last executing test programs: 2.793037284s ago: executing program 0 (id=179): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc00", 0x9b}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf", 0x2a}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 2.614840973s ago: executing program 2 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000fdffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) 2.592170943s ago: executing program 2 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000fdffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) (fail_nth: 2) 2.323217182s ago: executing program 2 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f7fc70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cb64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f440af2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719a674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea00020000cf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb72fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28d5271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6d372ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee99de7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e0700000005bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba68df304a8bd66fcdf240430a537a395dc73bda1b7bf12cb2d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0d482ac3750e0170da9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422636f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e73970413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c28fd4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5001000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7e661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428713b4218821176d8067997527230fa67d26950d3e4f2750fa7c8720000000001000000b08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1f0da240455a0980b1882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca005d0000000000000000001a462fe02852f49e1fb5f1fec6893f9ae8af00"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150a03"], 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d593517"]}]}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 2.210870091s ago: executing program 1 (id=194): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[], 0x52) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x101, &(0x7f0000000000)=0x0) io_submit(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x20000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x9, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) (fail_nth: 5) 2.083620841s ago: executing program 0 (id=195): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141480, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000440)=""/247, 0x26) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.822119569s ago: executing program 1 (id=196): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = signalfd4(r0, &(0x7f0000000100)={[0x3]}, 0x8, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972", 0x6c}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa9, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$setlease(r3, 0x400, 0x0) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="6220fb"], 0x9) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='GPL\x00') 1.786277579s ago: executing program 1 (id=197): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.758897159s ago: executing program 1 (id=198): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x4, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xa, 0x4}, @timestamp={0x8, 0xa}, @mptcp=@generic={0x80, 0xf, "c8977f7eebf5f9f1fef0430655"}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @timestamp={0x8, 0xa, 0x10, 0x10001}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x40}}}}}}}, 0x0) 1.705172158s ago: executing program 4 (id=199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc041) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) syz_emit_ethernet(0x68, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc041) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) (async) syz_emit_ethernet(0x68, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6075e70000323a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e0000000000880000000000080000000000000001fe800000000000000000000000fff2bb6be2ae631dd375b0d901962bb2b6c20214fddb2ea2d1c22959c1740f5000000000000000dd6eb0151027fc1781df93a37dd662b6736891331003415e4bc4481163152eaaab6e4b485971c20a86f6552ac87c2215bdbfac6fb1330abadbb23b5aff57984103806c62438e4ed5ce8809d269903d041a580a957e99396ea5c59e0b0f84fc1820c16c0e9a5b0e48f0b1abf04a9ebe127e81edaf416320b250d5364d867c66fa4133040e4c34a115cbd16ce41f11bd3a84df3cef0c86238a4ffbe6dec67967892cc03ec5b9be5a5d2687833a8f98518e74d13158888c8aa27ea388db16d4ef6cd7adc35f9ceaf8d6c47cc8b3040d0d18ea72e2805fc90b153bbeb586bf891db6b27c213493"], 0x0) (async) 1.704589499s ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 1.697641588s ago: executing program 1 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @ptr]}}, &(0x7f0000000200)=""/224, 0x42, 0xe0, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0) 1.647471188s ago: executing program 4 (id=202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000002500)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000001480)="c5", 0x1}], 0x1}}], 0x1, 0x14) sendmmsg$inet(r1, &(0x7f00000003c0), 0x0, 0xc080) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r3}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0xfd, "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"}, &(0x7f0000000000)=0x105) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) shutdown(r0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=@deltaction={0x13c, 0x31, 0x137, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf2}}]}]}, 0x13c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x76}, 0x18) write$binfmt_script(r9, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 1.647058598s ago: executing program 2 (id=203): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) (fail_nth: 5) 1.646554478s ago: executing program 1 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = syz_io_uring_setup(0x5248, &(0x7f0000000080)={0x0, 0x101fab, 0x1000, 0xffffffff, 0x40}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100010200000000000000000000000000000000c112bf752887746af3a462b2c9858c017c05a32e4247c94d1d831ec50eca2a1cba8fc42550e4caeb8e6223ee97af146f4a70e0f31edb533e0f9a5dd86ebbe6a8ff6289f86a9a54c1415f1b9a79b6649327ce6cea8e773e6ef7e59cdd7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000180)='./file1\x00') 1.071563616s ago: executing program 2 (id=206): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x3, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r3, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000080"], 0x18}, 0x24004800) clock_gettime(0x0, &(0x7f0000001a80)) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000080)=@l2tp, 0x80, &(0x7f0000001380)=[{&(0x7f0000001bc0)=""/158, 0x9e}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/112, 0x70}], 0x4, &(0x7f00000013c0)=""/249, 0xf9}, 0x4}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/86, 0x56}, {&(0x7f0000001540)=""/93, 0x5d}, {&(0x7f00000015c0)=""/102, 0x66}], 0x3, &(0x7f0000001900)=""/107, 0x6b}, 0xa5}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)=""/88, 0x58}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000001880)=""/39, 0x27}], 0x3, &(0x7f0000001b00)=""/141, 0x8d}, 0x6}], 0x3, 0x40000000, &(0x7f0000001ac0)={0x77359400}) ptrace(0x4207, 0x0) 1.028114425s ago: executing program 0 (id=209): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0xc7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 824.930274ms ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r2, 0x0, 0x0) (fail_nth: 2) 603.643404ms ago: executing program 0 (id=213): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a046b870af34f04001a001931a0e69ee517d2301f2febcf0eca707888d34460bc8c000000a705251e6182949a3651f60a84c9e4d4938037e70e4509c5bb00000000000000000000ee17459447", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000002ec0)=""/4094, 0xffe}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000f40)=""/208, 0xd0}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000003ec0)=""/4089, 0xff9}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000e80)=""/168, 0xa8}, {&(0x7f0000000280)=""/85, 0x55}], 0xb}, 0x40000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f338db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)="fcd206f727ff69", 0x7}], 0x2) 572.464143ms ago: executing program 4 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 531.137893ms ago: executing program 4 (id=215): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x4000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) close(r1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000002406080859a66fba242d7c9e07e6cb663134df060000000025240900000000000000732e72d94e6303d066cd7fe4dfba4b745b2a2a24cf8351dffbecf1f87239050ee96d124f8684f94865f6507ef44f5602a5f88c1bf9be1e9d9372fbbf885dbfeeb98e7bcd250000000000000000999e5828c21579cb27fbbe4bccaba9c49f86d7e1f4d43a2b4dbf49d80d6b58838261fbf1658f8d4f676090ff2451d1bd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c20003907800001e0aa004ffffffff00091e043b400000"], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x47, 0x0, "f9cbfa1b8365f436212b4185c6fa9c77a73594fc806e2caca5cd4fcf54ca52df9668f05ae6f0bbd47240bae6963d7390297ad49259382f2055079c8dea12df445b62bf22bf63ecc710ca0f4390d10e3b"}, 0xd8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) io_submit(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) chroot(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x80800) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r12, 0x0, 0x0) 463.762813ms ago: executing program 3 (id=216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x16) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 445.705942ms ago: executing program 3 (id=217): ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) timer_create(0x7, &(0x7f0000000140)={0x0, 0x5, 0x4, @thr={&(0x7f0000000000)="b4f8a8ce4c02c7d1be1ff5c11c5f39b526fc517a31e5bc35c9a9bc45760f29ae50654024a7d5676beffa845e", &(0x7f0000000040)="351581b6349443cbc808707850347c9dd60e257c94b75a3ca6c9f69247e8ef345b7d7c5d88e474ddf56da9830741cbda145934bd0dba9bb79a2b9e5c7a67f6f0084df0cfc106c6651ef4d0760a5d82fa2ec85be19082e207068c0b35913e3b7a2d524b1493839ef90489a56bc911ca50f79710f59fe97aa4cd6abf54d5c38873d77c49bef742c4184ae8c3ed6401fec2ae5fa83d4c326c8ec697515babcf99602e4521d4d69892efea2e0fddde20b2996f658cb0102aabab77ea6f497c633f29f6f01d8d262cdcb64754b6"}}, &(0x7f0000000180)=0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000240)="a8d3", 0x2}, {&(0x7f0000000280)="0a0e3ea94b1fe3df3dc08836682fa602657717e19b8e72d72a97ed5a8de735871cadfc7296cd6ffc1dc74a6afb8a3b69fd59b8322a6e0c1d788927a2e5fc0a150ce549fdceacfcfde26f81be978e37e990af2d5cb1dbcb31b75421876bfa9a17cc6ba38bb5adfff4d76b451a9070b9d2bfac1b06fa9705e957b41fdbfabe195cd67772bc823cea965e43a166442b5eb88b821be67a5d1b488f706e47a25002334547aa388e3c02dbf253ad539d6fc254facdba0da927b1a7ec02a9488a1a4b17c71cc3e51da5a864dc27", 