last executing test programs: 2.965053116s ago: executing program 2 (id=652): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x500, &(0x7f0000003480)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0xfffffffffffffef6}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xfe6f) perf_event_open(&(0x7f0000010300)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095", @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ftruncate(r2, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800400000004000000002000000000d000000000004fc000000000000000000000105000000ff01000000000100000000000000000000000000000000000d000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 2.310559132s ago: executing program 4 (id=664): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in=@local}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {0x8}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@broadcast}}]}, 0x154}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@local, r5}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x429}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1d, &(0x7f0000000080)=""/29}, 0x90) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xfffeffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b57}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="cbceaec15e87d098a6ab9fd98dcb65496080cab938ef03b6b222724c820ee9a093b9f07807f1807b940d96ff5beb0544f49d7ffeca80e7656d7f2cb1ae020ac58c76798f47c7ac22416fec44e54a94f16195f7788e9f344d094adbd54211620bb1ca350fdcc87d3df65bf9952514f506c6733c4810c55c5939548dfcc7c0cfabe93cc48f875d5a513858bd7c998601225d31332cd01cfea3fe4141102504b91da8d52a299c688389992caaafddca6325e2001c25117c4a689d43b230de75ddb5cd42b6384ea2b9815d5c369766a6309fcad8606d", 0xd4}, {&(0x7f0000000040)="fc9412668e8c8308f9a3c3063fe48423d430f5aac09e190c1b", 0x19}, {&(0x7f0000000200)="58840f9d9e692827c7e5ca3f390eef38b1adf8812c1230a534db8e7d", 0x1c}, {&(0x7f0000000240)="892bb4fda36591dbc0ddecfab04d78d246c8bb6b257d9994210c3cac189190bc7da2b1de5961f8345fbd62a2a34083c372178bf3c034b4307bc6", 0x3a}, {&(0x7f0000000280)="2730550251cf04924cafcaf5a7c59a6b4911c0f78e56402705a2f778b4f5d356d3b403b7927396b771742ed3dd39a2b4ba727d6f48cddf4bd7d56550d08e0e7f2834f5cba0ab82e3b76c1b7ff9402828d0069d7849af63290429d0ca67fa99fa8bb4916ac3c001", 0x67}, {&(0x7f0000000300)="169526945a2c6c3d07dd7a47529ad18ea4c8d29f0e45e803e2100832677ca5b18726ae28893e58344891bbdfc5c685dd42f9ed863613aba46a7c1b47", 0x3c}], 0x6, &(0x7f00000003c0)=[@rthdr={{0x38, 0x29, 0x39, {0xb5, 0x4, 0x2, 0x40, 0x0, [@local, @mcast1]}}}], 0x38}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x7, @private1, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000440)="30cd20071723f55418", 0x9}], 0x1, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xc7}}, @hopopts={{0x80, 0x29, 0x36, {0x62, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xb5}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0xb, [0x7, 0x0, 0x7, 0x1, 0x80000000, 0x2, 0x8ddb]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xe8, 0x29, 0x37, {0x0, 0x1a, '\x00', [@generic={0x0, 0xb8, "570117fed398d30c9fae85126858a52426585f6444d41a8965fe1507e8e3b0334f04a50d795da4ac55eaa1468c3d3e574a35acbb3b8a60f3e0794fed3fa3abd4251ca190936eba2f25c77197658cb8b4fe6e03bf3429ab9c8a687461d8de68c4c61e521ff14053bc80cf941883ca7b06d1c35a4f0a1d23c266da9cbf20f74187595c0cad8a7cf08fdc6fe40211e6c47f8fad4faff235361cb7a8b3dba4a4c8b984e2fc33b21d79acf4d45fec9b46c9840dfdb52b018211b3"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra]}}}, @dstopts_2292={{0x180, 0x29, 0x4, {0x5c, 0x2c, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x50, 0x7b, "052e13b92b917c22785c9f0fa3359ca3d6906d492280a8db7104a60a472d9ddd560b80dec790d26c7f696bca09072e8aeaf9e9d3c75b433bc00462a1ff5417faa554ef1bff24feaf1e2b4a5d8c6b4810e9522bc8b99be1cf3059af0d7d15dd43afb3851e13e65eef44d3704fc21dcd8b7b813a75ed2f9f1397ef25"}, @pad1, @generic={0x4, 0xd0, "7d6844e85cf9b23902b124c402e3929491864db8eccc084dea93541ae4b9b71d67eaeea9378a60c94355e412bac8d02b222eabbcd065f371ed7716698e8c7606b65c7738308e6b64496492a06a29a6fb7dd08369c5c91d1670efa7de08ece22f7f3e6f28e1e8cf2a25e0ed843783f67af0e9e5aab8674910a365a19ae86c0d6f5d5d80b03b985e0abeee959984ed819cbae741108553467da727c72bf1bb2986fa319876b3ef92eccd4917dbd2d6038a0a0b54e7286c3d2c1599c172d36e5641262d03c05c6eb7e27903d8f4b4339ea2"}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x300}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x2, @private1, 0x80}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000800)="1243d3825173c0c7721f369daa04d076bf6d6b7e30e1ac1903e65fb04e099a08753633963a9e00aa5d9822f2ef311f92593c04edc92326790a2a6ada19319587be8fedecccb3c21a76008bbbe384dda322428ae50a7690a1e4cc18d3d9aa3c71092ff0c54e9dc2c3bc8149edab897371590ebda689ce488d4ba34eaac6e500e5c6bedd52869d74629b4843b8f5a577885e68fcbabe0c50b6e6584f07bd9a9239613d716399ed9a5e8932481bdd93c30ef475c9273c25321b886766d02d7998852870f7d7d1790120778d5c32a06c60fb088b", 0xd2}, {&(0x7f0000000900)="3f16bbd621dc37ed466353f9e34757ce241a95c83f1cf8abfa2aae9bd0565a8af06c57eb5a5fc8465a6adf5ffb100d85431f48a5af0366cef4b816bc0b2da64aadb6fc877681d89dfe1bcb1b135d867d54df5c382f30bc3db952abf1c861fb50d680d0dbb6482f70040e62410cc12300af8115bddd9bba9c36fe20033fc963dafb52d5b166257c24019f26e74713074d4f5fed9b97061a85fd6f3f549bc4824b9b55af8fc5cf3480ffa4572b102b259178788018ac6c91ffaaf7bbae96", 0xbd}, {&(0x7f00000009c0)="325a44c78fb9312f0c0e0514d46eb2163645814452bd986b503afd630838ef331c565f27a649b90b8471cbfbd7a44865ac4e130357918bb11bfecf081eebe7c1b724ba87c19eff974207496815fae1c63eef5254342c9a2582dfe7407a80013e0f34a0e90fbdc32073251b6ac556518b23671f477e472d125d353cb562851a18d9", 0x81}, {&(0x7f0000000a80)="e2db19ff90678c85124c53d44d6d126a3e59fbdb75f3d0ffb9b6f124f0a5c2d92137f54b487e91940230d1bfcb51d68999b475fc710dfef270c97571ddd4c7ad5aa2884529081064d7c21bd69bc3c5f5e803cf80f5775f9452c543e9fa6962d4fa4754242005e5758732ff214c45b347b1b8be659f92fd942ffef548b7f182aa828685c29432b64a9c83b6b3444cd144524b9db60daf31489eb97928a7d82a4e5c269643a8c2442c54cd868cf6e013e17194f4427e", 0xb5}, {&(0x7f0000000b40)="b97d2e16ae399ab752025870b100c48ee57172853519bf02cb7994a50eca66b164d0b9ee16f4d6aaa33cea34b8bc4024b2de19eed86dbed2312a9a57e3821a9134ec9276be3fef86ad4e74a6aae35dadad3a57931afaa2d611147c865f8b6f17097b0a93eb094334467646413ec8ecb4461084153f866e01f61ae3ef76f71961eb5cbac22c233c30e961fad066516df9027d4fb891257a76b0c0717dfd40c51b917d0dc88d974b3c77c0a1ce9cc19273f1d94398c957a29105b7840e76cbf7add68383d5a11c216990e128c37402d40a5653ffa5caccaf5f463d", 0xda}], 0x5, &(0x7f0000000cc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000000d40)={0xa, 0x4e24, 0xfffffff6, @loopback, 0x4}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000d80)="d8b1a614f4e7d620dc06de0fa68f2f514623e30102686daf5b78e6f3a4e07ae04fbcfca9a0b413df3a2016e6f033973829673ca83a6fb520495da21236453895651cea361fc8af7df1367c523ec4d243471839ff90a57aeb7c9995fc0eb8d582637511acbf8da8f48512ea4148823d", 0x6f}], 0x1, &(0x7f0000000e40)=[@hopopts={{0x140, 0x29, 0x36, {0x62, 0x25, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x0, [0x64, 0x10, 0x0, 0xaf]}}, @ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8a, 0x72, "9c16c16dc04b29e2fe343d8b30c3c9fa02cd8d0860f9dda8434e2677a6bb1e06dd9ad072f544d3cbc4dc79927a0902ce824cc4d1180db82fd6f976ca0fe73b394f6515b4c8ea3f9e900133ea696d08a99bcc9a985d9e13f0f7656895ed2191700bb486e46a50dafc27c69711d9d4cca9a695"}, @calipso={0x7, 0x50, {0x2, 0x12, 0x80, 0x0, [0x1, 0x1000, 0x1, 0x400, 0x9, 0x366b, 0xe0cb, 0xbb, 0x5]}}, @generic={0x7, 0x28, "77d74ddd09b7ba89f3595855ccd8583c59e702b54a155485614bbb454f36280109b2a0a859111ed9"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r5}}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x0, 0xfa, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x200}}], 0x4, 0x4040810) 2.211355551s ago: executing program 1 (id=665): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="c4e535af9c85633a11e5779033427150650503a924f25ba52ba6935302205afb39e96f6387d5c588b80cdfaed9820ccdf7e36a9dcac7efbec76cf9599becb2fc8075513e0a00bf289ec231e44923d127e0ebc3b6f115", 0x56}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1.456879455s ago: executing program 3 (id=672): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x7}, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd4, &(0x7f0000000500)=""/212, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x6, 0xac56, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x1], &(0x7f00000001c0)=[{0x2, 0x4, 0x1, 0x5}, {0x0, 0x1, 0x8, 0x2}], 0x10, 0x7fff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20, 0x6, 0x7fffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 1.354284934s ago: executing program 4 (id=673): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0x8, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1}, 0x10) syz_emit_ethernet(0xbad, &(0x7f0000000c40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xb77, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @remote, [{0x1f, 0x7, "ad87f413f8241cc4be08ed9073dd39e448c67330fb1a59b1532283f0a33e6dec2b5b32a9bf394d7b067bd053730f417199afde175cf4a3b1"}, {0x2}, {0x22, 0x2, "d3155853001a89201ad921bbd6e5bd63b157"}, {0x22, 0x18, "5252b40b143a45d8ad0bf28065b4133364e0759e27435a131c271608d65a9e4a5fd3e18f33a223a9c2e3e3183ad107e04e67f5a6097e58a9fe21f93b02911a8e05ff51670c1c583be2506b9acc93870c699bf5bf290d6faf01e07c0ab2fd094583b414bd1bdbb143f89e88256d337f64250b4522b4c41d885a3df90023194006f0dbabe619af9738700a540c5d554258ea131edcd0f53adbc969033028b6ee19489aece333651a0650a723d0380f80c3bdc6d690058b2de469cdbc2a5ea1f90127"}, {0x1, 0x147, "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"}]}}}}}}, 0x0) munmap(&(0x7f0000b05000/0x2000)=nil, 0x2000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="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"/353, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64], 0x0, 0x0, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r2, 0x141601) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000030000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) 1.354005444s ago: executing program 1 (id=674): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x2b}, 0x90) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x7f, 0x4, 0x12, 