last executing test programs: 11.527402806s ago: executing program 4 (id=18208): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x109281) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000340)=""/102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 11.510941247s ago: executing program 4 (id=18209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000340)=0x3, 0x4) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001800)=@newchain={0x26c, 0x64, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x9, 0x6}, {0x4, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5b, 0xc4}}, @filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_mirred={0x1ec, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x847, 0x9, 0xffffffffffffffff, 0x8, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0x6, 0x7, 0x81}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x3, 0x3e11, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x3, 0x1, 0x1be716d1, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff8001, 0x1, 0x2, 0x6, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xfffffff9, 0x8, 0x80, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x20000000, 0xe, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x7, 0x9}, 0x4}}]}, {0xbf, 0x6, "58f38cb682ed25b1e88b9c11df441484504b40e76d9de5981e3be8753be0f31482cc7d7416ed6b3a44a731f0ca30aef139a452351b0f130a90e4e9952454494da62f01cb8f0a0466ae521fc670efbdd4c56896d248ccd1de793bf6f5c4fd2342950ae19707c5dd2c902df4c02b79516b615fca8d1a3dc2adace0cb6ad0808028e066c8ef9cb0b07dcb56103a612a083ef19172ac6b3a0043b8f68a76b478e808a3b75af5ba14aecff22f770cf05a9e28b8daab585103b517b63831"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x26}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x56}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 10.554532335s ago: executing program 4 (id=18221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1}]) 10.438682695s ago: executing program 4 (id=18225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) chmod(0x0, 0x23f) 10.38223876s ago: executing program 4 (id=18228): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x0, 0x0, &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) 9.519822739s ago: executing program 4 (id=18233): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_clone(0x80142000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c300)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000040)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r13], 0x20}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r13, @ANYBLOB="92"], 0x20}}, 0x0) 2.51438782s ago: executing program 0 (id=18355): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fa000000000000", @ANYRES32, @ANYBLOB='\x00'/10], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x9, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x3ff, 0xfffffffffffffffe}], 0x3e0000) 2.471038114s ago: executing program 0 (id=18356): getpgrp(0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000000c0)={0x2000000a}) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0xa8af, 0x0, 0x0, 0x3d7}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)=""/77, 0x4d}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.720670793s ago: executing program 1 (id=18358): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@initdev, 0x0}, &(0x7f0000000500)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x80, 0xb1a, 0x7, 0xff66963514221f64, r2, 0x200, '\x00', r3, r4, 0x3, 0x1, 0x4, 0xf, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x5, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 1.53014642s ago: executing program 1 (id=18362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@data_err_ignore}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57e, &(0x7f0000000bc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() sync() r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32], 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x416e2c48}, 0x8) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140), 0x0, 0xfecc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket(0x1, 0x3, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.508343872s ago: executing program 3 (id=18363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x13, 0xffffffffffffffff, 0x0) 1.457486857s ago: executing program 3 (id=18364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 1.41714905s ago: executing program 0 (id=18365): getpid() timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 1.407013812s ago: executing program 1 (id=18366): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1) 1.395773983s ago: executing program 0 (id=18367): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0xffffffff, 0x0) 1.372709415s ago: executing program 1 (id=18368): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2c8) gettid() timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.307331581s ago: executing program 3 (id=18369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000340)=0x3, 0x4) socketpair(0x1e, 0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001780)=0x0, &(0x7f00000017c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001800)=@newchain={0x26c, 0x64, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x9, 0x6}, {0x4, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5b, 0xc4}}, @filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_mirred={0x1ec, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x847, 0x9, 0xffffffffffffffff, 0x8, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0x6, 0x7, 0x81}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x3, 0x3e11, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x3, 0x1, 0x1be716d1, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff8001, 0x1, 0x2, 0x6, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xfffffff9, 0x8, 0x80, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x20000000, 0xe, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x7, 0x9}, 0x4}}]}, {0xbf, 0x6, "58f38cb682ed25b1e88b9c11df441484504b40e76d9de5981e3be8753be0f31482cc7d7416ed6b3a44a731f0ca30aef139a452351b0f130a90e4e9952454494da62f01cb8f0a0466ae521fc670efbdd4c56896d248ccd1de793bf6f5c4fd2342950ae19707c5dd2c902df4c02b79516b615fca8d1a3dc2adace0cb6ad0808028e066c8ef9cb0b07dcb56103a612a083ef19172ac6b3a0043b8f68a76b478e808a3b75af5ba14aecff22f770cf05a9e28b8daab585103b517b63831"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x26}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7, 0x56}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.298770071s ago: executing program 1 (id=18370): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0100000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e2, 0x0, &(0x7f00000003c0), &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x105, 0x0, 0x5, 0x0, 0x1, 0xffffffff, 0x7ff}, 0x20) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010100, @multicast1}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20, 0x2000000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) finit_module(r1, &(0x7f00000001c0)='\x00', 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x30, 0x0, r2, 0x4, &(0x7f0000000340)="b4383652a3c789a4321c6039da3b5a0a4ba06f8157bbb447e42e2ce19dae6470856f1564c354c1", 0x27, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 811.884856ms ago: executing program 2 (id=18378): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1) 798.547567ms ago: executing program 2 (id=18379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 697.336017ms ago: executing program 2 (id=18380): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x74}}, 0x0) semget$private(0x0, 0x0, 0x520) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000015dcc94700000000850000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000340)={0x1, 0x2, 0x7, 0x8, 0x28d7}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1010e, &(0x7f0000000600)={[{@errors_remount}, {@data_journal}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) write$binfmt_script(r6, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x3}) r7 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x8d, 0x2) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x400, 0x0, 0x100}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x20, 0x0}, {[@lsrr={0x83, 0x3, 0xa6}, @timestamp={0x44, 0x4, 0x21}, @cipso={0x86, 0x6, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 506.730844ms ago: executing program 0 (id=18381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x13, 0xffffffffffffffff, 0x0) 498.231704ms ago: executing program 2 (id=18382): io_uring_setup(0x2605, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x3) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000340)='./file0\x00') 488.707466ms ago: executing program 0 (id=18383): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000004}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() sync() execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140), 0x0, 0xfecc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) 366.533957ms ago: executing program 3 (id=18384): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fa000000000000", @ANYRES32, @ANYBLOB='\x00'/10], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x9, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x3ff, 0xfffffffffffffffe}], 0x3e0000) 311.833802ms ago: executing program 1 (id=18385): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0100000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e2, 0x0, &(0x7f00000003c0), &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x105, 0x0, 0x5, 0x0, 0x1, 0xffffffff, 0x7ff}, 0x20) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010100, @multicast1}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) finit_module(r1, &(0x7f00000001c0)='\x00', 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x30, 0x0, r2, 0x4, &(0x7f0000000340)="b4383652a3c789a4321c6039da3b5a0a4ba06f8157bbb447e42e2ce19dae6470856f1564c354c1", 0x27, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 299.936003ms ago: executing program 3 (id=18386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x9, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x3ff, 0xfffffffffffffffe}], 0x3e0000) 167.988945ms ago: executing program 3 (id=18387): io_uring_setup(0x2605, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x3) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') 89.257352ms ago: executing program 2 (id=18388): getpid() timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=18389): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): lave_1 (retrying later): interface not active [ 2416.260333][T29842] hsr_slave_0: entered promiscuous mode [ 2416.266922][T29842] hsr_slave_1: entered promiscuous mode [ 2416.273522][T29842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2416.281443][T29842] Cannot create hsr debugfs directory [ 2416.409245][T29918] xt_hashlimit: invalid rate [ 2416.415360][T29918] netlink: 'syz.3.17533': attribute type 4 has an invalid length. [ 2416.569789][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 2416.569807][ T29] audit: type=1326 audit(2000000337.050:52683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.600420][ T29] audit: type=1326 audit(2000000337.050:52684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.624211][ T29] audit: type=1326 audit(2000000337.050:52685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.648146][ T29] audit: type=1326 audit(2000000337.050:52686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.671956][ T29] audit: type=1326 audit(2000000337.050:52687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.695678][ T29] audit: type=1326 audit(2000000337.050:52688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.719457][ T29] audit: type=1326 audit(2000000337.050:52689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.743171][ T29] audit: type=1326 audit(2000000337.050:52690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.766855][ T29] audit: type=1326 audit(2000000337.050:52691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.790620][ T29] audit: type=1326 audit(2000000337.050:52692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.1.