14397] RIP: 0033:0x7fa7d1e5f6c9 [ 286.046919][T14397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.046976][T14397] RSP: 002b:00007fa7d08c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.046998][T14397] RAX: ffffffffffffffda RBX: 00007fa7d20b5fa0 RCX: 00007fa7d1e5f6c9 [ 286.047010][T14397] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 286.047021][T14397] RBP: 00007fa7d08c7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.047047][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.047058][T14397] R13: 00007fa7d20b6038 R14: 00007fa7d20b5fa0 R15: 00007ffdadfddb18 [ 286.047074][T14397] [ 286.334172][T14412] 9pnet_fd: Insufficient options for proto=fd [ 286.459287][T14426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.471565][T14426] bond1 (unregistering): Released all slaves [ 286.515381][T14431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.532035][T14431] bond3 (unregistering): Released all slaves [ 286.641092][T14440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.051532][T14460] __nla_validate_parse: 49 callbacks suppressed [ 287.051550][T14460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4034'. [ 287.080945][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 287.091046][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 287.261049][T14465] SELinux: failed to load policy [ 287.280987][T14465] SELinux: failed to load policy [ 287.347297][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4038'. [ 287.356959][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4038'. [ 287.394380][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4039'. [ 287.404771][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4039'. [ 287.444369][T14475] validate_nla: 5 callbacks suppressed [ 287.444409][T14475] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 287.470689][T14475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.483263][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4040'. [ 288.054081][T14490] bridge_slave_0: left allmulticast mode [ 288.059815][T14490] bridge_slave_0: left promiscuous mode [ 288.065593][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.097391][T14490] bridge_slave_1: left allmulticast mode [ 288.103080][T14490] bridge_slave_1: left promiscuous mode [ 288.108753][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.139614][T14490] bond0: (slave bond_slave_0): Releasing backup interface [ 288.159217][T14490] bond0: (slave bond_slave_1): Releasing backup interface [ 288.192225][T14490] team0: Port device team_slave_0 removed [ 288.292132][T14490] team0: Port device team_slave_1 removed [ 288.300005][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.307449][T14490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.326961][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.334548][T14490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.343342][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4049'. [ 288.354744][T14490] net_ratelimit: 50 callbacks suppressed [ 288.354776][T14490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.356252][T14500] FAULT_INJECTION: forcing a failure. [ 288.356252][T14500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.361216][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'. [ 288.376521][T14500] CPU: 0 UID: 0 PID: 14500 Comm: syz.4.4050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.376549][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.376664][T14500] Call Trace: [ 288.376710][T14500] [ 288.376718][T14500] __dump_stack+0x1d/0x30 [ 288.376741][T14500] dump_stack_lvl+0xe8/0x140 [ 288.376761][T14500] dump_stack+0x15/0x1b [ 288.376779][T14500] should_fail_ex+0x265/0x280 [ 288.376799][T14500] should_fail+0xb/0x20 [ 288.376885][T14500] should_fail_usercopy+0x1a/0x20 [ 288.376906][T14500] _copy_from_user+0x1c/0xb0 [ 288.376936][T14500] ucma_write+0xd9/0x250 [ 288.377027][T14500] ? __pfx_ucma_write+0x10/0x10 [ 288.377050][T14500] vfs_write+0x269/0x960 [ 288.377075][T14500] ? __rcu_read_unlock+0x4f/0x70 [ 288.377102][T14500] ? __fget_files+0x184/0x1c0 [ 288.377179][T14500] ksys_write+0xda/0x1a0 [ 288.377205][T14500] __x64_sys_write+0x40/0x50 [ 288.377230][T14500] x64_sys_call+0x2802/0x3000 [ 288.377254][T14500] do_syscall_64+0xd2/0x200 [ 288.377346][T14500] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 288.377379][T14500] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 288.377412][T14500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.377433][T14500] RIP: 0033:0x7fa7d1e5f6c9 [ 288.377458][T14500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.377476][T14500] RSP: 002b:00007fa7d08c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.377496][T14500] RAX: ffffffffffffffda RBX: 00007fa7d20b5fa0 RCX: 00007fa7d1e5f6c9 [ 288.377509][T14500] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 288.377578][T14500] RBP: 00007fa7d08c7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.377590][T14500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.377602][T14500] R13: 00007fa7d20b6038 R14: 00007fa7d20b5fa0 R15: 00007ffdadfddb18 [ 288.377620][T14500] [ 288.393597][ T8631] syz!: Port: 1 Link DOWN [ 288.632241][T14507] netlink: 'syz.0.4052': attribute type 1 has an invalid length. [ 288.659898][T14507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.548184][T14541] netlink: 'syz.0.4066': attribute type 1 has an invalid length. [ 289.580261][T14541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.656704][T14555] FAULT_INJECTION: forcing a failure. [ 289.656704][T14555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.670003][T14555] CPU: 1 UID: 0 PID: 14555 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.670041][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.670054][T14555] Call Trace: [ 289.670059][T14555] [ 289.670066][T14555] __dump_stack+0x1d/0x30 [ 289.670087][T14555] dump_stack_lvl+0xe8/0x140 [ 289.670109][T14555] dump_stack+0x15/0x1b [ 289.670129][T14555] should_fail_ex+0x265/0x280 [ 289.670149][T14555] should_fail+0xb/0x20 [ 289.670163][T14555] should_fail_usercopy+0x1a/0x20 [ 289.670182][T14555] _copy_from_user+0x1c/0xb0 [ 289.670292][T14555] ___sys_sendmsg+0xc1/0x1d0 [ 289.670371][T14555] __sys_sendmmsg+0x178/0x300 [ 289.670445][T14555] __x64_sys_sendmmsg+0x57/0x70 [ 289.670463][T14555] x64_sys_call+0x1c4a/0x3000 [ 289.670565][T14555] do_syscall_64+0xd2/0x200 [ 289.670586][T14555] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.670614][T14555] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 289.670682][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.670702][T14555] RIP: 0033:0x7fa7d1e5f6c9 [ 289.670715][T14555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.670745][T14555] RSP: 002b:00007fa7d08c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.670765][T14555] RAX: ffffffffffffffda RBX: 00007fa7d20b5fa0 RCX: 00007fa7d1e5f6c9 [ 289.670820][T14555] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 289.670832][T14555] RBP: 00007fa7d08c7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.670846][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.670924][T14555] R13: 00007fa7d20b6038 R14: 00007fa7d20b5fa0 R15: 00007ffdadfddb18 [ 289.670943][T14555] [ 289.950440][T14567] SELinux: failed to load policy [ 289.955837][T14563] netlink: 'syz.3.4075': attribute type 6 has an invalid length. [ 290.023990][T14574] SELinux: failed to load policy [ 290.238273][ T29] kauditd_printk_skb: 3152 callbacks suppressed [ 290.238285][ T29] audit: type=1326 audit(1762276087.543:123255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.272995][ T29] audit: type=1326 audit(1762276087.583:123256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.297315][ T29] audit: type=1326 audit(1762276087.583:123257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.321467][ T29] audit: type=1400 audit(1762276087.583:123258): avc: denied { create } for pid=14582 comm="syz.3.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.341485][ T29] audit: type=1326 audit(1762276087.583:123259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.365358][ T29] audit: type=1326 audit(1762276087.583:123260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.389213][ T29] audit: type=1326 audit(1762276087.583:123261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.412965][ T29] audit: type=1400 audit(1762276087.583:123262): avc: denied { bind } for pid=14582 comm="syz.3.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.432771][ T29] audit: type=1326 audit(1762276087.583:123263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.456580][ T29] audit: type=1326 audit(1762276087.583:123264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14582 comm="syz.3.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 290.816238][T14597] SELinux: failed to load policy [ 291.137991][T14614] 9pnet_fd: Insufficient options for proto=fd [ 291.847608][T14628] netlink: 'syz.0.4103': attribute type 3 has an invalid length. [ 291.864039][T14626] SELinux: failed to load policy [ 291.914002][T14637] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 291.948482][T14637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.984763][T14644] netlink: 'syz.2.4109': attribute type 3 has an invalid length. [ 292.015492][T14648] 9pnet_fd: Insufficient options for proto=fd [ 292.020827][T14646] hub 2-0:1.0: USB hub found [ 292.026588][T14646] hub 2-0:1.0: 8 ports detected [ 292.095503][T14657] FAULT_INJECTION: forcing a failure. [ 292.095503][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 292.108208][T14657] CPU: 1 UID: 0 PID: 14657 Comm: syz.3.4114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.108240][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.108300][T14657] Call Trace: [ 292.108306][T14657] [ 292.108313][T14657] __dump_stack+0x1d/0x30 [ 292.108338][T14657] dump_stack_lvl+0xe8/0x140 [ 292.108356][T14657] dump_stack+0x15/0x1b [ 292.108402][T14657] should_fail_ex+0x265/0x280 [ 292.108421][T14657] ? __se_sys_memfd_create+0x1cc/0x590 [ 292.108447][T14657] should_failslab+0x8c/0xb0 [ 292.108480][T14657] __kmalloc_cache_noprof+0x4c/0x4a0 [ 292.108541][T14657] __se_sys_memfd_create+0x1cc/0x590 [ 292.108563][T14657] __x64_sys_memfd_create+0x31/0x40 [ 292.108588][T14657] x64_sys_call+0x2ac2/0x3000 [ 292.108613][T14657] do_syscall_64+0xd2/0x200 [ 292.108677][T14657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 