last executing test programs: 14.011033401s ago: executing program 3 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') getdents64(r1, 0xffffffffffffffff, 0x43) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001000003000000000000000000000000004000"/198], 0x110) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='fsi_master_acf_copro_command\x00', r5, 0x0, 0xfffffffffffffffb}, 0xcc89f5ca1601ed52) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) read(r6, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0xfffffffffffffff8, 0x4, 0x1}) 13.473580314s ago: executing program 3 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x54b}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 13.208578826s ago: executing program 3 (id=63): socket$inet6(0xa, 0x3, 0x3c) socket$inet(0xa, 0x801, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000000)=[{r0, 0x29806a9aa2920ce5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff06000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000200bcce0170d7abb5e9cf0496d2df720000f2ffff04ea0000646b2cbf2bdd728768bdb824840a0b23c88a663bd70ba40b0c0e3fff2d3a04b34faaf3d4c9475c58621ac09aefe1b94ebd4621208f35eb6b295098fd27b18a1ce807741d904c"], 0x0, 0x33, 0x0, 0x1, 0xafe}, 0x28) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffd, @loopback}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus/file0\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') socket$kcm(0x29, 0x5, 0x0) r7 = syz_clone(0x10000100, &(0x7f00000000c0)="47046a866dd97727ddd6d8ecfec666", 0xf, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000580)="c4aa9418498284700243a1d99236eedf82d07abfba3c76f07af212951411abecd4aa0e1a4e1342f99ad6bc182fb3dd52d44739df679026925a5902b731f8a6d78365a0d0069691e37d40b8b64daa8a2080b20f0dde2f889b930ffdc467f4764a54c279cd31ff3238bef7742212b940d4ef2682fc") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400)=r7, 0x12) socket$kcm(0x10, 0x2, 0x0) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x10) fcntl$notify(r8, 0x402, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r9, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 12.313767074s ago: executing program 3 (id=81): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, r1, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r9, 0x0, r9, 0x0, 0x1000) 10.014663282s ago: executing program 1 (id=131): r0 = syz_io_uring_setup(0x2b40, &(0x7f0000000000)={0x0, 0xa5db, 0x10000, 0x2, 0x347}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200, 0x1, {0x0, r2}}) preadv2(r0, &(0x7f0000001280)=[{&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, 0x10001, 0x1, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={[&(0x7f00000012c0)='\x00', &(0x7f0000001300)='.$,\'\'\'\xa9\x00', &(0x7f0000001340)=')]{!(_@-)[!.\xc2\x00', &(0x7f0000001380)='\x00']}, &(0x7f0000001540)={[&(0x7f0000001400)='\x00', &(0x7f0000001440)='.@\x00', &(0x7f0000001480)='\x00', &(0x7f00000014c0)=']:{\x00', &(0x7f0000001500)='Z\x00']}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x80, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010010}, 0x10000850) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000016c0), 0x8400, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001700)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000001740)={0xfffffffd, 0x1b4b3ee6, 0x8, 0x8, 0x10, "7406c32115a021bed8215c7f90e0b0792dcc15"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e23, @local}}, 0xe, 0x3ff, 0x0, 0xfcd, 0x79}, &(0x7f0000001840)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001880)={0x3ff, 0x8204, 0x8000, 0x6, r6}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000018c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001980)={{r3}, r7, 0x2, @inherit={0x50, &(0x7f0000001900)={0x0, 0x1, 0x1, 0x101, {0x1, 0x57, 0x1, 0x2, 0x8}, [0x10001]}}, @name="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"}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000002980)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000029c0)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000002dc0)={{r4}, {@val={r8}, @actul_num={@void, 0x1, 0x47}}}) connect$netlink(r4, &(0x7f0000002e00)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), r4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002ec0)=0x0, &(0x7f0000002f00)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002f40)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000003140)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003100)={&(0x7f0000002f80)={0x168, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "245634534b8d300b17ddccda5cf701a243ee32af1487705a619c396948fb2b4ca64547d1e254c6bae796f73923bfba87cc23a015390cb6b3cd086f51ca8335c6aa665b88f3fe3ade85333081ed3d805b0dde04a1697cc62b661ca04722c3c314a2cc8661fdef8fdfe83ea1313ca61e02366ee045585a06517ef93d6e9234d267048696764e16fab62e1388e58ef6daa9ecdd2a05e13adf95153dd2da4e6f475060322766c5fb761cf393d4b3"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) pwrite64(r3, &(0x7f0000003180)="774bf9a64f506017f60dd0036074e8c10b5415d6807a77dd56dd16ffce42e4c9461a5ee2413767aceb78ea12", 0x2c, 0x9) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000031c0)=@assoc_id=r6, 0x4) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000003200)) splice(r3, &(0x7f0000003380)=0x3, r3, &(0x7f00000033c0)=0x100000000, 0x8, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000003400)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000003440)={0x0, 0x0}) tkill(r13, 0x34) 10.014200832s ago: executing program 1 (id=133): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x60600) (fail_nth: 2) 9.727574734s ago: executing program 1 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000580)={0x7, &(0x7f0000000100)=[{0x2, 0x2, 0x4, 0x6}, {0x9, 0xdf, 0xde, 0x8000}, {0x7, 0x9, 0x0, 0x854}, {0x8, 0x0, 0x5, 0x8}, {0x5, 0x2, 0x40, 0xfffffff8}, {0x3, 0x1, 0xf, 0x1}, {0x1, 0x8, 0xff, 0xa}]}) unshare(0x28000600) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0xa, 0x6, 0x3c, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xb, 0xb, 0xb, 0x1, 0x10}, @call={0x85, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7f, 0x98, &(0x7f00000002c0)=""/152, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0xffff, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r0, r0, r0], &(0x7f0000000440)=[{0x0, 0x1, 0xf, 0xa}, {0x5, 0x3, 0x4, 0x3}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x5, 0x0, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='ext4_ext_remove_space\x00', r3, 0x0, 0x3}, 0x18) socket(0x1a, 0x80000, 0x4) (async, rerun: 64) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 9.143998569s ago: executing program 3 (id=148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) (async) socketpair(0x26, 0x6, 0x0, &(0x7f00000002c0)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7f, 0x0, 0x19d4}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8=r2], &(0x7f00000004c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000e000000000000000000b7080000000000007b8af8ff0000d853c287a3846be780a8e82b6b7363e60000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400040000f0ffffffb70200000000008579a266427fde", @ANYRES32=r6, @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000000801060000000000000000030000050900010073797a310000000037c32e84038e33ab44840dc92ea26629cf8a1a4dfe56cd4897b7ff337ef120f5b1099b5e7dee9997df9746aefcfba1a1ba5fab372545a8f56b73dee65328bc3dc4c189b338f2e60ef7169f8d6b35ae8f0e2ee2c567b85396b2550279ff89df8d5c3f743f6c7ea785045f5392e1a3251f33ecaf10724181a2cba99def66a3587e6b828644f214e91a5cee7c15cc942cffafbd6b7753a20b92578cc134c5a75813c84b4e5f8d63d99cc539cef84211b7fe677412dce3"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async, rerun: 32) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) write$UHID_INPUT2(r10, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0c00000098008d628cf289fb7544e9d2dcdf399146d169c5fc7f792d224c66e8a4f1bba74f57b3a12a8662aa107364cbd80bd6163115185c737d9a7a24bb370f89389ac14d806f00bef2da4e9c91e089f25694416553c1b798af554f3381e522a1a344e60f0c24152582225e5b7f3eec2cb3835bd37fe30b76b4b7244c7790a8f116f96e4f0610ceacd30157756ecd7d67f586abaf218749a5ff1f63616c"], 0x9e) (async) migrate_pages(0x0, 0x7, &(0x7f0000000080)=0x46, &(0x7f0000000200)=0x101) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) (async, rerun: 32) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) (rerun: 32) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) timer_delete(0x0) 8.859734441s ago: executing program 3 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r0 = fsopen(0x0, 0x1) fsmount(r0, 0x0, 0x0) r1 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 1) 8.856812481s ago: executing program 32 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r0 = fsopen(0x0, 0x1) fsmount(r0, 0x0, 0x0) r1 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 1) 8.343654113s ago: executing program 1 (id=159): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r2, r2, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r10, 0x0, r10, 0x0, 0x1000) 7.833928295s ago: executing program 0 (id=161): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000140)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) symlink(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.480738163s ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x880) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000004c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000100), &(0x7f0000000280)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) (async) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) (async) futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) (async) pipe2(&(0x7f0000000000), 0x880) (async) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000004c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) 6.479820753s ago: executing program 4 (id=168): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x8ae7, 0x800, 0x4, 0x115}, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4000003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) 5.647294958s ago: executing program 0 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000004a8600010000000000000000000a00806e2800018021008c801a04268ff9f83d024ce7787f973b78e4b833420b5e7c4fc460e6d273820000"], 0x3c}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000004a8600010000000000000000000a00806e2800018021008c801a04268ff9f83d024ce7787f973b78e4b833420b5e7c4fc460e6d273820000"], 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x0, 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d", @ANYRESDEC], 0x10, 0x7fa, &(0x7f0000001e40)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d", @ANYRESDEC], 0x10, 