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2416.821269][T29842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2416.830001][T29842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2416.839552][T29842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2416.848432][T29842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2416.886496][T29842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2416.899896][T29842] 8021q: adding VLAN 0 to HW filter on device team0 [ 2416.910224][ T2092] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.917360][ T2092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2416.929075][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.936165][T12775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2417.003856][T29842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2417.074080][T29842] veth0_vlan: entered promiscuous mode [ 2417.083309][T29842] veth1_vlan: entered promiscuous mode [ 2417.100909][T29842] veth0_macvtap: entered promiscuous mode [ 2417.108633][T29842] veth1_macvtap: entered promiscuous mode [ 2417.120299][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.130847][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.140711][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.151237][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.161170][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.171647][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.181519][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.192017][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.201874][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.212319][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.222141][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.232670][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.242704][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.253213][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.263025][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2417.273676][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.284936][T29842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2417.299402][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.309911][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.319774][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.330251][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.340203][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.350663][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.360482][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.371013][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.380899][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.391555][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.401406][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.411905][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.421809][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.432382][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.442278][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.452755][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.462639][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.473115][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.482948][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.493466][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.503321][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.513880][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.523788][T29842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2417.534250][T29842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2417.548991][T29842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2417.556576][T29940] netlink: 'syz.3.17538': attribute type 29 has an invalid length. [ 2417.564840][T29941] netlink: 'syz.3.17538': attribute type 29 has an invalid length. [ 2417.580821][T29842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.589667][T29842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.598528][T29842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.607339][T29842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.794561][T29961] wireguard0: entered promiscuous mode [ 2417.800212][T29961] wireguard0: entered allmulticast mode [ 2417.832361][T29964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17545'. [ 2418.778226][T29982] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2419.727684][T30013] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2420.900809][T30066] wireguard9: entered promiscuous mode [ 2420.906615][T30066] wireguard9: entered allmulticast mode [ 2420.913393][T30052] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2420.936082][T30072] coredump: 122(syz.3.17588): coredump has not been created, error -2 [ 2420.954440][T30069] netlink: 'syz.0.17587': attribute type 29 has an invalid length. [ 2420.998247][T30074] netlink: 'syz.0.17587': attribute type 29 has an invalid length. [ 2421.597963][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 2421.597980][ T29] audit: type=1326 audit(2000000342.080:53053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.632366][ T29] audit: type=1326 audit(2000000342.080:53054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.656259][ T29] audit: type=1326 audit(2000000342.080:53055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.680350][ T29] audit: type=1326 audit(2000000342.080:53056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.704054][ T29] audit: type=1326 audit(2000000342.080:53057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.727871][ T29] audit: type=1326 audit(2000000342.080:53058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.751576][ T29] audit: type=1326 audit(2000000342.080:53059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.775738][ T29] audit: type=1326 audit(2000000342.080:53060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.799603][ T29] audit: type=1326 audit(2000000342.080:53061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2421.823288][ T29] audit: type=1326 audit(2000000342.080:53062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30084 comm="syz.4.17592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2422.098279][T30093] wireguard0: entered promiscuous mode [ 2422.103805][T30093] wireguard0: entered allmulticast mode [ 2422.175788][T30106] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17600'. [ 2422.356795][T30116] wireguard0: entered promiscuous mode [ 2422.362307][T30116] wireguard0: entered allmulticast mode [ 2422.381409][T30108] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2422.509802][T30123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17606'. [ 2422.600329][T30139] netlink: 'syz.1.17614': attribute type 29 has an invalid length. [ 2422.621164][T30139] netlink: 'syz.1.17614': attribute type 29 has an invalid length. [ 2422.762264][T30149] wireguard0: entered promiscuous mode [ 2422.767857][T30149] wireguard0: entered allmulticast mode [ 2422.792200][T30152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17619'. [ 2422.900728][T30157] IPVS: set_ctl: invalid protocol: 128 172.30.0.5:20000 [ 2423.164425][T30173] netlink: 'syz.0.17627': attribute type 29 has an invalid length. [ 2423.172274][T30136] coredump: 83(syz.1.17612): written to core: VMAs: 29, size 89030656; core: 60134062 bytes, pos 89038848 [ 2423.172983][T30173] netlink: 'syz.0.17627': attribute type 29 has an invalid length. [ 2423.214264][T30175] netlink: 'syz.0.17628': attribute type 29 has an invalid length. [ 2423.223149][T30175] netlink: 'syz.0.17628': attribute type 29 has an invalid length. [ 2423.412839][T30182] xt_hashlimit: invalid rate [ 2423.420422][T30182] netlink: 'syz.0.17629': attribute type 4 has an invalid length. [ 2423.548617][T30187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17633'. [ 2424.396003][T30231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2424.406187][T30231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2424.813397][T30229] coredump: 91(syz.0.17646): written to core: VMAs: 28, size 88956928; core: 60125814 bytes, pos 88965120 [ 2424.853433][T30246] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 2425.093286][T30252] xt_hashlimit: invalid rate [ 2425.098616][T30252] netlink: 'syz.0.17652': attribute type 4 has an invalid length. [ 2425.322794][T30263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17656'. [ 2425.349209][T30267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17657'. [ 2425.662490][T30281] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2425.717009][T30288] syz.1.17665[30288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2425.717172][T30288] syz.1.17665[30288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2425.733559][T30288] xt_HMARK: spi-set and port-set can't be combined [ 2425.814245][T30294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17668'. [ 2426.641212][T30326] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17676'. [ 2426.662563][ T1150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.782772][T30334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17679'. [ 2426.802438][ T1150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.827956][ T1150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.911917][ T1150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.958932][T30314] chnl_net:caif_netlink_parms(): no params data found [ 2426.980065][T30442] xt_hashlimit: invalid rate [ 2427.001192][T30442] netlink: 'syz.0.17678': attribute type 4 has an invalid length. [ 2427.038365][ T1150] bridge0: port 3(vlan0) entered disabled state [ 2427.051225][ T1150] bridge_slave_1: left allmulticast mode [ 2427.056931][ T1150] bridge_slave_1: left promiscuous mode [ 2427.062639][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.088623][ T1150] bridge_slave_0: left allmulticast mode [ 2427.094372][ T1150] bridge_slave_0: left promiscuous mode [ 2427.100023][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.211939][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 2427.211958][ T29] audit: type=1326 audit(2000000347.690:53484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.243515][ T29] audit: type=1326 audit(2000000347.690:53485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.267462][ T29] audit: type=1326 audit(2000000347.690:53486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.291290][ T29] audit: type=1326 audit(2000000347.690:53487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.315199][ T29] audit: type=1326 audit(2000000347.690:53488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.338785][ T29] audit: type=1326 audit(2000000347.690:53489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.362592][ T29] audit: type=1326 audit(2000000347.690:53490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.386406][ T29] audit: type=1326 audit(2000000347.690:53491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.410185][ T29] audit: type=1326 audit(2000000347.690:53492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.434104][ T29] audit: type=1326 audit(2000000347.750:53493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.4.17687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9d38def9 code=0x7ffc0000 [ 2427.462081][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2427.473458][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2427.484427][ T1150] bond0 (unregistering): Released all slaves [ 2427.508697][T30478] wireguard9: entered promiscuous mode [ 2427.514207][T30478] wireguard9: entered allmulticast mode [ 2427.549061][ T1150] hsr_slave_0: left promiscuous mode [ 2427.555110][ T1150] hsr_slave_1: left promiscuous mode [ 2427.560888][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2427.568543][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2427.577478][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2427.585040][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2427.595021][ T1150] veth1_macvtap: left promiscuous mode [ 2427.600555][ T1150] veth0_macvtap: left promiscuous mode [ 2427.606102][ T1150] veth1_vlan: left promiscuous mode [ 2427.611336][ T1150] veth0_vlan: left allmulticast mode [ 2427.616825][ T1150] veth0_vlan: left promiscuous mode [ 2427.772106][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 2427.784350][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 2427.862608][T30314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2427.870015][T30314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.880659][T30314] bridge_slave_0: entered allmulticast mode [ 2427.887589][T30314] bridge_slave_0: entered promiscuous mode [ 2427.894798][T30314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.901949][T30314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.909242][T30314] bridge_slave_1: entered allmulticast mode [ 2427.915747][T30314] bridge_slave_1: entered promiscuous mode [ 2427.940010][T30554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17691'. [ 2427.957001][T30314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2427.972344][T30314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.996872][T30314] team0: Port device team_slave_0 added [ 2428.006191][T30314] team0: Port device team_slave_1 added [ 2428.040747][T30314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2428.047943][T30314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2428.073906][T30314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.087574][T30314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.094606][T30314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2428.120636][T30314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.198983][T30314] hsr_slave_0: entered promiscuous mode [ 2428.206074][T30314] hsr_slave_1: entered promiscuous mode [ 2428.212162][T30314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2428.219789][T30314] Cannot create hsr debugfs directory [ 2428.407196][T30720] ebtables: ebtables: counters copy to user failed while replacing table [ 2428.479123][T30739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17702'. [ 