292.108708][T14657] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 292.108739][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.108762][T14657] RIP: 0033:0x7f1daf72f6c9 [ 292.108817][T14657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.108840][T14657] RSP: 002b:00007f1dae18ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 292.108861][T14657] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007f1daf72f6c9 [ 292.108875][T14657] RDX: 00007f1dae18eef0 RSI: 0000000000000000 RDI: 00007f1daf7b2960 [ 292.108889][T14657] RBP: 0000200000000640 R08: 00007f1dae18ebb7 R09: 00007f1dae18ee40 [ 292.108903][T14657] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 292.108915][T14657] R13: 00007f1dae18eef0 R14: 00007f1dae18eeb0 R15: 00002000000001c0 [ 292.108969][T14657] [ 292.332655][T14660] SELinux: failed to load policy [ 292.340455][T14666] __nla_validate_parse: 19 callbacks suppressed [ 292.340472][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.356842][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.382875][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.391964][T14666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.401088][T14666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.410230][T14666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4118'. [ 292.419224][T14666] netlink: 'syz.3.4118': attribute type 6 has an invalid length. [ 292.447799][T14677] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4123'. [ 292.501677][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 292.510919][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'. [ 292.561835][T14690] SELinux: failed to load policy [ 292.591671][T14694] 9pnet_fd: Insufficient options for proto=fd [ 292.683408][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4134'. [ 292.699185][T14700] netlink: 'syz.0.4134': attribute type 6 has an invalid length. [ 292.777540][T14706] FAULT_INJECTION: forcing a failure. [ 292.777540][T14706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.790667][T14706] CPU: 0 UID: 0 PID: 14706 Comm: syz.2.4137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.790691][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.790703][T14706] Call Trace: [ 292.790739][T14706] [ 292.790746][T14706] __dump_stack+0x1d/0x30 [ 292.790767][T14706] dump_stack_lvl+0xe8/0x140 [ 292.790785][T14706] dump_stack+0x15/0x1b [ 292.790813][T14706] should_fail_ex+0x265/0x280 [ 292.790833][T14706] should_fail+0xb/0x20 [ 292.790883][T14706] should_fail_usercopy+0x1a/0x20 [ 292.790902][T14706] _copy_from_user+0x1c/0xb0 [ 292.790949][T14706] ___sys_sendmsg+0xc1/0x1d0 [ 292.790981][T14706] __x64_sys_sendmsg+0xd4/0x160 [ 292.791004][T14706] x64_sys_call+0x191e/0x3000 [ 292.791028][T14706] do_syscall_64+0xd2/0x200 [ 292.791125][T14706] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 292.791186][T14706] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 292.791214][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.791307][T14706] RIP: 0033:0x7f9d0883f6c9 [ 292.791338][T14706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.791421][T14706] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.791438][T14706] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 292.791449][T14706] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 292.791460][T14706] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.791471][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.791484][T14706] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 292.791504][T14706] [ 293.046361][T14715] SELinux: security_context_str_to_sid () failed with errno=-22 [ 293.138745][T14730] FAULT_INJECTION: forcing a failure. [ 293.138745][T14730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.152096][T14730] CPU: 1 UID: 0 PID: 14730 Comm: syz.3.4146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.152120][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.152179][T14730] Call Trace: [ 293.152185][T14730] [ 293.152193][T14730] __dump_stack+0x1d/0x30 [ 293.152217][T14730] dump_stack_lvl+0xe8/0x140 [ 293.152238][T14730] dump_stack+0x15/0x1b [ 293.152256][T14730] should_fail_ex+0x265/0x280 [ 293.152277][T14730] should_fail_alloc_page+0xf2/0x100 [ 293.152318][T14730] __alloc_frozen_pages_noprof+0xff/0x360 [ 293.152342][T14730] alloc_pages_mpol+0xb3/0x260 [ 293.152364][T14730] vma_alloc_folio_noprof+0x1aa/0x300 [ 293.152426][T14730] handle_mm_fault+0xec2/0x2be0 [ 293.152474][T14730] ? vma_start_read+0x141/0x1f0 [ 293.152507][T14730] do_user_addr_fault+0x630/0x1080 [ 293.152529][T14730] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.152555][T14730] exc_page_fault+0x62/0xa0 [ 293.152606][T14730] asm_exc_page_fault+0x26/0x30 [ 293.152626][T14730] RIP: 0033:0x7f1daf6dcbab [ 293.152642][T14730] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 293.152657][T14730] RSP: 002b:00007f1dae18ce10 EFLAGS: 00010246 [ 293.152674][T14730] RAX: 00007f1dae18ef30 RBX: 00007f1daf957640 RCX: 0000000000000000 [ 293.152687][T14730] RDX: 00007f1dae18ef78 RSI: 00007f1daf78edf8 RDI: 00007f1dae18ce30 [ 293.152700][T14730] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 293.152781][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.152794][T14730] R13: 00007f1daf986038 R14: 00007f1daf985fa0 R15: 00007ffe634f2468 [ 293.152879][T14730] [ 293.152887][T14730] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 293.385357][T14746] netlink: 'syz.0.4152': attribute type 3 has an invalid length. [ 293.438159][T14755] SELinux: security_context_str_to_sid () failed with errno=-22 [ 293.454264][T14759] netlink: 'syz.0.4156': attribute type 3 has an invalid length. [ 293.505133][T14766] netlink: 'syz.0.4159': attribute type 3 has an invalid length. [ 293.588948][T14779] FAULT_INJECTION: forcing a failure. [ 293.588948][T14779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.602103][T14779] CPU: 0 UID: 0 PID: 14779 Comm: syz.4.4164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.602144][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.602157][T14779] Call Trace: [ 293.602163][T14779] [ 293.602171][T14779] __dump_stack+0x1d/0x30 [ 293.602252][T14779] dump_stack_lvl+0xe8/0x140 [ 293.602313][T14779] dump_stack+0x15/0x1b [ 293.602329][T14779] should_fail_ex+0x265/0x280 [ 293.602346][T14779] should_fail+0xb/0x20 [ 293.602361][T14779] should_fail_usercopy+0x1a/0x20 [ 293.602381][T14779] _copy_from_user+0x1c/0xb0 [ 293.602446][T14779] vt_do_kdsk_ioctl+0x54/0x720 [ 293.602493][T14779] ? security_capable+0x83/0x90 [ 293.602523][T14779] vt_ioctl+0x8e8/0x18a0 [ 293.602543][T14779] ? tty_jobctrl_ioctl+0x29e/0x810 [ 293.602625][T14779] tty_ioctl+0x7d8/0xb80 [ 293.602648][T14779] ? __pfx_tty_ioctl+0x10/0x10 [ 293.602703][T14779] __se_sys_ioctl+0xce/0x140 [ 293.602723][T14779] __x64_sys_ioctl+0x43/0x50 [ 293.602740][T14779] x64_sys_call+0x1816/0x3000 [ 293.602777][T14779] do_syscall_64+0xd2/0x200 [ 293.602794][T14779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.602821][T14779] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.602878][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.602898][T14779] RIP: 0033:0x7fa7d1e5f6c9 [ 293.602914][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.602932][T14779] RSP: 002b:00007fa7d08c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.602993][T14779] RAX: ffffffffffffffda RBX: 00007fa7d20b5fa0 RCX: 00007fa7d1e5f6c9 [ 293.603005][T14779] RDX: 0000200000000000 RSI: 0000000000004b47 RDI: 0000000000000003 [ 293.603016][T14779] RBP: 00007fa7d08c7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.603029][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.603042][T14779] R13: 00007fa7d20b6038 R14: 00007fa7d20b5fa0 R15: 00007ffdadfddb18 [ 293.603059][T14779] [ 293.615398][T14781] netlink: 'syz.0.4165': attribute type 6 has an invalid length. [ 293.841329][T14783] FAULT_INJECTION: forcing a failure. [ 293.841329][T14783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.854525][T14783] CPU: 1 UID: 0 PID: 14783 Comm: syz.0.4167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.854551][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.854563][T14783] Call Trace: [ 293.854571][T14783] [ 293.854578][T14783] __dump_stack+0x1d/0x30 [ 293.854598][T14783] dump_stack_lvl+0xe8/0x140 [ 293.854620][T14783] dump_stack+0x15/0x1b [ 293.854646][T14783] should_fail_ex+0x265/0x280 [ 293.854668][T14783] should_fail+0xb/0x20 [ 293.854684][T14783] should_fail_usercopy+0x1a/0x20 [ 293.854766][T14783] _copy_from_user+0x1c/0xb0 [ 293.854791][T14783] ___sys_sendmsg+0xc1/0x1d0 [ 293.854823][T14783] __x64_sys_sendmsg+0xd4/0x160 [ 293.854847][T14783] x64_sys_call+0x191e/0x3000 [ 293.854871][T14783] do_syscall_64+0xd2/0x200 [ 293.854940][T14783] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.854976][T14783] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.855005][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.855096][T14783] RIP: 0033:0x7f48fafdf6c9 [ 293.855110][T14783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.855175][T14783] RSP: 002b:00007f48f9a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.855196][T14783] RAX: ffffffffffffffda RBX: 00007f48fb235fa0 RCX: 00007f48fafdf6c9 [ 293.855208][T14783] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 293.855218][T14783] RBP: 00007f48f9a47090 R08: 0000000000000000 R09: 0000000000000000 [ 293.855229][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.855278][T14783] R13: 00007f48fb236038 R14: 00007f48fb235fa0 R15: 00007fff7a2b3bb8 [ 293.855295][T14783] [ 294.078808][T14793] 9pnet_fd: Insufficient options for proto=fd [ 294.199185][T14817] netlink: 'syz.0.4181': attribute type 3 has an invalid length. [ 294.250762][T14825] 9pnet_fd: Insufficient options for proto=fd [ 294.441109][T14848] netlink: 'syz.3.4194': attribute type 3 has an invalid length. [ 294.514872][T14855] 9pnet_fd: Insufficient options for proto=fd [ 295.071956][T14872] 9pnet_virtio: no channels available for device 127.0.0.1 [ 295.134740][T14878] netlink: 'syz.4.4206': attribute type 3 has an invalid length. [ 295.186157][T14884] netlink: 'syz.1.4207': attribute type 6 has an invalid length. [ 295.315771][ T29] kauditd_printk_skb: 1346 callbacks suppressed [ 295.315785][ T29] audit: type=1400 audit(1762276092.623:124611): avc: denied { open } for pid=14890 comm="syz.2.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 295.341646][ T29] audit: type=1400 audit(1762276092.623:124612): avc: denied { kernel } for pid=14890 comm="syz.2.