0x7fa, &(0x7f0000001e40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff0000541982520000040000000000000007010000f8ffffffb702000008000000b509000000000000850000000600000095bc7709c44591ce73e0edfcf9aca6ba56b54316dc1222de7caff93c027b47ae01ccf4e36677a6cadd0e388f701ddd50e53065"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4804) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000001280)=ANY=[@ANYRES32=r5, @ANYBLOB="b42277a0ba6bf2c0abfc826968a75ded0493227dff53c6a8870429172896a2029ebac2417b23497db1758158eb8aab8bb905410d12462085b38b0ef69ea69a468f53b26bb955603f26fa9c29ac412fbc70cb6a775314bcd2c8f076f9c48ef5af3c409f7b7f515914d452bbe6ac53d51951277a801f5aa952e167b13e56a7f3f964afb0c3e23f846fd25917309f034f536289e863cd80f4392826d3a9d8151578e84e373673324199cf2fe93683f1d3a799529ef326226ccdc8cca9ee7883293d38e8bc7fbd84242dbde7a319f2015ef53daf7cf608d23218f6f2", @ANYRES64, @ANYBLOB="81bb29c49ca8755ec00ee5ee071cb5a3785a7d58a5f7542e70b12f70f65d886f7882efa23b3ff4eee039a421ada2c888c826d0a3eb52bea2895d2139b55e8f89de3d27e7e54990b57efc8f731c362458a0168451e4894c9170f41ff73298d2e28ac24692f5ef09ae68d348459f5464686440ba65ce914027db703276dd928a259d1df8382b3e2a0e2c2a76fa36550c85f5a6ecd65db96da83a2dd015590a111c3de54ddf6045be49728962d09fb6ba57512908873fa1152615bc9a3ea7e3dbff6c3560e5716403e9b81fc88d7b8db0c33307b225c67795366b05ecd248"], 0x0, 0x24e, &(0x7f0000001000)="$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") (async) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000001280)=ANY=[@ANYRES32=r5, @ANYBLOB="b42277a0ba6bf2c0abfc826968a75ded0493227dff53c6a8870429172896a2029ebac2417b23497db1758158eb8aab8bb905410d12462085b38b0ef69ea69a468f53b26bb955603f26fa9c29ac412fbc70cb6a775314bcd2c8f076f9c48ef5af3c409f7b7f515914d452bbe6ac53d51951277a801f5aa952e167b13e56a7f3f964afb0c3e23f846fd25917309f034f536289e863cd80f4392826d3a9d8151578e84e373673324199cf2fe93683f1d3a799529ef326226ccdc8cca9ee7883293d38e8bc7fbd84242dbde7a319f2015ef53daf7cf608d23218f6f2", @ANYRES64, @ANYBLOB="81bb29c49ca8755ec00ee5ee071cb5a3785a7d58a5f7542e70b12f70f65d886f7882efa23b3ff4eee039a421ada2c888c826d0a3eb52bea2895d2139b55e8f89de3d27e7e54990b57efc8f731c362458a0168451e4894c9170f41ff73298d2e28ac24692f5ef09ae68d348459f5464686440ba65ce914027db703276dd928a259d1df8382b3e2a0e2c2a76fa36550c85f5a6ecd65db96da83a2dd015590a111c3de54ddf6045be49728962d09fb6ba57512908873fa1152615bc9a3ea7e3dbff6c3560e5716403e9b81fc88d7b8db0c33307b225c67795366b05ecd248"], 0x0, 0x24e, &(0x7f0000001000)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, &(0x7f0000000640)='./file0\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 5.646513289s ago: executing program 1 (id=170): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 5.645764198s ago: executing program 2 (id=171): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 5.645470499s ago: executing program 4 (id=172): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 4.727340868s ago: executing program 0 (id=173): openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 4.726770188s ago: executing program 2 (id=174): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="000140", @ANYRES16=r1, @ANYBLOB="08021b000000002358"], 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00s', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f00000006c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r0, 0x0, 0x1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x4}) pipe2$9p(&(0x7f0000000180), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 4.726344658s ago: executing program 4 (id=175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') getdents64(r1, 0xffffffffffffffff, 0x43) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001000003000000000000000000000000004000"/198], 0x110) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='fsi_master_acf_copro_command\x00', r5, 0x0, 0xfffffffffffffffb}, 0xcc89f5ca1601ed52) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) read(r6, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0xfffffffffffffff8, 0x4, 0x1}) 4.655275511s ago: executing program 2 (id=176): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 2.57297324s ago: executing program 0 (id=177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xd1cb3ed8a708bab1, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40}, 0x0, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x80003}, 0x100002, 0x0, 0xffffffff, 0x3, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu\xb2`\x8c\xc3sH\xad\x04L>\x0f\x02&00\t&&\x96\xcfS $P\nR\xbf\xa3\'\x1b\xb3\xeb\xd5\x99\x97\xca\xb9\'\x96U|Z\x93\xeeb4\xce\ar\x98\x9a\x1b\xf6\xf7g') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) syz_io_uring_setup(0x4aca, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0x0, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r2, 0x0, 0x3ffff) sendfile(r10, r2, 0x0, 0x7ffff000) sendmsg$AUDIT_GET(r10, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) sendto$inet(r10, &(0x7f0000000100), 0x0, 0x40000040, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) r11 = syz_open_dev$sg(&(0x7f0000000180), 0x2, 0x2980) ioctl$SCSI_IOCTL_SYNC(r11, 0x4) 2.57255084s ago: executing program 2 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x2, 0x0, 0x0, 0xfd, 0x7, 0xfd, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000005a40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x18, 0x0, 0x1, 0xfffffffc}}], 0x18}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r5, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@local, @in=@remote, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 2.57213123s ago: executing program 4 (id=179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) gettid() r0 = syz_open_procfs(0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001340)="$eJzszz2qwkAUBeAzL3k/8JosQZcSW22t3IRLEFxLCt2Yq5CRJFhYWIoI31fNYe65cMNblYdUk/w9+/xP0tzD+rr/TQ6LZY7911QqY7HvMqzmHbtxbFNy6n9Suu+0c/Ey1FqnV9Nme37pcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIW4BAAD//634DPA=") getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000740)={0x0, 0xfffffffc}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000007c0)={r1, 0x2746}, &(0x7f0000000800)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='mm_page_free\x00', r2, 0x0, 0xe17}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000400), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)=""/134, 0x86}], 0x2}, 0x60) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f00000009c0)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 1.341981723s ago: executing program 0 (id=180): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r2, r2, 0x2f, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)) close(0xffffffffffffffff) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r10, 0x0, r10, 0x0, 0x1000) 1.341651943s ago: executing program 2 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 1.341471853s ago: executing program 4 (id=182): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x84092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x1, 0x7, 0x0, 0x4, 0x5}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='!pu>00\t&&') (async) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r3, 0x3516, 0x20000000, 0x0, 0x0, 0x0) 764.86µs ago: executing program 1 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, 0x0, 0x4040) 389.28µs ago: executing program 2 (id=184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 0s ago: executing program 4 (id=185): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000600091b00b03d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61127b00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdebd1000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x2c020400) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) fchown(r1, 0xee01, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 27.082051][ T29] audit: type=1400 audit(1764583573.365:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.105257][ T29] audit: type=1400 audit(1764583573.385:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.106180][ T3304] cgroup: Unknown subsys name 'net' [ 27.133001][ T29] audit: type=1400 audit(1764583573.425:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.299738][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.306164][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.426512][ T29] audit: type=1400 audit(1764583573.705:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.449771][ T29] audit: type=1400 audit(1764583573.705:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.470254][ T29] audit: type=1400 audit(1764583573.705:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.490672][ T29] audit: type=1400 audit(1764583573.705:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.492221][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.511016][ T29] audit: type=1400 audit(1764583573.715:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.544373][ T29] audit: type=1400 audit(1764583573.715:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.553073][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.567615][ T29] audit: type=1400 audit(1764583573.815:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.514447][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.601036][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.667172][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 29.689417][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.696600][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.703711][ T3315] bridge_slave_0: entered allmulticast mode [ 29.710140][ T3315] bridge_slave_0: entered promiscuous mode [ 29.716677][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.723851][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.730958][ T3315] bridge_slave_1: entered allmulticast mode [ 29.737379][ T3315] bridge_slave_1: entered promiscuous mode [ 29.750798][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.759252][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.766326][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.773429][ T3322] bridge_slave_0: entered allmulticast mode [ 29.779914][ T3322] bridge_slave_0: entered promiscuous mode [ 29.788360][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.813543][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.822756][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.829861][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.837005][ T3322] bridge_slave_1: entered allmulticast mode [ 29.843362][ T3322] bridge_slave_1: entered promiscuous mode [ 29.862363][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.920304][ T3315] team0: Port device team_slave_0 added [ 29.929351][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.940425][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.947465][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.954749][ T3328] bridge_slave_0: entered allmulticast mode [ 29.961159][ T3328] bridge_slave_0: entered promiscuous mode [ 29.968595][ T3315] team0: Port device team_slave_1 added [ 29.982558][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.996011][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.003129][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.010379][ T3328] bridge_slave_1: entered allmulticast mode [ 30.016925][ T3328] bridge_slave_1: entered promiscuous mode [ 30.048326][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.055273][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.081179][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.110537][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.117488][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.143448][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.154627][ T3322] team0: Port device team_slave_0 added [ 30.160474][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.167508][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.174640][ T3317] bridge_slave_0: entered allmulticast mode [ 30.180954][ T3317] bridge_slave_0: entered promiscuous mode [ 30.188521][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.197620][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.204702][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.211887][ T3321] bridge_slave_0: entered allmulticast mode [ 30.218215][ T3321] bridge_slave_0: entered promiscuous mode [ 30.227429][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.234623][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.241863][ T3321] bridge_slave_1: entered allmulticast mode [ 30.248318][ T3321] bridge_slave_1: entered promiscuous mode [ 30.255160][ T3322] team0: Port device team_slave_1 added [ 30.260921][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.267968][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.275115][ T3317] bridge_slave_1: entered allmulticast mode [ 30.281511][ T3317] bridge_slave_1: entered promiscuous mode [ 30.288371][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.322086][ T3328] team0: Port device team_slave_0 added [ 30.334310][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.352937][ T3328] team0: Port device team_slave_1 added [ 30.358818][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.365794][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.391750][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.408185][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.418064][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.432384][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.439400][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.465305][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.489289][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.503685][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.510669][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.536692][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.554162][ T3315] hsr_slave_0: entered promiscuous mode [ 30.560038][ T3315] hsr_slave_1: entered promiscuous mode [ 30.581071][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.588046][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.614046][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.633640][ T3322] hsr_slave_0: entered promiscuous mode [ 30.639506][ T3322] hsr_slave_1: entered promiscuous mode [ 30.645300][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 30.651069][ T3322] Cannot create hsr debugfs directory [ 30.657176][ T3317] team0: Port device team_slave_0 added [ 30.678247][ T3317] team0: Port device team_slave_1 added [ 30.689349][ T3321] team0: Port device team_slave_0 added [ 30.715778][ T3321] team0: Port device team_slave_1 added [ 30.737070][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.744059][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.769994][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.787753][ T3328] hsr_slave_0: entered promiscuous mode [ 30.793783][ T3328] hsr_slave_1: entered promiscuous mode [ 30.799532][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 30.805241][ T3328] Cannot create hsr debugfs directory [ 30.815816][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.822791][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.848704][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.866668][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.873625][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.899546][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.912687][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.919660][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.945588][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.026306][ T3317] hsr_slave_0: entered promiscuous mode [ 31.032392][ T3317] hsr_slave_1: entered promiscuous mode [ 31.038323][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 31.044098][ T3317] Cannot create hsr debugfs directory [ 31.076268][ T3321] hsr_slave_0: entered promiscuous mode [ 31.082526][ T3321] hsr_slave_1: entered promiscuous mode [ 31.088448][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 31.094179][ T3321] Cannot create hsr debugfs directory [ 31.175289][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.192831][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.210999][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.220221][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.253183][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.262539][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.271805][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.282832][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.315493][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.325003][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.334864][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.349372][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.368256][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.391629][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.421187][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.428254][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.439628][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.446781][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.463576][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.474390][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.483083][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.494354][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.501545][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.520209][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.529728][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.548901][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.557926][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.569545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.576656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.589761][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.603111][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.612706][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.623496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.630804][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.639896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.646931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.668461][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.675637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.754483][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.790876][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.809136][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.825257][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.840121][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.847266][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.859965][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.868921][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.878864][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.886020][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.920999][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.943949][ T3315] veth0_vlan: entered promiscuous mode [ 31.957701][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.964847][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.983600][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.994083][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.007360][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.014503][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.042171][ T3315] veth1_vlan: entered promiscuous mode [ 32.074326][ T3315] veth0_macvtap: entered promiscuous mode [ 32.090355][ T3315] veth1_macvtap: entered promiscuous mode [ 32.105971][ T3322] veth0_vlan: entered promiscuous mode [ 32.126297][ T3322] veth1_vlan: entered promiscuous mode [ 32.136262][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.147213][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.161112][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.176518][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.186247][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211513][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223364][ T3328] veth0_vlan: entered promiscuous mode [ 32.236417][ T3322] veth0_macvtap: entered promiscuous mode [ 32.255180][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.266347][ T3322] veth1_macvtap: entered promiscuous mode [ 32.275028][ T3328] veth1_vlan: entered promiscuous mode [ 32.284239][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295771][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.295786][ T29] audit: type=1400 audit(1764583578.585:81): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.OFt8Ix/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.321568][ T3321] veth0_vlan: entered promiscuous mode [ 32.335859][ T29] audit: type=1400 audit(1764583578.615:82): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.357959][ T29] audit: type=1400 audit(1764583578.615:83): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.OFt8Ix/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.366963][ T3328] veth0_macvtap: entered promiscuous mode [ 32.383235][ T29] audit: type=1400 audit(1764583578.615:84): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.393648][ T3321] veth1_vlan: entered promiscuous mode [ 32.410558][ T29] audit: type=1400 audit(1764583578.615:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.OFt8Ix/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.428745][ T3328] veth1_macvtap: entered promiscuous mode [ 32.442580][ T29] audit: type=1400 audit(1764583578.615:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.OFt8Ix/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.457738][ T3317] veth0_vlan: entered promiscuous mode [ 32.475641][ T29] audit: type=1400 audit(1764583578.615:87): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.493472][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.512014][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.521052][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.530578][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541875][ T29] audit: type=1400 audit(1764583578.825:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.564700][ T29] audit: type=1400 audit(1764583578.825:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.590350][ T3317] veth1_vlan: entered promiscuous mode [ 32.597476][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.605772][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.619510][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.638136][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.657928][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.663421][ T29] audit: type=1400 audit(1764583578.935:90): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.673304][ T3321] veth0_macvtap: entered promiscuous mode [ 32.707100][ T3317] veth0_macvtap: entered promiscuous mode [ 32.728746][ T113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740518][ T3317] veth1_macvtap: entered promiscuous mode [ 32.748942][ T113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.760948][ T3321] veth1_macvtap: entered promiscuous mode [ 32.767445][ T3486] syz.0.1 (3486) used greatest stack depth: 9984 bytes left [ 32.780146][ T113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.791441][ T113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.809216][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.820308][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.842035][ T1754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.855346][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.865153][ T1754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.894573][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.919674][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.950347][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.021497][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.037203][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.050345][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326043][ T3499] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 33.466060][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745951][ T3517] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.8' sets config #1 [ 33.797876][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 33.823659][ T3520] syz.4.