2428.533727][T30314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2428.560519][T30314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2428.579442][T30314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2428.599755][T30314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2428.618782][T30314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.625873][T30314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2428.669450][T30314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2428.684437][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.716020][T30314] 8021q: adding VLAN 0 to HW filter on device team0 [ 2428.736259][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.743427][T12775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2428.758390][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.765610][T12775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2428.891639][T30314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2428.946312][T30772] syz.0.17708[30772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2428.946382][T30772] syz.0.17708[30772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2429.022399][T30314] veth0_vlan: entered promiscuous mode [ 2429.046643][T30314] veth1_vlan: entered promiscuous mode [ 2429.071930][T30314] veth0_macvtap: entered promiscuous mode [ 2429.082876][T30314] veth1_macvtap: entered promiscuous mode [ 2429.099032][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.109516][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.119376][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.129825][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.139669][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.150389][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.160382][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.170905][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.177528][T30622] coredump: 1308(syz.4.17695): written to core: VMAs: 29, size 89030656; core: 60007086 bytes, pos 89038848 [ 2429.180829][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.180846][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.180873][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.223086][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.232939][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.243377][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.253350][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2429.263844][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.277850][T30314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2429.288698][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.299208][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.309131][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.319646][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.329581][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.340079][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.349929][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.360506][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.370337][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.380817][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.390727][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.401207][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.411324][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.421876][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.431808][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.442246][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.452082][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.462526][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.472463][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.482946][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.492788][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.503350][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.513196][T30314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2429.523678][T30314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2429.536541][T30314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2429.576917][T30314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.585703][T30314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.594482][T30314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.603206][T30314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.850672][T30807] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17714'. [ 2429.889211][T30813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17717'. [ 2430.150792][T30766] coredump: 122(syz.0.17706): written to core: VMAs: 28, size 88956928; core: 60002934 bytes, pos 88965120 [ 2430.220813][T30826] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2430.334261][T30829] wireguard0: entered promiscuous mode [ 2430.340440][T30829] wireguard0: entered allmulticast mode [ 2430.562595][T30846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17729'. [ 2430.581221][T30853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17732'. [ 2430.668533][T30876] FAULT_INJECTION: forcing a failure. [ 2430.668533][T30876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.681801][T30876] CPU: 1 UID: 0 PID: 30876 Comm: syz.1.17737 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2430.693817][T30876] Tainted: [W]=WARN [ 2430.697658][T30876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2430.707792][T30876] Call Trace: [ 2430.711147][T30876] [ 2430.714531][T30876] dump_stack_lvl+0xf2/0x150 [ 2430.719194][T30876] dump_stack+0x15/0x20 [ 2430.723442][T30876] should_fail_ex+0x229/0x230 [ 2430.729471][T30876] should_fail+0xb/0x10 [ 2430.733756][T30876] should_fail_usercopy+0x1a/0x20 [ 2430.738907][T30876] _copy_to_user+0x1e/0xa0 [ 2430.743428][T30876] simple_read_from_buffer+0xa0/0x110 [ 2430.748854][T30876] proc_fail_nth_read+0xf9/0x140 [ 2430.751627][T30879] ebtables: ebtables: counters copy to user failed while replacing table [ 2430.753899][T30876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2430.753950][T30876] vfs_read+0x195/0x720 [ 2430.772090][T30876] ? __rcu_read_unlock+0x4e/0x70 [ 2430.777163][T30876] ? __fget_files+0x1d4/0x210 [ 2430.782405][T30876] ksys_read+0xeb/0x1b0 [ 2430.787005][T30876] __x64_sys_read+0x42/0x50 [ 2430.791573][T30876] x64_sys_call+0x27d3/0x2d60 [ 2430.796331][T30876] do_syscall_64+0xc9/0x1c0 [ 2430.801532][T30876] ? clear_bhb_loop+0x55/0xb0 [ 2430.806336][T30876] ? clear_bhb_loop+0x55/0xb0 [ 2430.811113][T30876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2430.817043][T30876] RIP: 0033:0x7f55c20bc93c [ 2430.821511][T30876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2430.841340][T30876] RSP: 002b:00007f55c0d37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2430.849791][T30876] RAX: ffffffffffffffda RBX: 00007f55c2275f80 RCX: 00007f55c20bc93c [ 2430.858002][T30876] RDX: 000000000000000f RSI: 00007f55c0d370a0 RDI: 0000000000000005 [ 2430.866054][T30876] RBP: 00007f55c0d37090 R08: 0000000000000000 R09: 0000000000000000 [ 2430.874182][T30876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.882225][T30876] R13: 0000000000000000 R14: 00007f55c2275f80 R15: 00007fffb89a7888 [ 2430.890234][T30876] [ 2431.133325][T30859] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2431.144179][T30892] wireguard1: entered promiscuous mode [ 2431.149729][T30892] wireguard1: entered allmulticast mode [ 2431.177472][T30894] wireguard0: entered promiscuous mode [ 2431.183104][T30894] wireguard0: entered allmulticast mode [ 2431.277108][T30818] coredump: 1329(syz.4.17719): written to core: VMAs: 29, size 91127808; core: 62104238 bytes, pos 91136000 [ 2431.439858][T30915] wireguard9: entered promiscuous mode [ 2431.445488][T30915] wireguard9: entered allmulticast mode [ 2431.471114][T30912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17746'. [ 2431.610804][T30925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17748'. [ 2431.671190][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17751'. [ 2431.685637][T30932] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2431.694686][T30932] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2431.703403][T30932] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2431.712229][T30932] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2431.721677][T30932] vxlan0: entered allmulticast mode [ 2431.928323][T30960] bond1: entered promiscuous mode [ 2431.933421][T30960] bond1: entered allmulticast mode [ 2431.942356][T30960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2431.964713][T30960] bond1 (unregistering): Released all slaves [ 2432.035975][T30997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17762'. [ 2432.065010][T31034] wireguard2: entered promiscuous mode [ 2432.070623][T31034] wireguard2: entered allmulticast mode [ 2432.101868][T31048] FAULT_INJECTION: forcing a failure. [ 2432.101868][T31048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2432.115117][T31048] CPU: 0 UID: 0 PID: 31048 Comm: syz.1.17765 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2432.127757][T31048] Tainted: [W]=WARN [ 2432.131622][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2432.141907][T31048] Call Trace: [ 2432.145232][T31048] [ 2432.148248][T31048] dump_stack_lvl+0xf2/0x150 [ 2432.152916][T31048] dump_stack+0x15/0x20 [ 2432.157134][T31048] should_fail_ex+0x229/0x230 [ 2432.161912][T31048] should_fail+0xb/0x10 [ 2432.166190][T31048] should_fail_usercopy+0x1a/0x20 [ 2432.171239][T31048] _copy_from_user+0x1e/0xd0 [ 2432.175895][T31048] ppp_ioctl+0x83c/0x11b0 [ 2432.180337][T31048] ? __pfx_ppp_ioctl+0x10/0x10 [ 2432.185202][T31048] __se_sys_ioctl+0xcd/0x140 [ 2432.189837][T31048] __x64_sys_ioctl+0x43/0x50 [ 2432.194497][T31048] x64_sys_call+0x15cc/0x2d60 [ 2432.199228][T31048] do_syscall_64+0xc9/0x1c0 [ 2432.203820][T31048] ? clear_bhb_loop+0x55/0xb0 [ 2432.208539][T31048] ? clear_bhb_loop+0x55/0xb0 [ 2432.213310][T31048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2432.219356][T31048] RIP: 0033:0x7f55c20bdef9 [ 2432.223831][T31048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2432.243653][T31048] RSP: 002b:00007f55c0d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2432.252097][T31048] RAX: ffffffffffffffda RBX: 00007f55c2275f80 RCX: 00007f55c20bdef9 [ 2432.260185][T31048] RDX: 0000000020000000 RSI: 000000004010744d RDI: 0000000000000003 [ 2432.268160][T31048] RBP: 00007f55c0d37090 R08: 0000000000000000 R09: 0000000000000000 [ 2432.276137][T31048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2432.284251][T31048] R13: 0000000000000000 R14: 00007f55c2275f80 R15: 00007fffb89a7888 [ 2432.292328][T31048] [ 2432.297423][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 2432.297525][ T29] audit: type=1326 audit(2000000352.780:54081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31042 comm="syz.3.17766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.327929][ T29] audit: type=1326 audit(2000000352.780:54082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31042 comm="syz.3.17766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.388557][ T29] audit: type=1400 audit(2000000352.870:54083): avc: denied { getopt } for pid=31056 comm="syz.4.17768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2432.421217][ T29] audit: type=1326 audit(2000000352.900:54084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.445326][ T29] audit: type=1326 audit(2000000352.900:54085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.469163][ T29] audit: type=1326 audit(2000000352.900:54086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.493300][ T29] audit: type=1326 audit(2000000352.900:54087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.517083][ T29] audit: type=1326 audit(2000000352.900:54088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.559123][ T29] audit: type=1326 audit(2000000352.900:54089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.583288][ T29] audit: type=1326 audit(2000000352.900:54090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.3.17767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff531e3def9 code=0x7ffc0000 [ 2432.608749][T31068] wireguard0: entered promiscuous mode [ 2432.614329][T31068] wireguard0: entered allmulticast mode [ 2432.716471][T31082] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17773'. [ 2432.893461][T31090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17775'. [ 2432.930613][T31101] xt_hashlimit: invalid rate [ 2432.941859][T31101] netlink: 'syz.1.17777': attribute type 4 has an invalid length. [ 2433.105833][T31115] wireguard2: entered promiscuous mode [ 2433.111378][T31115] wireguard2: entered allmulticast mode [ 2433.302842][T31131] syz.4.17789[31131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2433.302988][T31131] syz.4.17789[31131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2433.462336][T31148] netlink: 'syz.4.17793': attribute type 10 has an invalid length. [ 2433.995518][T31189] syz.4.17807[31189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2433.995596][T31189] syz.4.17807[31189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2434.017496][T31189] xt_HMARK: spi-set and port-set can't be combined [ 2434.116041][T31198] xt_hashlimit: invalid rate [ 2434.122569][T31198] netlink: 'syz.2.17809': attribute type 4 has an invalid length. [ 2434.287298][T31219] wireguard1: entered promiscuous mode [ 2434.292831][T31219] wireguard1: entered allmulticast mode [ 2434.460443][T31222] syz.3.17820: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2434.475203][T31222] CPU: 0 UID: 0 PID: 31222 Comm: syz.3.17820 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2434.487383][T31222] Tainted: [W]=WARN [ 2434.491261][T31222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2434.501930][T31222] Call Trace: [ 2434.505216][T31222] [ 2434.508152][T31222] dump_stack_lvl+0xf2/0x150 [ 2434.512987][T31222] dump_stack+0x15/0x20 [ 2434.517268][T31222] warn_alloc+0x145/0x1b0 [ 2434.521692][T31222] ? __schedule+0x735/0x940 [ 2434.526295][T31222] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 2434.532295][T31222] __vmalloc_node_range_noprof+0xaa/0xec0 [ 2434.538172][T31222] ? __pfx_futex_wake_mark+0x10/0x10 [ 2434.543471][T31222] ? __rcu_read_unlock+0x4e/0x70 [ 2434.548475][T31222] ? avc_has_perm_noaudit+0x1cc/0x210 [ 2434.553870][T31222] ? xskq_create+0x36/0xd0 [ 2434.558323][T31222] vmalloc_user_noprof+0x59/0x70 [ 2434.563331][T31222] ? xskq_create+0x79/0xd0 [ 2434.567760][T31222] xskq_create+0x79/0xd0 [ 2434.572045][T31222] xsk_init_queue+0x82/0xd0 [ 2434.576692][T31222] xsk_setsockopt+0x409/0x520 [ 2434.581410][T31222] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2434.586676][T31222] __sys_setsockopt+0x1cc/0x240 [ 2434.591619][T31222] __x64_sys_setsockopt+0x66/0x80 [ 2434.596742][T31222] x64_sys_call+0x278d/0x2d60 [ 2434.601491][T31222] do_syscall_64+0xc9/0x1c0 [ 2434.606001][T31222] ? clear_bhb_loop+0x55/0xb0 [ 2434.610745][T31222] ? clear_bhb_loop+0x55/0xb0 [ 2434.615446][T31222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2434.621356][T31222] RIP: 0033:0x7ff531e3def9 [ 2434.625778][T31222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2434.645476][T31222] RSP: 002b:00007ff530ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2434.654014][T31222] RAX: ffffffffffffffda RBX: 00007ff531ff5f80 RCX: 00007ff531e3def9 [ 2434.662040][T31222] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 2434.670106][T31222] RBP: 00007ff531eb0b76 R08: 0000000000000020 R09: 0000000000000000 [ 2434.678088][T31222] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 2434.686068][T31222] R13: 0000000000000000 R14: 00007ff531ff5f80 R15: 00007ffe7c9fee38 [ 2434.694077][T31222] [ 2434.697335][T31222] Mem-Info: [ 2434.700470][T31222] active_anon:15231 inactive_anon:261 isolated_anon:0 [ 2434.700470][T31222] active_file:8780 inactive_file:22554 isolated_file:0 [ 2434.700470][T31222] unevictable:0 dirty:318 writeback:0 [ 2434.700470][T31222] slab_reclaimable:3258 slab_unreclaimable:26044 [ 2434.700470][T31222] mapped:52724 shmem:11736 pagetables:816 [ 2434.700470][T31222] sec_pagetables:0 bounce:0 [ 2434.700470][T31222] kernel_misc_reclaimable:0 [ 2434.700470][T31222] free:1832950 free_pcp:2820 free_cma:0 [ 2434.745760][T31222] Node 0 active_anon:60924kB inactive_anon:1044kB active_file:35120kB inactive_file:90216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210896kB dirty:1272kB writeback:0kB shmem:46944kB writeback_tmp:0kB kernel_stack:3824kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no [ 2434.774087][T31222] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.801060][T31222] lowmem_reserve[]: 0 2866 7844 0 [ 2434.806153][T31222] Node 0 DMA32 free:2950356kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953888kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 2434.835348][T31222] lowmem_reserve[]: 0 0 4978 0 [ 2434.840155][T31222] Node 0 Normal free:4366084kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:61040kB inactive_anon:1044kB active_file:35120kB inactive_file:90216kB unevictable:0kB writepending:1272kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:7624kB local_pcp:988kB free_cma:0kB [ 2434.870768][T31222] lowmem_reserve[]: 0 0 0 0 [ 2434.875340][T31222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2434.888096][T31222] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950356kB [ 2434.904291][T31222] Node 0 Normal: 94*4kB (UME) 879*8kB (UME) 888*16kB (UME) 994*32kB (UME) 346*64kB (UME) 330*128kB (UME) 131*256kB (UME) 156*512kB (UME) 134*1024kB (UME) 76*2048kB (UM) 938*4096kB (UM) = 4366128kB [ 2434.924175][T31222] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2434.933489][T31222] 43322 total pagecache pages [ 2434.938299][T31222] 264 pages in swap cache [ 2434.942617][T31222] Free swap = 123296kB [ 2434.946888][T31222] Total swap = 124996kB [ 2434.951036][T31222] 2097051 pages RAM [ 2434.954891][T31222] 0 pages HighMem/MovableOnly [ 2434.959701][T31222] 80187 pages reserved [ 2435.047505][T31270] netlink: 'syz.0.17825': attribute type 3 has an invalid length. [ 2435.179730][T31281] ebtables: ebtables: counters copy to user failed while replacing table [ 2435.345506][T31307] wireguard1: entered promiscuous mode [ 2435.351038][T31307] wireguard1: entered allmulticast mode [ 2436.143817][T31347] syz.2.17849[31347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.143899][T31347] syz.2.17849[31347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.489346][T31372] wireguard1: entered promiscuous mode [ 2436.506917][T31372] wireguard1: entered allmulticast mode [ 2436.537285][T31377] syz.4.17857[31377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.537534][T31377] syz.4.17857[31377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.602362][T31382] __nla_validate_parse: 5 callbacks suppressed [ 2436.602383][T31382] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17858'. [ 2436.835381][T31390] syz.1.17862[31390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2436.835530][T31390] syz.1.17862[31390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2437.284138][T31410] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17869'. [ 2437.317792][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 2437.317806][ T29] audit: type=1326 audit(2000000357.800:54701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31412 comm="syz.0.17870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2437.353565][ T29] audit: type=1326 audit(2000000357.830:54702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31412 comm="syz.0.17870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2437.363839][T31416] ieee802154 phy0 wpan0: encryption failed: -90 [ 2437.387093][ T29] audit: type=1326 audit(2000000357.830:54703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31412 comm="syz.0.17870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2437.411174][ T29] audit: type=1326 audit(2000000357.830:54704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31412 comm="syz.0.17870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2437.435253][ T29] audit: type=1400 audit(2000000357.830:54705): avc: denied { write } for pid=31415 comm="syz.2.17871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2437.506047][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17875'. [ 2437.515266][T31424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2437.522846][T31424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2437.530691][T31424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2437.538190][T31424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2437.728852][T31433] ebtables: ebtables: counters copy to user failed while replacing table [ 2437.991424][ T29] audit: type=1326 audit(2000000358.470:54706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31443 comm="syz.1.17879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2438.015886][ T29] audit: type=1326 audit(2000000358.470:54707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31443 comm="syz.1.17879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2438.039940][ T29] audit: type=1326 audit(2000000358.470:54708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31443 comm="syz.1.17879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2438.063810][ T29] audit: type=1326 audit(2000000358.470:54709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31443 comm="syz.1.17879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2438.087530][ T29] audit: type=1326 audit(2000000358.470:54710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31443 comm="syz.1.17879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2438.144090][T31455] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17883'. [ 2438.181156][T31459] ieee802154 phy0 wpan0: encryption failed: -90 [ 2438.357914][T31477] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17894'. [ 2438.509589][T31499] ieee802154 phy0 wpan0: encryption failed: -90 [ 2438.727251][T31514] ebtables: ebtables: counters copy to user failed while replacing table [ 2438.813613][T31530] ieee802154 phy0 wpan0: encryption failed: -90 [ 2438.922708][T31538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17919'. [ 2439.073963][T31532] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2439.249333][T31567] xt_hashlimit: invalid rate [ 2439.254542][T31567] netlink: 'syz.3.17927': attribute type 4 has an invalid length. [ 2439.966950][T31614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2440.111214][T31629] ieee802154 phy0 wpan0: encryption failed: -90 [ 2440.177572][T31633] ebtables: ebtables: counters copy to user failed while replacing table [ 2440.387170][T31632] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2440.410028][T31654] xt_hashlimit: invalid rate [ 2440.425045][T31654] netlink: 'syz.3.17962': attribute type 4 has an invalid length. [ 2440.488018][T31658] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17967'. [ 2441.117331][T31674] Cannot find set identified by id 0 to match [ 2441.191744][T31676] ebtables: ebtables: counters copy to user failed while replacing table [ 2441.293662][T31695] syz.1.17980[31695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2441.293766][T31695] syz.1.17980[31695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2441.330438][T31698] xt_hashlimit: invalid rate [ 2441.351069][T31698] netlink: 'syz.3.17978': attribute type 4 has an invalid length. [ 2441.563528][T31708] xt_hashlimit: invalid rate [ 2442.078212][T31712] ipvlan1: entered promiscuous mode [ 2442.086647][T31712] ipvlan1: left promiscuous mode [ 2442.414310][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 2442.414327][ T29] audit: type=1326 audit(2000000362.890:55274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2442.444398][ T29] audit: type=1326 audit(2000000362.890:55275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2442.459739][T31742] syz.0.17997[31742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2442.468437][ T29] audit: type=1326 audit(2000000362.890:55276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2442.486656][T31742] syz.0.17997[31742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2442.503663][ T29] audit: type=1326 audit(2000000362.890:55277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2442.540116][ T29] audit: type=1326 audit(2000000362.890:55278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55c20bdf33 code=0x7ffc0000 [ 2442.566218][ T29] audit: type=1326 audit(2000000363.000:55279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55c20bc9df code=0x7ffc0000 [ 2442.590154][ T29] audit: type=1326 audit(2000000363.030:55280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f55c20bdf87 code=0x7ffc0000 [ 2442.613890][ T29] audit: type=1326 audit(2000000363.050:55281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55c20bc890 code=0x7ffc0000 [ 2442.637670][ T29] audit: type=1326 audit(2000000363.050:55282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f55c20bcb8a code=0x7ffc0000 [ 2442.662288][ T29] audit: type=1326 audit(2000000363.050:55283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.1.17995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2442.840527][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.848120][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.855555][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.862949][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.870434][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.877931][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.885421][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.891268][T31768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2442.892868][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.908714][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.916201][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.923660][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.931123][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.938542][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.945977][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.953386][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.960877][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.968301][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.975772][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.983211][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.990711][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2442.998155][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.005597][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.013069][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.020493][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.027995][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.035411][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.042809][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.050405][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.057876][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.065351][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.072792][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.080205][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2443.082709][T31774] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 