0x0, r4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map, 0x11, 0x1, 0x80000000, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r4, 0x26, 0x1, r2, @link_id, r6}, 0x20) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000040)={[{@shortname_winnt}, {@shortname_winnt}, {@fat=@flush}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") (async, rerun: 64) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r7, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40}}, 0x40) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000180)={0xa, &(0x7f00000002c0)=[{0x7, 0xd, 0x83, 0x4}, {0x81, 0x0, 0x7, 0x80}, {0x4, 0x6, 0x5b, 0x1}, {0x1ff, 0x1, 0x5, 0x9}, {0x7fc, 0x7, 0x4, 0x1fef}, {0x3b76, 0x74, 0x2, 0x1ff}, {0x1fdf, 0x6, 0x4, 0x6}, {0x4, 0x0, 0x9, 0x3}, {0x3, 0x7, 0x2, 0x4}, {0xa3f0, 0xd, 0x5a, 0x2}]}, 0x10) (async, rerun: 64) close(r9) (async, rerun: 64) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) 1.310470288s ago: executing program 1 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000000c0)="971bb7b33b2edda3", 0x24}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) splice(r0, 0x0, r2, 0x0, 0xe8, 0x0) 1.013225433s ago: executing program 3 (id=678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (fail_nth: 44) 890.466644ms ago: executing program 0 (id=679): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000e000", @ANYRESHEX, @ANYBLOB="8bf200000000000000001f000000"], 0x14}}, 0x20008000) 890.088624ms ago: executing program 1 (id=680): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001340)={0x0, 0x0}) prlimit64(r0, 0x6, &(0x7f00000013c0)={0x81, 0x40000008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000340)={0x0, 0xae4b, 0x10108}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0}) (async) io_uring_enter(r2, 0x569, 0x0, 0x0, 0x0, 0x57) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth1\x00'}) (async, rerun: 32) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0x80045300, 0x0) tkill(r6, 0x7) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x34) (async) write$UHID_INPUT(r8, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) 889.845524ms ago: executing program 0 (id=681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0xf2, &(0x7f0000000200)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0xba36}, {0x102b}, {0x3, 0x0, 0x1}, {0x2}], @llc={@llc={0x1, 0xaa, "020f", "2a7f0825ed1db971c6818c14faed96aaa18c6230a8683c0164f5d67b76e20e83f570af3216791f97a36dea47d05592c0e1eec37750ae0fba4948f7f964d1915a4bcd154840277fa863a444af06afdb1b1c9c88c395bd44f8df1aebef256fdf9be922c34bb868531a8c5cbb4ea1b0014dffee70708d3515bbee28df4b5ec1271906864014003d8bb05dc76edc62c8171a23bb21a29e19bff92f89d7522a1410f3f779a391cf36083b3c8c10bb81139520802f8d7ea3423917ee361a8986cddb76f5b9074cad2fe38cc37b4be36279f084"}}}}}}, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000025000100000000040000000003"], 0x18}], 0x1}, 0x0) 728.692328ms ago: executing program 3 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) inotify_init1(0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file1\x00', 0x98200, 0x1d4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5b0, 0xfffa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYRESOCT=r3, @ANYRES8=r2], 0x154}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7ffbe1ffffff0000000005"], 0x14}, 0x1, 0xf00000000000000}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000710000100"/20, @ANYRES32=r8, @ANYBLOB="10400000000000001400350069705f7674693000000000000000000008000f0000020000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) 691.371271ms ago: executing program 3 (id=684): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000018000100000000000000000a80"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r5, &(0x7f0000000000)=""/178, 0xb2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 664.826073ms ago: executing program 3 (id=685): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)) 610.480078ms ago: executing program 1 (id=686): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800451e0001ac1414aa0300907803000000450001000000000000000000ac1414aaac141400867100000000000ce256b28c599d1681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a0200a5e97612fe86001273bc2300ad9d19a30000000000000000000cc8f46976e79e56c7a95e860c0000000000067f36c52500"/190], 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) write$cgroup_int(r3, &(0x7f0000000240)=0x2000000040004, 0x12) 610.240128ms ago: executing program 3 (id=687): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='sctp_probe_path\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x9, 0x4) bind$can_raw(r2, &(0x7f0000000040), 0x10) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000180)='./file0\x00', 0x100400, &(0x7f0000000280)=ANY=[@ANYBLOB="1dadd7d04a27b3e138b2fa9fcee7dc203e9b742f38b1b3a3f8d3c6e335ded8cf1fb1292fffe2783a29f342bed4f6b0512d2cac04c960dadbf5bb798ccb26b36a1eb9e5cacfe86c9b76ea1a3f7b31fee35d4a82141f45de5a330a847564664a68b009ff72a69593217eef339f66b8fe66b13187ab1f302bd0918a5770de0ad596068b1cbeeb6f82a2219cf7b17bf4ecf850f6be711a9de2ed98e7a4140de772076bf7a411f99de5dcc749bbc3b0bd2249c91675481e1b6869d820f468a83a8bc7f14d35dc72d940ae6e1ab2f5f4844d88c43fece7a4752974df2017"], 0xb, 0x0, &(0x7f0000000280)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f0000000200)}) 609.957018ms ago: executing program 1 (id=688): prctl$PR_GET_TSC(0x19, &(0x7f0000000540)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r1, r0, 0x0, 0x6) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r4, 0x5385, 0x1000000000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='memory.events\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x7fb1b4f1dfb23c4b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) openat$cgroup_ro(r5, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x1d, 0x0, &(0x7f0000000080)) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d}) syz_io_uring_setup(0x159f, &(0x7f0000000200)={0x0, 0x3cc0, 0x400, 0x3, 0xc4}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0x10, 0x0, r5, 0x9, &(0x7f0000000400)="828b5531583bb5aedd57b5f7276a9398b7bb95d80ec0bc3dcdbe4aa8cfddf13bbe7de602d715f7be1bc6de7f43d61a580956bb2a8cfab1be8bb80cdb194b1bc84868a6884b5b06cef11523479a7edcf6d5ff3ebafe6922d31963120998a9a76713f3c9cd41d6a5", 0x67, 0x0, 0x1, {0x0, r10}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) fchown(0xffffffffffffffff, r11, 0xee00) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r2}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x65, 0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78]}}, {@size={'size', 0x3d, [0x74, 0x65, 0x74, 0x78, 0x31, 0x37, 0x74, 0x6b]}}], [{@euid_gt={'euid>', r3}}, {@uid_lt={'uid<', r11}}]}) 563.141182ms ago: executing program 4 (id=689): semtimedop(0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xb, 0x11, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x46d8d000) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbb, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@remote, @private, 0x0, "60f5bd6e0630e369c7b35d2fff1f4d7ed79c31b0f1da00"}, 0x3c) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20e2bbea", @ANYRES16=r8, @ANYBLOB="030000000000000020007e0000000c81000000f1000000000000"], 0x20}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r10}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000d40)={0x3c8, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3a7, 0x33, @reassoc_resp={{{}, {}, @device_a, @device_a, @from_mac}, 0x831, 0x3a, @default, @val={0x1, 0x4, [{0x60}, {0x36}, {0x18, 0x1}, {0x18}]}, @val={0x2d, 0x1a, {0x300, 0x2, 0x7, 0x0, {0x44, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x101, 0x4}}, [{0xdd, 0xba, "b844613649a9a54200f3b1afb1adb1eb314eb006ecb91fd9cc78e85acc9baf6478b32011caa659b3009e657d6a9c47538d3e2d70487be25441bb9b49dfc809366c95e0048b2bb794ae99a9f85e5bb0fb1db9710ef01f7614bf93b29cccd3f24e278187829c3c33a507bbb90d8f920b4484946f1e6eab306b25c6d3d1062c88c1c6fc77863fee7e45282305c804de56cd0ffc90b1c62020a77bb3e676aa3c12f56dfbe72ee403e442877d877a761e1abe63e0f1569b2bdc02acbc"}, {0xdd, 0xcc, "66b44934c943b89d73723b8c720121452ce637d036a06cb1c4af5299479d17bd2742ebca3a55f9586a55d5fb78016e9254d2cbd10f378a0384cf254ac6a2e3838e8a21d04cacfc5e16c5794b7dc9a71a4a418a0d0e0e33bd670ad3a03ad74cc3e430b3d40ba6726c5b51938a2f4da20946f3d74b52fd40a036b77c2457eb1e33d07c6e3dc528aefbebd2cad0481150a6c8ae71837fc5917e0ce1d4b05fb3df99522794bfe5c58769cc60a0a19349db64b1408df504b698a1cd3b7b65c1b6613c8a497faa9296b2f8fe680b65"}, {0xdd, 0xd0, "de6aca87a832a1611a2ee2356242348e0d1f4961a323073f73c5469ffb2e854d21cdff263d580a9d1c3e6d8fb7496b53a4843e31153d686239c97679c15a023d7d76b6c4e05f104d5999548d69f0ff842ff8aceaa5662b6f937a76dc65d7c846e61430d5ef93e57b22a5e58288aeeeb841df46a4f676034d3bb84d6aa626bc634ddf6fe5f7b2841d6f582e9e3feb38a411e69f20c37d53e5f3d625d2d750cf60770b274fc7e8e46c25eaadb37b7fbf8cb386b43f17c4441ec170456e6a38c82544ed2039268020c088a2a8bd1f77a962"}, {0xdd, 0x59, "e4bb2c24079171be91865d109e11e8022e8078059f54e1b5ba6c3c43ad5417d151579b5d6a984032b9e6020909ef7ab7bac82675ebf3b499b1eb2db7d601734bcf13d3ea3510b3d8da93bdf32facc6915751c39a1bfe0778e3"}, {0xdd, 0x5a, "5220141c26a7c5daa7da4fe3744a7157fae6afc8c2c6845cd70d6a359b3f942b096a06377dc157e64f3bd7df7cb06fb8036285c6bce63617f18fb421f2904c4d7383f90a9ed1d6c1ca7e06e76cff102864d65b9daa85e7cc9f79"}, {0xdd, 0x4e, "2648e339ca0228a3ae3a6b2191e193ba4ed9646942f110400c7dd0f81e705764e904a9a228bf1a74678c88baddf18a1de23cd67bc0a82b7ded51e08552854e4e4f47a2909590350c1b4cb3ce0ff1"}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 547.828453ms ago: executing program 0 (id=690): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x7}, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd4, &(0x7f0000000500)=""/212, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x6, 0xac56, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x1], &(0x7f00000001c0)=[{0x2, 0x4, 0x1, 0x5}, {0x0, 0x1, 0x8, 0x2}], 0x10, 0x7fff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 466.37244ms ago: executing program 2 (id=691): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x7}, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xd4, &(0x7f0000000500)=""/212, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x6, 