0xca}, {&(0x7f0000000380)="20e6679e29e965928f68be808bbc6a93fdca8fb6f273771cd052927a83b249067823ba166d1854155c991438ff6502286477c27f396a5a1cc4ade4f96d840900a56814a52c2242e4607a647437de75b69e6527f8b99abf3a28e4ef4b6e5441c85c9c5a78b7a91234", 0x68}, {&(0x7f0000000400)="f18be7771ef33209b5002089f04a64cd3ad8c3dcc9e24e8447f1a27fc777684173f1992f0ffccf5b906617994cab5f29a7371f579cecb0cfab10376b942525502854091c29b6ec4d891ae9c1cff12a4dd146e97b59771ca2404a55672a2bc0f1d72a1eb6c078e96b722739b51119ba95b086607794931fc3390bacc82d5fb30d39754ddb1cf95153d7dcd4c199b45c43e6287dd79ad62e", 0x97}, {&(0x7f00000004c0)="16c76ec2107275a67706257816865019cdb7cf51e33d8208fe94e7dcbbc2d27b0abd60dfbdb694784561a9aeb56fec83fcdfeb67b844e3d160944849394e5a112954892ba28b05ab07f46f8d56793e50d7992d53aaf6c7b360d566d42c8b54d46fe213f060", 0x65}, {&(0x7f0000000540)="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", 0x1000}], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r1, 0x0, 0xb5, 0x8, &(0x7f00000015c0)="a07b2eb4de8c08c4ab2c1fc6cca79339f93594d4452df5a51ca5c2665fefaf37dfa25c6c350bfc14d7591e90b2c5f37740d82543e4277cb26e7158e5ca09524f52df7fcb720e32e48df06389976aa637ad874f92894b5b9f57c58f334f7ad8b32017fdafff52eed4c2cb071c0d9203b6e87a361e69c3dd018f62749f873b6516aea8084e8f4518f21db0fe7bc7ae6bab8d8d11f866aa1d3934d0c009e5f6976f323358ae9e17f48d248c2a4be69257d2f98457e843", &(0x7f0000001680)=""/8, 0x1, 0x0, 0x14, 0x99, &(0x7f00000016c0)="a373982cb4ecad9ba1dc95cb5b082312e3694406", &(0x7f0000001700)="2d89dca943c8821d3769f5a7113c6c25bf069e63b0f899cfe63a4cd926f5f5a43b7662900f79273b56d28781a679781d0da90627594f3908d8bd48ea60f2443f3dcf50557375ab00c62d1ab94e0a5b52e2c8b50ab33d55c14300799beed9fe1192799a3aeb04d3b9490354b719631b99777840006b3fc1ef02bc038d360445282b8d9055543ee4719031fc9ee7995ef1ad384c93ee3f246ae1", 0x0, 0x0, 0x9}, 0x50) fcntl$getownex(r2, 0x10, &(0x7f0000001840)={0x0, 0x0}) pread64(r1, &(0x7f0000001880)=""/173, 0xad, 0x7c19) timer_create(0x7, &(0x7f0000001a00)={0x0, 0xb, 0x4, @thr={&(0x7f0000001940)="0bb0debb58efe0e0bc", &(0x7f0000001980)="d95956da90c715922054e4e95c9b0e7e4878a00d2a957e6b72e64f5f54e9ad928ac9f5b695391a21af3f33b53154e8d5263e8f71575b2d61ac330309d4bd61d6204574d8da74e6695662647df4e6d5b6424075640daa7744"}}, &(0x7f0000001a40)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) chown(&(0x7f0000001a80)='./file0\x00', r5, 0xee00) lgetxattr(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)=@random={'os2.', '&\x00'}, &(0x7f0000001b80)=""/49, 0x31) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000001bc0)={0x101, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={r7, 0xe0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000001e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)) recvmsg$unix(r1, &(0x7f0000002400)={&(0x7f00000020c0), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002140)=""/166, 0xa6}, {&(0x7f0000002200)=""/35, 0x23}, {&(0x7f0000002240)=""/10, 0xa}], 0x3, &(0x7f00000022c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x110}, 0x40000020) syz_pidfd_open(r3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) timer_getoverrun(r0) faccessat(r8, &(0x7f0000002440)='./file0\x00', 0x128) openat$cgroup_ro(r11, &(0x7f0000002480)='memory.numa_stat\x00', 0x0, 0x0) connect$inet(r10, &(0x7f00000024c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) timer_gettime(r4, &(0x7f0000002500)) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f0000002540)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000002580)=0x2c) socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000002600)={{}, {r13, r14+60000000}}, &(0x7f0000002640)) ioprio_set$pid(0x3, r12, 0x4004) 425.943392ms ago: executing program 3 (id=218): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x1, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 421.396842ms ago: executing program 4 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32, @ANYBLOB="00000200000000000c001a800800028004000157db8c6ea7187a9e00f83f67129bce6c64b85c741d0b0051419501829eeb4653af100dc1d4b8cfb6ff2435c326f3c695aeb6f1ea8f4d01b2fa11cd5b9fbe08f24ca7e48b9c94b1c2a969abb2e0915ef91d368e6101b8a29d4c96ae07f131f73b8221187882d773e7b010b7b87c"], 0x34}}, 0x0) 380.395362ms ago: executing program 0 (id=220): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 379.638962ms ago: executing program 4 (id=221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001) r8 = getpgid(r3) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES8, @ANYRES64=r4, @ANYRES32=0x0], 0x4c}}, 0x0) close(r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x21}, @multicast2, 0xf, 0xa}}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC, @ANYBLOB="0107000000000000008dcec3fc000800c300000000000800c400000000001273a2189832c729d978e150435a181627aea7011bff92282bea80742e3a704e2f0ab1dd2f6d4091658d021993c6972f517de7fa4515d3a5103766924b33fec20ff974ac15b8fee0854211f8bf0580b64d104db26d3cc9bdc8af683ee8def437936f6136c5260f8aac477f4097747a414874d82115780eb8"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xb}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8055}, 0x10) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'vlan1\x00'}}, 0x1e) r12 = io_uring_setup(0x7bda, &(0x7f0000000080)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x18, 0x20000000, r13) getsockopt$IP6T_SO_GET_INFO(r11, 0x10d, 0x2, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000002480)=0x54) 19.61089ms ago: executing program 3 (id=222): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) readlink(0x0, 0x0, 0x0) (fail_nth: 2) 6.37977ms ago: executing program 3 (id=223): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = signalfd4(r0, &(0x7f0000000100)={[0x3]}, 0x8, 0x80000) syz_genetlink_get_family_id$tipc(0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7", 0x69}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa9, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = memfd_secret(0x80000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 0s ago: executing program 0 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a87d1b935409206f39e872bfd57a5760a3c17206445d24424fcb36ec74f7c0862205350f868fb6a0000000000000000"], 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): [ 22.008946][ T29] audit: type=1400 audit(1737525476.113:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.45' (ED25519) to the list of known hosts. [ 27.373470][ T29] audit: type=1400 audit(1737525481.473:82): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.374789][ T3284] cgroup: Unknown subsys name 'net' [ 27.396246][ T29] audit: type=1400 audit(1737525481.473:83): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.423816][ T29] audit: type=1400 audit(1737525481.503:84): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.579458][ T3284] cgroup: Unknown subsys name 'cpuset' [ 27.585593][ T3284] cgroup: Unknown subsys name 'rlimit' [ 27.716029][ T29] audit: type=1400 audit(1737525481.813:85): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.741543][ T29] audit: type=1400 audit(1737525481.813:86): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.751006][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.762065][ T29] audit: type=1400 audit(1737525481.813:87): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.791015][ T29] audit: type=1400 audit(1737525481.813:88): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.811305][ T29] audit: type=1400 audit(1737525481.823:89): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.836142][ T29] audit: type=1400 audit(1737525481.823:90): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.859472][ T29] audit: type=1400 audit(1737525481.873:91): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.890449][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.732717][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 29.818630][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 29.843334][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.850494][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.857633][ T3297] bridge_slave_0: entered allmulticast mode [ 29.864070][ T3297] bridge_slave_0: entered promiscuous mode [ 29.872782][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.879994][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.887164][ T3297] bridge_slave_1: entered allmulticast mode [ 29.893552][ T3297] bridge_slave_1: entered promiscuous mode [ 29.909049][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.920641][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 29.971187][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.986095][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.034792][ T3297] team0: Port device team_slave_0 added [ 30.050400][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.060010][ T3297] team0: Port device team_slave_1 added [ 30.089462][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.096580][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.103825][ T3296] bridge_slave_0: entered allmulticast mode [ 30.110429][ T3296] bridge_slave_0: entered promiscuous mode [ 30.132965][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.140078][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.147186][ T3296] bridge_slave_1: entered allmulticast mode [ 30.154714][ T3296] bridge_slave_1: entered promiscuous mode [ 30.172548][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.179545][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.205556][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.216387][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.223524][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.230835][ T3309] bridge_slave_0: entered allmulticast mode [ 30.237211][ T3309] bridge_slave_0: entered promiscuous mode [ 30.254588][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.261584][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.287554][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.298386][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.305665][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.312958][ T3309] bridge_slave_1: entered allmulticast mode [ 30.319339][ T3309] bridge_slave_1: entered promiscuous mode [ 30.326462][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.340288][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.347435][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.354753][ T3295] bridge_slave_0: entered allmulticast mode [ 30.361235][ T3295] bridge_slave_0: entered promiscuous mode [ 30.377971][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.391516][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.398681][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.405901][ T3295] bridge_slave_1: entered allmulticast mode [ 30.412409][ T3295] bridge_slave_1: entered promiscuous mode [ 30.428929][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.436169][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.443505][ T3304] bridge_slave_0: entered allmulticast mode [ 30.449878][ T3304] bridge_slave_0: entered promiscuous mode [ 30.466466][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.476280][ T3296] team0: Port device team_slave_0 added [ 30.488815][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.499926][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.509091][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.516143][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.523372][ T3304] bridge_slave_1: entered allmulticast mode [ 30.529807][ T3304] bridge_slave_1: entered promiscuous mode [ 30.536938][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.546895][ T3296] team0: Port device team_slave_1 added [ 30.593375][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.603288][ T3295] team0: Port device team_slave_0 added [ 30.613606][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.620627][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.646577][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.657941][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.664942][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.690945][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.704068][ T3297] hsr_slave_0: entered promiscuous mode [ 30.710370][ T3297] hsr_slave_1: entered promiscuous mode [ 30.717375][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.727304][ T3295] team0: Port device team_slave_1 added [ 30.733741][ T3309] team0: Port device team_slave_0 added [ 30.740374][ T3309] team0: Port device team_slave_1 added [ 30.789563][ T3304] team0: Port device team_slave_0 added [ 30.795536][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.802556][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.828557][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.840698][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.847661][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.873745][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.884813][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.891882][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.917818][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.929193][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.936190][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.962234][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.982143][ T3304] team0: Port device team_slave_1 added [ 31.010753][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.017721][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.043641][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.062339][ T3296] hsr_slave_0: entered promiscuous mode [ 31.068736][ T3296] hsr_slave_1: entered promiscuous mode [ 31.074745][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.082360][ T3296] Cannot create hsr debugfs directory [ 31.090441][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.097409][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.123353][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.147403][ T3309] hsr_slave_0: entered promiscuous mode [ 31.153562][ T3309] hsr_slave_1: entered promiscuous mode [ 31.159581][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.167150][ T3309] Cannot create hsr debugfs directory [ 31.188135][ T3295] hsr_slave_0: entered promiscuous mode [ 31.194238][ T3295] hsr_slave_1: entered promiscuous mode [ 31.200110][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.207749][ T3295] Cannot create hsr debugfs directory [ 31.256288][ T3304] hsr_slave_0: entered promiscuous mode [ 31.262363][ T3304] hsr_slave_1: entered promiscuous mode [ 31.268132][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.275871][ T3304] Cannot create hsr debugfs directory [ 31.425835][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.439242][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.454133][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.464828][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.479114][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.490083][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.499112][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.507837][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.533610][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.546167][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.555130][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.570611][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.586957][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.596722][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.619944][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.643404][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.653666][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.674736][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.684385][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.693799][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.719255][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.738445][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.766650][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.773819][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.782463][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.789538][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.814203][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.830452][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.857442][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.873826][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.882641][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.889776][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.902264][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.911007][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.918104][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.933502][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.948547][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.959330][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.966391][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.976565][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.997868][ T3295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.008382][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.030808][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.038029][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.046755][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053837][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.063353][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070592][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087561][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094673][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.104885][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.111982][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.141333][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.162258][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.185139][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.221581][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.295458][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.318157][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.354507][ T3297] veth0_vlan: entered promiscuous mode [ 32.371166][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.389381][ T3297] veth1_vlan: entered promiscuous mode [ 32.413038][ T3297] veth0_macvtap: entered promiscuous mode [ 32.427159][ T3295] veth0_vlan: entered promiscuous mode [ 32.434199][ T3297] veth1_macvtap: entered promiscuous mode [ 32.448028][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.472013][ T3295] veth1_vlan: entered promiscuous mode [ 32.479910][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.513427][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.522343][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531177][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.540191][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.579278][ T3309] veth0_vlan: entered promiscuous mode [ 32.586871][ T3309] veth1_vlan: entered promiscuous mode [ 32.600240][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.600254][ T29] audit: type=1400 audit(1737525486.703:110): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.Y6LmaY/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.614173][ T3296] veth0_vlan: entered promiscuous mode [ 32.640085][ T29] audit: type=1400 audit(1737525486.703:111): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.651888][ T3295] veth0_macvtap: entered promiscuous mode [ 32.662184][ T29] audit: type=1400 audit(1737525486.703:112): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.Y6LmaY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.673528][ T3309] veth0_macvtap: entered promiscuous mode [ 32.693071][ T29] audit: type=1400 audit(1737525486.703:113): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.709627][ T3295] veth1_macvtap: entered promiscuous mode [ 32.720662][ T29] audit: type=1400 audit(1737525486.703:114): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.Y6LmaY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.753050][ T29] audit: type=1400 audit(1737525486.703:115): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.Y6LmaY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.759484][ T3296] veth1_vlan: entered promiscuous mode [ 32.780573][ T29] audit: type=1400 audit(1737525486.703:116): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.800630][ T3309] veth1_macvtap: entered promiscuous mode [ 32.805626][ T29] audit: type=1400 audit(1737525486.743:117): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.826330][ T3304] veth0_vlan: entered promiscuous mode [ 32.834116][ T29] audit: type=1400 audit(1737525486.743:118): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.864531][ T3304] veth1_vlan: entered promiscuous mode [ 32.872645][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.882987][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.897814][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.908777][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.927165][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.937814][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.938068][ T29] audit: type=1400 audit(1737525487.023:119): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.947710][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.982477][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.994017][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.005876][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.016538][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.029057][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.037823][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.048357][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.058258][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.068735][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.083091][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.090970][ T3296] veth0_macvtap: entered promiscuous mode [ 33.099631][ T3296] veth1_macvtap: entered promiscuous mode [ 33.114104][ T3304] veth0_macvtap: entered promiscuous mode [ 33.121666][ T3295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.130491][ T3295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.139310][ T3295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148038][ T3295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.159342][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.168059][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.176923][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.185661][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.198376][ T3304] veth1_macvtap: entered promiscuous mode [ 33.237610][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.248166][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.258156][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.268693][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.278624][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.289237][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.339003][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.351909][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.362428][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.372348][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.382798][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.392955][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.403407][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.413277][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.423738][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.439447][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.450913][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.461544][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.471907][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.482416][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.492325][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.502836][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.515065][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.530494][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.541001][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.550929][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.561377][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.571215][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.581748][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.591596][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.602061][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.616848][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.672281][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.681121][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.689875][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698616][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714727][ T3445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.734494][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.743449][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.752226][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.761048][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.918581][ T3450] ======================================================= [ 33.918581][ T3450] WARNING: The mand mount option has been deprecated and [ 33.918581][ T3450] and is ignored by this kernel. Remove the mand [ 33.918581][ T3450] option from the mount to silence this warning. [ 33.918581][ T3450] ======================================================= [ 34.378343][ T3465] FAULT_INJECTION: forcing a failure. [ 34.378343][ T3465] name failslab, interval 1, probability 0, space 0, times 1 [ 34.391090][ T3465] CPU: 1 UID: 0 PID: 3465 Comm: syz.4.10 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 34.401268][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.411363][ T3465] Call Trace: [ 34.414672][ T3465] [ 34.417693][ T3465] dump_stack_lvl+0xf2/0x150 [ 34.422319][ T3465] dump_stack+0x15/0x1a [ 34.426557][ T3465] should_fail_ex+0x223/0x230 [ 34.431290][ T3465] should_failslab+0x8f/0xb0 [ 34.435933][ T3465] kmem_cache_alloc_noprof+0x52/0x320 [ 34.441379][ T3465] ? getname_flags+0x81/0x3b0 [ 34.446084][ T3465] getname_flags+0x81/0x3b0 [ 34.450623][ T3465] user_path_at+0x26/0x120 [ 34.455080][ T3465] __se_sys_mount+0x24b/0x2d0 [ 34.459840][ T3465] ? fput+0x1c4/0x200 [ 34.463900][ T3465] __x64_sys_mount+0x67/0x80 [ 34.468526][ T3465] x64_sys_call+0x2c84/0x2dc0 [ 34.473274][ T3465] do_syscall_64+0xc9/0x1c0 [ 34.477808][ T3465] ? clear_bhb_loop+0x55/0xb0 [ 34.482607][ T3465] ? clear_bhb_loop+0x55/0xb0 [ 34.487362][ T3465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.493374][ T3465] RIP: 0033:0x7f3840925d29 [ 34.497807][ T3465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.517560][ T3465] RSP: 002b:00007f383ef97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.526262][ T3465] RAX: ffffffffffffffda RBX: 00007f3840b15fa0 RCX: 00007f3840925d29 [ 34.534257][ T3465] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000100 [ 34.542269][ T3465] RBP: 00007f383ef97090 R08: 0000000020000300 R09: 0000000000000000 [ 34.550279][ T3465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.558287][ T3465] R13: 0000000000000000 R14: 00007f3840b15fa0 R15: 00007ffcbaa093e8 [ 34.566284][ T3465] [ 34.690660][ T3469] netlink: 4 bytes leftover after parsing attributes in process `+b}[@'. [ 34.723505][ T3471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3471 comm=syz.1.9 [ 34.859940][ T3473] loop4: detected capacity change from 0 to 1024 [ 34.887189][ T3473] EXT4-fs: Ignoring removed orlov option [ 34.893052][ T3473] EXT4-fs: Ignoring removed oldalloc option [ 34.951101][ T3473] EXT4-fs: test_dummy_encryption option not supported [ 35.084707][ T3452] kexec: Could not allocate control_code_buffer [ 35.098170][ T3480] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13'. [ 35.160683][ T3482] loop3: detected capacity change from 0 to 512 [ 35.162893][ C0] hrtimer: interrupt took 38994 ns [ 35.206408][ T3482] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.219660][ T3482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.272353][ T3482] EXT4-fs (loop3): 1 truncate cleaned up [ 35.279619][ T3482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.295878][ T3480] $Hÿ: renamed from bond0 (while UP) [ 35.316309][ T3480] $Hÿ: entered promiscuous mode [ 35.321476][ T3480] bond_slave_0: entered promiscuous mode [ 35.327207][ T3480] bond_slave_1: entered promiscuous mode [ 35.502045][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.628864][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.636394][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.643840][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.679560][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.687064][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.694640][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.702096][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.709600][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.717107][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.724575][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.731995][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.739556][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.746960][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.754388][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.850044][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.857496][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.864963][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.872419][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.879850][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.887294][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.894755][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.902187][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.909616][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.917111][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.924584][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.932231][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.939680][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.947086][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.954663][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.962113][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.981005][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.074320][ T3500] loop0: detected capacity change from 0 to 1024 [ 36.087874][ T3502] process 'syz.3.20' launched './file1' with NULL argv: empty string added [ 36.143222][ T3500] EXT4-fs error (device loop0): __ext4_fill_super:5505: inode #2: comm syz.0.21: casefold flag without casefold feature [ 36.208393][ T3500] EXT4-fs (loop0): get root inode failed [ 36.214139][ T3500] EXT4-fs (loop0): mount failed [ 36.290460][ T3517] xt_hashlimit: size too large, truncated to 1048576 [ 36.923078][ T3532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.956285][ T3534] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 36.964393][ T3532] $Hÿ: renamed from bond0 (while UP) [ 36.978093][ T3532] $Hÿ: entered promiscuous mode [ 36.983285][ T3532] bond_slave_0: entered promiscuous mode [ 36.989024][ T3532] bond_slave_1: entered promiscuous mode [ 37.065261][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 37.114591][ T3547] netlink: 76 bytes leftover after parsing attributes in process `syz.4.36'. [ 37.141922][ T3548] loop2: detected capacity change from 0 to 256 [ 37.175619][ T3548] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.193869][ T3547] $Hÿ: renamed from bond0 (while UP) [ 37.202863][ T3547] $Hÿ: entered promiscuous mode [ 37.207938][ T3547] bond_slave_0: entered promiscuous mode [ 37.213765][ T3547] bond_slave_1: entered promiscuous mode [ 37.318909][ T3553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.37'. [ 37.611735][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 37.611751][ T29] audit: type=1400 audit(1737525491.713:300): avc: denied { map } for pid=3554 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.641881][ T29] audit: type=1400 audit(1737525491.713:301): avc: denied { read write } for pid=3554 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.950739][ T3563] tipc: Started in network mode [ 37.955734][ T3563] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 37.986995][ T29] audit: type=1400 audit(1737525492.083:302): avc: denied { read write } for pid=3566 comm="syz.3.43" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.987622][ T3563] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 38.010866][ T29] audit: type=1400 audit(1737525492.083:303): avc: denied { open } for pid=3566 comm="syz.3.43" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.019416][ T3563] tipc: Enabled bearer , priority 10 [ 38.064016][ T29] audit: type=1400 audit(1737525492.153:304): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.083894][ T29] audit: type=1400 audit(1737525492.163:305): avc: denied { create } for pid=3561 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 38.103639][ T29] audit: type=1400 audit(1737525492.163:306): avc: denied { connect } for pid=3561 comm="syz.0.41" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.145228][ T29] audit: type=1400 audit(1737525492.223:307): avc: denied { write } for pid=3561 comm="syz.0.41" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.235460][ T29] audit: type=1400 audit(1737525492.283:308): avc: denied { sqpoll } for pid=3573 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.243881][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.255063][ T29] audit: type=1400 audit(1737525492.283:309): avc: denied { create } for pid=3573 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.261937][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.261963][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.285598][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.304380][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.311832][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.319272][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.326779][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.334349][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.341775][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.349189][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 38.349213][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.365288][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.372755][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.380226][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.438769][ T3580] FAULT_INJECTION: forcing a failure. [ 38.438769][ T3580] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.452059][ T3580] CPU: 0 UID: 0 PID: 3580 Comm: syz.0.46 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 38.462245][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.472457][ T3580] Call Trace: [ 38.475758][ T3580] [ 38.478717][ T3580] dump_stack_lvl+0xf2/0x150 [ 38.483427][ T3580] dump_stack+0x15/0x1a [ 38.487637][ T3580] should_fail_ex+0x223/0x230 [ 38.492409][ T3580] should_fail+0xb/0x10 [ 38.496626][ T3580] should_fail_usercopy+0x1a/0x20 [ 38.501780][ T3580] _copy_from_user+0x1c/0xa0 [ 38.506469][ T3580] kstrtouint_from_user+0x76/0xe0 [ 38.511526][ T3580] ? 0xffffffff81000000 [ 38.515702][ T3580] ? selinux_file_permission+0x22a/0x360 [ 38.519240][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.521363][ T3580] proc_fail_nth_write+0x4f/0x150 [ 38.528833][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.533779][ T3580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 38.541222][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.546777][ T3580] vfs_write+0x281/0x920 [ 38.554185][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.558390][ T3580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 38.565806][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.571275][ T3580] ? __fget_files+0x17c/0x1c0 [ 38.571303][ T3580] ksys_write+0xe8/0x1b0 [ 38.571336][ T3580] __x64_sys_write+0x42/0x50 [ 38.571467][ T3580] x64_sys_call+0x287e/0x2dc0 [ 38.579088][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.583484][ T3580] do_syscall_64+0xc9/0x1c0 [ 38.587724][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.592281][ T3580] ? clear_bhb_loop+0x55/0xb0 [ 38.592309][ T3580] ? clear_bhb_loop+0x55/0xb0 [ 38.596998][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.604333][ T3580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.604362][ T3580] RIP: 0033:0x7f251e3347df [ 38.604381][ T3580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 38.608892][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.608972][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.616249][ T3580] RSP: 002b:00007f251c9a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 38.616270][ T3580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f251e3347df [ 38.616281][ T3580] RDX: 0000000000000001 RSI: 00007f251c9a70a0 RDI: 0000000000000005 [ 38.616293][ T3580] RBP: 00007f251c9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.620987][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.621010][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.621030][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.621053][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.625693][ T3580] R10: 00000000000000ae R11: 0000000000000293 R12: 0000000000000001 [ 38.633166][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.638919][ T3580] R13: 0000000000000000 R14: 00007f251e525fa0 R15: 00007fff9baa3d98 [ 38.638944][ T3580] [ 38.767271][ T3362] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.784203][ T3362] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.806554][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.817515][ T3588] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.000409][ T3608] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.068782][ T3372] tipc: Node number set to 1 [ 39.079403][ T3616] FAULT_INJECTION: forcing a failure. [ 39.079403][ T3616] name failslab, interval 1, probability 0, space 0, times 0 [ 39.092123][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.1.59 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 39.102337][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.112214][ T3613] vhci_hcd: invalid port number 127 [ 39.112397][ T3616] Call Trace: [ 39.112407][ T3616] [ 39.117620][ T3613] vhci_hcd: default hub control req: 6003 v000e i007f l157 [ 39.120860][ T3616] dump_stack_lvl+0xf2/0x150 [ 39.135706][ T3616] dump_stack+0x15/0x1a [ 39.139905][ T3616] should_fail_ex+0x223/0x230 [ 39.144679][ T3616] should_failslab+0x8f/0xb0 [ 39.149303][ T3616] kmem_cache_alloc_noprof+0x52/0x320 [ 39.154695][ T3616] ? alloc_empty_file+0xd0/0x200 [ 39.159686][ T3616] ? _raw_spin_unlock+0x26/0x50 [ 39.164570][ T3616] alloc_empty_file+0xd0/0x200 [ 39.169406][ T3616] alloc_file_pseudo+0xc3/0x140 [ 39.174276][ T3616] __shmem_file_setup+0x1bb/0x1f0 [ 39.179325][ T3616] shmem_file_setup+0x3b/0x50 [ 39.184023][ T3616] __se_sys_memfd_create+0x31d/0x5c0 [ 39.189331][ T3616] __x64_sys_memfd_create+0x31/0x40 [ 39.194608][ T3616] x64_sys_call+0x2d4c/0x2dc0 [ 39.199312][ T3616] do_syscall_64+0xc9/0x1c0 [ 39.203828][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 39.208537][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 39.213290][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.219315][ T3616] RIP: 0033:0x7f7a9c905d29 [ 39.223776][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.243422][ T3616] RSP: 002b:00007f7a9af76e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 39.251896][ T3616] RAX: ffffffffffffffda RBX: 0000000000000618 RCX: 00007f7a9c905d29 [ 39.259961][ T3616] RDX: 00007f7a9af76ef0 RSI: 0000000000000000 RDI: 00007f7a9c982469 [ 39.268178][ T3616] RBP: 0000000020000640 R08: 00007f7a9af76bb7 R09: 00007f7a9af76e40 [ 39.276171][ T3616] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000580 [ 39.284159][ T3616] R13: 00007f7a9af76ef0 R14: 00007f7a9af76eb0 R15: 0000000020000480 [ 39.292192][ T3616] [ 39.299163][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.312388][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.333279][ T3607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.57'. [ 39.352556][ T3607] loop3: detected capacity change from 0 to 1024 [ 39.374688][ T3607] EXT4-fs: Ignoring removed orlov option [ 39.384386][ T3607] ext4: Unknown parameter 'nouser_xattr' [ 39.831559][ T3629] Zero length message leads to an empty skb [ 39.869715][ T3633] loop0: detected capacity change from 0 to 512 [ 39.879364][ T3633] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 39.887476][ T3633] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.898057][ T3633] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.956477][ T3633] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 39.966760][ T3642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 39.976770][ T3633] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.63: casefold flag without casefold feature [ 40.002568][ T3633] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.63: couldn't read orphan inode 16 (err -117) [ 40.026803][ T3633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.060507][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.094015][ T3679] loop0: detected capacity change from 0 to 1024 [ 41.110383][ T3679] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.130401][ T3679] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.138770][ T3679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.145770][ T3679] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 41.156818][ T3679] EXT4-fs (loop0): Remounting filesystem read-only [ 41.163740][ T3679] EXT4-fs (loop0): 1 orphan inode deleted [ 41.171344][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.183563][ T3679] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 41.192235][ T3679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245022][ T3675] lo speed is unknown, defaulting to 1000 [ 41.251008][ T3675] lo speed is unknown, defaulting to 1000 [ 41.267090][ T3675] lo speed is unknown, defaulting to 1000 [ 41.274815][ T3675] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.283540][ T3675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.302973][ T3675] lo speed is unknown, defaulting to 1000 [ 41.313149][ T3675] lo speed is unknown, defaulting to 1000 [ 41.319591][ T3675] lo speed is unknown, defaulting to 1000 [ 41.326036][ T3675] lo speed is unknown, defaulting to 1000 [ 41.333523][ T3675] lo speed is unknown, defaulting to 1000 [ 41.362878][ T3675] lo speed is unknown, defaulting to 1000 [ 41.430662][ T3675] syz.0.79 (3675) used greatest stack depth: 10800 bytes left [ 41.442354][ T3679] syz.0.79 (3679) used greatest stack depth: 9632 bytes left [ 41.470697][ T3683] SELinux: policydb version 0 does not match my version range 15-33 [ 41.480152][ T3683] SELinux: failed to load policy [ 41.519805][ T3685] xt_hashlimit: size too large, truncated to 1048576 [ 41.664637][ T3690] netlink: 76 bytes leftover after parsing attributes in process `syz.1.82'. [ 41.704417][ T3692] xt_hashlimit: size too large, truncated to 1048576 [ 41.767646][ T3690] $Hÿ: renamed from bond0 (while UP) [ 41.818618][ T3690] $Hÿ: entered promiscuous mode [ 41.823772][ T3690] bond_slave_0: entered promiscuous mode [ 41.829514][ T3690] bond_slave_1: entered promiscuous mode [ 41.891075][ T3698] xt_hashlimit: size too large, truncated to 1048576 [ 43.077859][ T3721] FAULT_INJECTION: forcing a failure. [ 43.077859][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 43.090613][ T3721] CPU: 1 UID: 0 PID: 3721 Comm: syz.2.84 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 43.100788][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 43.110859][ T3721] Call Trace: [ 43.114140][ T3721] [ 43.117141][ T3721] dump_stack_lvl+0xf2/0x150 [ 43.121754][ T3721] dump_stack+0x15/0x1a [ 43.125924][ T3721] should_fail_ex+0x223/0x230 [ 43.130609][ T3721] ? io_ring_ctx_alloc+0x38/0xcc0 [ 43.135670][ T3721] should_failslab+0x8f/0xb0 [ 43.140277][ T3721] __kmalloc_cache_noprof+0x4e/0x320 [ 43.145573][ T3721] io_ring_ctx_alloc+0x38/0xcc0 [ 43.150475][ T3721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.156278][ T3721] ? io_uring_fill_params+0x2a7/0x330 [ 43.161753][ T3721] io_uring_create+0x40/0x6d0 [ 43.166440][ T3721] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 43.171919][ T3721] __x64_sys_io_uring_setup+0x31/0x40 [ 43.177333][ T3721] x64_sys_call+0x270c/0x2dc0 [ 43.182018][ T3721] do_syscall_64+0xc9/0x1c0 [ 43.186608][ T3721] ? clear_bhb_loop+0x55/0xb0 [ 43.191325][ T3721] ? clear_bhb_loop+0x55/0xb0 [ 43.196094][ T3721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.202065][ T3721] RIP: 0033:0x7fafc5465d29 [ 43.206514][ T3721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.226151][ T3721] RSP: 002b:00007fafc3a94fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 43.234596][ T3721] RAX: ffffffffffffffda RBX: 00007fafc5656160 RCX: 00007fafc5465d29 [ 43.242579][ T3721] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000005248 [ 43.250564][ T3721] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000000 [ 43.258578][ T3721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 43.266633][ T3721] R13: 0000000020ff0000 R14: 0000000000005248 R15: 0000000020000000 [ 43.274619][ T3721] [ 43.625872][ T3730] SELinux: policydb version 0 does not match my version range 15-33 [ 43.653798][ T3730] SELinux: failed to load policy [ 43.697961][ T3732] loop4: detected capacity change from 0 to 512 [ 43.781949][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.814165][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 43.814182][ T29] audit: type=1400 audit(1737525497.913:449): avc: denied { cpu } for pid=3733 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.814326][ T3732] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.864873][ T3695] syz.2.84 (3695) used greatest stack depth: 7168 bytes left [ 43.876237][ T29] audit: type=1400 audit(1737525497.973:450): avc: denied { write } for pid=3731 comm="syz.4.95" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.876546][ T3732] Quota error (device loop4): do_check_range: Getting block 8 out of range 1-5 [ 43.906986][ T3732] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 43.914679][ T29] audit: type=1400 audit(1737525497.973:451): avc: denied { add_name } for pid=3731 comm="syz.4.95" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.916460][ T3732] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.95: Failed to acquire dquot type 1 [ 43.964000][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 43.994598][ T3741] loop2: detected capacity change from 0 to 128 [ 44.000965][ T29] audit: type=1400 audit(1737525498.093:452): avc: denied { getopt } for pid=3740 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.038024][ T29] audit: type=1326 audit(1737525498.113:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3840925d29 code=0x7ffc0000 [ 44.061216][ T29] audit: type=1326 audit(1737525498.113:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3840925d29 code=0x7ffc0000 [ 44.084388][ T29] audit: type=1326 audit(1737525498.113:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3840925d29 code=0x7ffc0000 [ 44.107749][ T29] audit: type=1326 audit(1737525498.113:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3840925d29 code=0x7ffc0000 [ 44.144809][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.175303][ T3744] xt_hashlimit: size too large, truncated to 1048576 [ 44.234668][ T3748] xt_hashlimit: size too large, truncated to 1048576 [ 44.265745][ T3750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.101'. [ 44.538667][ T3761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 44.561709][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 44.607843][ T3764] hsr_slave_1 (unregistering): left promiscuous mode [ 44.793976][ T3775] loop3: detected capacity change from 0 to 512 [ 44.805977][ T3775] journal_path: Non-blockdev passed as './bus' [ 44.812358][ T3775] EXT4-fs: error: could not find journal device path [ 44.920812][ T3787] netlink: 76 bytes leftover after parsing attributes in process `syz.3.116'. [ 44.959256][ T3787] $Hÿ: renamed from bond0 (while UP) [ 44.966796][ T3787] $Hÿ: entered promiscuous mode [ 44.971948][ T3787] bond_slave_0: entered promiscuous mode [ 44.977728][ T3787] bond_slave_1: entered promiscuous mode [ 44.999609][ T3790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 45.155933][ T3814] FAULT_INJECTION: forcing a failure. [ 45.155933][ T3814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.169298][ T3814] CPU: 1 UID: 0 PID: 3814 Comm: syz.4.126 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 45.179583][ T3814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.184393][ T3816] xt_hashlimit: size too large, truncated to 1048576 [ 45.189650][ T3814] Call Trace: [ 45.189661][ T3814] [ 45.189669][ T3814] dump_stack_lvl+0xf2/0x150 [ 45.207206][ T3814] dump_stack+0x15/0x1a [ 45.211421][ T3814] should_fail_ex+0x223/0x230 [ 45.216209][ T3814] should_fail+0xb/0x10 [ 45.220390][ T3814] should_fail_usercopy+0x1a/0x20 [ 45.225446][ T3814] _copy_from_iter+0xd5/0xd00 [ 45.230247][ T3814] ? alloc_pages_mpol_noprof+0x20c/0x260 [ 45.235910][ T3814] copy_page_from_iter+0x14f/0x280 [ 45.241056][ T3814] tun_get_user+0x68b/0x25c0 [ 45.245737][ T3814] ? _parse_integer+0x27/0x30 [ 45.250521][ T3814] ? ref_tracker_alloc+0x1f5/0x2f0 [ 45.255666][ T3814] tun_chr_write_iter+0x188/0x240 [ 45.260718][ T3814] vfs_write+0x77f/0x920 [ 45.265021][ T3814] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 45.270604][ T3814] ksys_write+0xe8/0x1b0 [ 45.274888][ T3814] __x64_sys_write+0x42/0x50 [ 45.279521][ T3814] x64_sys_call+0x287e/0x2dc0 [ 45.284220][ T3814] do_syscall_64+0xc9/0x1c0 [ 45.288755][ T3814] ? clear_bhb_loop+0x55/0xb0 [ 45.293514][ T3814] ? clear_bhb_loop+0x55/0xb0 [ 45.298261][ T3814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.304231][ T3814] RIP: 0033:0x7f38409247df [ 45.308659][ T3814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 45.328369][ T3814] RSP: 002b:00007f383ef97000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 45.336951][ T3814] RAX: ffffffffffffffda RBX: 00007f3840b15fa0 RCX: 00007f38409247df [ 45.344994][ T3814] RDX: 000000000000006e RSI: 0000000020000080 RDI: 00000000000000c8 [ 45.352989][ T3814] RBP: 00007f383ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 45.360982][ T3814] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 45.369027][ T3814] R13: 0000000000000000 R14: 00007f3840b15fa0 R15: 00007ffcbaa093e8 [ 45.377021][ T3814] [ 45.428532][ T3823] netlink: 76 bytes leftover after parsing attributes in process `syz.3.130'. [ 45.563670][ T3830] tipc: Started in network mode [ 45.568698][ T3830] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.582460][ T3830] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.590945][ T3830] tipc: Enabled bearer , priority 10 [ 45.624571][ T3836] loop3: detected capacity change from 0 to 512 [ 45.631984][ T3836] journal_path: Non-blockdev passed as './bus' [ 45.638168][ T3836] EXT4-fs: error: could not find journal device path [ 45.785462][ T3852] xt_hashlimit: size too large, truncated to 1048576 [ 45.925599][ T3858] loop2: detected capacity change from 0 to 1024 [ 45.955097][ T3869] SELinux: policydb version 0 does not match my version range 15-33 [ 45.964103][ T3858] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 45.975117][ T3858] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 45.988321][ T3869] SELinux: failed to load policy [ 46.057818][ T3858] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.098696][ T3858] EXT4-fs (loop2): invalid journal inode [ 46.104485][ T3858] EXT4-fs (loop2): can't get journal size [ 46.171293][ T3858] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.145: blocks 2-2 from inode overlap system zone [ 46.258480][ T3858] EXT4-fs (loop2): failed to initialize system zone (-117) [ 46.265818][ T3858] EXT4-fs (loop2): mount failed [ 46.309528][ T3880] ip6gretap1: entered allmulticast mode [ 46.309802][ T3854] random: crng reseeded on system resumption [ 46.338134][ T3880] bridge0: port 3(ip6gretap1) entered blocking state [ 46.345049][ T3880] bridge0: port 3(ip6gretap1) entered disabled state [ 46.362176][ T3880] ip6gretap1: entered promiscuous mode [ 46.367889][ T3880] bridge0: port 3(ip6gretap1) entered blocking state [ 46.374659][ T3880] bridge0: port 3(ip6gretap1) entered forwarding state [ 46.395895][ T3880] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 46.448337][ T3880] bridge0: port 3(ip6gretap1) entered disabled state [ 46.455181][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.462464][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.526019][ T3880] bridge0: port 3(ip6gretap1) entered blocking state [ 46.532863][ T3880] bridge0: port 3(ip6gretap1) entered forwarding state [ 46.539889][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.546960][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.554397][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.561491][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.580597][ T3880] bridge0: entered promiscuous mode [ 46.586231][ T3880] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 46.660087][ T3896] loop2: detected capacity change from 0 to 256 [ 46.683086][ T3881] pim6reg: entered allmulticast mode [ 46.689646][ T3896] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.708454][ T3362] tipc: Node number set to 1 [ 46.820375][ T3898] syzkaller0: entered promiscuous mode [ 46.825950][ T3898] syzkaller0: entered allmulticast mode [ 46.888493][ T3906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 46.918867][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 46.941830][ T3910] FAULT_INJECTION: forcing a failure. [ 46.941830][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 46.954610][ T3910] CPU: 0 UID: 0 PID: 3910 Comm: syz.0.167 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 46.964954][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.975025][ T3910] Call Trace: [ 46.978362][ T3910] [ 46.981342][ T3910] dump_stack_lvl+0xf2/0x150 [ 46.986050][ T3910] dump_stack+0x15/0x1a [ 46.990226][ T3910] should_fail_ex+0x223/0x230 [ 46.995031][ T3910] ? device_add+0x89/0x790 [ 46.999488][ T3910] should_failslab+0x8f/0xb0 [ 47.004131][ T3910] __kmalloc_cache_noprof+0x4e/0x320 [ 47.009428][ T3910] device_add+0x89/0x790 [ 47.013717][ T3910] netdev_register_kobject+0xe6/0x210 [ 47.019167][ T3910] register_netdevice+0x910/0xe30 [ 47.024205][ T3910] ppp_dev_configure+0x64a/0x700 [ 47.029159][ T3910] ppp_ioctl+0x4b3/0x11b0 [ 47.033498][ T3910] ? __fget_files+0x17c/0x1c0 [ 47.038177][ T3910] ? __pfx_ppp_ioctl+0x10/0x10 [ 47.042951][ T3910] __se_sys_ioctl+0xc9/0x140 [ 47.047554][ T3910] __x64_sys_ioctl+0x43/0x50 [ 47.052230][ T3910] x64_sys_call+0x1690/0x2dc0 [ 47.056916][ T3910] do_syscall_64+0xc9/0x1c0 [ 47.061527][ T3910] ? clear_bhb_loop+0x55/0xb0 [ 47.066306][ T3910] ? clear_bhb_loop+0x55/0xb0 [ 47.071058][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.076962][ T3910] RIP: 0033:0x7f251e335d29 [ 47.081427][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.101052][ T3910] RSP: 002b:00007f251c9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.109669][ T3910] RAX: ffffffffffffffda RBX: 00007f251e525fa0 RCX: 00007f251e335d29 [ 47.117720][ T3910] RDX: 000000002000141a RSI: 00000000c004743e RDI: 0000000000000003 [ 47.125696][ T3910] RBP: 00007f251c9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.133683][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.141744][ T3910] R13: 0000000000000000 