2443.089192][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2443.097987][T31768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.205793][T31786] syz.3.18010[31786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2443.205897][T31786] syz.3.18010[31786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2443.248203][T31786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18010'. [ 2444.486841][T31857] wireguard1: entered promiscuous mode [ 2444.492460][T31857] wireguard1: entered allmulticast mode [ 2444.800496][T31867] netlink: 136 bytes leftover after parsing attributes in process `syz.2.18029'. [ 2444.810034][T31867] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2445.015685][T31880] ./file0: Can't lookup blockdev [ 2445.281679][T31898] xt_hashlimit: invalid rate [ 2445.287233][T31898] netlink: 'syz.0.18040': attribute type 4 has an invalid length. [ 2445.368496][T31899] wireguard1: entered promiscuous mode [ 2445.374035][T31899] wireguard1: entered allmulticast mode [ 2445.936304][T31906] ebtables: ebtables: counters copy to user failed while replacing table [ 2446.205590][T31929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18050'. [ 2446.319789][T31932] wireguard2: entered promiscuous mode [ 2446.325402][T31932] wireguard2: entered allmulticast mode [ 2446.334325][T12040] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 2446.440737][T31944] ebtables: ebtables: counters copy to user failed while replacing table [ 2447.427148][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 2447.427169][ T29] audit: type=1326 audit(2000000367.890:55826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2447.457159][ T29] audit: type=1326 audit(2000000367.890:55827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2447.480998][ T29] audit: type=1326 audit(2000000367.890:55828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2447.504693][ T29] audit: type=1326 audit(2000000367.890:55829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2447.528730][ T29] audit: type=1326 audit(2000000367.890:55830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55c20bdf33 code=0x7ffc0000 [ 2447.562107][ T29] audit: type=1326 audit(2000000367.940:55831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55c20bc9df code=0x7ffc0000 [ 2447.585837][ T29] audit: type=1326 audit(2000000367.940:55832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f55c20bdf87 code=0x7ffc0000 [ 2447.609434][ T29] audit: type=1326 audit(2000000367.940:55833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55c20bc890 code=0x7ffc0000 [ 2447.633239][ T29] audit: type=1326 audit(2000000367.940:55834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f55c20bcb8a code=0x7ffc0000 [ 2447.656903][ T29] audit: type=1326 audit(2000000367.940:55835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31952 comm="syz.1.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2447.752031][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.839760][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.859644][T31999] xt_hashlimit: invalid rate [ 2447.865341][T31999] netlink: 'syz.2.18063': attribute type 4 has an invalid length. [ 2447.878678][T32005] xt_hashlimit: invalid rate [ 2447.883381][T32002] wireguard2: entered promiscuous mode [ 2447.888990][T32002] wireguard2: entered allmulticast mode [ 2447.899660][T32005] netlink: 'syz.0.18061': attribute type 4 has an invalid length. [ 2447.925795][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.957418][T31957] chnl_net:caif_netlink_parms(): no params data found [ 2447.982808][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.015634][T31957] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.022916][T31957] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.031676][T31957] bridge_slave_0: entered allmulticast mode [ 2448.038302][T31957] bridge_slave_0: entered promiscuous mode [ 2448.046096][T31957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2448.053138][T31957] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.060564][T31957] bridge_slave_1: entered allmulticast mode [ 2448.067131][T31957] bridge_slave_1: entered promiscuous mode [ 2448.090506][T31957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2448.102221][T31957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2448.134699][T31957] team0: Port device team_slave_0 added [ 2448.144166][T31957] team0: Port device team_slave_1 added [ 2448.157129][ T1150] bridge_slave_1: left allmulticast mode [ 2448.162831][ T1150] bridge_slave_1: left promiscuous mode [ 2448.168746][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.176806][ T1150] bridge_slave_0: left allmulticast mode [ 2448.182552][ T1150] bridge_slave_0: left promiscuous mode [ 2448.188375][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.318534][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2448.329405][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2448.341006][ T1150] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2448.352677][ T1150] bond0 (unregistering): Released all slaves [ 2448.374127][T31957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2448.381258][T31957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2448.407269][T31957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2448.418873][T31957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2448.425902][T31957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2448.452011][T31957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2448.475763][ T1150] hsr_slave_0: left promiscuous mode [ 2448.481659][ T1150] hsr_slave_1: left promiscuous mode [ 2448.487604][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2448.495732][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2448.503246][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2448.513501][ T1150] veth1_vlan: left promiscuous mode [ 2448.518813][ T1150] veth0_vlan: left promiscuous mode [ 2448.680189][T32235] ebtables: ebtables: counters copy to user failed while replacing table [ 2448.723867][T32234] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18068'. [ 2448.768729][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 2448.780956][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 2448.836183][T32239] wireguard2: entered promiscuous mode [ 2448.841704][T32239] wireguard2: entered allmulticast mode [ 2448.886282][T31957] hsr_slave_0: entered promiscuous mode [ 2448.892962][T31957] hsr_slave_1: entered promiscuous mode [ 2448.902321][T31957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2448.913432][T31957] Cannot create hsr debugfs directory [ 2448.922799][T32241] xt_hashlimit: invalid rate [ 2449.320329][T31957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2449.331689][T31957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2449.343951][T31957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2449.356446][T31957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2449.414526][T31957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2449.436322][T31957] 8021q: adding VLAN 0 to HW filter on device team0 [ 2449.451564][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.458676][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.483118][T31957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2449.493572][T31957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2449.509492][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.516594][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.707908][T31957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2449.770443][T32377] xt_hashlimit: invalid rate [ 2449.779354][T32377] netlink: 'syz.2.18074': attribute type 4 has an invalid length. [ 2450.013660][T31957] veth0_vlan: entered promiscuous mode [ 2450.031167][T31957] veth1_vlan: entered promiscuous mode [ 2450.049341][T31957] veth0_macvtap: entered promiscuous mode [ 2450.057490][T31957] veth1_macvtap: entered promiscuous mode [ 2450.075974][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.086529][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.096414][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.106899][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.116827][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.127268][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.137121][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.147647][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.157547][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.167994][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.177898][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.188355][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.198268][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.208749][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.218642][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2450.229127][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.262966][T31957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2450.277166][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.287711][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.297602][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.308065][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.317953][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.328579][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.338413][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.348935][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.358981][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.369442][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.379299][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.389779][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.399757][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.410226][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.420087][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.430716][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.440655][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.451094][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.461010][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.471450][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.481287][T31957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2450.491707][T31957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2450.504816][T31957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2450.514750][T31957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.523584][T31957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.532453][T31957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.541420][T31957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.681707][T32406] wireguard0: entered promiscuous mode [ 2450.687306][T32406] wireguard0: entered allmulticast mode [ 2450.701302][T32410] ebtables: ebtables: counters copy to user failed while replacing table [ 2450.942883][T32436] ebtables: ebtables: counters copy to user failed while replacing table [ 2450.967379][T32439] xt_hashlimit: invalid rate [ 2450.974422][T32439] netlink: 'syz.0.18088': attribute type 4 has an invalid length. [ 2451.320307][T32451] warn_alloc: 1 callbacks suppressed [ 2451.320325][T32451] syz.2.18094: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2451.340357][T32451] CPU: 0 UID: 0 PID: 32451 Comm: syz.2.18094 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2451.352394][T32451] Tainted: [W]=WARN [ 2451.356218][T32451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2451.366312][T32451] Call Trace: [ 2451.369601][T32451] [ 2451.372544][T32451] dump_stack_lvl+0xf2/0x150 [ 2451.377170][T32451] dump_stack+0x15/0x20 [ 2451.381551][T32451] warn_alloc+0x145/0x1b0 [ 2451.386078][T32451] ? __schedule+0x735/0x940 [ 2451.390604][T32451] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 2451.396572][T32451] __vmalloc_node_range_noprof+0xaa/0xec0 [ 2451.402317][T32451] ? __pfx_futex_wake_mark+0x10/0x10 [ 2451.407702][T32451] ? __rcu_read_unlock+0x4e/0x70 [ 2451.412756][T32451] ? avc_has_perm_noaudit+0x1cc/0x210 [ 2451.418180][T32451] ? xskq_create+0x36/0xd0 [ 2451.423161][T32451] vmalloc_user_noprof+0x59/0x70 [ 2451.428134][T32451] ? xskq_create+0x79/0xd0 [ 2451.432658][T32451] xskq_create+0x79/0xd0 [ 2451.436956][T32451] xsk_init_queue+0x82/0xd0 [ 2451.441495][T32451] xsk_setsockopt+0x409/0x520 [ 2451.446248][T32451] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2451.451543][T32451] __sys_setsockopt+0x1cc/0x240 [ 2451.456437][T32451] __x64_sys_setsockopt+0x66/0x80 [ 2451.461632][T32451] x64_sys_call+0x278d/0x2d60 [ 2451.461672][T32451] do_syscall_64+0xc9/0x1c0 [ 2451.470959][T32451] ? clear_bhb_loop+0x55/0xb0 [ 2451.475682][T32451] ? clear_bhb_loop+0x55/0xb0 [ 2451.480394][T32451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.486771][T32451] RIP: 0033:0x7fa7579adef9 [ 2451.491268][T32451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2451.511592][T32451] RSP: 002b:00007fa756621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2451.520578][T32451] RAX: ffffffffffffffda RBX: 00007fa757b65f80 RCX: 00007fa7579adef9 [ 2451.528573][T32451] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 2451.536587][T32451] RBP: 00007fa757a20b76 R08: 0000000000000020 R09: 0000000000000000 [ 2451.544580][T32451] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 2451.552573][T32451] R13: 0000000000000000 R14: 00007fa757b65f80 R15: 00007ffe9a528328 [ 2451.560626][T32451] [ 2451.563969][T32451] Mem-Info: [ 2451.567127][T32451] active_anon:18092 inactive_anon:261 isolated_anon:0 [ 2451.567127][T32451] active_file:8780 inactive_file:22561 isolated_file:0 [ 2451.567127][T32451] unevictable:0 dirty:563 writeback:0 [ 2451.567127][T32451] slab_reclaimable:3258 slab_unreclaimable:26123 [ 2451.567127][T32451] mapped:55671 shmem:14616 pagetables:787 [ 2451.567127][T32451] sec_pagetables:0 bounce:0 [ 2451.567127][T32451] kernel_misc_reclaimable:0 [ 2451.567127][T32451] free:1829421 free_pcp:3305 free_cma:0 [ 2451.612436][T32451] Node 0 active_anon:72368kB inactive_anon:1044kB active_file:35120kB inactive_file:90244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222684kB dirty:2252kB writeback:0kB shmem:58464kB writeback_tmp:0kB kernel_stack:3664kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 2451.640754][T32451] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2451.667628][T32451] lowmem_reserve[]: 0 2866 7844 0 [ 2451.672700][T32451] Node 0 DMA32 free:2950356kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953888kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 2451.701425][T32451] lowmem_reserve[]: 0 0 4978 0 [ 2451.706305][T32451] Node 0 Normal free:4351212kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:72252kB inactive_anon:1044kB active_file:35120kB inactive_file:90244kB unevictable:0kB writepending:2252kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:10552kB local_pcp:1324kB free_cma:0kB [ 2451.736963][T32451] lowmem_reserve[]: 0 0 0 0 [ 2451.741587][T32451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2451.754411][T32451] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950356kB [ 2451.770640][T32451] Node 0 Normal: 17*4kB (UE) 1159*8kB (UM) 475*16kB (UM) 958*32kB (UME) 483*64kB (UME) 206*128kB (UME) 125*256kB (UME) 155*512kB (UME) 134*1024kB (UME) 76*2048kB (UM) 938*4096kB (UM) = 4351148kB [ 2451.790074][T32451] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2451.799422][T32451] 46209 total pagecache pages [ 2451.804102][T32451] 264 pages in swap cache [ 2451.808463][T32451] Free swap = 123296kB [ 2451.812642][T32451] Total swap = 124996kB [ 2451.816820][T32451] 2097051 pages RAM [ 2451.820613][T32451] 0 pages HighMem/MovableOnly [ 2451.825303][T32451] 80187 pages reserved [ 2451.833749][T32476] wireguard3: entered promiscuous mode [ 2451.839274][T32476] wireguard3: entered allmulticast mode [ 2451.965946][T32488] ebtables: ebtables: counters copy to user failed while replacing table [ 2452.128165][T32501] netlink: 136 bytes leftover after parsing attributes in process `syz.4.18102'. [ 2452.137646][T32501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2452.328525][T32509] syz.4.18105[32509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2452.328601][T32509] syz.4.18105[32509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2452.542384][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 2452.542400][ T29] audit: type=1326 audit(2000000373.020:56293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.583990][ T29] audit: type=1326 audit(2000000373.020:56294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.612840][ T29] audit: type=1326 audit(2000000373.090:56295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.636579][ T29] audit: type=1326 audit(2000000373.090:56296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.660400][ T29] audit: type=1326 audit(2000000373.090:56297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.684288][ T29] audit: type=1326 audit(2000000373.090:56298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.708163][ T29] audit: type=1326 audit(2000000373.090:56299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.731910][ T29] audit: type=1326 audit(2000000373.090:56300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.755665][ T29] audit: type=1326 audit(2000000373.090:56301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2452.779368][ T29] audit: type=1326 audit(2000000373.090:56302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32517 comm="syz.1.18109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2452.985926][T32547] netlink: 'syz.1.18113': attribute type 4 has an invalid length. [ 2453.371109][T32575] wireguard1: entered promiscuous mode [ 2453.376736][T32575] wireguard1: entered allmulticast mode [ 2453.509357][T32564] chnl_net:caif_netlink_parms(): no params data found [ 2453.532193][T32582] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2453.562477][T32564] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.569757][T32564] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.580129][T32564] bridge_slave_0: entered allmulticast mode [ 2453.587103][T32564] bridge_slave_0: entered promiscuous mode [ 2453.595002][T32564] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.602197][T32564] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.609551][T32564] bridge_slave_1: entered allmulticast mode [ 2453.619332][T32564] bridge_slave_1: entered promiscuous mode [ 2453.639612][T32740] ebtables: ebtables: counters copy to user failed while replacing table [ 2453.651671][T32564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2453.663717][T32564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2453.706721][T32564] team0: Port device team_slave_0 added [ 2453.714124][T32564] team0: Port device team_slave_1 added [ 2453.746780][T32564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2453.753999][T32564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2453.757001][ T354] syz.2.18127[354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2453.780146][T32564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2453.791626][ T354] syz.2.18127[354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2453.819202][ T355] wireguard1: entered promiscuous mode [ 2453.836095][ T355] wireguard1: entered allmulticast mode [ 2454.120002][T32564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2454.127052][T32564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2454.153006][T32564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2454.163751][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18127'. [ 2454.208396][T32564] hsr_slave_0: entered promiscuous mode [ 2454.217873][T32564] hsr_slave_1: entered promiscuous mode [ 2454.225461][T32564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2454.233085][T32564] Cannot create hsr debugfs directory [ 2454.356725][T32564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2454.367262][T32564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.453182][T32564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2454.463752][T32564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.537295][T32564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2454.547655][T32564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.604797][T32564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2454.615179][T32564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.625092][ T483] ebtables: ebtables: counters copy to user failed while replacing table [ 2454.634805][ T474] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2454.790286][T32564] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2454.800393][ T505] netlink: 'syz.1.18136': attribute type 4 has an invalid length. [ 2454.808633][T32564] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2454.818152][T32564] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2454.828239][T32564] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2454.876629][T32564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2454.890482][T32564] 8021q: adding VLAN 0 to HW filter on device team0 [ 2454.900669][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2454.907791][T12775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2454.919599][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2454.926689][T12775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2455.008989][T32564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2455.060830][ T516] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18139'. [ 2455.097847][T32564] veth0_vlan: entered promiscuous mode [ 2455.107281][T32564] veth1_vlan: entered promiscuous mode [ 2455.126807][T32564] veth0_macvtap: entered promiscuous mode [ 2455.137810][T32564] veth1_macvtap: entered promiscuous mode [ 2455.153211][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.163775][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.173723][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.184227][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.194092][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.204543][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.214408][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.225288][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.235456][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.246021][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.255900][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.266339][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.276184][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.286693][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.296520][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.307784][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.317692][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.328266][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.340353][T32564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2455.362483][ T530] wireguard2: entered promiscuous mode [ 2455.368143][ T530] wireguard2: entered allmulticast mode [ 2455.383647][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.394242][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.404124][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.414616][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.424431][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.434861][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.444697][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.455134][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.464991][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.475463][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.485389][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.495878][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.505763][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.516197][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.526035][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.536484][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.546343][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.556801][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.566637][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.577076][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.586955][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.597480][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.607298][T32564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.617732][T32564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.628820][T32564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2455.641112][T32564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.649954][T32564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.658758][T32564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.667610][T32564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.698312][ T543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18146'. [ 2455.776072][ T551] syz.4.18148[551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2455.776254][ T551] syz.4.18148[551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.152490][ T600] syz.4.18159[600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.167403][ T600] syz.4.18159[600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.318010][ T603] syz.4.18160[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.373366][ T603] syz.4.18160[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2456.699043][ T626] wireguard2: entered promiscuous mode [ 2456.716083][ T626] wireguard2: entered allmulticast mode [ 2457.598122][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 2457.598137][ T29] audit: type=1326 audit(2000000378.080:56675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.682378][ T29] audit: type=1326 audit(2000000378.110:56676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.706351][ T29] audit: type=1326 audit(2000000378.120:56677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.730134][ T29] audit: type=1326 audit(2000000378.120:56678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.753861][ T29] audit: type=1326 audit(2000000378.120:56679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.777586][ T29] audit: type=1326 audit(2000000378.120:56680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.801259][ T29] audit: type=1326 audit(2000000378.120:56681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.824948][ T29] audit: type=1326 audit(2000000378.120:56682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.848607][ T29] audit: type=1326 audit(2000000378.120:56683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2457.872483][ T29] audit: type=1326 audit(2000000378.120:56684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=642 comm="syz.4.