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.886444][ T3528] veth1_to_bond: entered allmulticast mode [ 33.919098][ T3528] veth1_to_bond: left allmulticast mode [ 34.015287][ T3541] Bluetooth: hci1: sending frame failed (-49) [ 34.021769][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 34.061479][ T3547] loop0: detected capacity change from 0 to 1024 [ 34.068142][ T3547] EXT4-fs: Invalid want_extra_isize 129 [ 34.432793][ T3562] loop2: detected capacity change from 0 to 7 [ 34.505505][ T3564] loop2: detected capacity change from 0 to 7 [ 34.552319][ C0] hrtimer: interrupt took 41511 ns [ 35.128707][ T3574] veth1_to_bond: entered allmulticast mode [ 35.134915][ T3574] veth1_to_bond: left allmulticast mode [ 35.164612][ T3579] veth1_to_bond: entered allmulticast mode [ 35.173633][ T3577] wÞ£ÿ (3577) used greatest stack depth: 9216 bytes left [ 35.217170][ T3582] veth1_to_bond: left allmulticast mode [ 35.313890][ T3591] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.33' sets config #1 [ 35.341132][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 35.470929][ T3594] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 35.478413][ T3594] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 35.486023][ T3594] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 35.501490][ T3596] veth1_to_bond: entered allmulticast mode [ 35.513496][ T3594] loop4: detected capacity change from 0 to 512 [ 35.525701][ T3596] veth1_to_bond: left allmulticast mode [ 35.675770][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 35.939891][ T3609] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.049262][ T3538] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 36.287380][ T3624] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.44' sets config #1 [ 36.296863][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 36.394464][ T3628] hub 6-0:1.0: USB hub found [ 36.399735][ T3628] hub 6-0:1.0: 8 ports detected [ 36.448856][ T3634] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.48' sets config #1 [ 36.459266][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'. [ 36.618496][ T3640] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 36.625874][ T3640] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 36.639421][ T3640] loop3: detected capacity change from 0 to 512 [ 37.336116][ T3636] wÞ£ÿ (3636) used greatest stack depth: 9184 bytes left [ 37.739696][ T3545] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 38.016354][ T3676] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 38.026940][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 38.026954][ T29] audit: type=1326 audit(1764583584.295:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.056421][ T29] audit: type=1326 audit(1764583584.295:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.079645][ T29] audit: type=1326 audit(1764583584.295:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.102766][ T29] audit: type=1326 audit(1764583584.295:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.125979][ T29] audit: type=1326 audit(1764583584.295:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.149404][ T29] audit: type=1326 audit(1764583584.295:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.172769][ T29] audit: type=1326 audit(1764583584.295:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.195913][ T29] audit: type=1326 audit(1764583584.295:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.228096][ T29] audit: type=1326 audit(1764583584.505:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.251250][ T29] audit: type=1326 audit(1764583584.505:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 38.328539][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.328807][ T3672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 38.343487][ T3672] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 38.350453][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.356835][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.377446][ T3686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.385783][ T3686] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.397138][ T3690] loop3: detected capacity change from 0 to 512 [ 38.410181][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.416602][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.423008][ T3693] wg1 speed is unknown, defaulting to 1000 [ 38.430817][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.448116][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.456122][ T3686] wg1 speed is unknown, defaulting to 1000 [ 38.584743][ T3708] loop4: detected capacity change from 0 to 512 [ 38.591557][ T3708] EXT4-fs: Ignoring removed oldalloc option [ 38.620349][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.670410][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.727292][ T3725] loop4: detected capacity change from 0 to 1024 [ 38.735062][ T3725] EXT4-fs: Invalid want_extra_isize 129 [ 38.808451][ T3730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 38.818478][ T3730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 38.879425][ T3740] FAULT_INJECTION: forcing a failure. [ 38.879425][ T3740] name failslab, interval 1, probability 0, space 0, times 1 [ 38.892083][ T3740] CPU: 1 UID: 0 PID: 3740 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.892103][ T3740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.892158][ T3740] Call Trace: [ 38.892163][ T3740] [ 38.892169][ T3740] __dump_stack+0x1d/0x30 [ 38.892189][ T3740] dump_stack_lvl+0xe8/0x140 [ 38.892204][ T3740] dump_stack+0x15/0x1b [ 38.892218][ T3740] should_fail_ex+0x265/0x280 [ 38.892239][ T3740] should_failslab+0x8c/0xb0 [ 38.892335][ T3740] __kmalloc_noprof+0xa5/0x570 [ 38.892366][ T3740] ? bpf_uprobe_multi_link_fill_link_info+0x1cc/0x500 [ 38.892402][ T3740] ? mntput+0x4b/0x80 [ 38.892436][ T3740] bpf_uprobe_multi_link_fill_link_info+0x1cc/0x500 [ 38.892456][ T3740] ? __fget_files+0x184/0x1c0 [ 38.892518][ T3740] bpf_obj_get_info_by_fd+0xce8/0x1fe0 [ 38.892543][ T3740] ? _parse_integer+0x27/0x40 [ 38.892649][ T3740] ? kstrtoull+0x111/0x140 [ 38.892678][ T3740] ? kstrtouint_from_user+0x9f/0xf0 [ 38.892754][ T3740] ? 0xffffffff81000000 [ 38.892764][ T3740] ? __rcu_read_unlock+0x4f/0x70 [ 38.892788][ T3740] ? selinux_bpf+0xaa/0xc0 [ 38.892811][ T3740] __sys_bpf+0x50f/0x7c0 [ 38.892833][ T3740] __x64_sys_bpf+0x41/0x50 [ 38.892884][ T3740] x64_sys_call+0x2aee/0x3000 [ 38.892959][ T3740] do_syscall_64+0xd2/0x200 [ 38.892976][ T3740] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.893054][ T3740] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.893082][ T3740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.893103][ T3740] RIP: 0033:0x7ff4f1f3f749 [ 38.893124][ T3740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.893177][ T3740] RSP: 002b:00007ff4f09a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.893203][ T3740] RAX: ffffffffffffffda RBX: 00007ff4f2195fa0 RCX: 00007ff4f1f3f749 [ 38.893219][ T3740] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 38.893253][ T3740] RBP: 00007ff4f09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.893263][ T3740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.893273][ T3740] R13: 00007ff4f2196038 R14: 00007ff4f2195fa0 R15: 00007ffd3e4ff538 [ 38.893371][ T3740] [ 39.149972][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.207341][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.213286][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.219465][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.226949][ T3745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.239610][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.245863][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.252380][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.258640][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.264843][ T3745] wg1 speed is unknown, defaulting to 1000 [ 39.273127][ T3747] loop4: detected capacity change from 0 to 512 [ 39.665065][ T3762] ip6t_srh: unknown srh match flags 4000 [ 39.808438][ T3767] FAULT_INJECTION: forcing a failure. [ 39.808438][ T3767] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.821769][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.821861][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.821901][ T3767] Call Trace: [ 39.821957][ T3767] [ 39.821963][ T3767] __dump_stack+0x1d/0x30 [ 39.821982][ T3767] dump_stack_lvl+0xe8/0x140 [ 39.822074][ T3767] dump_stack+0x15/0x1b [ 39.822101][ T3767] should_fail_ex+0x265/0x280 [ 39.822118][ T3767] should_fail+0xb/0x20 [ 39.822133][ T3767] should_fail_usercopy+0x1a/0x20 [ 39.822154][ T3767] _copy_from_user+0x1c/0xb0 [ 39.822245][ T3767] kstrtouint_from_user+0x69/0xf0 [ 39.822308][ T3767] ? 