R14: 00007f251e525fa0 R15: 00007fff9baa3d98 [ 47.149786][ T3910] [ 47.241307][ T3919] loop3: detected capacity change from 0 to 1024 [ 47.248999][ T3919] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 47.260041][ T3919] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 47.270135][ T3919] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.280918][ T3919] EXT4-fs (loop3): invalid journal inode [ 47.286584][ T3919] EXT4-fs (loop3): can't get journal size [ 47.296602][ T3925] loop4: detected capacity change from 0 to 512 [ 47.303723][ T3925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.317723][ T3927] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.324514][ T3925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.334105][ T3925] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.171: Failed to acquire dquot type 1 [ 47.345841][ T3925] EXT4-fs (loop4): 1 truncate cleaned up [ 47.347814][ T3919] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.170: blocks 2-2 from inode overlap system zone [ 47.366072][ T3919] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.366319][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.373895][ T3919] EXT4-fs (loop3): mount failed [ 47.400769][ T3919] random: crng reseeded on system resumption [ 47.414114][ T3935] xt_hashlimit: size too large, truncated to 1048576 [ 47.486355][ T3938] SELinux: policydb version 0 does not match my version range 15-33 [ 47.494704][ T3938] SELinux: failed to load policy [ 47.506291][ T3938] veth1_macvtap: left promiscuous mode [ 47.511885][ T3938] macsec0: entered promiscuous mode [ 47.566743][ T3943] FAULT_INJECTION: forcing a failure. [ 47.566743][ T3943] name failslab, interval 1, probability 0, space 0, times 0 [ 47.579428][ T3943] CPU: 0 UID: 0 PID: 3943 Comm: syz.3.178 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 47.589702][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.599799][ T3943] Call Trace: [ 47.603232][ T3943] [ 47.606176][ T3943] dump_stack_lvl+0xf2/0x150 [ 47.610818][ T3943] dump_stack+0x15/0x1a [ 47.615085][ T3943] should_fail_ex+0x223/0x230 [ 47.619821][ T3943] should_failslab+0x8f/0xb0 [ 47.624439][ T3943] kmem_cache_alloc_node_noprof+0x59/0x320 [ 47.630318][ T3943] ? dup_task_struct+0x6c/0x710 [ 47.635186][ T3943] ? bpf_snprintf+0x182/0x1a0 [ 47.639887][ T3943] dup_task_struct+0x6c/0x710 [ 47.644584][ T3943] ? __rcu_read_unlock+0x4e/0x70 [ 47.649552][ T3943] copy_process+0x3a9/0x1fb0 [ 47.654234][ T3943] ? _copy_from_user+0x89/0xa0 [ 47.659211][ T3943] kernel_clone+0x167/0x5e0 [ 47.663795][ T3943] __se_sys_clone3+0x1ba/0x200 [ 47.668632][ T3943] __x64_sys_clone3+0x31/0x40 [ 47.673410][ T3943] x64_sys_call+0x2d56/0x2dc0 [ 47.678102][ T3943] do_syscall_64+0xc9/0x1c0 [ 47.682698][ T3943] ? clear_bhb_loop+0x55/0xb0 [ 47.687407][ T3943] ? clear_bhb_loop+0x55/0xb0 [ 47.692175][ T3943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.698126][ T3943] RIP: 0033:0x7f0784995d29 [ 47.702557][ T3943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.722185][ T3943] RSP: 002b:00007f0783006f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 47.730660][ T3943] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0784995d29 [ 47.738685][ T3943] RDX: 00007f0783006f20 RSI: 0000000000000058 RDI: 00007f0783006f20 [ 47.746671][ T3943] RBP: 00007f0783007090 R08: 0000000000000000 R09: 0000000000000058 [ 47.754689][ T3943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.762683][ T3943] R13: 0000000000000000 R14: 00007f0784b85fa0 R15: 00007fffb53669e8 [ 47.770676][ T3943] [ 47.794088][ T3948] loop2: detected capacity change from 0 to 512 [ 47.812332][ T3948] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.836688][ T3309] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 47.875268][ T3959] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.894979][ T3959] SELinux: policydb version 536871232 does not match my version range 15-33 [ 47.904044][ T3959] SELinux: failed to load policy [ 47.985971][ T3971] FAULT_INJECTION: forcing a failure. [ 47.985971][ T3971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.999204][ T3971] CPU: 0 UID: 0 PID: 3971 Comm: syz.2.190 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 48.009482][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.019657][ T3971] Call Trace: [ 48.023063][ T3971] [ 48.025994][ T3971] dump_stack_lvl+0xf2/0x150 [ 48.030638][ T3971] dump_stack+0x15/0x1a [ 48.034933][ T3971] should_fail_ex+0x223/0x230 [ 48.039620][ T3971] should_fail+0xb/0x10 [ 48.043779][ T3971] should_fail_usercopy+0x1a/0x20 [ 48.048933][ T3971] _copy_from_user+0x1c/0xa0 [ 48.053547][ T3971] sctp_getsockopt_connectx3+0x189/0x350 [ 48.059222][ T3971] sctp_getsockopt+0x805/0xab0 [ 48.064096][ T3971] sock_common_getsockopt+0x5b/0x70 [ 48.069352][ T3971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 48.075265][ T3971] do_sock_getsockopt+0x1ca/0x260 [ 48.080330][ T3971] __x64_sys_getsockopt+0x18c/0x200 [ 48.085564][ T3971] x64_sys_call+0x1288/0x2dc0 [ 48.090362][ T3971] do_syscall_64+0xc9/0x1c0 [ 48.094873][ T3971] ? clear_bhb_loop+0x55/0xb0 [ 48.099569][ T3971] ? clear_bhb_loop+0x55/0xb0 [ 48.104342][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.110242][ T3971] RIP: 0033:0x7fafc5465d29 [ 48.114660][ T3971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.134347][ T3971] RSP: 002b:00007fafc3ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 48.142788][ T3971] RAX: ffffffffffffffda RBX: 00007fafc5655fa0 RCX: 00007fafc5465d29 [ 48.150804][ T3971] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 48.158777][ T3971] RBP: 00007fafc3ad7090 R08: 0000000020000180 R09: 0000000000000000 [ 48.166817][ T3971] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.174945][ T3971] R13: 0000000000000000 R14: 00007fafc5655fa0 R15: 00007ffc9fad5fc8 [ 48.182926][ T3971] [ 48.202108][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.229482][ T3974] xt_hashlimit: size too large, truncated to 1048576 [ 48.295548][ T3977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 48.363912][ T3984] FAULT_INJECTION: forcing a failure. [ 48.363912][ T3984] name failslab, interval 1, probability 0, space 0, times 0 [ 48.376655][ T3984] CPU: 1 UID: 0 PID: 3984 Comm: syz.1.194 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 48.387166][ T3984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.397267][ T3984] Call Trace: [ 48.400567][ T3984] [ 48.403542][ T3984] dump_stack_lvl+0xf2/0x150 [ 48.408209][ T3984] dump_stack+0x15/0x1a [ 48.412395][ T3984] should_fail_ex+0x223/0x230 [ 48.417161][ T3984] should_failslab+0x8f/0xb0 [ 48.421858][ T3984] kmem_cache_alloc_noprof+0x52/0x320 [ 48.427251][ T3984] ? skb_clone+0x154/0x1f0 [ 48.431712][ T3984] skb_clone+0x154/0x1f0 [ 48.436011][ T3984] __netlink_deliver_tap+0x2bd/0x4f0 [ 48.441344][ T3984] netlink_unicast+0x64a/0x670 [ 48.446149][ T3984] netlink_sendmsg+0x5cc/0x6e0 [ 48.450957][ T3984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.456322][ T3984] __sock_sendmsg+0x140/0x180 [ 48.461118][ T3984] ____sys_sendmsg+0x312/0x410 [ 48.466082][ T3984] __sys_sendmsg+0x19d/0x230 [ 48.470707][ T3984] __x64_sys_sendmsg+0x46/0x50 [ 48.475591][ T3984] x64_sys_call+0x2734/0x2dc0 [ 48.480292][ T3984] do_syscall_64+0xc9/0x1c0 [ 48.484811][ T3984] ? clear_bhb_loop+0x55/0xb0 [ 48.489564][ T3984] ? clear_bhb_loop+0x55/0xb0 [ 48.494262][ T3984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.500195][ T3984] RIP: 0033:0x7f7a9c905d29 [ 48.504623][ T3984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.524365][ T3984] RSP: 002b:00007f7a9af77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.532835][ T3984] RAX: ffffffffffffffda RBX: 00007f7a9caf5fa0 RCX: 00007f7a9c905d29 [ 48.540819][ T3984] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000009 [ 48.548880][ T3984] RBP: 00007f7a9af77090 R08: 0000000000000000 R09: 0000000000000000 [ 48.557085][ T3984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.565121][ T3984] R13: 0000000000000000 R14: 00007f7a9caf5fa0 R15: 00007fff69dae2f8 [ 48.573211][ T3984] [ 48.578567][ T3984] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.858956][ T3995] netlink: 100 bytes leftover after parsing attributes in process `syz.2.200'. [ 48.942531][ T4006] FAULT_INJECTION: forcing a failure. [ 48.942531][ T4006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.955849][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: syz.2.203 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 48.966107][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.976193][ T4006] Call Trace: [ 48.979522][ T4006] [ 48.982458][ T4006] dump_stack_lvl+0xf2/0x150 [ 48.987150][ T4006] dump_stack+0x15/0x1a [ 48.991351][ T4006] should_fail_ex+0x223/0x230 [ 48.996066][ T4006] should_fail+0xb/0x10 [ 49.000309][ T4006] should_fail_usercopy+0x1a/0x20 [ 49.005396][ T4006] _copy_to_user+0x20/0xa0 [ 49.009154][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 49.009184][ T29] audit: type=1400 audit(1737525503.053:804): avc: denied { connect } for pid=3985 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.009889][ T4006] simple_read_from_buffer+0xa0/0x110 [ 49.040719][ T4006] proc_fail_nth_read+0xf9/0x140 [ 49.045694][ T4006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.051270][ T4006] vfs_read+0x1a2/0x700 [ 49.055635][ T4006] ? mntput+0x49/0x70 [ 49.059656][ T4006] ? path_put+0x2f/0x40 [ 49.063989][ T4006] ? __se_sys_fsmount+0x6c6/0x740 [ 49.069123][ T4006] ksys_read+0xe8/0x1b0 [ 49.073550][ T4006] __x64_sys_read+0x42/0x50 [ 49.078094][ T4006] x64_sys_call+0x2874/0x2dc0 [ 49.082845][ T4006] do_syscall_64+0xc9/0x1c0 [ 49.087451][ T4006] ? clear_bhb_loop+0x55/0xb0 [ 49.092207][ T4006] ? clear_bhb_loop+0x55/0xb0 [ 49.096930][ T4006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.102844][ T4006] RIP: 0033:0x7fafc546473c [ 49.107387][ T4006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.127035][ T4006] RSP: 002b:00007fafc3ad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.135130][ T4012] FAULT_INJECTION: forcing a failure. [ 49.135130][ T4012] name failslab, interval 1, probability 0, space 0, times 0 [ 49.135628][ T4006] RAX: ffffffffffffffda RBX: 00007fafc5655fa0 RCX: 00007fafc546473c [ 49.135644][ T4006] RDX: 000000000000000f RSI: 00007fafc3ad70a0 RDI: 0000000000000007 [ 49.164240][ T4006] RBP: 00007fafc3ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.172237][ T4006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.180313][ T4006] R13: 0000000000000000 R14: 00007fafc5655fa0 R15: 00007ffc9fad5fc8 [ 49.188379][ T4006] [ 49.191422][ T4012] CPU: 0 UID: 0 PID: 4012 Comm: syz.3.205 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 49.201740][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 49.211841][ T4012] Call Trace: [ 49.215156][ T4012] [ 49.218117][ T4012] dump_stack_lvl+0xf2/0x150 [ 49.220482][ T4004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.222872][ T4012] dump_stack+0x15/0x1a [ 49.231743][ T4004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.235418][ T4012] should_fail_ex+0x223/0x230 [ 49.247848][ T4012] should_failslab+0x8f/0xb0 [ 49.252537][ T4012] kmem_cache_alloc_node_noprof+0x59/0x320 [ 49.258456][ T4012] ? __alloc_skb+0x10b/0x310 [ 