0xac56, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x1], &(0x7f00000001c0)=[{0x2, 0x4, 0x1, 0x5}, {0x0, 0x1, 0x8, 0x2}], 0x10, 0x7fff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20, 0x6, 0x7fffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 466.00101ms ago: executing program 4 (id=692): r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000018119601633c2f9716fa9b89aa000000000c000000efffffff090000ed0300000000"], 0x0, 0x2d}, 0x20) unshare(0x4a040200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000130001"], 0x24}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket(0x21, 0x3, 0xfffffffe) r7 = socket(0x28, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000bc0)) pselect6(0x40, &(0x7f0000000280)={0x6, 0x2f, 0x0, 0x0, 0x81, 0x9, 0x0, 0xfffffffffffffff0}, &(0x7f00000003c0)={0x5, 0x1, 0xa, 0x8, 0x0, 0x49f}, 0x0, &(0x7f0000000580)={0x77359400, 0x0}, &(0x7f0000000680)={&(0x7f00000005c0)={[0x6]}, 0x8}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x81, '\x00', 0x0, r3, 0x1, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x15, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r9, @ANYRES8=r5, @ANYRES64=r9, @ANYRESDEC=r6, @ANYRES64=r5, @ANYRES8=r8, @ANYRES64=r6], 0x0, 0xfffffff0, 0xa7, &(0x7f0000000940)=""/167, 0x40f00, 0xe8, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[{0x2, 0x3, 0x5, 0xb}]}, 0x90) listen(r7, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x1d0, 0x11, 0x148, 0x1d0, 0x0, 0x2f0, 0x2a8, 0x2a8, 0x2f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x3ff, 0x6, 0xd, 0x25fb, 0x4}) r10 = gettid() r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x428, 0x1d8, 0xd0, 0xd0, 0x1d8, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x20004010) 366.462749ms ago: executing program 0 (id=693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000000c0)="971bb7b33b2edda3", 0x24}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) splice(r0, 0x0, r2, 0x0, 0xe8, 0x10080000) 365.868329ms ago: executing program 2 (id=694): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) (async) fchdir(r0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/packet\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x6611, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async) socket$inet_udplite(0x2, 0x2, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0xfffffff5) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r9, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000340), 0x8) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4d010000190001000000000000000000ffffffffffff00000000000000000000fc02000000000000000000000000000000000000020000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 360.49404ms ago: executing program 4 (id=695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (fail_nth: 45) 121.77248ms ago: executing program 2 (id=696): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000018000100000000000000000a80"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r5, &(0x7f0000000000)=""/178, 0xb2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 102.638741ms ago: executing program 4 (id=697): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="400000007d0100000039000500060000008002000000070000000000c0c821c10bd9c1fd0b4fcf00ec000014820400000004000000020000000000000004003a252c7e02007d5100000000"], 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x258, 0xb76c}, &(0x7f0000000400)=0x8) dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={0x400, 0x4}) 86.699193ms ago: executing program 2 (id=698): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd811000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") 2.4049ms ago: executing program 0 (id=699): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='Y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)="a6", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001c80)=ANY=[@ANYRES32=0x0, @ANYBLOB='\v'], 0x8) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)) 2.068361ms ago: executing program 0 (id=700): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) prlimit64(0x0, 0x8, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1}, 0x10) syz_emit_ethernet(0xbad, &(0x7f0000000c40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xb77, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @remote, [{0x1f, 0x7, "ad87f413f8241cc4be08ed9073dd39e448c67330fb1a59b1532283f0a33e6dec2b5b32a9bf394d7b067bd053730f417199afde175cf4a3b1"}, {0x2}, {0x22, 0x2, "d3155853001a89201ad921bbd6e5bd63b157"}, {0x22, 0x18, "5252b40b143a45d8ad0bf28065b4133364e0759e27435a131c271608d65a9e4a5fd3e18f33a223a9c2e3e3183ad107e04e67f5a6097e58a9fe21f93b02911a8e05ff51670c1c583be2506b9acc93870c699bf5bf290d6faf01e07c0ab2fd094583b414bd1bdbb143f89e88256d337f64250b4522b4c41d885a3df90023194006f0dbabe619af9738700a540c5d554258ea131edcd0f53adbc969033028b6ee19489aece333651a0650a723d0380f80c3bdc6d690058b2de469cdbc2a5ea1f90127"}, {0x1, 0x147, "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"}]}}}}}}, 0x0) munmap(&(0x7f0000b05000/0x2000)=nil, 0x2000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="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"/353, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64], 0x0, 0x0, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r2, 0x141601) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000050000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) 0s ago: executing program 2 (id=701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0xf2, &(0x7f0000000200)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0xba36}, {0x102b}, {0x3, 0x0, 0x1}, {0x2}], @llc={@llc={0x1, 0xaa, "020f", "2a7f0825ed1db971c6818c14faed96aaa18c6230a8683c0164f5d67b76e20e83f570af3216791f97a36dea47d05592c0e1eec37750ae0fba4948f7f964d1915a4bcd154840277fa863a444af06afdb1b1c9c88c395bd44f8df1aebef256fdf9be922c34bb868531a8c5cbb4ea1b0014dffee70708d3515bbee28df4b5ec1271906864014003d8bb05dc76edc62c8171a23bb21a29e19bff92f89d7522a1410f3f779a391cf36083b3c8c10bb81139520802f8d7ea3423917ee361a8986cddb76f5b9074cad2fe38cc37b4be36279f084"}}}}}}, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000025000100000000000100000003"], 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): _to_sid (root) failed with errno=-22 [ 31.273273][ T3661] syz.4.107[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.273363][ T3661] syz.4.107[3661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.316623][ T3669] bridge_slave_1: left allmulticast mode [ 31.333633][ T3669] bridge_slave_1: left promiscuous mode [ 31.339250][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370959][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 31.394728][ T3674] syz.4.114 (3674) used greatest stack depth: 10776 bytes left [ 31.423215][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 31.604341][ T3700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.680220][ T1737] tipc: Subscription rejected, illegal request [ 31.778510][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 31.787818][ T3717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 31.989836][ T3727] loop4: detected capacity change from 0 to 512 [ 32.066126][ T3732] tmpfs: Unsupported parameter 'huge' [ 32.093672][ T3727] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.134: bad orphan inode 15 [ 32.104375][ T3727] ext4_test_bit(bit=14, block=18) = 1 [ 32.109826][ T3727] is_bad_inode(inode)=0 [ 32.114053][ T3727] NEXT_ORPHAN(inode)=1023 [ 32.118430][ T3727] max_ino=32 [ 32.121614][ T3727] i_nlink=0 [ 32.125387][ T3727] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2978: inode #15: comm syz.4.134: corrupted xattr block 19: e_value size too large [ 32.143833][ T3727] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 32.153905][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.166028][ T3727] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.377336][ T3754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.387033][ T3754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.462856][ T3754] random: crng reseeded on system resumption [ 32.688665][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.741268][ T3761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.773835][ T3761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.042641][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 33.042656][ T29] audit: type=1400 audit(1724346430.119:310): avc: denied { map } for pid=3763 comm="syz.0.151" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.072904][ T29] audit: type=1400 audit(1724346430.119:311): avc: denied { execute } for pid=3763 comm="syz.0.151" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.098567][ T3766] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 33.265251][ T3780] loop2: detected capacity change from 0 to 512 [ 33.273252][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.379691][ T3780] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 33.415672][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.717898][ T3793] loop3: detected capacity change from 0 to 1024 [ 33.727535][ T3793] EXT4-fs: Ignoring removed oldalloc option [ 33.739414][ T3793] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.755878][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.769962][ T29] audit: type=1400 audit(1724346430.859:312): avc: denied { read write } for pid=3792 comm="syz.3.165" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.800498][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.810982][ T29] audit: type=1400 audit(1724346430.879:313): avc: denied { open } for pid=3792 comm="syz.3.165" path="/17/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.833982][ T29] audit: type=1400 audit(1724346430.879:314): avc: denied { rename } for pid=3792 comm="syz.3.165" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.522282][ T3800] loop3: detected capacity change from 0 to 1024 [ 34.536958][ T3800] EXT4-fs: Ignoring removed oldalloc option [ 34.550339][ T3800] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 34.576334][ T3800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.697726][ T3813] loop2: detected capacity change from 0 to 256 [ 34.787524][ T29] audit: type=1400 audit(1724346431.789:315): avc: denied { remount } for pid=3779 