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 295.361833][ T29] audit: type=1326 audit(1762276092.643:124613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.385685][ T29] audit: type=1326 audit(1762276092.643:124614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.409447][ T29] audit: type=1400 audit(1762276092.643:124615): avc: denied { create } for pid=14892 comm="syz.4.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.429492][ T29] audit: type=1326 audit(1762276092.643:124616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.453549][ T29] audit: type=1326 audit(1762276092.643:124617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.477814][ T29] audit: type=1400 audit(1762276092.643:124618): avc: denied { bind } for pid=14892 comm="syz.4.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.497674][ T29] audit: type=1326 audit(1762276092.643:124619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.521520][ T29] audit: type=1326 audit(1762276092.643:124620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa7d1e5f6c9 code=0x7ffc0000 [ 295.674969][T14909] netlink: 'syz.2.4218': attribute type 3 has an invalid length. [ 296.394928][ T170] Bluetooth: hci0: Frame reassembly failed (-84) [ 296.673899][ T170] Bluetooth: hci1: Frame reassembly failed (-84) [ 296.674223][T14954] FAULT_INJECTION: forcing a failure. [ 296.674223][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 296.693079][T14954] CPU: 1 UID: 0 PID: 14954 Comm: syz.2.4233 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.693106][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.693124][T14954] Call Trace: [ 296.693131][T14954] [ 296.693140][T14954] __dump_stack+0x1d/0x30 [ 296.693163][T14954] dump_stack_lvl+0xe8/0x140 [ 296.693184][T14954] dump_stack+0x15/0x1b [ 296.693202][T14954] should_fail_ex+0x265/0x280 [ 296.693219][T14954] should_failslab+0x8c/0xb0 [ 296.693258][T14954] kmem_cache_alloc_noprof+0x50/0x480 [ 296.693301][T14954] ? audit_log_start+0x342/0x720 [ 296.693321][T14954] audit_log_start+0x342/0x720 [ 296.693395][T14954] ? kstrtouint+0x76/0xc0 [ 296.693488][T14954] audit_seccomp+0x48/0x100 [ 296.693536][T14954] ? __seccomp_filter+0x82d/0x1250 [ 296.693618][T14954] __seccomp_filter+0x83e/0x1250 [ 296.693644][T14954] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.693672][T14954] ? vfs_write+0x7e8/0x960 [ 296.693717][T14954] __secure_computing+0x82/0x150 [ 296.693765][T14954] syscall_trace_enter+0xcf/0x1e0 [ 296.693790][T14954] do_syscall_64+0xac/0x200 [ 296.693810][T14954] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.693912][T14954] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 296.693944][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.693966][T14954] RIP: 0033:0x7f9d0883f6c9 [ 296.693981][T14954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.694000][T14954] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.694094][T14954] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 296.694107][T14954] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004 [ 296.694118][T14954] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.694152][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.694163][T14954] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 296.694178][T14954] [ 296.933112][T14958] No such timeout policy "syz1" [ 296.939369][T14958] SELinux: policydb version -1465469662 does not match my version range 15-35 [ 296.948561][T14958] SELinux: failed to load policy [ 297.007407][T14962] random: crng reseeded on system resumption [ 297.312588][T14969] 9pnet_virtio: no channels available for device 127.0.0.1 [ 297.918132][T14974] __nla_validate_parse: 30 callbacks suppressed [ 297.918181][T14974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4241'. [ 297.933950][T14974] validate_nla: 1 callbacks suppressed [ 297.933961][T14974] netlink: 'syz.1.4241': attribute type 3 has an invalid length. [ 298.184384][T14990] 9pnet: Could not find request transport: fd/rfdno=ô–­óq"q¾Ô¬; [ 298.206160][T14993] FAULT_INJECTION: forcing a failure. [ 298.206160][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.219291][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.0.4248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.219433][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.219441][T14993] Call Trace: [ 298.219445][T14993] [ 298.219451][T14993] __dump_stack+0x1d/0x30 [ 298.219509][T14993] dump_stack_lvl+0xe8/0x140 [ 298.219520][T14993] dump_stack+0x15/0x1b [ 298.219529][T14993] should_fail_ex+0x265/0x280 [ 298.219541][T14993] should_fail+0xb/0x20 [ 298.219549][T14993] should_fail_usercopy+0x1a/0x20 [ 298.219692][T14993] _copy_from_user+0x1c/0xb0 [ 298.219706][T14993] __x64_sys_setrlimit+0x5e/0xc0 [ 298.219761][T14993] x64_sys_call+0x2c17/0x3000 [ 298.219774][T14993] do_syscall_64+0xd2/0x200 [ 298.219821][T14993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.219887][T14993] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.220014][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.220042][T14993] RIP: 0033:0x7f48fafdf6c9 [ 298.220057][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.220073][T14993] RSP: 002b:00007f48f9a47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 298.220164][T14993] RAX: ffffffffffffffda RBX: 00007f48fb235fa0 RCX: 00007f48fafdf6c9 [ 298.220172][T14993] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 298.220179][T14993] RBP: 00007f48f9a47090 R08: 0000000000000000 R09: 0000000000000000 [ 298.220186][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.220193][T14993] R13: 00007f48fb236038 R14: 00007f48fb235fa0 R15: 00007fff7a2b3bb8 [ 298.220276][T14993] [ 298.442010][T15002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4252'. [ 298.450598][T14955] Bluetooth: hci0: command 0x1003 tx timeout [ 298.451481][T15002] netlink: 'syz.0.4252': attribute type 3 has an invalid length. [ 298.457080][ T3939] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.495184][T15009] 9pnet_virtio: no channels available for device 127.0.0.1 [ 298.525636][T15015] 9pnet_fd: Insufficient options for proto=fd [ 298.550442][T15017] 9pnet_fd: Insufficient options for proto=fd [ 298.579398][T15019] SELinux: failed to load policy [ 298.690610][ T3577] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 298.882216][T15039] 9pnet_virtio: no channels available for device 127.0.0.1 [ 298.956111][T15043] SELinux: failed to load policy [ 299.033434][T15047] SELinux: ebitmap: truncated map [ 299.046768][T15047] SELinux: failed to load policy [ 299.258674][T15063] FAULT_INJECTION: forcing a failure. [ 299.258674][T15063] name failslab, interval 1, probability 0, space 0, times 0 [ 299.271558][T15063] CPU: 1 UID: 0 PID: 15063 Comm: syz.2.4278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 299.271584][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.271595][T15063] Call Trace: [ 299.271600][T15063] [ 299.271606][T15063] __dump_stack+0x1d/0x30 [ 299.271626][T15063] dump_stack_lvl+0xe8/0x140 [ 299.271723][T15063] dump_stack+0x15/0x1b [ 299.271738][T15063] should_fail_ex+0x265/0x280 [ 299.271756][T15063] should_failslab+0x8c/0xb0 [ 299.271781][T15063] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 299.271846][T15063] ? __get_vm_area_node+0x106/0x1d0 [ 299.271877][T15063] __get_vm_area_node+0x106/0x1d0 [ 299.272031][T15063] __vmalloc_node_range_noprof+0x28c/0xed0 [ 299.272058][T15063] ? sel_write_load+0x158/0x380 [ 299.272078][T15063] ? _parse_integer+0x27/0x40 [ 299.272225][T15063] ? sel_write_load+0x158/0x380 [ 299.272276][T15063] vmalloc_noprof+0x82/0xc0 [ 299.272303][T15063] ? sel_write_load+0x158/0x380 [ 299.272319][T15063] sel_write_load+0x158/0x380 [ 299.272335][T15063] ? __pfx_sel_write_load+0x10/0x10 [ 299.272352][T15063] vfs_write+0x269/0x960 [ 299.272418][T15063] ? __rcu_read_unlock+0x4f/0x70 [ 299.272445][T15063] ? __fget_files+0x184/0x1c0 [ 299.272474][T15063] ksys_write+0xda/0x1a0 [ 299.272577][T15063] __x64_sys_write+0x40/0x50 [ 299.272599][T15063] x64_sys_call+0x2802/0x3000 [ 299.272618][T15063] do_syscall_64+0xd2/0x200 [ 299.272672][T15063] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 299.272740][T15063] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 299.272767][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.272802][T15063] RIP: 0033:0x7f9d0883f6c9 [ 299.272816][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.272831][T15063] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.272849][T15063] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 299.272860][T15063] RDX: 000000000000fffe RSI: 0000200000000000 RDI: 0000000000000006 [ 299.272926][T15063] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.272966][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.272976][T15063] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 299.272993][T15063] [ 299.272999][T15063] syz.2.4278: vmalloc error: size 65534, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 299.518315][T15063] CPU: 1 UID: 0 PID: 15063 Comm: syz.2.4278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 299.518340][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.518351][T15063] Call Trace: [ 299.518357][T15063] [ 299.518390][T15063] __dump_stack+0x1d/0x30 [ 299.518429][T15063] dump_stack_lvl+0xe8/0x140 [ 299.518447][T15063] dump_stack+0x15/0x1b [ 299.518462][T15063] warn_alloc+0x12b/0x1a0 [ 299.518496][T15063] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 299.518586][T15063] ? _parse_integer+0x27/0x40 [ 299.518762][T15063] ? sel_write_load+0x158/0x380 [ 299.518783][T15063] vmalloc_noprof+0x82/0xc0 [ 299.518816][T15063] ? sel_write_load+0x158/0x380 [ 299.518843][T15063] sel_write_load+0x158/0x380 [ 299.518860][T15063] ? __pfx_sel_write_load+0x10/0x10 [ 299.518876][T15063] vfs_write+0x269/0x960 [ 299.518897][T15063] ? __rcu_read_unlock+0x4f/0x70 [ 299.518985][T15063] ? __fget_files+0x184/0x1c0 [ 299.519018][T15063] ksys_write+0xda/0x1a0 [ 299.519048][T15063] __x64_sys_write+0x40/0x50 [ 299.519075][T15063] x64_sys_call+0x2802/0x3000 [ 299.519104][T15063] do_syscall_64+0xd2/0x200 [ 299.519121][T15063] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 299.519177][T15063] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 299.519207][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.519296][T15063] RIP: 0033:0x7f9d0883f6c9 [ 