49.263080][ T4012] __alloc_skb+0x10b/0x310 [ 49.267515][ T4012] netlink_ack+0xef/0x4f0 [ 49.271884][ T4012] ? uevent_net_rcv_skb+0x285/0x2a0 [ 49.277136][ T4012] netlink_rcv_skb+0x19c/0x230 [ 49.281928][ T4012] ? __pfx_uevent_net_rcv_skb+0x10/0x10 [ 49.287514][ T4012] uevent_net_rcv+0x1c/0x30 [ 49.292109][ T4012] netlink_unicast+0x599/0x670 [ 49.297052][ T4012] netlink_sendmsg+0x5cc/0x6e0 [ 49.301868][ T4012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.307222][ T4012] __sock_sendmsg+0x140/0x180 [ 49.309165][ T29] audit: type=1400 audit(1737525503.403:805): avc: denied { shutdown } for pid=4003 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.311924][ T4012] ____sys_sendmsg+0x312/0x410 [ 49.336185][ T4012] __sys_sendmsg+0x19d/0x230 [ 49.340819][ T4012] __x64_sys_sendmsg+0x46/0x50 [ 49.345616][ T4012] x64_sys_call+0x2734/0x2dc0 [ 49.350374][ T4012] do_syscall_64+0xc9/0x1c0 [ 49.354898][ T4012] ? clear_bhb_loop+0x55/0xb0 [ 49.359679][ T4012] ? clear_bhb_loop+0x55/0xb0 [ 49.364519][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.370505][ T4012] RIP: 0033:0x7f0784995d29 [ 49.374943][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.394610][ T4012] RSP: 002b:00007f0782fe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.403098][ T4012] RAX: ffffffffffffffda RBX: 00007f0784b86080 RCX: 00007f0784995d29 [ 49.411139][ T4012] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 49.419134][ T4012] RBP: 00007f0782fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 49.427128][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.435128][ T4012] R13: 0000000000000001 R14: 00007f0784b86080 R15: 00007fffb53669e8 [ 49.443140][ T4012] [ 49.574167][ T4034] xt_hashlimit: size too large, truncated to 1048576 [ 49.574471][ T29] audit: type=1400 audit(1737525503.673:806): avc: denied { read } for pid=4016 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.704814][ T29] audit: type=1400 audit(1737525503.803:807): avc: denied { create } for pid=4037 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.749415][ T4041] FAULT_INJECTION: forcing a failure. [ 49.749415][ T4041] name failslab, interval 1, probability 0, space 0, times 0 [ 49.762089][ T4041] CPU: 0 UID: 0 PID: 4041 Comm: syz.3.212 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 49.772433][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 49.782579][ T4041] Call Trace: [ 49.785875][ T4041] [ 49.788820][ T4041] dump_stack_lvl+0xf2/0x150 [ 49.793528][ T4041] dump_stack+0x15/0x1a [ 49.797785][ T4041] should_fail_ex+0x223/0x230 [ 49.802482][ T4041] should_failslab+0x8f/0xb0 [ 49.807185][ T4041] kmem_cache_alloc_node_noprof+0x59/0x320 [ 49.813005][ T4041] ? __alloc_skb+0x10b/0x310 [ 49.817612][ T4041] __alloc_skb+0x10b/0x310 [ 49.822104][ T4041] tipc_buf_acquire+0x2c/0xb0 [ 49.826814][ T4041] tipc_named_withdraw+0x144/0x360 [ 49.831939][ T4041] tipc_nametbl_withdraw+0x105/0x1f0 [ 49.837242][ T4041] tipc_sk_bind+0x298/0x310 [ 49.841769][ T4041] tipc_bind+0x66/0x190 [ 49.846070][ T4041] __sys_bind+0x10c/0x190 [ 49.850445][ T4041] __x64_sys_bind+0x41/0x50 [ 49.854961][ T4041] x64_sys_call+0x20ab/0x2dc0 [ 49.859752][ T4041] do_syscall_64+0xc9/0x1c0 [ 49.864277][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 49.868990][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 49.873687][ T4041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.879604][ T4041] RIP: 0033:0x7f0784995d29 [ 49.884028][ T4041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.903813][ T4041] RSP: 002b:00007f0783007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 49.912334][ T4041] RAX: ffffffffffffffda RBX: 00007f0784b85fa0 RCX: 00007f0784995d29 [ 49.920418][ T4041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 49.928410][ T4041] RBP: 00007f0783007090 R08: 0000000000000000 R09: 0000000000000000 [ 49.936477][ T4041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.944627][ T4041] R13: 0000000000000000 R14: 00007f0784b85fa0 R15: 00007fffb53669e8 [ 49.952718][ T4041] [ 49.955808][ T4041] tipc: Withdrawal distribution failure [ 49.973844][ T4043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'. [ 50.003008][ T4046] netlink: 100 bytes leftover after parsing attributes in process `syz.4.214'. [ 50.013999][ T4043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'. [ 50.027339][ T4044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'. [ 50.039188][ T4047] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'. [ 50.070583][ T4053] SELinux: policydb version 0 does not match my version range 15-33 [ 50.084699][ T4053] SELinux: failed to load policy [ 50.155849][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 50.204169][ T29] audit: type=1400 audit(1737525504.303:808): avc: denied { bind } for pid=4064 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.224537][ T4067] FAULT_INJECTION: forcing a failure. [ 50.224537][ T4067] name failslab, interval 1, probability 0, space 0, times 0 [ 50.237246][ T4067] CPU: 0 UID: 0 PID: 4067 Comm: syz.3.222 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 50.247567][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.257648][ T4067] Call Trace: [ 50.260939][ T4067] [ 50.263876][ T4067] dump_stack_lvl+0xf2/0x150 [ 50.266100][ T29] audit: type=1326 audit(1737525504.303:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784995d29 code=0x7ffc0000 [ 50.268553][ T4067] dump_stack+0x15/0x1a [ 50.291847][ T29] audit: type=1326 audit(1737525504.303:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784995d29 code=0x7ffc0000 [ 50.295889][ T4067] should_fail_ex+0x223/0x230 [ 50.319097][ T29] audit: type=1326 audit(1737525504.323:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784995d29 code=0x7ffc0000 [ 50.323704][ T4067] should_failslab+0x8f/0xb0 [ 50.346904][ T29] audit: type=1326 audit(1737525504.323:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0784994690 code=0x7ffc0000 [ 50.351422][ T4067] kmem_cache_alloc_node_noprof+0x59/0x320 [ 50.351456][ T4067] ? __alloc_skb+0x10b/0x310 [ 50.374639][ T29] audit: type=1326 audit(1737525504.323:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07849947df code=0x7ffc0000 [ 50.380400][ T4067] __alloc_skb+0x10b/0x310 [ 50.412647][ T4067] ? audit_log_start+0x34c/0x6b0 [ 50.417667][ T4067] audit_log_start+0x368/0x6b0 [ 50.422501][ T4067] audit_seccomp+0x4b/0x130 [ 50.427088][ T4067] __seccomp_filter+0x6fa/0x1180 [ 50.432134][ T4067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.437846][ T4067] ? vfs_write+0x596/0x920 [ 50.442385][ T4067] __secure_computing+0x9f/0x1c0 [ 50.447385][ T4067] syscall_trace_enter+0xd1/0x1f0 [ 50.452458][ T4067] do_syscall_64+0xaa/0x1c0 [ 50.456987][ T4067] ? clear_bhb_loop+0x55/0xb0 [ 50.461687][ T4067] ? clear_bhb_loop+0x55/0xb0 [ 50.466391][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.472323][ T4067] RIP: 0033:0x7f0784995d29 [ 50.476751][ T4067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.496445][ T4067] RSP: 002b:00007f0783007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 50.504965][ T4067] RAX: ffffffffffffffda RBX: 00007f0784b85fa0 RCX: 00007f0784995d29 [ 50.513010][ T4067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.521008][ T4067] RBP: 00007f0783007090 R08: 0000000000000000 R09: 0000000000000000 [ 50.529069][ T4067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.537060][ T4067] R13: 0000000000000000 R14: 00007f0784b85fa0 R15: 00007fffb53669e8 [ 50.545082][ T4067] [ 50.574282][ T4015] ================================================================== [ 50.582420][ T4015] BUG: KCSAN: data-race in __mod_timer / blk_add_timer [ 50.589304][ T4015] [ 50.591631][ T4015] write to 0xffff8881026b9c00 of 8 bytes by task 4008 on cpu 1: [ 50.599357][ T4015] __mod_timer+0x578/0x7f0 [ 50.603796][ T4015] mod_timer+0x1f/0x30 [ 50.607882][ T4015] blk_add_timer+0x17e/0x190 [ 50.612503][ T4015] blk_mq_start_request+0x185/0x3b0 [ 50.617737][ T4015] scsi_queue_rq+0x14aa/0x1a10 [ 50.622526][ T4015] blk_mq_dispatch_rq_list+0x630/0xfa0 [ 50.628007][ T4015] __blk_mq_sched_dispatch_requests+0x604/0xd50 [ 50.634281][ T4015] blk_mq_sched_dispatch_requests+0x88/0x120 [ 50.640291][ T4015] blk_mq_run_hw_queue+0x18a/0x230 [ 50.645542][ T4015] blk_mq_flush_plug_list+0xbd5/0xef0 [ 50.650925][ T4015] __blk_flush_plug+0x216/0x290 [ 50.655784][ T4015] blk_finish_plug+0x48/0x70 [ 50.660384][ T4015] swap_cluster_readahead+0x342/0x3f0 [ 50.665768][ T4015] swapin_readahead+0xe4/0x6f0 [ 50.670542][ T4015] do_swap_page+0x31b/0x2550 [ 50.675177][ T4015] handle_mm_fault+0x8e4/0x2ac0 [ 50.680050][ T4015] exc_page_fault+0x296/0x650 [ 50.684752][ T4015] asm_exc_page_fault+0x26/0x30 [ 50.689607][ T4015] __get_user_8+0x18/0x30 [ 50.693955][ T4015] exit_robust_list+0x31/0x280 [ 50.698740][ T4015] futex_exit_release+0xe3/0x130 [ 50.703691][ T4015] exit_mm_release+0x1a/0x30 [ 50.708284][ T4015] exit_mm+0x38/0x190 [ 50.712276][ T4015] do_exit+0x559/0x17f0 [ 50.716446][ T4015] do_group_exit+0x102/0x150 [ 50.721069][ T4015] get_signal+0xeb9/0x1000 [ 50.725495][ T4015] arch_do_signal_or_restart+0x95/0x4b0 [ 50.731080][ T4015] syscall_exit_to_user_mode+0x62/0x120 [ 50.736644][ T4015] do_syscall_64+0xd6/0x1c0 [ 50.741150][ T4015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.747056][ T4015] [ 50.749380][ T4015] read to 0xffff8881026b9c00 of 8 bytes by task 4015 on cpu 0: [ 50.756934][ T4015] blk_add_timer+0x112/0x190 [ 50.761622][ T4015] blk_mq_start_request+0x185/0x3b0 [ 50.766838][ T4015] scsi_queue_rq+0x14aa/0x1a10 [ 50.771638][ T4015] blk_mq_dispatch_rq_list+0x630/0xfa0 [ 50.777123][ T4015] __blk_mq_sched_dispatch_requests+0x604/0xd50 [ 50.783384][ T4015] blk_mq_sched_dispatch_requests+0x88/0x120 [ 50.789390][ T4015] blk_mq_run_hw_queue+0x18a/0x230 [ 50.794519][ T4015] blk_mq_flush_plug_list+0xbd5/0xef0 [ 50.799902][ T4015] __blk_flush_plug+0x216/0x290 [ 50.804773][ T4015] blk_finish_plug+0x48/0x70 [ 50.809386][ T4015] swap_cluster_readahead+0x342/0x3f0 [ 50.814875][ T4015] swapin_readahead+0xe4/0x6f0 [ 50.819655][ T4015] do_swap_page+0x31b/0x2550 [ 50.824424][ T4015] handle_mm_fault+0x8e4/0x2ac0 [ 50.829280][ T4015] exc_page_fault+0x296/0x650 [ 50.834177][ T4015] asm_exc_page_fault+0x26/0x30 [ 50.839047][ T4015] __get_user_8+0x18/0x30 [ 50.843494][ T4015] exit_robust_list+0x31/0x280 [ 50.848306][ T4015] futex_exit_release+0xe3/0x130 [ 50.853264][ T4015] exit_mm_release+0x1a/0x30 [ 50.858031][ T4015] exit_mm+0x38/0x190 [ 50.862030][ T4015] do_exit+0x559/0x17f0 [ 50.866215][ T4015] do_group_exit+0x102/0x150 [ 50.870816][ T4015] get_signal+0xeb9/0x1000 [ 50.875256][ T4015] arch_do_signal_or_restart+0x95/0x4b0 [ 50.880819][ T4015] syscall_exit_to_user_mode+0x62/0x120 [ 50.886386][ T4015] do_syscall_64+0xd6/0x1c0 [ 50.890897][ T4015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.896797][ T4015] [ 50.899291][ T4015] value changed: 0x00000000ffff9e3f -> 0x00000000ffffa0d4 [ 50.906397][ T4015] [ 50.908720][ T4015] Reported by Kernel Concurrency Sanitizer on: [ 50.914865][ T4015] CPU: 0 UID: 0 PID: 4015 Comm: syz.1.204 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 50.925193][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.935259][ T4015] ==================================================================