0xffffffff81000000 [ 39.822382][ T3767] ? selinux_file_permission+0x1e4/0x320 [ 39.822411][ T3767] proc_fail_nth_write+0x50/0x160 [ 39.822439][ T3767] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.822466][ T3767] vfs_write+0x269/0x960 [ 39.822534][ T3767] ? vfs_read+0x4e6/0x770 [ 39.822554][ T3767] ? __rcu_read_unlock+0x4f/0x70 [ 39.822601][ T3767] ? __fget_files+0x184/0x1c0 [ 39.822678][ T3767] ksys_write+0xda/0x1a0 [ 39.822710][ T3767] __x64_sys_write+0x40/0x50 [ 39.822742][ T3767] x64_sys_call+0x2802/0x3000 [ 39.822767][ T3767] do_syscall_64+0xd2/0x200 [ 39.822789][ T3767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.822818][ T3767] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.822853][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.822917][ T3767] RIP: 0033:0x7feccee3e1ff [ 39.822933][ T3767] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 39.822955][ T3767] RSP: 002b:00007feccd89f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 39.822988][ T3767] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feccee3e1ff [ 39.823045][ T3767] RDX: 0000000000000001 RSI: 00007feccd89f0a0 RDI: 0000000000000003 [ 39.823075][ T3767] RBP: 00007feccd89f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.823089][ T3767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 39.823102][ T3767] R13: 00007feccf096038 R14: 00007feccf095fa0 R15: 00007ffe4e43ba88 [ 39.823123][ T3767] [ 40.078085][ T3773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=3773 comm=syz.4.92 [ 40.094416][ T3775] FAULT_INJECTION: forcing a failure. [ 40.094416][ T3775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.107522][ T3775] CPU: 1 UID: 0 PID: 3775 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.107548][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.107561][ T3775] Call Trace: [ 40.107567][ T3775] [ 40.107575][ T3775] __dump_stack+0x1d/0x30 [ 40.107598][ T3775] dump_stack_lvl+0xe8/0x140 [ 40.107620][ T3775] dump_stack+0x15/0x1b [ 40.107677][ T3775] should_fail_ex+0x265/0x280 [ 40.107741][ T3775] should_fail+0xb/0x20 [ 40.107759][ T3775] should_fail_usercopy+0x1a/0x20 [ 40.107781][ T3775] _copy_to_user+0x20/0xa0 [ 40.107875][ T3775] simple_read_from_buffer+0xb5/0x130 [ 40.107902][ T3775] proc_fail_nth_read+0x10e/0x150 [ 40.107993][ T3775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.108040][ T3775] vfs_read+0x1a8/0x770 [ 40.108127][ T3775] ? __rcu_read_unlock+0x4f/0x70 [ 40.108155][ T3775] ? __fget_files+0x184/0x1c0 [ 40.108250][ T3775] ksys_read+0xda/0x1a0 [ 40.108271][ T3775] __x64_sys_read+0x40/0x50 [ 40.108301][ T3775] x64_sys_call+0x27c0/0x3000 [ 40.108362][ T3775] do_syscall_64+0xd2/0x200 [ 40.108496][ T3775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.108679][ T3775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.108716][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.108737][ T3775] RIP: 0033:0x7fcbe2e8e15c [ 40.108756][ T3775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.108848][ T3775] RSP: 002b:00007fcbe18ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.108865][ T3775] RAX: ffffffffffffffda RBX: 00007fcbe30e5fa0 RCX: 00007fcbe2e8e15c [ 40.108945][ T3775] RDX: 000000000000000f RSI: 00007fcbe18ef0a0 RDI: 0000000000000003 [ 40.108957][ T3775] RBP: 00007fcbe18ef090 R08: 0000000000000000 R09: 000000000000001c [ 40.108969][ T3775] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 40.108978][ T3775] R13: 00007fcbe30e6038 R14: 00007fcbe30e5fa0 R15: 00007ffede960898 [ 40.108992][ T3775] [ 40.622172][ T3808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 40.629433][ T3808] IPv6: NLM_F_CREATE should be set when creating new route [ 40.655858][ T3810] x_tables: duplicate underflow at hook 2 [ 40.721147][ T3820] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 40.739932][ T3823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3823 comm=syz.2.110 [ 40.790257][ T3834] Zero length message leads to an empty skb [ 40.812131][ T3838] FAULT_INJECTION: forcing a failure. [ 40.812131][ T3838] name failslab, interval 1, probability 0, space 0, times 0 [ 40.824856][ T3838] CPU: 1 UID: 0 PID: 3838 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.824940][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.824954][ T3838] Call Trace: [ 40.824959][ T3838] [ 40.824965][ T3838] __dump_stack+0x1d/0x30 [ 40.824984][ T3838] dump_stack_lvl+0xe8/0x140 [ 40.825014][ T3838] dump_stack+0x15/0x1b [ 40.825029][ T3838] should_fail_ex+0x265/0x280 [ 40.825111][ T3838] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 40.825132][ T3838] should_failslab+0x8c/0xb0 [ 40.825229][ T3838] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 40.825263][ T3838] ? shmem_alloc_inode+0x34/0x50 [ 40.825286][ T3838] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 40.825355][ T3838] shmem_alloc_inode+0x34/0x50 [ 40.825380][ T3838] alloc_inode+0x40/0x170 [ 40.825413][ T3838] new_inode+0x1d/0xe0 [ 40.825482][ T3838] shmem_get_inode+0x244/0x750 [ 40.825570][ T3838] __shmem_file_setup+0x113/0x210 [ 40.825588][ T3838] shmem_file_setup+0x3b/0x50 [ 40.825603][ T3838] __se_sys_memfd_create+0x2c3/0x590 [ 40.825683][ T3838] __x64_sys_memfd_create+0x31/0x40 [ 40.825736][ T3838] x64_sys_call+0x2ac2/0x3000 [ 40.825809][ T3838] do_syscall_64+0xd2/0x200 [ 40.825828][ T3838] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.825853][ T3838] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.825960][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.826028][ T3838] RIP: 0033:0x7f70fcb9f749 [ 40.826080][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.826095][ T3838] RSP: 002b:00007f70fb606e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.826111][ T3838] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f70fcb9f749 [ 40.826121][ T3838] RDX: 00007f70fb606ef0 RSI: 0000000000000000 RDI: 00007f70fcc24960 [ 40.826132][ T3838] RBP: 0000200000000380 R08: 00007f70fb606bb7 R09: 00007f70fb606e40 [ 40.826142][ T3838] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 40.826153][ T3838] R13: 00007f70fb606ef0 R14: 00007f70fb606eb0 R15: 0000200000000340 [ 40.826199][ T3838] [ 41.053365][ T3842] FAULT_INJECTION: forcing a failure. [ 41.053365][ T3842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.066462][ T3842] CPU: 0 UID: 0 PID: 3842 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.066493][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.066568][ T3842] Call Trace: [ 41.066573][ T3842] [ 41.066662][ T3842] __dump_stack+0x1d/0x30 [ 41.066679][ T3842] dump_stack_lvl+0xe8/0x140 [ 41.066694][ T3842] dump_stack+0x15/0x1b [ 41.066706][ T3842] should_fail_ex+0x265/0x280 [ 41.066720][ T3842] should_fail+0xb/0x20 [ 41.066732][ T3842] should_fail_usercopy+0x1a/0x20 [ 41.066755][ T3842] strncpy_from_user+0x25/0x230 [ 41.066775][ T3842] ? kmem_cache_alloc_noprof+0x242/0x480 [ 41.066866][ T3842] ? getname_flags+0x80/0x3b0 [ 41.066889][ T3842] getname_flags+0xae/0x3b0 [ 41.066912][ T3842] do_sys_openat2+0x60/0x110 [ 41.066947][ T3842] __x64_sys_openat+0xf2/0x120 [ 41.066965][ T3842] x64_sys_call+0x2eab/0x3000 [ 41.067061][ T3842] do_syscall_64+0xd2/0x200 [ 41.067077][ T3842] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.067097][ T3842] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.067201][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.067280][ T3842] RIP: 0033:0x7f70fcb9f749 [ 41.067297][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.067310][ T3842] RSP: 002b:00007f70fb607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.067324][ T3842] RAX: ffffffffffffffda RBX: 00007f70fcdf5fa0 RCX: 00007f70fcb9f749 [ 41.067359][ T3842] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 41.067367][ T3842] RBP: 00007f70fb607090 R08: 0000000000000000 R09: 0000000000000000 [ 41.067376][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.067457][ T3842] R13: 00007f70fcdf6038 R14: 00007f70fcdf5fa0 R15: 00007fff560badc8 [ 41.067470][ T3842] [ 41.169228][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.173891][ T3545] Bluetooth: hci0: command 0x1003 tx timeout [ 41.291494][ T3851] netlink: 154 bytes leftover after parsing attributes in process `syz.0.123'. [ 41.301438][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 41.324385][ T3851] wg1 speed is unknown, defaulting to 1000 [ 41.459409][ T3875] FAULT_INJECTION: forcing a failure. [ 41.459409][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 41.472071][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.472101][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.472114][ T3875] Call Trace: [ 41.472127][ T3875] [ 41.472134][ T3875] __dump_stack+0x1d/0x30 [ 41.472159][ T3875] dump_stack_lvl+0xe8/0x140 [ 41.472205][ T3875] dump_stack+0x15/0x1b [ 41.472244][ T3875] should_fail_ex+0x265/0x280 [ 41.472263][ T3875] should_failslab+0x8c/0xb0 [ 41.472292][ T3875] kmem_cache_alloc_noprof+0x50/0x480 [ 41.472316][ T3875] ? dup_fd+0x3a/0x540 [ 41.472357][ T3875] dup_fd+0x3a/0x540 [ 41.472380][ T3875] ? _raw_spin_unlock+0x26/0x50 [ 41.472462][ T3875] ksys_unshare+0x346/0x6d0 [ 41.472490][ T3875] ? ksys_write+0x192/0x1a0 [ 41.472550][ T3875] __x64_sys_unshare+0x1f/0x30 [ 41.472584][ T3875] x64_sys_call+0x2915/0x3000 [ 41.472608][ T3875] do_syscall_64+0xd2/0x200 [ 41.472673][ T3875] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.472699][ T3875] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.472736][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.472773][ T3875] RIP: 0033:0x7feccee3f749 [ 41.472787][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.472862][ T3875] RSP: 002b:00007feccd89f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 41.472955][ T3875] RAX: ffffffffffffffda RBX: 00007feccf095fa0 RCX: 00007feccee3f749 [ 41.472991][ T3875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000060600 [ 41.473001][ T3875] RBP: 00007feccd89f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.473010][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.473020][ T3875] R13: 00007feccf096038 R14: 00007feccf095fa0 R15: 00007ffe4e43ba88 [ 41.473039][ T3875] [ 41.722268][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.729563][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.769335][ T3902] FAULT_INJECTION: forcing a failure. [ 41.769335][ T3902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.782499][ T3902] CPU: 1 UID: 0 PID: 3902 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.782553][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.782565][ T3902] Call Trace: [ 41.782571][ T3902] [ 41.782577][ T3902] __dump_stack+0x1d/0x30 [ 41.782602][ T3902] dump_stack_lvl+0xe8/0x140 [ 41.782626][ T3902] dump_stack+0x15/0x1b [ 41.782643][ T3902] should_fail_ex+0x265/0x280 [ 41.782669][ T3902] should_fail+0xb/0x20 [ 41.782684][ T3902] should_fail_usercopy+0x1a/0x20 [ 41.782704][ T3902] _copy_from_user+0x1c/0xb0 [ 41.782731][ T3902] kstrtouint_from_user+0x69/0xf0 [ 41.782756][ T3902] ? 