299.519309][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.519329][T15063] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.519349][T15063] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 299.519363][T15063] RDX: 000000000000fffe RSI: 0000200000000000 RDI: 0000000000000006 [ 299.519374][T15063] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.519387][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.519426][T15063] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 299.519446][T15063] [ 299.519453][T15063] Mem-Info: [ 299.726865][T15063] active_anon:4658 inactive_anon:1 isolated_anon:0 [ 299.726865][T15063] active_file:20949 inactive_file:2382 isolated_file:0 [ 299.726865][T15063] unevictable:0 dirty:689 writeback:0 [ 299.726865][T15063] slab_reclaimable:3226 slab_unreclaimable:17177 [ 299.726865][T15063] mapped:31347 shmem:708 pagetables:1123 [ 299.726865][T15063] sec_pagetables:0 bounce:0 [ 299.726865][T15063] kernel_misc_reclaimable:0 [ 299.726865][T15063] free:1879159 free_pcp:11234 free_cma:0 [ 299.771798][T15063] Node 0 active_anon:18632kB inactive_anon:4kB active_file:83796kB inactive_file:9528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125388kB dirty:2756kB writeback:0kB shmem:2832kB kernel_stack:3712kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.799069][T15063] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.828848][T15063] lowmem_reserve[]: 0 2881 7859 7859 [ 299.834188][T15063] Node 0 DMA32 free:2946732kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 299.865756][T15063] lowmem_reserve[]: 0 0 4978 4978 [ 299.871065][T15063] Node 0 Normal free:4554544kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18516kB inactive_anon:4kB active_file:83796kB inactive_file:9528kB unevictable:0kB writepending:2756kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:41592kB local_pcp:15800kB free_cma:0kB [ 299.904077][T15063] lowmem_reserve[]: 0 0 0 0 [ 299.908641][T15063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.921429][T15063] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946732kB [ 299.937594][T15063] Node 0 Normal: 1407*4kB (UME) 50*8kB (M) 329*16kB (ME) 274*32kB (ME) 184*64kB (ME) 207*128kB (UM) 127*256kB (UME) 32*512kB (UM) 9*1024kB (UM) 15*2048kB (UME) 1076*4096kB (UM) = 4554460kB [ 299.956390][T15063] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 299.965747][T15063] 24065 total pagecache pages [ 299.970453][T15063] 1 pages in swap cache [ 299.974629][T15063] Free swap = 124996kB [ 299.978762][T15063] Total swap = 124996kB [ 299.982926][T15063] 2097051 pages RAM [ 299.986729][T15063] 0 pages HighMem/MovableOnly [ 299.991491][T15063] 81086 pages reserved [ 299.995945][T15074] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 300.013785][T15074] SELinux: failed to load policy [ 300.029600][T15076] FAULT_INJECTION: forcing a failure. [ 300.029600][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.042795][T15076] CPU: 0 UID: 0 PID: 15076 Comm: syz.3.4283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.042834][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.042846][T15076] Call Trace: [ 300.042851][T15076] [ 300.042859][T15076] __dump_stack+0x1d/0x30 [ 300.042882][T15076] dump_stack_lvl+0xe8/0x140 [ 300.042903][T15076] dump_stack+0x15/0x1b [ 300.042920][T15076] should_fail_ex+0x265/0x280 [ 300.043018][T15076] should_fail+0xb/0x20 [ 300.043035][T15076] should_fail_usercopy+0x1a/0x20 [ 300.043057][T15076] _copy_from_user+0x1c/0xb0 [ 300.043108][T15076] sock_do_ioctl+0xe6/0x220 [ 300.043136][T15076] sock_ioctl+0x41b/0x610 [ 300.043213][T15076] ? __pfx_sock_ioctl+0x10/0x10 [ 300.043232][T15076] __se_sys_ioctl+0xce/0x140 [ 300.043292][T15076] __x64_sys_ioctl+0x43/0x50 [ 300.043309][T15076] x64_sys_call+0x1816/0x3000 [ 300.043333][T15076] do_syscall_64+0xd2/0x200 [ 300.043350][T15076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.043377][T15076] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.043427][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.043446][T15076] RIP: 0033:0x7f1daf72f6c9 [ 300.043461][T15076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.043479][T15076] RSP: 002b:00007f1dae18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.043498][T15076] RAX: ffffffffffffffda RBX: 00007f1daf985fa0 RCX: 00007f1daf72f6c9 [ 300.043510][T15076] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000008 [ 300.043633][T15076] RBP: 00007f1dae18f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.043645][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.043659][T15076] R13: 00007f1daf986038 R14: 00007f1daf985fa0 R15: 00007ffe634f2468 [ 300.043676][T15076] [ 300.233932][T15085] FAULT_INJECTION: forcing a failure. [ 300.233932][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 300.246670][T15085] CPU: 1 UID: 0 PID: 15085 Comm: syz.2.4285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.246697][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.246710][T15085] Call Trace: [ 300.246717][T15085] [ 300.246773][T15085] __dump_stack+0x1d/0x30 [ 300.246793][T15085] dump_stack_lvl+0xe8/0x140 [ 300.246811][T15085] dump_stack+0x15/0x1b [ 300.246827][T15085] should_fail_ex+0x265/0x280 [ 300.246908][T15085] should_failslab+0x8c/0xb0 [ 300.246995][T15085] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 300.247022][T15085] ? __alloc_skb+0x101/0x320 [ 300.247052][T15085] __alloc_skb+0x101/0x320 [ 300.247153][T15085] netlink_alloc_large_skb+0xbf/0xf0 [ 300.247253][T15085] netlink_sendmsg+0x3cf/0x6b0 [ 300.247310][T15085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.247329][T15085] __sock_sendmsg+0x145/0x180 [ 300.247352][T15085] ____sys_sendmsg+0x31e/0x4e0 [ 300.247436][T15085] ___sys_sendmsg+0x17b/0x1d0 [ 300.247496][T15085] __x64_sys_sendmsg+0xd4/0x160 [ 300.247516][T15085] x64_sys_call+0x191e/0x3000 [ 300.247585][T15085] do_syscall_64+0xd2/0x200 [ 300.247602][T15085] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.247628][T15085] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.247702][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.247720][T15085] RIP: 0033:0x7f9d0883f6c9 [ 300.247734][T15085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.247750][T15085] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.247768][T15085] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 300.247855][T15085] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 300.247867][T15085] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.247878][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.247888][T15085] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 300.247904][T15085] [ 300.472447][ T29] kauditd_printk_skb: 2757 callbacks suppressed [ 300.472462][ T29] audit: type=1400 audit(1762276097.783:127376): avc: denied { ioctl } for pid=15088 comm="syz.0.4288" path="socket:[50731]" dev="sockfs" ino=50731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.544676][ T29] audit: type=1400 audit(1762276097.843:127377): avc: denied { create } for pid=15097 comm="syz.3.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.564747][ T29] audit: type=1400 audit(1762276097.843:127378): avc: denied { map } for pid=15097 comm="syz.3.4292" path="socket:[51734]" dev="sockfs" ino=51734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.588813][ T29] audit: type=1400 audit(1762276097.843:127379): avc: denied { read } for pid=15097 comm="syz.3.4292" path="socket:[51734]" dev="sockfs" ino=51734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.612468][ T29] audit: type=1400 audit(1762276097.843:127380): avc: denied { create } for pid=15097 comm="syz.3.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.632382][ T29] audit: type=1400 audit(1762276097.843:127381): avc: denied { ioctl } for pid=15097 comm="syz.3.4292" path="socket:[51735]" dev="sockfs" ino=51735 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.633438][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4292'. [ 300.657316][ T29] audit: type=1400 audit(1762276097.853:127382): avc: denied { write } for pid=15097 comm="syz.3.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.667131][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 300.695029][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4290'. [ 300.704170][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 300.716181][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4290'. [ 300.725233][T15105] netlink: 'syz.4.4290': attribute type 6 has an invalid length. [ 300.759310][ T29] audit: type=1400 audit(1762276098.063:127383): avc: denied { mounton } for pid=15110 comm="syz.0.4297" path="/proc/599/ns" dev="proc" ino=50765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 300.808650][ T29] audit: type=1400 audit(1762276098.113:127384): avc: denied { ioctl } for pid=11865 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=728 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.837922][T15116] netlink: 'syz.0.4299': attribute type 1 has an invalid length. [ 300.892579][ T29] audit: type=1400 audit(1762276098.203:127385): avc: denied { block_suspend } for pid=15119 comm="syz.0.4301" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.939027][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4304'. [ 300.948317][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4304'. [ 301.017561][T15133] xt_hashlimit: max too large, truncated to 1048576 [ 301.018137][T15135] FAULT_INJECTION: forcing a failure. [ 301.018137][T15135] name failslab, interval 1, probability 0, space 0, times 0 [ 301.036916][T15135] CPU: 1 UID: 0 PID: 15135 Comm: syz.1.4307 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.036961][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.036979][T15135] Call Trace: [ 301.036986][T15135] [ 301.037072][T15135] __dump_stack+0x1d/0x30 [ 301.037097][T15135] dump_stack_lvl+0xe8/0x140 [ 301.037166][T15135] dump_stack+0x15/0x1b [ 301.037183][T15135] should_fail_ex+0x265/0x280 [ 301.037202][T15135] ? rtnl_newlink+0x5c/0x12d0 [ 301.037225][T15135] should_failslab+0x8c/0xb0 [ 301.037368][T15135] __kmalloc_cache_noprof+0x4c/0x4a0 [ 301.037416][T15135] rtnl_newlink+0x5c/0x12d0 [ 301.037481][T15135] ? xas_load+0x413/0x430 [ 301.037509][T15135] ? xas_load+0x413/0x430 [ 301.037538][T15135] ? __memcg_slab_free_hook+0x135/0x230 [ 301.037611][T15135] ? __rcu_read_unlock+0x4f/0x70 [ 301.037650][T15135] ? avc_has_perm_noaudit+0x1b1/0x200 [ 