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.807143][ T29] audit: type=1400 audit(1724346431.839:316): avc: denied { ioctl } for pid=3799 comm="syz.3.166" path="/18/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.831477][ T29] audit: type=1400 audit(1724346431.849:317): avc: denied { map } for pid=3799 comm="syz.3.166" path="/18/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.854185][ T29] audit: type=1400 audit(1724346431.849:318): avc: denied { execute } for pid=3799 comm="syz.3.166" path="/18/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.973950][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.014123][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.037241][ T3819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'. [ 35.074461][ T3824] syzkaller1: entered promiscuous mode [ 35.079974][ T3824] syzkaller1: entered allmulticast mode [ 35.112339][ T29] audit: type=1400 audit(1724346432.189:319): avc: denied { write } for pid=3825 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.327589][ T3837] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 36.113017][ T3848] loop1: detected capacity change from 0 to 2048 [ 36.476384][ T3856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.539182][ T3856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.797228][ T3859] loop4: detected capacity change from 0 to 512 [ 36.814915][ T3859] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 36.827630][ T3859] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 36.839493][ T3859] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.187: bg 0: block 18: invalid block bitmap [ 36.852909][ T3859] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 36.862282][ T3859] EXT4-fs (loop4): 1 truncate cleaned up [ 36.869428][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.881680][ T3859] ext2 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.902284][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.022529][ T3869] vlan2: entered promiscuous mode [ 37.027607][ T3869] syz_tun: entered promiscuous mode [ 37.032920][ T3869] vlan2: entered allmulticast mode [ 37.038177][ T3869] syz_tun: entered allmulticast mode [ 37.069350][ T3869] syz_tun: left allmulticast mode [ 37.074490][ T3869] syz_tun: left promiscuous mode [ 37.301621][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.366751][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.578707][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 38.272081][ T3891] capability: warning: `syz.1.197' uses deprecated v2 capabilities in a way that may be insecure [ 38.309123][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 38.309137][ T29] audit: type=1400 audit(1724346435.389:331): avc: denied { mount } for pid=3894 comm="syz.2.200" name="/" dev="ramfs" ino=5210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.442583][ T29] audit: type=1400 audit(1724346435.519:332): avc: denied { create } for pid=3896 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.508318][ T29] audit: type=1400 audit(1724346435.549:333): avc: denied { connect } for pid=3896 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.614350][ T29] audit: type=1400 audit(1724346435.619:334): avc: denied { write } for pid=3896 comm="syz.3.201" path="socket:[5225]" dev="sockfs" ino=5225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.710621][ T29] audit: type=1400 audit(1724346435.739:335): avc: denied { getopt } for pid=3896 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.759339][ T3888] sched: RT throttling activated [ 38.973481][ T3892] kernel profiling enabled (shift: 17) [ 39.234235][ T29] audit: type=1400 audit(1724346436.249:336): avc: denied { bind } for pid=3883 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.452942][ T3919] loop2: detected capacity change from 0 to 256 [ 39.484236][ T3919] vfat: Bad value for 'dmask' [ 40.094467][ T29] audit: type=1400 audit(1724346437.169:337): avc: denied { setattr } for pid=3940 comm="syz.4.215" name="NETLINK" dev="sockfs" ino=5023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.185948][ T3944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.212415][ T3944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.219774][ T29] audit: type=1400 audit(1724346437.289:338): avc: denied { read } for pid=3945 comm="syz.3.217" name="event1" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.243179][ T29] audit: type=1400 audit(1724346437.289:339): avc: denied { open } for pid=3945 comm="syz.3.217" path="/dev/input/event1" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.267084][ T29] audit: type=1400 audit(1724346437.299:340): avc: denied { create } for pid=3947 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.324933][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.343940][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.457392][ C0] hrtimer: interrupt took 28113 ns [ 40.542411][ T3980] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.234'. [ 40.642272][ T3990] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 40.687304][ T4000] netlink: 'syz.2.242': attribute type 29 has an invalid length. [ 40.697207][ T4000] netlink: 'syz.2.242': attribute type 29 has an invalid length. [ 40.798908][ T4013] gretap0: entered promiscuous mode [ 40.809257][ T4013] netlink: 'syz.2.248': attribute type 2 has an invalid length. [ 40.817106][ T4013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.248'. [ 40.832251][ T4013] syz.2.248 (4013) used greatest stack depth: 10768 bytes left [ 40.835998][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 41.022140][ T4022] FAULT_INJECTION: forcing a failure. [ 41.022140][ T4022] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.035399][ T4022] CPU: 1 UID: 0 PID: 4022 Comm: syz.0.252 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 41.046051][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.056090][ T4022] Call Trace: [ 41.059363][ T4022] [ 41.062290][ T4022] dump_stack_lvl+0xf2/0x150 [ 41.066890][ T4022] dump_stack+0x15/0x20 [ 41.071081][ T4022] should_fail_ex+0x229/0x230 [ 41.075808][ T4022] should_fail_alloc_page+0xfd/0x110 [ 41.081108][ T4022] __alloc_pages_noprof+0x109/0x360 [ 41.086316][ T4022] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 41.091755][ T4022] folio_alloc_noprof+0xee/0x130 [ 41.096684][ T4022] filemap_alloc_folio_noprof+0x69/0x220 [ 41.102317][ T4022] __filemap_get_folio+0x298/0x5b0 [ 41.107420][ T4022] ? aio_setup_ring+0x1e4/0x6b0 [ 41.112265][ T4022] ? __kmalloc_noprof+0x2e8/0x370 [ 41.117288][ T4022] aio_setup_ring+0x266/0x6b0 [ 41.121957][ T4022] ioctx_alloc+0x2b2/0x4c0 [ 41.126410][ T4022] ? __schedule+0x5fa/0x950 [ 41.130931][ T4022] __se_sys_io_setup+0x6b/0x1b0 [ 41.135869][ T4022] __x64_sys_io_setup+0x31/0x40 [ 41.140752][ T4022] x64_sys_call+0x2639/0x2d60 [ 41.145449][ T4022] do_syscall_64+0xc9/0x1c0 [ 41.149949][ T4022] ? clear_bhb_loop+0x55/0xb0 [ 41.154621][ T4022] ? clear_bhb_loop+0x55/0xb0 [ 41.159332][ T4022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.165226][ T4022] RIP: 0033:0x7f1126889e79 [ 41.169627][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.189277][ T4022] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 41.197717][ T4022] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 41.205675][ T4022] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 41.213715][ T4022] RBP: 00007f1125501090 R08: 0000000000000000 R09: 0000000000000000 [ 41.221669][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.229743][ T4022] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 41.237769][ T4022] [ 41.348962][ T4029] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 41.350131][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 41.366801][ T4029] netlink: 'syz.0.255': attribute type 2 has an invalid length. [ 41.398266][ T4031] bridge_slave_0: left allmulticast mode [ 41.403974][ T4031] bridge_slave_0: left promiscuous mode [ 41.409829][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.419000][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'. [ 41.491326][ T4042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.501985][ T4042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.547985][ T4048] loop2: detected capacity change from 0 to 1024 [ 41.563454][ T4048] EXT4-fs: quotafile must be on filesystem root [ 41.586523][ T4048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.261'. [ 41.595555][ T4048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.261'. [ 41.766488][ T4063] FAULT_INJECTION: forcing a failure. [ 41.766488][ T4063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.779770][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.3.266 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 41.790463][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.800506][ T4063] Call Trace: [ 41.803772][ T4063] [ 41.806688][ T4063] dump_stack_lvl+0xf2/0x150 [ 41.811279][ T4063] dump_stack+0x15/0x20 [ 41.815448][ T4063] should_fail_ex+0x229/0x230 [ 41.820119][ T4063] should_fail_alloc_page+0xfd/0x110 [ 41.825491][ T4063] __alloc_pages_noprof+0x109/0x360 [ 41.830754][ T4063] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 41.836223][ T4063] folio_alloc_noprof+0xee/0x130 [ 41.841208][ T4063] filemap_alloc_folio_noprof+0x69/0x220 [ 41.846928][ T4063] __filemap_get_folio+0x298/0x5b0 [ 41.852120][ T4063] ? should_failslab+0x8f/0xb0 [ 41.856874][ T4063] ? __kmalloc_noprof+0x165/0x370 [ 41.861925][ T4063] aio_setup_ring+0x266/0x6b0 [ 41.866624][ T4063] ioctx_alloc+0x2b2/0x4c0 [ 41.871032][ T4063] __se_sys_io_setup+0x6b/0x1b0 [ 41.875900][ T4063] __x64_sys_io_setup+0x31/0x40 [ 41.880852][ T4063] x64_sys_call+0x2639/0x2d60 [ 41.885519][ T4063] do_syscall_64+0xc9/0x1c0 [ 41.890023][ T4063] ? clear_bhb_loop+0x55/0xb0 [ 41.894703][ T4063] ? clear_bhb_loop+0x55/0xb0 [ 41.899369][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.905280][ T4063] RIP: 0033:0x7f156ad29e79 [ 41.909676][ T4063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.929270][ T4063] RSP: 002b:00007f15699a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 41.937667][ T4063] RAX: ffffffffffffffda RBX: 00007f156aec5f80 RCX: 00007f156ad29e79 [ 41.945660][ T4063] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 