0xffffffff81000000 [ 41.782810][ T3902] ? selinux_file_permission+0x1e4/0x320 [ 41.782844][ T3902] proc_fail_nth_write+0x50/0x160 [ 41.782879][ T3902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.782986][ T3902] vfs_write+0x269/0x960 [ 41.783016][ T3902] ? vfs_read+0x4e6/0x770 [ 41.783038][ T3902] ? __rcu_read_unlock+0x4f/0x70 [ 41.783062][ T3902] ? __fget_files+0x184/0x1c0 [ 41.783110][ T3902] ksys_write+0xda/0x1a0 [ 41.783268][ T3902] __x64_sys_write+0x40/0x50 [ 41.783292][ T3902] x64_sys_call+0x2802/0x3000 [ 41.783314][ T3902] do_syscall_64+0xd2/0x200 [ 41.783341][ T3902] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.783390][ T3902] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.783459][ T3902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.783479][ T3902] RIP: 0033:0x7f70fcb9e1ff [ 41.783492][ T3902] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 41.783555][ T3902] RSP: 002b:00007f70fb607030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 41.783577][ T3902] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70fcb9e1ff [ 41.783593][ T3902] RDX: 0000000000000001 RSI: 00007f70fb6070a0 RDI: 0000000000000003 [ 41.783664][ T3902] RBP: 00007f70fb607090 R08: 0000000000000000 R09: 0000000000000000 [ 41.783679][ T3902] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 41.783693][ T3902] R13: 00007f70fcdf6038 R14: 00007f70fcdf5fa0 R15: 00007fff560badc8 [ 41.783714][ T3902] [ 42.091257][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.120958][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.139291][ T3743] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 42.267939][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.280019][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.304900][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.329163][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.431686][ T3923] netlink: 'syz.2.151': attribute type 6 has an invalid length. [ 42.450623][ T3923] netlink: 'syz.2.151': attribute type 6 has an invalid length. [ 42.544568][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.571822][ T3937] netlink: 'syz.0.150': attribute type 6 has an invalid length. [ 42.602063][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.671984][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.722108][ T3945] FAULT_INJECTION: forcing a failure. [ 42.722108][ T3945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.735257][ T3945] CPU: 0 UID: 0 PID: 3945 Comm: syz.0.157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.735278][ T3945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.735294][ T3945] Call Trace: [ 42.735298][ T3945] [ 42.735306][ T3945] __dump_stack+0x1d/0x30 [ 42.735380][ T3945] dump_stack_lvl+0xe8/0x140 [ 42.735402][ T3945] dump_stack+0x15/0x1b [ 42.735416][ T3945] should_fail_ex+0x265/0x280 [ 42.735502][ T3945] should_fail+0xb/0x20 [ 42.735521][ T3945] should_fail_usercopy+0x1a/0x20 [ 42.735561][ T3945] _copy_to_user+0x20/0xa0 [ 42.735655][ T3945] simple_read_from_buffer+0xb5/0x130 [ 42.735687][ T3945] proc_fail_nth_read+0x10e/0x150 [ 42.735754][ T3945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.735793][ T3945] vfs_read+0x1a8/0x770 [ 42.735822][ T3945] ? __rcu_read_unlock+0x4f/0x70 [ 42.735869][ T3945] ? __fget_files+0x184/0x1c0 [ 42.735901][ T3945] ksys_read+0xda/0x1a0 [ 42.735973][ T3945] __x64_sys_read+0x40/0x50 [ 42.736134][ T3945] x64_sys_call+0x27c0/0x3000 [ 42.736163][ T3945] do_syscall_64+0xd2/0x200 [ 42.736229][ T3945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.736260][ T3945] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.736365][ T3945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.736391][ T3945] RIP: 0033:0x7fcbe2e8e15c [ 42.736409][ T3945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.736430][ T3945] RSP: 002b:00007fcbe18ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.736523][ T3945] RAX: ffffffffffffffda RBX: 00007fcbe30e6090 RCX: 00007fcbe2e8e15c [ 42.736539][ T3945] RDX: 000000000000000f RSI: 00007fcbe18ce0a0 RDI: 0000000000000003 [ 42.736553][ T3945] RBP: 00007fcbe18ce090 R08: 0000000000000000 R09: 0000000000000000 [ 42.736568][ T3945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.736591][ T3945] R13: 00007fcbe30e6128 R14: 00007fcbe30e6090 R15: 00007ffede960898 [ 42.736607][ T3945] [ 43.010252][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.054747][ T29] kauditd_printk_skb: 1075 callbacks suppressed [ 43.054761][ T29] audit: type=1400 audit(1764583589.335:1472): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 43.113616][ T29] audit: type=1326 audit(1764583589.375:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.136984][ T29] audit: type=1326 audit(1764583589.375:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.160433][ T29] audit: type=1326 audit(1764583589.375:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.185481][ T29] audit: type=1326 audit(1764583589.375:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.208864][ T29] audit: type=1326 audit(1764583589.375:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.232187][ T29] audit: type=1326 audit(1764583589.375:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.255644][ T29] audit: type=1326 audit(1764583589.375:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.279070][ T29] audit: type=1326 audit(1764583589.375:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe2e8f749 code=0x7ffc0000 [ 43.293753][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.314161][ T12] bridge_slave_1: left allmulticast mode [ 43.319909][ T12] bridge_slave_1: left promiscuous mode [ 43.325652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.377315][ T12] bridge_slave_0: left allmulticast mode [ 43.383023][ T12] bridge_slave_0: left promiscuous mode [ 43.388690][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.430349][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.641361][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.660322][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.690071][ T12] bond0 (unregistering): Released all slaves [ 43.745870][ T3963] wg1 speed is unknown, defaulting to 1000 [ 43.780583][ T12] hsr_slave_0: left promiscuous mode [ 43.789265][ T12] hsr_slave_1: left promiscuous mode [ 43.799429][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.806817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.821212][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.828587][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.872431][ T12] veth1_macvtap: left promiscuous mode [ 43.877985][ T12] veth0_macvtap: left promiscuous mode [ 43.884684][ T12] veth1_vlan: left promiscuous mode [ 43.900722][ T12] veth0_vlan: left promiscuous mode [ 44.049247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 44.069231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.132856][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 44.267827][ T3970] FAULT_INJECTION: forcing a failure. [ 44.267827][ T3970] name failslab, interval 1, probability 0, space 0, times 0 [ 44.280574][ T3970] CPU: 0 UID: 0 PID: 3970 Comm: syz.4.165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.280600][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.280612][ T3970] Call Trace: [ 44.280618][ T3970] [ 44.280625][ T3970] __dump_stack+0x1d/0x30 [ 44.280719][ T3970] dump_stack_lvl+0xe8/0x140 [ 44.280735][ T3970] dump_stack+0x15/0x1b [ 44.280749][ T3970] should_fail_ex+0x265/0x280 [ 44.280764][ T3970] ? getname_flags+0x208/0x3b0 [ 44.280789][ T3970] should_failslab+0x8c/0xb0 [ 44.280883][ T3970] __kmalloc_cache_noprof+0x4c/0x4a0 [ 44.280980][ T3970] getname_flags+0x208/0x3b0 [ 44.281050][ T3970] __se_sys_acct+0x6a/0x530 [ 44.281086][ T3970] __x64_sys_acct+0x1f/0x30 [ 44.281114][ T3970] x64_sys_call+0x2f3a/0x3000 [ 44.281200][ T3970] do_syscall_64+0xd2/0x200 [ 44.281223][ T3970] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.281246][ T3970] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.281273][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.281358][ T3970] RIP: 0033:0x7ff4f1f3f749 [ 44.281370][ T3970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.281411][ T3970] RSP: 002b:00007ff4f09a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 44.281431][ T3970] RAX: ffffffffffffffda RBX: 00007ff4f2195fa0 RCX: 00007ff4f1f3f749 [ 44.281444][ T3970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002180 [ 44.281503][ T3970] RBP: 00007ff4f09a7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.281513][ T3970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.281523][ T3970] R13: 00007ff4f2196038 R14: 00007ff4f2195fa0 R15: 00007ffd3e4ff538 [ 44.281576][ T3970] [ 44.987316][ T3979] ip6t_srh: unknown srh match flags 4000 [ 45.489455][ T3542] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.821540][ T3988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34378 sclass=netlink_route_socket pid=3988 comm=syz.0.169 [ 45.823301][ T3989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34378 sclass=netlink_route_socket pid=3989 comm=syz.0.169 [ 46.771667][ T4000] wg1 speed is unknown, defaulting to 1000 [ 48.062732][ T29] kauditd_printk_skb: 34352 callbacks suppressed [ 48.062748][ T29] audit: type=1400 audit(1764583594.345:32792): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.109325][ T29] audit: type=1400 audit(1764583594.345:32793): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.130467][ T29] audit: type=1400 audit(1764583594.345:32794): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.151625][ T29] audit: type=1400 audit(1764583594.345:32795): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.172757][ T29] audit: type=1400 audit(1764583594.345:32796): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.193886][ T29] audit: type=1400 audit(1764583594.345:32797): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.215042][ T29] audit: type=1400 audit(1764583594.345:32798): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.236233][ T29] audit: type=1400 audit(1764583594.345:32799): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.257355][ T29] audit: type=1400 audit(1764583594.345:32800): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 48.261628][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.287617][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 48.298596][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.298617][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.298696][ T3321] Call Trace: [ 48.298702][ T3321] [ 48.298727][ T3321] __dump_stack+0x1d/0x30 [ 48.298778][ T3321] dump_stack_lvl+0xe8/0x140 [ 48.298799][ T3321] dump_stack+0x15/0x1b [ 48.298817][ T3321] dump_header+0x81/0x220 [ 48.298835][ T3321] oom_kill_process+0x342/0x400 [ 48.298868][ T3321] out_of_memory+0x979/0xb80 [ 48.298914][ T3321] try_charge_memcg+0x610/0xa10 [ 48.298940][ T3321] charge_memcg+0x51/0xc0 [ 48.298959][ T3321] __mem_cgroup_charge+0x28/0xb0 [ 48.298978][ T3321] filemap_add_folio+0x111/0x360 [ 48.299069][ T3321] __filemap_get_folio+0x31e/0x650 [ 48.299219][ T3321] filemap_fault+0x447/0xb60 [ 48.299310][ T3321] __do_fault+0xbc/0x200 [ 48.299338][ T3321] handle_mm_fault+0xf78/0x2be0 [ 48.299366][ T3321] ? vma_start_read+0x141/0x1f0 [ 48.299396][ T3321] do_user_addr_fault+0x630/0x1080 [ 48.299471][ T3321] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.299550][ T3321] exc_page_fault+0x62/0xa0 [ 48.299586][ T3321] asm_exc_page_fault+0x26/0x30 [ 48.299607][ T3321] RIP: 0033:0x7fecced15fd4 [ 48.299637][ T3321] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 48.299651][ T3321] RSP: 002b:00007ffe4e43be10 EFLAGS: 00010202 [ 48.299664][ T3321] RAX: 0000001b33b24000 RBX: 000000000000005d RCX: 000000000000bb80 [ 48.299756][ T3321] RDX: 00000000006fabe0 RSI: 00007ffe4e43bea0 RDI: 0000000000000001 [ 48.299766][ T3321] RBP: 00007ffe4e43be4c R08: 0000000001a9fe18 R09: 7fffffffffffffff [ 48.299776][ T3321] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 48.299786][ T3321] R13: 00000000000927c0 R14: 000000000000b356 R15: 00007ffe4e43bea0 [ 48.299804][ T3321] [ 48.488737][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 21260 [ 48.495698][ T3321] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 48.503647][ T3321] kmem: usage 4232kB, limit 9007199254740988kB, failcnt 0 [ 48.510776][ T3321] Memory cgroup stats for /syz1: [ 48.619774][ T3321] cache 309846016 [ 48.628352][ T3321] rss 315392 [ 48.631584][ T3321] shmem 309841920 [ 48.635213][ T3321] mapped_file 0 [ 48.638728][ T3321] dirty 0 [ 48.641699][ T3321] writeback 0 [ 48.645015][ T3321] workingset_refault_anon 8 [ 48.649526][ T3321] workingset_refault_file 28 [ 48.654135][ T3321] swap 127918080 [ 48.657676][ T3321] swapcached 77824 [ 48.661410][ T3321] pgpgin 114390 [ 48.664978][ T3321] pgpgout 38648 [ 48.668487][ T3321] pgfault 15869 [ 48.671968][ T3321] pgmajfault 7 [ 48.675334][ T3321] inactive_anon 283729920 [ 48.679747][ T3321] active_anon 26505216 [ 48.683813][ T3321] inactive_file 0 [ 48.687443][ T3321] active_file 4096 [ 48.691185][ T3321] unevictable 0 [ 48.694650][ T3321] hierarchical_memory_limit 314572800 [ 48.700044][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 48.706193][ T3321] total_cache 309846016 [ 48.710381][ T3321] total_rss 315392 [ 48.714096][ T3321] total_shmem 309841920 [ 48.718239][ T3321] total_mapped_file 0 [ 48.722259][ T3321] total_dirty 0 [ 48.725714][ T3321] total_writeback 0 [ 48.729552][ T3321] total_workingset_refault_anon 8 [ 48.734645][ T3321] total_workingset_refault_file 28 [ 48.739802][ T3321] total_swap 127918080 [ 48.743863][ T3321] total_swapcached 77824 [ 48.748096][ T3321] total_pgpgin 114390 [ 48.752105][ T3321] total_pgpgout 38648 [ 48.756090][ T3321] total_pgfault 15869 [ 48.760097][ T3321] total_pgmajfault 7 [ 48.763986][ T3321] total_inactive_anon 283729920 [ 48.768832][ T3321] total_active_anon 26505216 [ 48.773519][ T3321] total_inactive_file 0 [ 48.777698][ T3321] total_active_file 4096 [ 48.782030][ T3321] total_unevictable 0 [ 48.786014][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.140,pid=3933,uid=0 [ 48.800545][ T3321] Memory cgroup out of memory: Killed process 3933 (syz.1.140) total-vm:90056kB, anon-rss:1280kB, file-rss:53916kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 49.458711][ T3935] syz.1.140 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 49.468491][ T3935] CPU: 0 UID: 0 PID: 3935 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.468520][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.468533][ T3935] Call Trace: [ 49.468539][ T3935] [ 49.468616][ T3935] __dump_stack+0x1d/0x30 [ 49.468635][ T3935] dump_stack_lvl+0xe8/0x140 [ 49.468732][ T3935] dump_stack+0x15/0x1b [ 49.468749][ T3935] dump_header+0x81/0x220 [ 49.468765][ T3935] oom_kill_process+0x342/0x400 [ 49.468792][ T3935] out_of_memory+0x979/0xb80 [ 49.468843][ T3935] try_charge_memcg+0x610/0xa10 [ 49.468878][ T3935] charge_memcg+0x51/0xc0 [ 49.468902][ T3935] __mem_cgroup_charge+0x28/0xb0 [ 49.468923][ T3935] shmem_get_folio_gfp+0x470/0xd60 [ 49.468971][ T3935] shmem_write_begin+0xa8/0x190 [ 49.469052][ T3935] generic_perform_write+0x184/0x490 [ 49.469073][ T3935] shmem_file_write_iter+0xc5/0xf0 [ 49.469097][ T3935] __kernel_write_iter+0x2d6/0x540 [ 49.469125][ T3935] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 49.469226][ T3935] dump_user_range+0x61e/0x8f0 [ 49.469264][ T3935] elf_core_dump+0x1de7/0x1f80 [ 49.469314][ T3935] ? 0xffffffffff600000 [ 49.469413][ T3935] coredump_write+0xb12/0xe30 [ 49.469448][ T3935] vfs_coredump+0x143a/0x20d0 [ 49.469498][ T3935] ? __memcg_slab_free_hook+0xbc/0x230 [ 49.469519][ T3935] ? kmem_cache_free+0xe4/0x3d0 [ 49.469544][ T3935] ? proc_coredump_connector+0x114/0x220 [ 49.469579][ T3935] get_signal+0xd84/0xf70 [ 49.469608][ T3935] arch_do_signal_or_restart+0x96/0x440 [ 49.469637][ T3935] irqentry_exit_to_user_mode+0x5b/0xa0 [ 49.469676][ T3935] irqentry_exit+0x12/0x50 [ 49.469746][ T3935] asm_exc_page_fault+0x26/0x30 [ 49.469845][ T3935] RIP: 0033:0x7feccecff6b7 [ 49.469860][ T3935] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 49.469874][ T3935] RSP: 002b:00007feccd85f120 EFLAGS: 00010202 [ 49.469886][ T3935] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007feccee3f749 [ 49.469966][ T3935] RDX: 00007feccd85f140 RSI: 00007feccd85f270 RDI: 000000000000000b [ 49.469979][ T3935] RBP: 00007fecceec3f91 R08: 0000000000000000 R09: 0000000000000000 [ 49.469988][ T3935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 49.469997][ T3935] R13: 00007feccf096128 R14: 00007feccf096090 R15: 00007ffe4e43ba88 [ 49.470011][ T3935] [ 49.704631][ T3935] memory: usage 307200kB, limit 307200kB, failcnt 22080 [ 49.711589][ T3935] memory+swap: usage 431984kB, limit 9007199254740988kB, failcnt 0 [ 49.719520][ T3935] kmem: usage 4048kB, limit 9007199254740988kB, failcnt 0 [ 49.726635][ T3935] Memory cgroup stats for /syz1: [ 50.152334][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.198406][ T3935] cache 309673984 [ 50.202241][ T3935] rss 131072 [ 50.205551][ T3935] shmem 306487296 [ 50.209290][ T3935] mapped_file 2080768 [ 50.213273][ T3935] dirty 0 [ 50.216220][ T3935] writeback 0 [ 50.219586][ T3935] workingset_refault_anon 8 [ 50.224083][ T3935] workingset_refault_file 308 [ 50.228796][ T3935] swap 127549440 [ 50.232408][ T3935] swapcached 131072 [ 50.236320][ T3935] pgpgin 117879 [ 50.239880][ T3935] pgpgout 42211 [ 50.243364][ T3935] pgfault 16042 [ 50.246878][ T3935] pgmajfault 14 [ 50.250350][ T3935] inactive_anon 62124032 [ 50.254589][ T3935] active_anon 243748864 [ 50.258780][ T3935] inactive_file 0 [ 50.262463][ T3935] active_file 3186688 [ 50.266462][ T3935] unevictable 0 [ 50.269945][ T3935] hierarchical_memory_limit 314572800 [ 50.275342][ T3935] hierarchical_memsw_limit 9223372036854771712 [ 50.281519][ T3935] total_cache 309673984 [ 50.285751][ T3935] total_rss 131072 [ 50.289510][ T3935] total_shmem 306487296 [ 50.293669][ T3935] total_mapped_file 2080768 [ 50.298182][ T3935] total_dirty 0 [ 50.301737][ T3935] total_writeback 0 [ 50.305550][ T3935] total_workingset_refault_anon 8 [ 50.310598][ T3935] total_workingset_refault_file 308 [ 50.315798][ T3935] total_swap 127549440 [ 50.319981][ T3935] total_swapcached 131072 [ 50.324325][ T3935] total_pgpgin 117879 [ 50.328305][ T3935] total_pgpgout 42211 [ 50.332411][ T3935] total_pgfault 16042 [ 50.336461][ T3935] total_pgmajfault 14 [ 50.340504][ T3935] total_inactive_anon 62124032 [ 50.345270][ T3935] total_active_anon 243748864 [ 50.349958][ T3935] total_inactive_file 0 [ 50.354112][ T3935] total_active_file 3186688 [ 50.358623][ T3935] total_unevictable 0 [ 50.362609][ T3935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.140,pid=3900,uid=0 [ 50.377203][ T3935] Memory cgroup out of memory: Killed process 3900 (syz.1.140) total-vm:90056kB, anon-rss:1152kB, file-rss:53788kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 50.853105][ T3933] syz.1.140 (3933) used greatest stack depth: 8248 bytes left [ 51.529176][ T3921] ================================================================== [ 51.537294][ T3921] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 51.547128][ T3921] [ 51.549450][ T3921] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 51.557521][ T3921] tick_do_update_jiffies64+0x113/0x1c0 [ 51.563087][ T3921] tick_nohz_handler+0x7f/0x2d0 [ 51.567945][ T3921] __hrtimer_run_queues+0x20f/0x5a0 [ 51.573172][ T3921] hrtimer_interrupt+0x21a/0x460 [ 51.578140][ T3921] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 51.584061][ T3921] sysvec_apic_timer_interrupt+0x6f/0x80 [ 51.589731][ T3921] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.595733][ T3921] do_syscall_64+0x9c/0x200 [ 51.600264][ T3921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.606174][ T3921] [ 51.608513][ T3921] read to 0xffffffff868099c0 of 8 bytes by task 3921 on cpu 1: [ 51.616077][ T3921] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 51.622341][ T3921] count_shadow_nodes+0x6a/0x230 [ 51.627281][ T3921] do_shrink_slab+0x63/0x680 [ 51.631889][ T3921] shrink_slab+0x448/0x760 [ 51.636323][ T3921] shrink_node+0x6c3/0x2120 [ 51.640856][ T3921] do_try_to_free_pages+0x3f6/0xcd0 [ 51.646057][ T3921] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 51.651958][ T3921] try_charge_memcg+0x383/0xa10 [ 51.656830][ T3921] charge_memcg+0x51/0xc0 [ 51.661176][ T3921] __mem_cgroup_charge+0x28/0xb0 [ 51.666125][ T3921] filemap_add_folio+0x111/0x360 [ 51.671090][ T3921] __filemap_get_folio+0x31e/0x650 [ 51.676223][ T3921] filemap_fault+0x447/0xb60 [ 51.680829][ T3921] __do_fault+0xbc/0x200 [ 51.685086][ T3921] handle_mm_fault+0xf78/0x2be0 [ 51.689953][ T3921] __get_user_pages+0x102a/0x1ed0 [ 51.694985][ T3921] get_dump_page+0xb5/0x250 [ 51.699499][ T3921] dump_user_range+0x145/0x8f0 [ 51.704281][ T3921] elf_core_dump+0x1de7/0x1f80 [ 51.709061][ T3921] coredump_write+0xb12/0xe30 [ 51.713745][ T3921] vfs_coredump+0x143a/0x20d0 [ 51.718431][ T3921] get_signal+0xd84/0xf70 [ 51.722762][ T3921] arch_do_signal_or_restart+0x96/0x440 [ 51.728303][ T3921] irqentry_exit_to_user_mode+0x5b/0xa0 [ 51.733874][ T3921] irqentry_exit+0x12/0x50 [ 51.738321][ T3921] asm_exc_page_fault+0x26/0x30 [ 51.743183][ T3921] [ 51.745530][ T3921] value changed: 0x00000000ffff9ec3 -> 0x00000000ffff9ec4 [ 51.752644][ T3921] [ 51.754962][ T3921] Reported by Kernel Concurrency Sanitizer on: [ 51.761109][ T3921] CPU: 1 UID: 0 PID: 3921 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.770742][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.780804][ T3921] ================================================================== [ 52.209165][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.215358][ T3542] Bluetooth: hci0: command 0x1003 tx timeout [ 52.449805][ T30] oom_reaper: reaped process 3900 (syz.1.140), now anon-rss:116kB, file-rss:32620kB, shmem-rss:0kB [ 52.473487][ T3935] syz.1.140 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 52.484207][ T3935] CPU: 1 UID: 0 PID: 3935 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.484295][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.484308][ T3935] Call Trace: [ 52.484316][ T3935] [ 52.484324][ T3935] __dump_stack+0x1d/0x30 [ 52.484349][ T3935] dump_stack_lvl+0xe8/0x140 [ 52.484372][ T3935] dump_stack+0x15/0x1b [ 52.484393][ T3935] dump_header+0x81/0x220 [ 52.484453][ T3935] oom_kill_process+0x342/0x400 [ 52.484489][ T3935] out_of_memory+0x979/0xb80 [ 52.484525][ T3935] try_charge_memcg+0x610/0xa10 [ 52.484626][ T3935] obj_cgroup_charge_pages+0xa6/0x150 [ 52.484644][ T3935] obj_cgroup_charge_account+0x73/0x1a0 [ 52.484664][ T3935] __memcg_slab_post_alloc_hook+0x398/0x580 [ 52.484694][ T3935] kmem_cache_alloc_lru_noprof+0x2c1/0x490 [ 52.484792][ T3935] ? xas_nomem+0xd1/0x130 [ 52.484816][ T3935] xas_nomem+0xd1/0x130 [ 52.484833][ T3935] shmem_add_to_page_cache+0x438/0x530 [ 52.484930][ T3935] shmem_get_folio_gfp+0x4e8/0xd60 [ 52.484977][ T3935] shmem_write_begin+0xa8/0x190 [ 52.485104][ T3935] generic_perform_write+0x184/0x490 [ 52.485139][ T3935] shmem_file_write_iter+0xc5/0xf0 [ 52.485164][ T3935] __kernel_write_iter+0x2d6/0x540 [ 52.485226][ T3935] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 52.485254][ T3935] dump_user_range+0x61e/0x8f0 [ 52.485313][ T3935] elf_core_dump+0x1de7/0x1f80 [ 52.485358][ T3935] ? 