301.037670][T15135] ? cred_has_capability+0x210/0x280 [ 301.037757][T15135] ? selinux_capable+0x31/0x40 [ 301.037777][T15135] ? security_capable+0x83/0x90 [ 301.037833][T15135] ? ns_capable+0x7d/0xb0 [ 301.037858][T15135] ? __pfx_rtnl_newlink+0x10/0x10 [ 301.037879][T15135] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 301.037994][T15135] netlink_rcv_skb+0x123/0x220 [ 301.038077][T15135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.038108][T15135] rtnetlink_rcv+0x1c/0x30 [ 301.038210][T15135] netlink_unicast+0x5c0/0x690 [ 301.038240][T15135] netlink_sendmsg+0x58b/0x6b0 [ 301.038366][T15135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.038391][T15135] __sock_sendmsg+0x145/0x180 [ 301.038414][T15135] ____sys_sendmsg+0x31e/0x4e0 [ 301.038509][T15135] ___sys_sendmsg+0x17b/0x1d0 [ 301.038539][T15135] __x64_sys_sendmsg+0xd4/0x160 [ 301.038560][T15135] x64_sys_call+0x191e/0x3000 [ 301.038625][T15135] do_syscall_64+0xd2/0x200 [ 301.038644][T15135] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.038671][T15135] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 301.038705][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.038725][T15135] RIP: 0033:0x7f9269e0f6c9 [ 301.038762][T15135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.038831][T15135] RSP: 002b:00007f9268877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.038850][T15135] RAX: ffffffffffffffda RBX: 00007f926a065fa0 RCX: 00007f9269e0f6c9 [ 301.038863][T15135] RDX: 000000000000c810 RSI: 0000200000000280 RDI: 0000000000000003 [ 301.038874][T15135] RBP: 00007f9268877090 R08: 0000000000000000 R09: 0000000000000000 [ 301.038886][T15135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.038963][T15135] R13: 00007f926a066038 R14: 00007f926a065fa0 R15: 00007ffc05e7c868 [ 301.038981][T15135] [ 301.342808][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4310'. [ 301.352075][T15141] netlink: 'syz.2.4310': attribute type 6 has an invalid length. [ 301.443829][T15158] 9pnet_fd: Insufficient options for proto=fd [ 301.489573][T15156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15156 comm=syz.3.4317 [ 301.526867][T15169] netlink: 'syz.2.4323': attribute type 6 has an invalid length. [ 301.613882][T15172] binfmt_misc: register: failed to install interpreter file ./file2 [ 301.660139][T15174] netlink: 'syz.1.4325': attribute type 3 has an invalid length. [ 301.872964][T15195] netlink: 'syz.4.4334': attribute type 6 has an invalid length. [ 301.954849][T15201] bridge_slave_0: left allmulticast mode [ 301.960710][T15201] bridge_slave_0: left promiscuous mode [ 301.966465][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.989499][T15201] bridge_slave_1: left allmulticast mode [ 301.995321][T15201] bridge_slave_1: left promiscuous mode [ 302.001035][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.013191][T15201] bond0: (slave bond_slave_0): Releasing backup interface [ 302.023055][T15201] bond0: (slave bond_slave_1): Releasing backup interface [ 302.035398][T15201] team0: Port device team_slave_0 removed [ 302.045355][T15201] team0: Port device team_slave_1 removed [ 302.052357][T15201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.059808][T15201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.068936][T15201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.076362][T15201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.086332][T15201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.267859][T15221] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.349787][T15232] netlink: 'syz.3.4349': attribute type 1 has an invalid length. [ 302.365628][T15232] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.378523][T15232] bond4 (unregistering): Released all slaves [ 302.411147][T15227] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.714452][T15252] 9pnet_virtio: no channels available for device 127.0.0.1 [ 302.744292][T15250] Process accounting resumed [ 302.848573][T15265] loop0: detected capacity change from 0 to 512 [ 302.859178][T15268] 9pnet_fd: Insufficient options for proto=fd [ 302.866199][T15265] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4362: bad orphan inode 11862016 [ 302.877607][T15265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 302.894401][T15265] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.091543][T11865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 303.202086][T15291] __nla_validate_parse: 19 callbacks suppressed [ 303.202098][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 303.217252][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 303.266728][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'. [ 303.314519][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4375'. [ 303.323647][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4375'. [ 303.332651][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4375'. [ 303.341749][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4375'. [ 303.350707][T15304] netlink: 'syz.2.4375': attribute type 6 has an invalid length. [ 303.375022][T15306] 9pnet_virtio: no channels available for device 127.0.0.1 [ 303.430835][T15314] FAULT_INJECTION: forcing a failure. [ 303.430835][T15314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.444065][T15314] CPU: 1 UID: 0 PID: 15314 Comm: syz.2.4380 Not tainted syzkaller #0 PREEMPT(voluntary) [ 303.444083][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.444091][T15314] Call Trace: [ 303.444095][T15314] [ 303.444118][T15314] __dump_stack+0x1d/0x30 [ 303.444131][T15314] dump_stack_lvl+0xe8/0x140 [ 303.444143][T15314] dump_stack+0x15/0x1b [ 303.444152][T15314] should_fail_ex+0x265/0x280 [ 303.444187][T15314] should_fail+0xb/0x20 [ 303.444276][T15314] should_fail_usercopy+0x1a/0x20 [ 303.444287][T15314] _copy_from_user+0x1c/0xb0 [ 303.444301][T15314] sock_do_ioctl+0xe6/0x220 [ 303.444319][T15314] sock_ioctl+0x41b/0x610 [ 303.444332][T15314] ? __pfx_sock_ioctl+0x10/0x10 [ 303.444344][T15314] __se_sys_ioctl+0xce/0x140 [ 303.444361][T15314] __x64_sys_ioctl+0x43/0x50 [ 303.444418][T15314] x64_sys_call+0x1816/0x3000 [ 303.444431][T15314] do_syscall_64+0xd2/0x200 [ 303.444442][T15314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 303.444504][T15314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 303.444558][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.444663][T15314] RIP: 0033:0x7f9d0883f6c9 [ 303.444672][T15314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.444682][T15314] RSP: 002b:00007f9d072a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.444717][T15314] RAX: ffffffffffffffda RBX: 00007f9d08a95fa0 RCX: 00007f9d0883f6c9 [ 303.444724][T15314] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000007 [ 303.444731][T15314] RBP: 00007f9d072a7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.444737][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.444744][T15314] R13: 00007f9d08a96038 R14: 00007f9d08a95fa0 R15: 00007ffe18264a28 [ 303.444755][T15314] [ 303.664961][T15318] SELinux: failed to load policy [ 303.703841][T15322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.754378][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 303.763365][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4383'. [ 303.773531][T15322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.833545][T15322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.884052][T15322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.934784][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.957645][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.966095][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.974571][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.045374][T15331] SELinux: failed to load policy [ 304.051684][T15331] SELinux: failed to load policy [ 304.063154][T15334] 9pnet_virtio: no channels available for device 127.0.0.1 [ 304.115027][T15340] loop0: detected capacity change from 0 to 160 [ 304.143524][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 304.296619][T15347] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 304.306533][T15347] SELinux: failed to load policy [ 304.736361][T15365] 9pnet_virtio: no channels available for device 127.0.0.1 [ 304.764606][T15367] netlink: 'syz.4.4401': attribute type 6 has an invalid length. [ 305.387984][T15391] 9pnet_virtio: no channels available for device 127.0.0.1 [ 305.526810][T15401] SELinux: failed to load policy [ 305.548233][T15403] 9pnet_fd: Insufficient options for proto=fd [ 305.558727][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 305.558739][ T29] audit: type=1400 audit(1762276102.873:127872): avc: denied { prog_load } for pid=15402 comm="syz.3.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.584812][ T29] audit: type=1400 audit(1762276102.873:127873): avc: denied { bpf } for pid=15402 comm="syz.3.4418" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.605637][ T29] audit: type=1400 audit(1762276102.873:127874): avc: denied { perfmon } for pid=15402 comm="syz.3.4418" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.626857][ T29] audit: type=1400 audit(1762276102.873:127875): avc: denied { prog_run } for pid=15402 comm="syz.3.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.668573][ T29] audit: type=1400 audit(1762276102.973:127876): avc: denied { map_create } for pid=15405 comm="syz.3.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.689086][T15407] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 305.704332][T15407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.718718][T15406] netdevsim netdevsim4: Direct firmware load for 6 failed with error -2 [ 305.729547][T15407] bond4 (unregistering): Released all slaves [ 305.735808][T15406] ip6t_srh: unknown srh match flags 4000 [ 305.742745][ T29] audit: type=1400 audit(1762276103.063:127877): avc: denied { create } for pid=15404 comm="syz.4.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 305.762668][ T29] audit: type=1400 audit(1762276103.063:127878): avc: denied { read } for pid=15404 comm="syz.4.