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbef6def9 code=0x7ffc0000 [ 2458.124652][ T679] wireguard4: entered promiscuous mode [ 2458.130236][ T679] wireguard4: entered allmulticast mode [ 2458.869383][ T692] netlink: 80 bytes leftover after parsing attributes in process `syz.4.18188'. [ 2459.182225][ T724] wireguard0: entered promiscuous mode [ 2459.187873][ T724] wireguard0: entered allmulticast mode [ 2460.393420][ T781] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18220'. [ 2461.356167][ T817] syz.4.18233[817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2461.356358][ T817] syz.4.18233[817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2461.470095][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18233'. [ 2461.526129][ T825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2461.840274][ T856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18247'. [ 2462.069318][ T862] warn_alloc: 2 callbacks suppressed [ 2462.069335][ T862] syz.1.18251: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2462.089496][ T862] CPU: 0 UID: 0 PID: 862 Comm: syz.1.18251 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2462.101330][ T862] Tainted: [W]=WARN [ 2462.105312][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2462.115510][ T862] Call Trace: [ 2462.118794][ T862] [ 2462.121742][ T862] dump_stack_lvl+0xf2/0x150 [ 2462.121793][ T862] dump_stack+0x15/0x20 [ 2462.130675][ T862] warn_alloc+0x145/0x1b0 [ 2462.135096][ T862] ? __schedule+0x735/0x940 [ 2462.139624][ T862] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 2462.145599][ T862] __vmalloc_node_range_noprof+0xaa/0xec0 [ 2462.151392][ T862] ? __pfx_futex_wake_mark+0x10/0x10 [ 2462.156751][ T862] ? __rcu_read_unlock+0x4e/0x70 [ 2462.161751][ T862] ? avc_has_perm_noaudit+0x1cc/0x210 [ 2462.167204][ T862] ? xskq_create+0x36/0xd0 [ 2462.171693][ T862] vmalloc_user_noprof+0x59/0x70 [ 2462.176665][ T862] ? xskq_create+0x79/0xd0 [ 2462.181145][ T862] xskq_create+0x79/0xd0 [ 2462.185430][ T862] xsk_init_queue+0x82/0xd0 [ 2462.190029][ T862] xsk_setsockopt+0x409/0x520 [ 2462.194810][ T862] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2462.200081][ T862] __sys_setsockopt+0x1cc/0x240 [ 2462.204975][ T862] __x64_sys_setsockopt+0x66/0x80 [ 2462.210024][ T862] x64_sys_call+0x278d/0x2d60 [ 2462.214721][ T862] do_syscall_64+0xc9/0x1c0 [ 2462.219320][ T862] ? clear_bhb_loop+0x55/0xb0 [ 2462.224013][ T862] ? clear_bhb_loop+0x55/0xb0 [ 2462.228700][ T862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.234693][ T862] RIP: 0033:0x7f55c20bdef9 [ 2462.239121][ T862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2462.258953][ T862] RSP: 002b:00007f55c0d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2462.267405][ T862] RAX: ffffffffffffffda RBX: 00007f55c2275f80 RCX: 00007f55c20bdef9 [ 2462.275389][ T862] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 2462.283447][ T862] RBP: 00007f55c2130b76 R08: 0000000000000020 R09: 0000000000000000 [ 2462.291514][ T862] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 2462.299512][ T862] R13: 0000000000000000 R14: 00007f55c2275f80 R15: 00007fffb89a7888 [ 2462.307522][ T862] [ 2462.310598][ T862] Mem-Info: [ 2462.313858][ T862] active_anon:15420 inactive_anon:261 isolated_anon:0 [ 2462.313858][ T862] active_file:8780 inactive_file:22568 isolated_file:0 [ 2462.313858][ T862] unevictable:0 dirty:164 writeback:0 [ 2462.313858][ T862] slab_reclaimable:3271 slab_unreclaimable:26911 [ 2462.313858][ T862] mapped:56438 shmem:11761 pagetables:782 [ 2462.313858][ T862] sec_pagetables:0 bounce:0 [ 2462.313858][ T862] kernel_misc_reclaimable:0 [ 2462.313858][ T862] free:1823673 free_pcp:3266 free_cma:0 [ 2462.359264][ T862] Node 0 active_anon:61680kB inactive_anon:1044kB active_file:35120kB inactive_file:90272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225752kB dirty:656kB writeback:0kB shmem:47044kB writeback_tmp:0kB kernel_stack:3776kB pagetables:3128kB sec_pagetables:0kB all_unreclaimable? no [ 2462.387885][ T862] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2462.415095][ T862] lowmem_reserve[]: 0 2866 7844 0 [ 2462.420284][ T862] Node 0 DMA32 free:2950356kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953888kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 2462.449179][ T862] lowmem_reserve[]: 0 0 4978 0 [ 2462.454022][ T862] Node 0 Normal free:4328976kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:61680kB inactive_anon:1044kB active_file:35120kB inactive_file:90272kB unevictable:0kB writepending:656kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:9468kB local_pcp:8556kB free_cma:0kB [ 2462.484423][ T862] lowmem_reserve[]: 0 0 0 0 [ 2462.488985][ T862] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2462.502043][ T862] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950356kB [ 2462.518297][ T862] Node 0 Normal: 3*4kB (UME) 359*8kB (ME) 767*16kB (UME) 854*32kB (UME) 312*64kB (ME) 196*128kB (ME) 118*256kB (UME) 145*512kB (UME) 136*1024kB (UME) 76*2048kB (UM) 938*4096kB (UM) = 4328948kB [ 2462.537739][ T862] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2462.547078][ T862] 43342 total pagecache pages [ 2462.551811][ T862] 264 pages in swap cache [ 2462.556256][ T862] Free swap = 123296kB [ 2462.560403][ T862] Total swap = 124996kB [ 2462.564630][ T862] 2097051 pages RAM [ 2462.568568][ T862] 0 pages HighMem/MovableOnly [ 2462.573239][ T862] 80187 pages reserved [ 2462.695066][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 2462.695085][ T29] audit: type=1326 audit(2000000383.180:57033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.724826][ T29] audit: type=1326 audit(2000000383.180:57034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.734126][ T912] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18260'. [ 2462.748430][ T29] audit: type=1326 audit(2000000383.180:57035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.780978][ T29] audit: type=1326 audit(2000000383.180:57036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.804698][ T29] audit: type=1326 audit(2000000383.180:57037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.828471][ T29] audit: type=1326 audit(2000000383.180:57038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.852166][ T29] audit: type=1326 audit(2000000383.180:57039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.875746][ T29] audit: type=1326 audit(2000000383.180:57040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.899370][ T29] audit: type=1326 audit(2000000383.180:57041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.922877][ T29] audit: type=1326 audit(2000000383.180:57042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=911 comm="syz.1.18260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55c20bdef9 code=0x7ffc0000 [ 2462.972462][ T914] ebtables: ebtables: counters copy to user failed while replacing table [ 2463.273364][ T946] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2463.383308][ T966] wireguard0: entered promiscuous mode [ 2463.388947][ T966] wireguard0: entered allmulticast mode [ 2463.410266][ T975] FAULT_INJECTION: forcing a failure. [ 2463.410266][ T975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2463.423466][ T975] CPU: 0 UID: 0 PID: 975 Comm: syz.1.18283 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2463.435378][ T975] Tainted: [W]=WARN [ 2463.439190][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2463.449277][ T975] Call Trace: [ 2463.452642][ T975] [ 2463.455574][ T975] dump_stack_lvl+0xf2/0x150 [ 2463.460193][ T975] dump_stack+0x15/0x20 [ 2463.464433][ T975] should_fail_ex+0x229/0x230 [ 2463.469213][ T975] should_fail+0xb/0x10 [ 2463.473372][ T975] should_fail_usercopy+0x1a/0x20 [ 2463.478448][ T975] _copy_from_iter+0xd3/0xd20 [ 2463.483215][ T975] ? __build_skb+0x30/0x70 [ 2463.487733][ T975] ? should_failslab+0x8f/0xb0 [ 2463.492543][ T975] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 2463.498222][ T975] ? __build_skb_around+0x196/0x1f0 [ 2463.503498][ T975] ? __virt_addr_valid+0x1ed/0x250 [ 2463.508649][ T975] ? __check_object_size+0x35b/0x510 [ 2463.513991][ T975] netlink_sendmsg+0x460/0x6e0 [ 2463.518875][ T975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2463.524193][ T975] __sock_sendmsg+0x140/0x180 [ 2463.528956][ T975] sock_write_iter+0x15e/0x1a0 [ 2463.533740][ T975] vfs_write+0x76a/0x910 [ 2463.538007][ T975] ? __pfx_sock_write_iter+0x10/0x10 [ 2463.543301][ T975] ksys_write+0xeb/0x1b0 [ 2463.547560][ T975] __x64_sys_write+0x42/0x50 [ 2463.552263][ T975] x64_sys_call+0x27dd/0x2d60 [ 2463.557222][ T975] do_syscall_64+0xc9/0x1c0 [ 2463.561737][ T975] ? clear_bhb_loop+0x55/0xb0 [ 2463.566448][ T975] ? clear_bhb_loop+0x55/0xb0 [ 2463.571182][ T975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2463.577178][ T975] RIP: 0033:0x7f55c20bdef9 [ 2463.581814][ T975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2463.601435][ T975] RSP: 002b:00007f55c0d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2463.609916][ T975] RAX: ffffffffffffffda RBX: 00007f55c2275f80 RCX: 00007f55c20bdef9 [ 2463.617902][ T975] RDX: 000000000000fe33 RSI: 0000000020000040 RDI: 0000000000000003 [ 2463.625883][ T975] RBP: 00007f55c0d37090 R08: 0000000000000000 R09: 0000000000000000 [ 2463.633871][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2463.641923][ T975] R13: 0000000000000000 R14: 00007f55c2275f80 R15: 00007fffb89a7888 [ 2463.650016][ T975] [ 2463.916758][ T1009] netlink: 'syz.0.18294': attribute type 10 has an invalid length. [ 2463.924786][ T1009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18294'. [ 2463.934171][ T1009] team0: entered promiscuous mode [ 2463.939459][ T1009] team_slave_0: entered promiscuous mode [ 2463.945243][ T1009] team_slave_1: entered promiscuous mode [ 2463.951037][ T1009] team0: entered allmulticast mode [ 2463.956225][ T1009] team_slave_0: entered allmulticast mode [ 2463.961966][ T1009] team_slave_1: entered allmulticast mode [ 2463.970846][ T1009] bridge0: port 3(team0) entered blocking state [ 2463.977439][ T1009] bridge0: port 3(team0) entered disabled state [ 2463.985686][ T1009] bridge0: port 3(team0) entered blocking state [ 2463.992109][ T1009] bridge0: port 3(team0) entered forwarding state [ 2464.070897][ T990] chnl_net:caif_netlink_parms(): no params data found [ 2464.114062][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.121445][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.128800][ T990] bridge_slave_0: entered allmulticast mode [ 2464.135481][ T990] bridge_slave_0: entered promiscuous mode [ 2464.142891][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.150084][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.157747][ T990] bridge_slave_1: entered allmulticast mode [ 2464.164382][ T990] bridge_slave_1: entered promiscuous mode [ 2464.186207][ T990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2464.197609][ T990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2464.222917][ T990] team0: Port device team_slave_0 added [ 2464.233161][ T990] team0: Port device team_slave_1 added [ 2464.256198][ T990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2464.263322][ T990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.289718][ T990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2464.301856][ T990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2464.309062][ T990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2464.335125][ T990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2464.369437][ T990] hsr_slave_0: entered promiscuous mode [ 