41.953618][ T4063] RBP: 00007f15699a7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.961573][ T4063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.969598][ T4063] R13: 0000000000000000 R14: 00007f156aec5f80 R15: 00007ffe99b41588 [ 41.977644][ T4063] [ 42.028470][ T4072] pim6reg: entered allmulticast mode [ 42.034384][ T4072] pim6reg: left allmulticast mode [ 42.043336][ T4073] syz.4.267 uses obsolete (PF_INET,SOCK_PACKET) [ 42.066570][ T4070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.076909][ T4070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.093354][ T4075] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 42.112104][ T4075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 42.152437][ T4070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.159054][ T4081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4081 comm=syz.3.274 [ 42.162874][ T4070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.200020][ T4077] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 42.238888][ T4070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.249277][ T4070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.320892][ T4070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.331226][ T4070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.350109][ T4093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 42.359277][ T4093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 42.383828][ T4070] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.392034][ T4070] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.411277][ T4070] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.419603][ T4070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.431900][ T4070] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.440198][ T4070] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.451432][ T4070] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.459753][ T4070] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.503714][ T4097] netlink: 71 bytes leftover after parsing attributes in process `syz.2.278'. [ 42.689589][ T4130] loop4: detected capacity change from 0 to 2048 [ 42.714363][ T4130] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.289: bad orphan inode 8192 [ 42.726170][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.784644][ T3270] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_name out of bounds [ 42.799045][ T3270] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_name out of bounds [ 42.807321][ T4142] loop3: detected capacity change from 0 to 128 [ 42.826277][ T4142] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 42.870117][ T40] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 43.047306][ T4136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.062697][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.079026][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 43.116945][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.156608][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.226338][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.264185][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 43.298545][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.305642][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.313056][ T4167] bridge_slave_0: entered allmulticast mode [ 43.319473][ T4167] bridge_slave_0: entered promiscuous mode [ 43.328586][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.335705][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.342914][ T4167] bridge_slave_1: entered allmulticast mode [ 43.349426][ T4167] bridge_slave_1: entered promiscuous mode [ 43.364114][ T4186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4186 comm=syz.2.301 [ 43.390352][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.400535][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.410087][ T50] bridge_slave_1: left allmulticast mode [ 43.415831][ T50] bridge_slave_1: left promiscuous mode [ 43.421481][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.429301][ T50] bridge_slave_0: left allmulticast mode [ 43.435066][ T50] bridge_slave_0: left promiscuous mode [ 43.440703][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.526368][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.536694][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.546790][ T50] bond0 (unregistering): Released all slaves [ 43.566750][ T4167] team0: Port device team_slave_0 added [ 43.573262][ T4167] team0: Port device team_slave_1 added [ 43.589107][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.596134][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.622203][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.633647][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.640582][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.666483][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.681720][ T50] hsr_slave_0: left promiscuous mode [ 43.687338][ T50] hsr_slave_1: left promiscuous mode [ 43.693038][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.700464][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.707922][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.715307][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.724122][ T50] veth1_macvtap: left promiscuous mode [ 43.729633][ T50] veth0_macvtap: left promiscuous mode [ 43.735302][ T50] veth1_vlan: left promiscuous mode [ 43.740515][ T50] veth0_vlan: left promiscuous mode [ 43.811818][ T50] team0 (unregistering): Port device team_slave_1 removed [ 43.821866][ T50] team0 (unregistering): Port device team_slave_0 removed [ 43.860496][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 43.860567][ T29] audit: type=1400 audit(1724346440.939:391): avc: denied { search } for pid=3001 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.888028][ T29] audit: type=1400 audit(1724346440.939:392): avc: denied { read } for pid=3001 comm="dhcpcd" name="n25" dev="tmpfs" ino=1617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.909631][ T29] audit: type=1400 audit(1724346440.939:393): avc: denied { open } for pid=3001 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.932601][ T29] audit: type=1400 audit(1724346440.939:394): avc: denied { getattr } for pid=3001 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.962327][ T4167] hsr_slave_0: entered promiscuous mode [ 43.969583][ T4167] hsr_slave_1: entered promiscuous mode [ 43.983338][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.994924][ T4167] Cannot create hsr debugfs directory [ 44.015771][ T4194] loop3: detected capacity change from 0 to 512 [ 44.018580][ T29] audit: type=1400 audit(1724346441.099:395): avc: denied { read } for pid=4197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.044958][ T29] audit: type=1400 audit(1724346441.099:396): avc: denied { open } for pid=4197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.047770][ T4194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.069864][ T29] audit: type=1400 audit(1724346441.099:397): avc: denied { getattr } for pid=4197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.125556][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.138559][ T29] audit: type=1400 audit(1724346441.209:398): avc: denied { write } for pid=4191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.145745][ T4194] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.161433][ T29] audit: type=1400 audit(1724346441.209:399): avc: denied { add_name } for pid=4191 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.194081][ T29] audit: type=1400 audit(1724346441.209:400): avc: denied { create } for pid=4191 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.284232][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.520669][ T4249] netlink: 'syz.1.313': attribute type 3 has an invalid length. [ 44.571372][ T4167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.600248][ T4167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.620828][ T4167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.647626][ T4264] sit1: entered promiscuous mode [ 44.652677][ T4264] sit1: entered allmulticast mode [ 44.720731][ T4167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.837635][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.896124][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.928920][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.936154][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.940376][ T4271] syz.0.320 (4271) used greatest stack depth: 10576 bytes left [ 44.985661][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.992780][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.997090][ T4290] loop3: detected capacity change from 0 to 8192 [ 45.016546][ T4300] loop2: detected capacity change from 0 to 512 [ 45.043282][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.053693][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.071015][ T4290] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.108047][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.124486][ T4290] capability: warning: `syz.3.322' uses 32-bit capabilities (legacy support in use) [ 45.158081][ T4300] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.183079][ T4290] Process accounting resumed [ 45.210158][ T4290] Process accounting resumed [ 45.308169][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.327065][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.573257][ T4360] loop2: detected capacity change from 0 to 1024 [ 45.593751][ T4360] EXT4-fs (loop2): first meta block group too large: 7 (group descriptor block count 1) [ 45.610433][ T4167] veth0_vlan: entered promiscuous mode [ 45.630699][ T4167] veth1_vlan: entered promiscuous mode [ 45.751385][ T4167] veth0_macvtap: entered promiscuous mode [ 45.762253][ T4357] __nla_validate_parse: 9 callbacks suppressed [ 45.762265][ T4357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 45.762832][ T4167] veth1_macvtap: entered promiscuous mode [ 45.783539][ T4357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 