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 305.796601][ T29] audit: type=1400 audit(1762276103.103:127879): avc: denied { write } for pid=15404 comm="syz.4.4419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 305.817462][ T29] audit: type=1400 audit(1762276103.123:127880): avc: denied { map_read map_write } for pid=15410 comm="syz.3.4421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.838906][ T29] audit: type=1400 audit(1762276103.123:127881): avc: denied { read } for pid=15410 comm="syz.3.4421" dev="nsfs" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.900318][T15417] netlink: 'syz.3.4423': attribute type 6 has an invalid length. [ 306.879387][T15440] team0 (unregistering): Port device team_slave_0 removed [ 306.900314][T15440] team0 (unregistering): Port device team_slave_1 removed [ 306.919511][T15444] xt_hashlimit: max too large, truncated to 1048576 [ 308.022022][T15470] netlink: 'syz.0.4443': attribute type 3 has an invalid length. [ 308.085950][T15477] 9pnet_virtio: no channels available for device 127.0.0.1 [ 308.364207][T15495] __nla_validate_parse: 12 callbacks suppressed [ 308.364224][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 308.381462][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4453'. [ 309.183766][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 309.285034][T15513] 9pnet_fd: Insufficient options for proto=fd [ 309.319273][T15515] netlink: 'syz.4.4461': attribute type 1 has an invalid length. [ 309.339124][T15515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.349859][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4461'. [ 309.361516][T15515] bond2 (unregistering): Released all slaves [ 309.900998][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4464'. [ 310.071719][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'. [ 310.092395][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'. [ 310.146513][T15543] netlink: 'syz.1.4473': attribute type 1 has an invalid length. [ 310.168087][T15543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.179342][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'. [ 310.191798][T15543] bond2 (unregistering): Released all slaves [ 310.805122][ T29] kauditd_printk_skb: 1277 callbacks suppressed [ 310.805138][ T29] audit: type=1400 audit(1762276108.113:129159): avc: denied { mounton } for pid=15557 comm="syz.0.4479" path="/proc/665/ns" dev="proc" ino=52811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 310.829558][T15560] xt_hashlimit: max too large, truncated to 1048576 [ 310.834544][ T29] audit: type=1400 audit(1762276108.133:129160): avc: denied { read } for pid=15559 comm="syz.0.4480" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.862438][ T29] audit: type=1400 audit(1762276108.133:129161): avc: denied { open } for pid=15559 comm="syz.0.4480" path="net:[4026533271]" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.862468][ T29] audit: type=1400 audit(1762276108.133:129162): avc: denied { create } for pid=15559 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 310.864739][ T29] audit: type=1400 audit(1762276108.153:129163): avc: denied { create } for pid=15559 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.926803][ T29] audit: type=1400 audit(1762276108.153:129164): avc: denied { setopt } for pid=15559 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.023966][ T29] audit: type=1400 audit(1762276108.333:129165): avc: denied { create } for pid=15566 comm="syz.4.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.043865][ T29] audit: type=1400 audit(1762276108.333:129166): avc: denied { setopt } for pid=15566 comm="syz.4.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.063620][ T29] audit: type=1400 audit(1762276108.333:129167): avc: denied { bind } for pid=15566 comm="syz.4.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.104351][T15572] netlink: 'syz.0.4486': attribute type 1 has an invalid length. [ 311.151630][ T29] audit: type=1326 audit(1762276108.463:129168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9269e0f6c9 code=0x7ffc0000 [ 311.162031][T15572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.176862][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 311.211257][T15586] SELinux: failed to load policy [ 311.232255][T15583] bond4 (unregistering): Released all slaves [ 311.238621][T15584] SELinux: security_context_str_to_sid () failed with errno=-22 [ 311.249952][T15588] xt_hashlimit: max too large, truncated to 1048576 [ 311.301340][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.309886][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.878509][T15610] SELinux: failed to load policy [ 311.979833][T15618] xt_hashlimit: max too large, truncated to 1048576 [ 312.022450][T15622] netlink: 'syz.3.4507': attribute type 1 has an invalid length. [ 312.036603][T15622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.045905][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 312.056730][T15622] bond4 (unregistering): Released all slaves [ 312.143077][T15629] 9pnet_virtio: no channels available for device 127.0.0.1 [ 312.188641][T15635] 9pnet_fd: Insufficient options for proto=fd [ 312.222810][T15639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.231512][T15639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.320404][T15644] team0 (unregistering): Port device team_slave_0 removed [ 312.329896][T15644] team0 (unregistering): Port device team_slave_1 removed [ 312.414012][T15650] binfmt_misc: register: failed to install interpreter file ./file2 [ 312.607599][T15662] netlink: 'syz.2.4525': attribute type 6 has an invalid length. [ 312.692670][T15672] SELinux: failed to load policy [ 312.714921][T15674] 9pnet_fd: Insufficient options for proto=fd [ 312.747901][T15676] netlink: 'syz.2.4532': attribute type 3 has an invalid length. [ 312.812615][T15689] netlink: 'syz.2.4537': attribute type 6 has an invalid length. [ 312.888671][T15699] SELinux: failed to load policy [ 313.016061][T15702] SELinux: failed to load policy [ 313.022170][T15702] SELinux: failed to load policy [ 313.120355][T15712] 9pnet_fd: Insufficient options for proto=fd [ 313.186682][T15717] netlink: 'syz.1.4549': attribute type 6 has an invalid length. [ 313.286188][T15727] SELinux: failed to load policy [ 313.319836][T15733] 9pnet_virtio: no channels available for device 127.0.0.1 [ 313.338976][T15735] 9pnet_fd: Insufficient options for proto=fd [ 313.376357][T15741] __nla_validate_parse: 20 callbacks suppressed [ 313.376402][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4561'. [ 313.391714][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4561'. [ 313.400768][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4561'. [ 313.409945][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4561'. [ 313.419009][T15741] netlink: 'syz.3.4561': attribute type 6 has an invalid length. [ 313.430701][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 313.445228][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4562'. [ 313.509103][T15757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.518810][T15762] 9pnet_virtio: no channels available for device 127.0.0.1 [ 313.518965][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4569'. [ 313.537307][T15757] bond2 (unregistering): Released all slaves [ 313.612376][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4575'. [ 313.621436][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4575'. [ 313.630440][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4575'. [ 313.641609][T15770] netlink: 'syz.0.4575': attribute type 6 has an invalid length. [ 313.673819][T15777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.694505][T15777] bond2 (unregistering): Released all slaves [ 313.713815][T15786] 9pnet_virtio: no channels available for device 127.0.0.1 [ 314.020921][T15806] binfmt_misc: register: failed to install interpreter file ./file2 [ 314.218184][T15824] 9pnet_virtio: no channels available for device 127.0.0.1 [ 314.365082][T15831] validate_nla: 2 callbacks suppressed [ 314.365092][T15831] netlink: 'syz.2.4599': attribute type 6 has an invalid length. [ 314.476718][T15841] binfmt_misc: register: failed to install interpreter file ./file2 [ 314.593732][T15849] 9pnet_virtio: no channels available for device 127.0.0.1 [ 314.651587][T15854] netlink: 'syz.2.4611': attribute type 6 has an invalid length. [ 314.754863][T15868] binfmt_misc: register: failed to install interpreter file ./file2 [ 314.857252][T15875] 9pnet_virtio: no channels available for device 127.0.0.1 [ 315.270879][T15903] binfmt_misc: register: failed to install interpreter file ./file2 [ 315.601011][T15928] SELinux: security_context_str_to_sid () failed with errno=-22 [ 315.893474][ T29] kauditd_printk_skb: 3866 callbacks suppressed [ 315.893488][ T29] audit: type=1326 audit(1762276113.203:133035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 315.923476][ T29] audit: type=1326 audit(1762276113.203:133036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 315.951669][ T29] audit: type=1326 audit(1762276113.253:133037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 315.975531][ T29] audit: type=1326 audit(1762276113.253:133038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 315.999286][ T29] audit: type=1326 audit(1762276113.253:133039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.023383][ T29] audit: type=1326 audit(1762276113.253:133040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.047072][ T29] audit: type=1326 audit(1762276113.253:133041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.070863][ T29] audit: type=1326 audit(1762276113.253:133042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.094629][ T29] audit: type=1326 audit(1762276113.253:133043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.118351][ T29] audit: type=1326 audit(1762276113.253:133044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1daf72f6c9 code=0x7ffc0000 [ 316.382683][T15958] 9pnet_virtio: no channels available for device 127.0.0.1 [ 316.456029][T15963] binfmt_misc: register: failed to install interpreter file ./file2 [ 316.542360][T15968] netlink: 'syz.1.4657': attribute type 6 has an invalid length. [ 317.186027][T15998] netlink: 'syz.3.4669': attribute type 6 has an invalid length. [ 317.205718][T16000] netlink: 'syz.3.4670': attribute type 1 has an invalid length. [ 317.219231][T16000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.233576][T16000] bond4 (unregistering): Released all slaves [ 317.293090][T16006] binfmt_misc: register: failed to install interpreter file ./file2 [ 317.533792][T16026] binfmt_misc: register: failed to install interpreter file ./file2 [ 317.784225][T16037] netlink: 'syz.1.4685': attribute type 6 has an invalid length. [ 