2464.375726][ T990] hsr_slave_1: entered promiscuous mode [ 2464.381804][ T990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2464.389440][ T990] Cannot create hsr debugfs directory [ 2464.458668][ T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2464.519642][ T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2464.595615][ T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2464.649784][ T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2464.750184][ T990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2464.759276][ T990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2464.768154][ T990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2464.777365][ T990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2464.830977][ T990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2464.846275][ T990] 8021q: adding VLAN 0 to HW filter on device team0 [ 2464.857810][T29299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.864921][T29299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2464.886334][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.893422][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2464.949249][ T990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2465.079468][ T1386] FAULT_INJECTION: forcing a failure. [ 2465.079468][ T1386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2465.083260][ T990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2465.092653][ T1386] CPU: 1 UID: 0 PID: 1386 Comm: syz.0.18306 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2465.111264][ T1386] Tainted: [W]=WARN [ 2465.115089][ T1386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2465.125165][ T1386] Call Trace: [ 2465.128455][ T1386] [ 2465.131399][ T1386] dump_stack_lvl+0xf2/0x150 [ 2465.136040][ T1386] dump_stack+0x15/0x20 [ 2465.140232][ T1386] should_fail_ex+0x229/0x230 [ 2465.144951][ T1386] should_fail+0xb/0x10 [ 2465.149130][ T1386] should_fail_usercopy+0x1a/0x20 [ 2465.154167][ T1386] _copy_to_user+0x1e/0xa0 [ 2465.158623][ T1386] simple_read_from_buffer+0xa0/0x110 [ 2465.164019][ T1386] proc_fail_nth_read+0xf9/0x140 [ 2465.169000][ T1386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2465.174584][ T1386] vfs_read+0x195/0x720 [ 2465.178748][ T1386] ? __rcu_read_unlock+0x4e/0x70 [ 2465.183713][ T1386] ? __rcu_read_unlock+0x4e/0x70 [ 2465.188703][ T1386] ? __fget_files+0x1d4/0x210 [ 2465.193396][ T1386] ksys_read+0xeb/0x1b0 [ 2465.197564][ T1386] __x64_sys_read+0x42/0x50 [ 2465.202078][ T1386] x64_sys_call+0x27d3/0x2d60 [ 2465.206768][ T1386] do_syscall_64+0xc9/0x1c0 [ 2465.211450][ T1386] ? clear_bhb_loop+0x55/0xb0 [ 2465.216150][ T1386] ? clear_bhb_loop+0x55/0xb0 [ 2465.220859][ T1386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2465.226792][ T1386] RIP: 0033:0x7ff83b4fc93c [ 2465.231227][ T1386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2465.250848][ T1386] RSP: 002b:00007ff83a156030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2465.259298][ T1386] RAX: ffffffffffffffda RBX: 00007ff83b6b6058 RCX: 00007ff83b4fc93c [ 2465.267277][ T1386] RDX: 000000000000000f RSI: 00007ff83a1560a0 RDI: 0000000000000009 [ 2465.275263][ T1386] RBP: 00007ff83a156090 R08: 0000000000000000 R09: 0000000000000000 [ 2465.283247][ T1386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2465.291222][ T1386] R13: 0000000000000000 R14: 00007ff83b6b6058 R15: 00007fff2e4e67b8 [ 2465.299207][ T1386] [ 2465.466649][ T990] veth0_vlan: entered promiscuous mode [ 2465.482164][ T990] veth1_vlan: entered promiscuous mode [ 2465.508455][ T990] veth0_macvtap: entered promiscuous mode [ 2465.517213][ T990] veth1_macvtap: entered promiscuous mode [ 2465.531643][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.542167][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.552333][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.563070][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.572904][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.583330][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.593509][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.604062][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.613960][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.624459][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.634476][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.644928][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.654786][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.665240][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.675178][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.685669][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.695533][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.706143][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.719451][ T990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2465.728999][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.739644][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.749485][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.759994][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.769832][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.780437][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.790369][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.800904][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.810770][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.821243][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.831178][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.841662][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.851592][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.862074][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.871979][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.882521][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.892385][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.902893][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.912717][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.923157][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.933021][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.943533][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.953407][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.964025][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.973895][ T990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.984677][ T990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.997731][ T990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2466.020280][ T990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.029238][ T990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.038163][ T990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.047055][ T990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.194356][ T1442] FAULT_INJECTION: forcing a failure. [ 2466.194356][ T1442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.207525][ T1442] CPU: 0 UID: 0 PID: 1442 Comm: syz.2.18318 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2466.219642][ T1442] Tainted: [W]=WARN [ 2466.223527][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2466.231975][ T1444] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18319'. [ 2466.233585][ T1442] Call Trace: [ 2466.233595][ T1442] [ 2466.233604][ T1442] dump_stack_lvl+0xf2/0x150 [ 2466.253523][ T1442] dump_stack+0x15/0x20 [ 2466.257719][ T1442] should_fail_ex+0x229/0x230 [ 2466.262421][ T1442] should_fail+0xb/0x10 [ 2466.266617][ T1442] should_fail_usercopy+0x1a/0x20 [ 2466.271679][ T1442] _copy_from_user+0x1e/0xd0 [ 2466.276396][ T1442] copy_msghdr_from_user+0x54/0x2a0 [ 2466.281629][ T1442] __sys_sendmsg+0x171/0x270 [ 2466.286324][ T1442] __x64_sys_sendmsg+0x46/0x50 [ 2466.291179][ T1442] x64_sys_call+0x2689/0x2d60 [ 2466.296039][ T1442] do_syscall_64+0xc9/0x1c0 [ 2466.300561][ T1442] ? clear_bhb_loop+0x55/0xb0 [ 2466.301530][ T1446] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18320'. [ 2466.305266][ T1442] ? clear_bhb_loop+0x55/0xb0 [ 2466.305309][ T1442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2466.305407][ T1442] RIP: 0033:0x7f80b99cdef9 [ 2466.305427][ T1442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2466.349076][ T1442] RSP: 002b:00007f80b8641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2466.357491][ T1442] RAX: ffffffffffffffda RBX: 00007f80b9b85f80 RCX: 00007f80b99cdef9 [ 2466.365481][ T1442] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2466.373450][ T1442] RBP: 00007f80b8641090 R08: 0000000000000000 R09: 0000000000000000 [ 2466.381437][ T1442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2466.389405][ T1442] R13: 0000000000000000 R14: 00007f80b9b85f80 R15: 00007ffcacf7a288 [ 2466.397381][ T1442] [ 2466.781762][ T1482] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2467.011141][ T1504] wireguard2: entered promiscuous mode [ 2467.016709][ T1504] wireguard2: entered allmulticast mode [ 2467.085387][ T1513] netlink: 'syz.1.18338': attribute type 4 has an invalid length. [ 2467.353957][ T1515] ebtables: ebtables: counters copy to user failed while replacing table [ 2467.764803][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 2467.764820][ T29] audit: type=1326 audit(2000000388.250:57597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.18342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b99cdef9 code=0x7ffc0000 [ 2467.801873][ T29] audit: type=1326 audit(2000000388.250:57598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.18342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f80b99cdef9 code=0x7ffc0000 [ 2467.825683][ T29] audit: type=1326 audit(2000000388.250:57599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.18342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b99cdef9 code=0x7ffc0000 [ 2468.047767][ T29] audit: type=1326 audit(2000000388.530:57600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.074218][ T29] audit: type=1326 audit(2000000388.530:57601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.098048][ T29] audit: type=1326 audit(2000000388.530:57602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.122035][ T29] audit: type=1326 audit(2000000388.530:57603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.145842][ T29] audit: type=1326 audit(2000000388.530:57604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.169752][ T29] audit: type=1326 audit(2000000388.610:57605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.193673][ T29] audit: type=1326 audit(2000000388.610:57606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1558 comm="syz.0.18347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83b4fdef9 code=0x7ffc0000 [ 2468.200611][ T1552] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2469.134182][ T1593] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2469.312825][ T1601] ebtables: ebtables: counters copy to user failed while replacing table [ 2469.528071][ T1599] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 2469.771100][ T1632] netlink: 'syz.1.18370': attribute type 4 has an invalid length. [ 2469.832223][ T1636] wireguard0: entered promiscuous mode [ 2469.837837][ T1636] wireguard0: entered allmulticast mode [ 2469.894017][ T1641] ebtables: ebtables: counters copy to user failed while replacing table [ 2470.772432][ T1700] xt_hashlimit: invalid rate [ 2470.800675][ T1700] netlink: 'syz.1.18385': attribute type 4 has an invalid length. [ 2470.965856][ T1695] ================================================================== [ 2470.973984][ T1695] BUG: KCSAN: data-race in __filemap_add_folio / sync_bdevs [ 2470.981324][ T1695] [ 2470.983738][ T1695] read-write to 0xffff8881004c24b0 of 8 bytes by task 2929 on cpu 0: [ 2470.991815][ T1695] __filemap_add_folio+0x439/0x710 [ 2470.996947][ T1695] filemap_add_folio+0x9c/0x1b0 [ 2471.001830][ T1695] __filemap_get_folio+0x2f1/0x5b0 [ 2471.006957][ T1695] bdev_getblk+0x173/0x3b0 [ 2471.011395][ T1695] jbd2_journal_get_descriptor_buffer+0xcf/0x210 [ 2471.017747][ T1695] jbd2_journal_commit_transaction+0xc03/0x33e0 [ 2471.024013][ T1695] kjournald2+0x20b/0x3c0 [ 2471.028353][ T1695] kthread+0x1d1/0x210 [ 2471.032468][ T1695] ret_from_fork+0x4b/0x60 [ 2471.036906][ T1695] ret_from_fork_asm+0x1a/0x30 [ 2471.041688][ T1695] [ 2471.044012][ T1695] read to 0xffff8881004c24b0 of 8 bytes by task 1695 on cpu 1: [ 2471.051557][ T1695] sync_bdevs+0xd6/0x260 [ 2471.055819][ T1695] ksys_sync+0x8c/0xe0 [ 2471.059903][ T1695] __do_sys_sync+0xe/0x20 [ 2471.064237][ T1695] x64_sys_call+0x2693/0x2d60 [ 2471.068932][ T1695] do_syscall_64+0xc9/0x1c0 [ 2471.073439][ T1695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2471.079355][ T1695] [ 2471.081680][ T1695] value changed: 0x0000000000000a25 -> 0x0000000000000a26 [ 2471.088798][ T1695] [ 2471.091133][ T1695] Reported by Kernel Concurrency Sanitizer on: [ 2471.097286][ T1695] CPU: 1 UID: 0 PID: 1695 Comm: syz.0.18383 Tainted: G W 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 2471.109285][ T1695] Tainted: [W]=WARN [ 2471.113088][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2471.123158][ T1695] ==================================================================