0xffffffffff600000 [ 52.485450][ T3935] coredump_write+0xb12/0xe30 [ 52.485492][ T3935] vfs_coredump+0x143a/0x20d0 [ 52.485551][ T3935] ? __memcg_slab_free_hook+0xbc/0x230 [ 52.485573][ T3935] ? kmem_cache_free+0xe4/0x3d0 [ 52.485658][ T3935] ? proc_coredump_connector+0x114/0x220 [ 52.485704][ T3935] get_signal+0xd84/0xf70 [ 52.485794][ T3935] arch_do_signal_or_restart+0x96/0x440 [ 52.485821][ T3935] irqentry_exit_to_user_mode+0x5b/0xa0 [ 52.485876][ T3935] irqentry_exit+0x12/0x50 [ 52.485917][ T3935] asm_exc_page_fault+0x26/0x30 [ 52.485944][ T3935] RIP: 0033:0x7feccecff6b7 [ 52.485963][ T3935] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 48 1c 00 48 8d 3d ef 48 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 52.485986][ T3935] RSP: 002b:00007feccd85f120 EFLAGS: 00010202 [ 52.486022][ T3935] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007feccee3f749 [ 52.486033][ T3935] RDX: 00007feccd85f140 RSI: 00007feccd85f270 RDI: 000000000000000b [ 52.486045][ T3935] RBP: 00007fecceec3f91 R08: 0000000000000000 R09: 0000000000000000 [ 52.486056][ T3935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 52.486071][ T3935] R13: 00007feccf096128 R14: 00007feccf096090 R15: 00007ffe4e43ba88 [ 52.486092][ T3935] [ 52.486101][ T3935] memory: usage 307200kB, limit 307200kB, failcnt 26411 [ 52.755575][ T3935] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 52.763485][ T3935] kmem: usage 3956kB, limit 9007199254740988kB, failcnt 0 [ 52.770605][ T3935] Memory cgroup stats for /syz1: [ 52.802565][ T3935] cache 310374400 [ 52.811139][ T3935] rss 114688 [ 52.814326][ T3935] shmem 310362112 [ 52.817976][ T3935] mapped_file 0 [ 52.821503][ T3935] dirty 0 [ 52.824509][ T3935] writeback 0 [ 52.827871][ T3935] workingset_refault_anon 20 [ 52.832465][ T3935] workingset_refault_file 2630 [ 52.837226][ T3935] swap 127832064 [ 52.840781][ T3935] swapcached 28672 [ 52.844507][ T3935] pgpgin 126292 [ 52.847968][ T3935] pgpgout 50481 [ 52.851551][ T3935] pgfault 16478 [ 52.855008][ T3935] pgmajfault 45 [ 52.858519][ T3935] inactive_anon 78262272 [ 52.862772][ T3935] active_anon 232243200 [ 52.866977][ T3935] inactive_file 0 [ 52.870616][ T3935] active_file 12288 [ 52.874417][ T3935] unevictable 0 [ 52.877925][ T3935] hierarchical_memory_limit 314572800 [ 52.883316][ T3935] hierarchical_memsw_limit 9223372036854771712 [ 52.889471][ T3935] total_cache 310374400 [ 52.893620][ T3935] total_rss 114688 [ 52.897410][ T3935] total_shmem 310362112 [ 52.901600][ T3935] total_mapped_file 0 [ 52.905577][ T3935] total_dirty 0 [ 52.909064][ T3935] total_writeback 0 [ 52.912921][ T3935] total_workingset_refault_anon 20 [ 52.918029][ T3935] total_workingset_refault_file 2630 [ 52.923327][ T3935] total_swap 127832064 [ 52.927401][ T3935] total_swapcached 28672 [ 52.931666][ T3935] total_pgpgin 126292 [ 52.935647][ T3935] total_pgpgout 50481 [ 52.939670][ T3935] total_pgfault 16478 [ 52.943683][ T3935] total_pgmajfault 45 [ 52.947654][ T3935] total_inactive_anon 78262272 [ 52.952461][ T3935] total_active_anon 232243200 [ 52.957130][ T3935] total_inactive_file 0 [ 52.961301][ T3935] total_active_file 12288 [ 52.965629][ T3935] total_unevictable 0 [ 52.969683][ T3935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.140,pid=3897,uid=0 [ 52.984223][ T3935] Memory cgroup out of memory: Killed process 3897 (syz.1.140) total-vm:90056kB, anon-rss:1280kB, file-rss:54080kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 53.094523][ T3045] audit_log_start: 63955 callbacks suppressed [ 53.094537][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.099421][ T29] audit: type=1400 audit(1764583599.375:57322): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.100691][ T3045] audit: audit_lost=14160 audit_rate_limit=0 audit_backlog_limit=64 [ 53.107123][ T29] audit: type=1400 audit(1764583599.375:57323): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.107146][ T29] audit: type=1400 audit(1764583599.375:57324): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.128324][ T3045] audit: backlog limit exceeded [ 53.183456][ T29] audit: type=1400 audit(1764583599.375:57325): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.204833][ T29] audit: type=1400 audit(1764583599.375:57326): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.226028][ T29] audit: type=1400 audit(1764583599.375:57327): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.247246][ T29] audit: type=1400 audit(1764583599.375:57328): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.627149][ T12] bridge_slave_1: left allmulticast mode [ 53.632831][ T12] bridge_slave_1: left promiscuous mode [ 53.638460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.665691][ T12] bridge_slave_0: left allmulticast mode [ 53.671432][ T12] bridge_slave_0: left promiscuous mode [ 53.677134][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.726058][ T3900] syz.1.140 (3900) used greatest stack depth: 8072 bytes left [ 53.752071][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.761555][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.770797][ T12] bond0 (unregistering): Released all slaves [ 53.804657][ T12] hsr_slave_0: left promiscuous mode [ 53.820496][ T12] hsr_slave_1: left promiscuous mode [ 53.826240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.834044][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.879827][ T12] team0 (unregistering): Port device team_slave_1 removed [ 53.892842][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.223894][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.262086][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.321943][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.371911][ T3396] wg1 speed is unknown, defaulting to 1000 [ 54.377773][ T3396] syz0: Port: 1 Link DOWN [ 54.382861][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.462217][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.522576][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.561944][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.611487][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.667979][ T12] bridge_slave_1: left allmulticast mode [ 54.673652][ T12] bridge_slave_1: left promiscuous mode [ 54.679299][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.697769][ T12] bridge_slave_0: left allmulticast mode [ 54.703545][ T12] bridge_slave_0: left promiscuous mode [ 54.709185][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.730197][ T12] bridge_slave_1: left allmulticast mode [ 54.735925][ T12] bridge_slave_1: left promiscuous mode [ 54.741622][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.749586][ T12] bridge_slave_0: left allmulticast mode [ 54.755292][ T12] bridge_slave_0: left promiscuous mode [ 54.760936][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.872171][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.882049][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.892002][ T12] bond0 (unregistering): Released all slaves [ 54.932345][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.943376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.956335][ T12] bond0 (unregistering): Released all slaves [ 55.007670][ T12] hsr_slave_0: left promiscuous mode [ 55.014265][ T12] hsr_slave_1: left promiscuous mode [ 55.023079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.030472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.050120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.057527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.073698][ T12] hsr_slave_0: left promiscuous mode [ 55.080379][ T12] hsr_slave_1: left promiscuous mode [ 55.084880][ T3889] syz.1.140 (3889) used greatest stack depth: 8056 bytes left [ 55.085932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.100607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.108924][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.116338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.129828][ T12] veth1_macvtap: left promiscuous mode [ 55.135379][ T12] veth0_macvtap: left promiscuous mode [ 55.141042][ T12] veth1_vlan: left promiscuous mode [ 55.146427][ T12] veth0_vlan: left promiscuous mode [ 55.153601][ T12] veth1_macvtap: left promiscuous mode [ 55.159083][ T12] veth0_macvtap: left promiscuous mode [ 55.164920][ T12] veth1_vlan: left promiscuous mode [ 55.170518][ T12] veth0_vlan: left promiscuous mode [ 55.287173][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.299411][ T12] team0 (unregistering): Port device team_slave_0 removed [ 55.369173][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.380055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 55.525041][ T3921] syz.1.140 (3921) used greatest stack depth: 7632 bytes left [ 56.000272][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.053057][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.113008][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.172043][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.252996][ T12] bridge_slave_1: left allmulticast mode [ 56.258723][ T12] bridge_slave_1: left promiscuous mode [ 56.264389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.272203][ T12] bridge_slave_0: left allmulticast mode [ 56.277851][ T12] bridge_slave_0: left promiscuous mode [ 56.283524][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.370948][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.380888][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.390557][ T12] bond0 (unregistering): Released all slaves [ 56.413195][ T12] hsr_slave_0: left promiscuous mode [ 56.418774][ T12] hsr_slave_1: left promiscuous mode [ 56.424498][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.431938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.439396][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.446762][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.458546][ T12] veth1_macvtap: left promiscuous mode [ 56.464065][ T12] veth0_macvtap: left promiscuous mode [ 56.469746][ T12] veth1_vlan: left promiscuous mode [ 56.474995][ T12] veth0_vlan: left promiscuous mode [ 56.541950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.552006][ T12] team0 (unregistering): Port device team_slave_0 removed [ 58.099254][ T29] kauditd_printk_skb: 49162 callbacks suppressed [ 58.099273][ T29] audit: type=1400 audit(1764583604.385:96585): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.106520][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.127050][ T29] audit: type=1400 audit(1764583604.385:96586): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.133367][ T3045] audit: audit_lost=17463 audit_rate_limit=0 audit_backlog_limit=64 [ 58.133382][ T3045] audit: backlog limit exceeded [ 58.133567][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.154502][ T29] audit: type=1400 audit(1764583604.385:96587): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.162467][ T3045] audit: audit_lost=17464 audit_rate_limit=0 audit_backlog_limit=64 [ 58.167299][ T29] audit: type=1400 audit(1764583604.385:96588): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.167321][ T29] audit: type=1400 audit(1764583604.385:96589): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0