318.113297][T16046] 9pnet_virtio: no channels available for device 127.0.0.1 [ 318.647601][T16064] __nla_validate_parse: 63 callbacks suppressed [ 318.647617][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4697'. [ 319.029444][T16074] 9pnet_virtio: no channels available for device 127.0.0.1 [ 319.246953][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 319.448959][T16087] SELinux: failed to load policy [ 319.465398][T16087] SELinux: failed to load policy [ 319.673550][T16100] 9pnet_virtio: no channels available for device 127.0.0.1 [ 319.698478][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 319.713483][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 320.061836][T16112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4717'. [ 320.091121][T16112] netlink: 'syz.0.4717': attribute type 3 has an invalid length. [ 320.867070][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4724'. [ 320.959640][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4724'. [ 321.003225][ T29] kauditd_printk_skb: 3160 callbacks suppressed [ 321.003238][ T29] audit: type=1326 audit(1762276118.313:136205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.048714][ T29] audit: type=1326 audit(1762276118.353:136206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.072409][ T29] audit: type=1326 audit(1762276118.353:136207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.096148][ T29] audit: type=1326 audit(1762276118.353:136208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.119781][ T29] audit: type=1326 audit(1762276118.353:136209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.143421][ T29] audit: type=1326 audit(1762276118.353:136210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.167239][ T29] audit: type=1326 audit(1762276118.353:136211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.190791][ T29] audit: type=1326 audit(1762276118.353:136212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.214461][ T29] audit: type=1326 audit(1762276118.353:136213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.238095][ T29] audit: type=1326 audit(1762276118.353:136214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.0.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 321.266451][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 321.290480][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 321.309837][T16150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4729'. [ 321.343097][T16152] 9pnet_virtio: no channels available for device 127.0.0.1 [ 321.362995][T16150] netlink: 'syz.3.4729': attribute type 3 has an invalid length. [ 321.738344][T16168] netlink: 'syz.2.4737': attribute type 6 has an invalid length. [ 322.023033][T16185] netlink: 'syz.0.4745': attribute type 3 has an invalid length. [ 322.270566][T16215] netlink: 'syz.3.4757': attribute type 3 has an invalid length. [ 322.425986][T16229] SELinux: failed to load policy [ 322.628687][T16244] netlink: 'syz.2.4768': attribute type 3 has an invalid length. [ 323.103918][T16258] SELinux: failed to load policy [ 323.109556][T16258] SELinux: failed to load policy [ 323.228337][T16261] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 323.238186][T16261] SELinux: failed to load policy [ 323.291416][T16272] netlink: 'syz.4.4779': attribute type 3 has an invalid length. [ 323.325083][T16281] netlink: 'syz.4.4781': attribute type 6 has an invalid length. [ 323.843083][T16296] SELinux: failed to load policy [ 323.878498][T16300] __nla_validate_parse: 23 callbacks suppressed [ 323.878515][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4789'. [ 323.927017][T16304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4791'. [ 323.936376][T16304] netlink: 'syz.0.4791': attribute type 3 has an invalid length. [ 324.218528][T16321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4797'. [ 324.247820][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4797'. [ 324.273929][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 324.308321][T16323] SELinux: failed to load policy [ 324.353138][T16327] 9pnet_fd: Insufficient options for proto=fd [ 324.441476][T16333] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4803'. [ 324.460078][T16333] netlink: 'syz.4.4803': attribute type 3 has an invalid length. [ 324.659435][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4808'. [ 324.698944][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4812'. [ 324.730792][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 324.741442][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 324.852153][T16363] 9pnet_fd: Insufficient options for proto=fd [ 325.867466][T16393] 9pnet_fd: Insufficient options for proto=fd [ 325.925248][T16396] validate_nla: 1 callbacks suppressed [ 325.925263][T16396] netlink: 'syz.0.4826': attribute type 3 has an invalid length. [ 326.117249][ T29] kauditd_printk_skb: 2491 callbacks suppressed [ 326.117261][ T29] audit: type=1400 audit(1762276123.423:138706): avc: denied { open } for pid=16405 comm="syz.0.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.143114][ T29] audit: type=1400 audit(1762276123.423:138707): avc: denied { kernel } for pid=16405 comm="syz.0.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.166374][ T29] audit: type=1400 audit(1762276123.473:138708): avc: denied { tracepoint } for pid=16405 comm="syz.0.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.186487][ T29] audit: type=1400 audit(1762276123.473:138709): avc: denied { read } for pid=16405 comm="syz.0.4829" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.207890][ T29] audit: type=1400 audit(1762276123.473:138710): avc: denied { open } for pid=16405 comm="syz.0.4829" path="net:[4026533271]" dev="nsfs" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.231370][ T29] audit: type=1400 audit(1762276123.473:138711): avc: denied { name_bind } for pid=16405 comm="syz.0.4829" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 326.253318][ T29] audit: type=1400 audit(1762276123.473:138712): avc: denied { node_bind } for pid=16405 comm="syz.0.4829" saddr=::ffff:0.0.0.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 326.284514][ T29] audit: type=1400 audit(1762276123.553:138713): avc: denied { module_request } for pid=16405 comm="syz.0.4829" kmod="netdev-veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 326.307732][ T29] audit: type=1400 audit(1762276123.593:138714): avc: denied { sys_module } for pid=16405 comm="syz.0.4829" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 326.379262][ T29] audit: type=1400 audit(1762276123.653:138715): avc: denied { create } for pid=16414 comm="syz.2.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.230046][T16435] netlink: 'syz.4.4838': attribute type 3 has an invalid length. [ 327.600418][T16454] 9pnet_fd: Insufficient options for proto=fd [ 327.981194][T16464] netlink: 'syz.0.4849': attribute type 1 has an invalid length. [ 327.996301][T16464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.016032][T16464] bond4 (unregistering): Released all slaves [ 328.131350][T16469] netlink: 'syz.1.4851': attribute type 3 has an invalid length. [ 328.961979][T16501] __nla_validate_parse: 22 callbacks suppressed [ 328.961994][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4863'. [ 328.980835][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4863'. [ 329.005317][T16503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4864'. [ 329.016749][T16503] netlink: 'syz.2.4864': attribute type 3 has an invalid length. [ 329.138311][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 329.187960][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 329.203247][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4874'. [ 329.216254][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 329.311935][T16526] SELinux: failed to load policy [ 329.317385][T16526] SELinux: failed to load policy [ 329.343027][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4875'. [ 329.352503][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4875'. [ 329.481942][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4880'. [ 330.024746][T16562] netlink: 'syz.3.4888': attribute type 1 has an invalid length. [ 330.057922][T16562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.096814][T16562] bond4 (unregistering): Released all slaves [ 330.121944][T16558] SELinux: failed to load policy [ 330.136133][T16558] SELinux: failed to load policy [ 330.670770][T16591] SELinux: failed to load policy [ 330.676267][T16591] SELinux: failed to load policy [ 331.159730][T16634] SELinux: failed to load policy [ 331.165108][T16634] SELinux: failed to load policy [ 331.512877][ T29] kauditd_printk_skb: 2412 callbacks suppressed [ 331.512890][T16639] 9pnet_virtio: no channels available for device 127.0.0.1 [ 331.512953][ T29] audit: type=1400 audit(1762276128.823:141125): avc: denied { mounton } for pid=16638 comm="syz.3.4920" path="/322" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.686055][T16646] netlink: 'syz.3.4923': attribute type 3 has an invalid length. [ 331.770698][ T29] audit: type=1326 audit(1762276129.073:141126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.794452][ T29] audit: type=1326 audit(1762276129.073:141127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.818312][ T29] audit: type=1326 audit(1762276129.073:141128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.841983][ T29] audit: type=1326 audit(1762276129.073:141129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.865860][ T29] audit: type=1326 audit(1762276129.073:141130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.889642][ T29] audit: type=1326 audit(1762276129.073:141131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.913518][ T29] audit: type=1326 audit(1762276129.073:141132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.937147][ T29] audit: type=1326 audit(1762276129.073:141133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 331.960856][ T29] audit: type=1326 audit(1762276129.073:141134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.0.