45.788255][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.802894][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.812764][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.823333][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.833151][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.843586][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.853407][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.863824][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.899043][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.942914][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.953409][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.963196][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.973707][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.983564][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.993978][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.003779][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.014184][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.128777][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.142257][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.151065][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.160005][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.168797][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.182965][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 46.258908][ T4375] loop3: detected capacity change from 0 to 512 [ 46.296588][ T4375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.320998][ T4375] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.344917][ T4375] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 46.359942][ T4379] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 46.377293][ T4375] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 46.423653][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.594639][ T4415] raw_sendmsg: syz.0.346 forgot to set AF_INET. Fix it! [ 46.751050][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'. [ 46.778350][ T4442] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 46.850963][ T4446] loop3: detected capacity change from 0 to 512 [ 46.854997][ T4410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 46.866292][ T4446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.889189][ T4446] EXT4-fs (loop3): 1 orphan inode deleted [ 46.895057][ T4446] EXT4-fs (loop3): 1 truncate cleaned up [ 46.901284][ T4446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.101470][ T4475] FAULT_INJECTION: forcing a failure. [ 47.101470][ T4475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.114933][ T4475] CPU: 1 UID: 0 PID: 4475 Comm: syz.0.362 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 47.125519][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.135572][ T4475] Call Trace: [ 47.138845][ T4475] [ 47.141770][ T4475] dump_stack_lvl+0xf2/0x150 [ 47.146416][ T4475] dump_stack+0x15/0x20 [ 47.150575][ T4475] should_fail_ex+0x229/0x230 [ 47.155301][ T4475] should_fail_alloc_page+0xfd/0x110 [ 47.160598][ T4475] __alloc_pages_noprof+0x109/0x360 [ 47.165815][ T4475] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 47.171191][ T4475] folio_alloc_noprof+0xee/0x130 [ 47.176239][ T4475] filemap_alloc_folio_noprof+0x69/0x220 [ 47.181878][ T4475] __filemap_get_folio+0x298/0x5b0 [ 47.187063][ T4475] ? should_failslab+0x8f/0xb0 [ 47.191829][ T4475] ? __kmalloc_noprof+0x165/0x370 [ 47.196884][ T4475] aio_setup_ring+0x266/0x6b0 [ 47.201634][ T4475] ioctx_alloc+0x2b2/0x4c0 [ 47.206053][ T4475] __se_sys_io_setup+0x6b/0x1b0 [ 47.210899][ T4475] __x64_sys_io_setup+0x31/0x40 [ 47.215834][ T4475] x64_sys_call+0x2639/0x2d60 [ 47.220589][ T4475] do_syscall_64+0xc9/0x1c0 [ 47.225103][ T4475] ? clear_bhb_loop+0x55/0xb0 [ 47.229824][ T4475] ? clear_bhb_loop+0x55/0xb0 [ 47.234586][ T4475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.240529][ T4475] RIP: 0033:0x7f1126889e79 [ 47.244961][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.264570][ T4475] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 47.272978][ T4475] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 47.280943][ T4475] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 47.288911][ T4475] RBP: 00007f1125501090 R08: 0000000000000000 R09: 0000000000000000 [ 47.296920][ T4475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.304888][ T4475] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 47.312920][ T4475] [ 47.443074][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 47.505540][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 47.534627][ T4496] loop4: detected capacity change from 0 to 8192 [ 47.584774][ T4496] loop4: p1 p2 p4 < > [ 47.588873][ T4496] loop4: partition table partially beyond EOD, truncated [ 47.604228][ T4496] loop4: p1 size 108986237 extends beyond EOD, truncated [ 47.613377][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.620197][ T4496] loop4: p2 start 65535 is beyond EOD, truncated [ 47.628804][ T4496] loop4: p4 start 50331648 is beyond EOD, truncated [ 47.642478][ T4496] tipc: Started in network mode [ 47.647445][ T4496] tipc: Node identity , cluster identity 4711 [ 47.652439][ T4524] x_tables: unsorted entry at hook 1 [ 47.653506][ T4496] tipc: Failed to set node id, please configure manually [ 47.653514][ T4496] tipc: Enabling of bearer rejected, failed to enable media [ 47.673419][ T4525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.372'. [ 47.784336][ T4542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.793118][ T4542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.872627][ T4557] loop3: detected capacity change from 0 to 512 [ 47.908676][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 47.919916][ T4558] macsec1: entered allmulticast mode [ 47.945634][ T4557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.967562][ T4557] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.269456][ T4596] 9pnet_virtio: no channels available for device 127.0.0.1 [ 48.290078][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.394327][ T4614] loop3: detected capacity change from 0 to 2048 [ 48.414699][ T4614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.459131][ T4614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.488910][ T4624] loop4: detected capacity change from 0 to 512 [ 48.511292][ T4624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.626197][ T4624] EXT4-fs (loop4): 1 truncate cleaned up [ 48.635358][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 48.655589][ T4624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.671773][ T4661] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 48.695578][ T4624] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.390: Unrecognised inode hash code 20 [ 48.707026][ T4624] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.390: Corrupt directory, running e2fsck is recommended [ 48.766020][ T4663] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.390: Unrecognised inode hash code 20 [ 48.777433][ T4663] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.390: Corrupt directory, running e2fsck is recommended [ 48.842862][ T4663] EXT4-fs warning (device loop4): ext4_lookup:1823: Inconsistent encryption contexts: 2/12 [ 48.877298][ T4624] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.390: Unrecognised inode hash code 20 [ 48.888672][ T4624] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.390: Corrupt directory, running e2fsck is recommended [ 49.017816][ T4624] EXT4-fs warning (device loop4): ext4_lookup:1823: Inconsistent encryption contexts: 2/12 [ 49.122553][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 49.122566][ T29] audit: type=1326 audit(1724346446.199:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.0.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1126889e79 code=0x0 [ 49.227059][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.234868][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.241919][ T4673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.260060][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.283222][ T29] audit: type=1400 audit(1724346446.359:509): avc: denied { sqpoll } for pid=4674 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.304300][ T4675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.311521][ T4675] IPv6: NLM_F_CREATE should be set when creating new route [ 49.343789][ T29] audit: type=1326 audit(1724346446.419:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156ad29e79 code=0x7fc00000 [ 49.457682][ T4684] loop2: detected capacity change from 0 to 1024 [ 49.502396][ T4685] loop3: detected capacity change from 0 to 2048 [ 49.514531][ T4684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.550075][ T4685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.553775][ T29] audit: type=1400 audit(1724346446.629:511): avc: denied { map } for pid=4683 comm="syz.2.401" path="/78/file1/file0/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.587392][ T29] audit: type=1400 audit(1724346446.629:512): avc: denied { write } for pid=4683 comm="syz.2.401" path="/78/file1/file0/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.630094][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.649934][ T4692] loop2: detected capacity change from 0 to 512 [ 49.657908][ T4692] EXT4-fs: Ignoring removed i_version option [ 49.664041][ T4692] EXT4-fs: Ignoring removed bh option [ 49.671452][ T4692] ext4: Unknown parameter 'noacl' [ 49.688162][ T4700] loop4: detected capacity change from 0 to 512 [ 49.710289][ T29] audit: type=1400 audit(1724346446.789:513): avc: denied { create } for pid=4702 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.732383][ T4703] netlink: 'syz.2.404': attribute type 9 has an invalid length. [ 49.743760][ T4700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.768111][ T29] audit: type=1400 audit(1724346446.819:514): avc: denied { write } for pid=4702 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.787393][ T4700] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.788079][ T29] audit: type=1400 audit(1724346446.819:515): avc: denied { nlmsg_write } for pid=4702 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.825655][ T29] audit: type=1400 audit(1724346446.889:516): avc: denied { bind } for