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fafdf6c9 code=0x7ffc0000 [ 332.055044][T16675] netlink: 'syz.2.4935': attribute type 3 has an invalid length. [ 332.170170][T16688] 9pnet_virtio: no channels available for device 127.0.0.1 [ 332.212635][T16696] 9pnet_fd: Insufficient options for proto=fd [ 332.373134][T16704] SELinux: failed to load policy [ 332.378573][T16704] SELinux: failed to load policy [ 332.389598][T16707] 9pnet_fd: Insufficient options for proto=fd [ 332.420842][T16709] netlink: 'syz.0.4947': attribute type 3 has an invalid length. [ 333.172906][T16739] netlink: 'syz.1.4959': attribute type 3 has an invalid length. [ 333.389344][T16754] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 333.406312][T16754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.438634][T16754] bond4 (unregistering): Released all slaves [ 333.521179][T16766] 9pnet_virtio: no channels available for device 127.0.0.1 [ 333.530307][T16767] netlink: 'syz.3.4970': attribute type 3 has an invalid length. [ 333.630949][T16782] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 333.944981][T16798] netlink: 'syz.2.4981': attribute type 1 has an invalid length. [ 333.958350][T16798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.970984][T16798] bond1 (unregistering): Released all slaves [ 334.028621][T16801] netlink: 'syz.2.4982': attribute type 3 has an invalid length. [ 334.058850][T16806] 9pnet_fd: Insufficient options for proto=fd [ 334.279067][T16820] __nla_validate_parse: 39 callbacks suppressed [ 334.279083][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4989'. [ 334.305090][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'. [ 334.336419][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 334.351518][T16829] netlink: 'syz.1.4993': attribute type 3 has an invalid length. [ 334.404158][T16836] 9pnet_fd: Insufficient options for proto=fd [ 334.524889][T16854] SELinux: security_context_str_to_sid () failed with errno=-22 [ 334.561007][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 334.590324][T16861] netlink: 'syz.1.5005': attribute type 3 has an invalid length. [ 334.651161][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 334.695585][T16868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5007'. [ 334.712871][T16871] sel_write_load: 3 callbacks suppressed [ 334.712887][T16871] SELinux: failed to load policy [ 334.737538][T16871] SELinux: failed to load policy [ 334.765130][T16877] 9pnet_fd: Insufficient options for proto=fd [ 334.827904][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5013'. [ 335.377687][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5018'. [ 335.394195][T16907] 9pnet_virtio: no channels available for device 127.0.0.1 [ 335.757192][T16936] 9pnet_virtio: no channels available for device 127.0.0.1 [ 335.854971][T16941] SELinux: failed to load policy [ 335.860550][T16941] SELinux: failed to load policy [ 335.863381][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5037'. [ 335.939096][T16949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.948330][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5038'. [ 335.959113][T16949] bond2 (unregistering): Released all slaves [ 336.546768][ T29] kauditd_printk_skb: 6569 callbacks suppressed [ 336.546781][ T29] audit: type=1326 audit(1762276133.853:147704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.591967][T16968] 9pnet_virtio: no channels available for device 127.0.0.1 [ 336.599480][ T29] audit: type=1326 audit(1762276133.883:147705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.623286][ T29] audit: type=1326 audit(1762276133.883:147706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.647028][ T29] audit: type=1326 audit(1762276133.883:147707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.671012][ T29] audit: type=1326 audit(1762276133.883:147708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.694803][ T29] audit: type=1326 audit(1762276133.883:147709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.718605][ T29] audit: type=1326 audit(1762276133.883:147710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.718630][ T29] audit: type=1326 audit(1762276133.883:147711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.765946][ T29] audit: type=1326 audit(1762276133.883:147712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.789958][ T29] audit: type=1326 audit(1762276133.883:147713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.2.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0883f6c9 code=0x7ffc0000 [ 336.867024][T16975] validate_nla: 4 callbacks suppressed [ 336.867039][T16975] netlink: 'syz.4.5049': attribute type 6 has an invalid length. [ 336.899281][T16979] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 336.911053][T16982] netlink: 'syz.4.5051': attribute type 3 has an invalid length. [ 336.942048][T16979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.971583][T16979] bond4 (unregistering): Released all slaves [ 337.206313][T17009] SELinux: failed to load policy [ 337.212574][T17009] SELinux: failed to load policy [ 337.218289][T17012] 9pnet_fd: Insufficient options for proto=fd [ 337.357337][T17017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=17017 comm=syz.1.5063 [ 337.370920][T17017] netlink: 'syz.1.5063': attribute type 3 has an invalid length. [ 337.426160][T17028] netlink: 'syz.1.5066': attribute type 1 has an invalid length. [ 337.440695][T17028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.453664][T17028] bond2 (unregistering): Released all slaves [ 337.765963][T17043] 9pnet_fd: Insufficient options for proto=fd [ 337.941868][T17050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=17050 comm=syz.3.5075 [ 337.960810][T17050] netlink: 'syz.3.5075': attribute type 3 has an invalid length. [ 338.265114][T17069] 9pnet_virtio: no channels available for device 127.0.0.1 [ 338.368874][T17075] team0 (unregistering): Port device team_slave_0 removed [ 338.378127][T17075] team0 (unregistering): Port device team_slave_1 removed [ 338.420950][T17077] netlink: 'syz.0.5085': attribute type 6 has an invalid length. [ 338.473111][T17083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=17083 comm=syz.2.5088 [ 338.490715][T17083] netlink: 'syz.2.5088': attribute type 3 has an invalid length. [ 338.736578][T17097] 9pnet_virtio: no channels available for device 127.0.0.1 [ 339.378774][T17110] __nla_validate_parse: 26 callbacks suppressed [ 339.378791][T17110] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5099'. [ 339.395306][T17110] netlink: 'syz.2.5099': attribute type 3 has an invalid length. [ 339.603424][T17124] 9pnet_virtio: no channels available for device 127.0.0.1 [ 339.679816][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5109'. [ 339.694689][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5109'. [ 339.787115][T17138] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5110'. [ 339.797093][T17138] netlink: 'syz.1.5110': attribute type 3 has an invalid length. [ 339.839886][T17145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.849768][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5112'. [ 339.860997][T17145] bond2 (unregistering): Released all slaves [ 339.978242][T17157] SELinux: security_context_str_to_sid () failed with errno=-22 [ 339.998694][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5117'. [ 340.614451][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 340.629586][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'. [ 340.639325][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 340.755425][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5125'. [ 340.926878][T17195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.936159][T17188] ================================================================== [ 340.944413][T17188] BUG: KCSAN: data-race in cgroup_freezer_migrate_task / handle_mm_fault [ 340.952851][T17188] [ 340.955207][T17188] write to 0xffff888112d3b6c8 of 2 bytes by task 17194 on cpu 0: [ 340.962917][T17188] handle_mm_fault+0x1f6/0x2be0 [ 340.967790][T17188] do_user_addr_fault+0x630/0x1080 [ 340.972890][T17188] exc_page_fault+0x62/0xa0 [ 340.977390][T17188] asm_exc_page_fault+0x26/0x30 [ 340.982318][T17188] [ 340.984728][T17188] read to 0xffff888112d3b6c8 of 2 bytes by task 17188 on cpu 1: [ 340.992428][T17188] cgroup_freezer_migrate_task+0xac/0x290 [ 340.998666][T17188] cgroup_migrate_execute+0x288/0x7f0 [ 341.004028][T17188] cgroup_apply_control+0x3ab/0x410 [ 341.009229][T17188] cgroup_subtree_control_write+0x7d5/0xb80 [ 341.015161][T17188] cgroup_file_write+0x197/0x350 [ 341.020096][T17188] kernfs_fop_write_iter+0x1eb/0x300 [ 341.025392][T17188] vfs_write+0x52a/0x960 [ 341.029716][T17188] ksys_write+0xda/0x1a0 [ 341.033952][T17188] __x64_sys_write+0x40/0x50 [ 341.038536][T17188] x64_sys_call+0x2802/0x3000 [ 341.043205][T17188] do_syscall_64+0xd2/0x200 [ 341.047901][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.053955][T17188] [ 341.056261][T17188] value changed: 0x0001 -> 0x0061 [ 341.061267][T17188] [ 341.063575][T17188] Reported by Kernel Concurrency Sanitizer on: [ 341.069713][T17188] CPU: 1 UID: 0 PID: 17188 Comm: syz.2.5126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 341.079512][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.089558][T17188] ================================================================== [ 341.103791][T17195] bond4 (unregistering): Released all slaves [ 341.550997][ T29] kauditd_printk_skb: 4853 callbacks suppressed [ 341.551011][ T29] audit: type=1326 audit(1762276138.863:152567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.581252][ T29] audit: type=1326 audit(1762276138.863:152568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.604914][ T29] audit: type=1326 audit(1762276138.863:152569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.628613][ T29] audit: type=1326 audit(1762276138.863:152570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.652309][ T29] audit: type=1326 audit(1762276138.863:152571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.675956][ T29] audit: type=1326 audit(1762276138.863:152572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.699615][ T29] audit: type=1326 audit(1762276138.863:152573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.723300][ T29] audit: type=1326 audit(1762276138.863:152574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.746978][ T29] audit: type=1326 audit(1762276138.863:152575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000 [ 341.770671][ T29] audit: type=1326 audit(1762276138.863:152576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17197 comm="syz.4.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7d1e91f85 code=0x7ffc0000