pid=4702 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.825892][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.916690][ T4722] serio: Serial port pts0 [ 49.920993][ T4724] loop2: detected capacity change from 0 to 128 [ 49.932702][ T29] audit: type=1400 audit(1724346959.017:517): avc: denied { read } for pid=4725 comm="syz.1.413" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.933246][ T4724] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.969863][ T4724] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.985691][ T4733] loop4: detected capacity change from 0 to 128 [ 50.006574][ T3261] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.032784][ T4739] dummy0: entered promiscuous mode [ 50.038499][ T4739] syzkaller0: entered promiscuous mode [ 50.046192][ T4739] syzkaller0 (unregistering): left promiscuous mode [ 50.054185][ T4733] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.412' sets config #0 [ 50.088929][ T4744] FAULT_INJECTION: forcing a failure. [ 50.088929][ T4744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.102211][ T4744] CPU: 1 UID: 0 PID: 4744 Comm: syz.4.418 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 50.112788][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.122822][ T4744] Call Trace: [ 50.126082][ T4744] [ 50.128991][ T4744] dump_stack_lvl+0xf2/0x150 [ 50.133654][ T4744] dump_stack+0x15/0x20 [ 50.137910][ T4744] should_fail_ex+0x229/0x230 [ 50.142594][ T4744] should_fail_alloc_page+0xfd/0x110 [ 50.147889][ T4744] __alloc_pages_noprof+0x109/0x360 [ 50.153070][ T4744] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 50.158446][ T4744] folio_alloc_noprof+0xee/0x130 [ 50.163429][ T4744] filemap_alloc_folio_noprof+0x69/0x220 [ 50.169149][ T4744] __filemap_get_folio+0x298/0x5b0 [ 50.174249][ T4744] ? __kmalloc_noprof+0x165/0x370 [ 50.179325][ T4744] aio_setup_ring+0x266/0x6b0 [ 50.184024][ T4744] ioctx_alloc+0x2b2/0x4c0 [ 50.188423][ T4744] __se_sys_io_setup+0x6b/0x1b0 [ 50.193393][ T4744] __x64_sys_io_setup+0x31/0x40 [ 50.198304][ T4744] x64_sys_call+0x2639/0x2d60 [ 50.202960][ T4744] do_syscall_64+0xc9/0x1c0 [ 50.207495][ T4744] ? clear_bhb_loop+0x55/0xb0 [ 50.212198][ T4744] ? clear_bhb_loop+0x55/0xb0 [ 50.216865][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.222785][ T4744] RIP: 0033:0x7f405b379e79 [ 50.227252][ T4744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.246944][ T4744] RSP: 002b:00007f4059ff1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 50.255344][ T4744] RAX: ffffffffffffffda RBX: 00007f405b515f80 RCX: 00007f405b379e79 [ 50.263377][ T4744] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 50.271401][ T4744] RBP: 00007f4059ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.279441][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.287397][ T4744] R13: 0000000000000000 R14: 00007f405b515f80 R15: 00007fff463f77f8 [ 50.295362][ T4744] [ 50.337912][ T4738] dummy0: left promiscuous mode [ 50.354764][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.414399][ T4754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 50.481682][ T4760] syzkaller1: entered promiscuous mode [ 50.487185][ T4760] syzkaller1: entered allmulticast mode [ 50.514655][ T4760] wireguard0: entered promiscuous mode [ 50.520213][ T4760] wireguard0: entered allmulticast mode [ 50.567316][ T4765] loop4: detected capacity change from 0 to 1024 [ 50.584952][ T4765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.758186][ T4770] loop2: detected capacity change from 0 to 512 [ 50.766880][ T4770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.778358][ T4770] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 50.778491][ T4770] EXT4-fs: failed to create workqueue [ 50.793355][ T4770] EXT4-fs (loop2): mount failed [ 50.810529][ T4777] tipc: Can't bind to reserved service type 0 [ 50.921245][ T4790] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 50.953506][ T4794] program syz.1.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.066182][ T4798] __nla_validate_parse: 3 callbacks suppressed [ 51.066192][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 51.103658][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 51.214155][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 51.245577][ T4804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 51.254700][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 51.295346][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 51.680888][ T4826] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 51.882815][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 51.893355][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 52.020790][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 52.065743][ T4847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4847 comm=syz.1.448 [ 52.078360][ T4847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 52.091409][ T4847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.103588][ T4847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.110636][ T4847] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 52.122839][ T4847] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 52.240379][ T3336] kernel write not supported for file /sg0 (pid: 3336 comm: kworker/1:3) [ 52.253907][ T4855] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 52.280152][ T4860] loop3: detected capacity change from 0 to 1024 [ 52.296429][ T4860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.354029][ T4860] loop3: detected capacity change from 1024 to 64 [ 52.428643][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.442152][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.456919][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.470501][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.484980][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.498804][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.513200][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.527908][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.544873][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.558488][ T3265] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 52.611875][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.644891][ T4879] FAULT_INJECTION: forcing a failure. [ 52.644891][ T4879] name failslab, interval 1, probability 0, space 0, times 1 [ 52.657570][ T4879] CPU: 1 UID: 0 PID: 4879 Comm: syz.4.460 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 52.668157][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.678296][ T4879] Call Trace: [ 52.681636][ T4879] [ 52.684625][ T4879] dump_stack_lvl+0xf2/0x150 [ 52.689213][ T4879] dump_stack+0x15/0x20 [ 52.693398][ T4879] should_fail_ex+0x229/0x230 [ 52.698125][ T4879] ? sctp_add_bind_addr+0x6f/0x1e0 [ 52.703228][ T4879] should_failslab+0x8f/0xb0 [ 52.707836][ T4879] __kmalloc_cache_noprof+0x4b/0x2a0 [ 52.713164][ T4879] sctp_add_bind_addr+0x6f/0x1e0 [ 52.718214][ T4879] sctp_copy_local_addr_list+0x19b/0x220 [ 52.723837][ T4879] sctp_copy_one_addr+0x83/0x410 [ 52.728762][ T4879] sctp_bind_addr_copy+0x81/0x2b0 [ 52.733802][ T4879] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 52.739856][ T4879] sctp_connect_new_asoc+0x1d0/0x3b0 [ 52.745141][ T4879] sctp_sendmsg+0xf05/0x1920 [ 52.749849][ T4879] ? __pfx_sctp_sendmsg+0x10/0x10 [ 52.754865][ T4879] inet_sendmsg+0xc5/0xd0 [ 52.759313][ T4879] __sock_sendmsg+0x102/0x180 [ 52.763986][ T4879] __sys_sendto+0x1e5/0x260 [ 52.768543][ T4879] __x64_sys_sendto+0x78/0x90 [ 52.773206][ T4879] x64_sys_call+0x2959/0x2d60 [ 52.777874][ T4879] do_syscall_64+0xc9/0x1c0 [ 52.782477][ T4879] ? clear_bhb_loop+0x55/0xb0 [ 52.787185][ T4879] ? clear_bhb_loop+0x55/0xb0 [ 52.791930][ T4879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.797812][ T4879] RIP: 0033:0x7f405b379e79 [ 52.802247][ T4879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.821901][ T4879] RSP: 002b:00007f4059ff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.830307][ T4879] RAX: ffffffffffffffda RBX: 00007f405b515f80 RCX: 00007f405b379e79 [ 52.838338][ T4879] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 52.846333][ T4879] RBP: 00007f4059ff1090 R08: 000000002005ffe4 R09: 000000000000001c [ 52.854291][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.862248][ T4879] R13: 0000000000000000 R14: 00007f405b515f80 R15: 00007fff463f77f8 [ 52.870208][ T4879] [ 53.045626][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.055778][ T4861] kmmpd-loop3: attempt to access beyond end of device [ 53.055778][ T4861] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 53.069313][ T4861] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 53.083358][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.110542][ T4931] FAULT_INJECTION: forcing a failure. [ 53.110542][ T4931] name failslab, interval 1, probability 0, space 0, times 0 [ 53.123209][ T4931] CPU: 1 UID: 0 PID: 4931 Comm: syz.2.476 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 53.133801][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.143860][ T4931] Call Trace: [ 53.147134][ T4931] [ 53.150084][ T4931] dump_stack_lvl+0xf2/0x150 [ 53.154692][ T4931] dump_stack+0x15/0x20 [ 53.158863][ T4931] should_fail_ex+0x229/0x230 [ 53.163573][ T4931] ? sctp_add_bind_addr+0x6f/0x1e0 [ 53.168686][ T4931] should_failslab+0x8f/0xb0 [ 53.173327][ T4931] __kmalloc_cache_noprof+0x4b/0x2a0 [ 53.178716][ T4931] sctp_add_bind_addr+0x6f/0x1e0 [ 53.183722][ T4931] sctp_copy_local_addr_list+0x19b/0x220 [ 53.189352][ T4931] sctp_copy_one_addr+0x83/0x410 [ 53.194408][ T4931] sctp_bind_addr_copy+0x81/0x2b0 [ 53.199424][ T4931] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 53.205483][ T4931] sctp_connect_new_asoc+0x1d0/0x3b0 [ 53.210766][ T4931] sctp_sendmsg+0xf05/0x1920 [ 53.215385][ T4931] ? __pfx_sctp_sendmsg+0x10/0x10 [ 53.220474][ T4931] inet_sendmsg+0xc5/0xd0 [ 53.224829][ T4931] __sock_sendmsg+0x102/0x180 [ 53.229562][ T4931] __sys_sendto+0x1e5/0x260 [ 53.234059][ T4931] __x64_sys_sendto+0x78/0x90 [ 53.238851][ T4931] x64_sys_call+0x2959/0x2d60 [ 53.243520][ T4931] do_syscall_64+0xc9/0x1c0 [ 53.248021][ T4931] ? clear_bhb_loop+0x55/0xb0 [ 53.252733][ T4931] ? clear_bhb_loop+0x55/0xb0 [ 53.257422][ T4931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.263307][ T4931] RIP: 0033:0x7f9af30a9e79 [ 53.267714][ T4931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.287358][ T4931] RSP: 002b:00007f9af1d21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 53.295803][ T4931] RAX: ffffffffffffffda RBX: 00007f9af3245f80 RCX: 00007f9af30a9e79 [ 53.303778][ T4931] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 53.311743][ T4931] RBP: 00007f9af1d21090 R08: 000000002005ffe4 R09: 000000000000001c [ 53.319703][ T4931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.327672][ T4931] R13: 0000000000000000 R14: 00007f9af3245f80 R15: 00007ffcb4e0bbd8 [ 53.335704][ T4931] [ 53.357805][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.377297][ T4942] loop2: detected capacity change from 0 to 2048 [ 53.394223][ T4942] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.477: bad orphan inode 8192 [ 53.406202][ T4942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.447999][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.467262][ T4942] veth0_vlan: left promiscuous mode [ 53.472478][ T4942] veth0_vlan: entered allmulticast mode [ 53.480153][ T4942] veth0_vlan: entered promiscuous mode [ 53.495195][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.530543][ T4933] chnl_net:caif_netlink_parms(): no params data found [ 53.547496][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.602814][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.609908][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.623211][ T4933] bridge_slave_0: entered allmulticast mode [ 53.629708][ T4933] bridge_slave_0: entered promiscuous mode [ 53.644104][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.644141][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.644221][ T4933] bridge_slave_1: entered allmulticast mode [ 53.644679][ T4933] bridge_slave_1: entered promiscuous mode [ 53.678252][ T40] bridge_slave_1: left allmulticast mode [ 53.683986][ T40] bridge_slave_1: left promiscuous mode [ 53.689647][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.697789][ T40] bridge_slave_0: left allmulticast mode [ 53.703443][ T40] bridge_slave_0: left promiscuous mode [ 53.709119][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.806819][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.820643][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.831693][ T40] bond0 (unregistering): Released all slaves [ 53.846289][ T4967] loop4: detected capacity change from 0 to 512 [ 53.854317][ T4967] EXT4-fs (loop4): 1 truncate cleaned up [ 53.860392][ T4967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.861733][ T4933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.886565][ T4933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.919154][ T4933] team0: Port device team_slave_0 added [ 53.933873][ T4933] team0: Port device team_slave_1 added [ 53.994740][ T40] hsr_slave_0: left promiscuous mode [ 54.006887][ T40] hsr_slave_1: left promiscuous mode [ 54.017663][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.025204][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.033939][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.041406][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.052544][ T40] veth1_macvtap: left promiscuous mode [ 54.058328][ T40] veth0_macvtap: left promiscuous mode [ 54.063912][ T40] veth1_vlan: left promiscuous mode [ 54.069235][ T40] veth0_vlan: left promiscuous mode [ 54.152443][ T40] team0 (unregistering): Port device team_slave_1 removed [ 54.163287][ T40] team0 (unregistering): Port device team_slave_0 removed [ 54.203698][ T4933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.210757][ T4933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.237864][ T4933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.273772][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.304751][ T4933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.311704][ T4933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.337676][ T4933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.372560][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 54.372574][ T29] audit: type=1400 audit(1724346963.457:609): avc: denied { map } for pid=4999 comm="syz.0.488" path="socket:[9114]" dev="sockfs" ino=9114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 54.478875][ T4933] hsr_slave_0: entered promiscuous mode [ 54.490827][ T4933] hsr_slave_1: entered promiscuous mode [ 54.505556][ T29] audit: type=1400 audit(1724346963.597:610): avc: denied { setopt } for pid=5026 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.610448][ T29] audit: type=1400 audit(1724346963.697:611): avc: denied { append } for pid=5046 comm="syz.2.494" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 54.635116][ T5048] loop2: detected capacity change from 0 to 256 [ 54.662521][ T5048] FAT-fs (loop2): Directory bread(block 64) failed [ 54.678762][ T5048] FAT-fs (loop2): Directory bread(block 65) failed [ 54.701806][ T5048] FAT-fs (loop2): Directory bread(block 66) failed [ 54.729426][ T5048] FAT-fs (loop2): Directory bread(block 67) failed [ 54.739668][ T40] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.749632][ T40] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.771017][ T5048] FAT-fs (loop2): Directory bread(block 68) failed [ 54.804647][ T5048] FAT-fs (loop2): Directory bread(block 69) failed [ 54.823209][ T5048] FAT-fs (loop2): Directory bread(block 70) failed [ 54.832808][ T40] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.842630][ T40] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.854247][ T5048] FAT-fs (loop2): Directory bread(block 71) failed [ 54.860823][ T5048] FAT-fs (loop2): Directory bread(block 72) failed [ 54.870464][ T5048] FAT-fs (loop2): Directory bread(block 73) failed [ 54.891468][ T4996] chnl_net:caif_netlink_parms(): no params data found [ 54.900474][ T29] audit: type=1400 audit(1724346963.987:612): avc: denied { create } for pid=5046 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 54.947430][ T40] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.957305][ T40] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.066442][ T40] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.076269][ T40] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.126539][ T4996] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.133655][ T4996] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.174088][ T4996] bridge_slave_0: entered allmulticast mode [ 55.183950][ T4996] bridge_slave_0: entered promiscuous mode [ 55.193090][ T5048] x_tables: unsorted underflow at hook 3 [ 55.199592][ T29] audit: type=1326 audit(1724346964.287:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af30a9e79 code=0x7ffc0000 [ 55.207374][ T4996] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.229912][ T4996] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.267812][ T29] audit: type=1326 audit(1724346964.327:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9af30a8810 code=0x7ffc0000 [ 55.277544][ T4996] bridge_slave_1: entered allmulticast mode [ 55.291071][ T29] audit: type=1326 audit(1724346964.327:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9af30ab6a7 code=0x7ffc0000 [ 55.316095][ T4996] bridge_slave_1: entered promiscuous mode [ 55.320189][ T29] audit: type=1326 audit(1724346964.327:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af30a9e79 code=0x7ffc0000 [ 55.351573][ T29] audit: type=1326 audit(1724346964.327:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9af30ab6a7 code=0x7ffc0000 [ 55.374849][ T29] audit: type=1326 audit(1724346964.327:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9af30a8b0a code=0x7ffc0000 [ 55.444144][ T5109] FAULT_INJECTION: forcing a failure. [ 55.444144][ T5109] name failslab, interval 1, probability 0, space 0, times 0 [ 55.456972][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.2.501 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 55.467606][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.477663][ T5109] Call Trace: [ 55.480936][ T5109] [ 55.483860][ T5109] dump_stack_lvl+0xf2/0x150 [ 55.488533][ T5109] dump_stack+0x15/0x20 [ 55.492692][ T5109] should_fail_ex+0x229/0x230 [ 55.497377][ T5109] ? sctp_add_bind_addr+0x6f/0x1e0 [ 55.502552][ T5109] should_failslab+0x8f/0xb0 [ 55.507168][ T5109] __kmalloc_cache_noprof+0x4b/0x2a0 [ 55.512436][ T5109] sctp_add_bind_addr+0x6f/0x1e0 [ 55.517374][ T5109] sctp_copy_local_addr_list+0x19b/0x220 [ 55.523000][ T5109] sctp_copy_one_addr+0x83/0x410 [ 55.527943][ T5109] sctp_bind_addr_copy+0x81/0x2b0 [ 55.532947][ T5109] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 55.539037][ T5109] sctp_connect_new_asoc+0x1d0/0x3b0 [ 55.544457][ T5109] sctp_sendmsg+0xf05/0x1920 [ 55.549110][ T5109] ? __pfx_sctp_sendmsg+0x10/0x10 [ 55.554268][ T5109] inet_sendmsg+0xc5/0xd0 [ 55.558589][ T5109] __sock_sendmsg+0x102/0x180 [ 55.563337][ T5109] __sys_sendto+0x1e5/0x260 [ 55.567844][ T5109] __x64_sys_sendto+0x78/0x90 [ 55.572535][ T5109] x64_sys_call+0x2959/0x2d60 [ 55.577190][ T5109] do_syscall_64+0xc9/0x1c0 [ 55.581676][ T5109] ? clear_bhb_loop+0x55/0xb0 [ 55.586364][ T5109] ? clear_bhb_loop+0x55/0xb0 [ 55.591095][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.597048][ T5109] RIP: 0033:0x7f9af30a9e79 [ 55.601448][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.621122][ T5109] RSP: 002b:00007f9af1d21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 55.629549][ T5109] RAX: ffffffffffffffda RBX: 00007f9af3245f80 RCX: 00007f9af30a9e79 [ 55.637500][ T5109] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 55.645461][ T5109] RBP: 00007f9af1d21090 R08: 000000002005ffe4 R09: 000000000000001c [ 55.653414][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.661383][ T5109] R13: 0000000000000000 R14: 00007f9af3245f80 R15: 00007ffcb4e0bbd8 [ 55.669342][ T5109] [ 55.714573][ T4996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.747899][ T4996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.757361][ T40] bridge_slave_1: left allmulticast mode [ 55.763009][ T40] bridge_slave_1: left promiscuous mode [ 55.768939][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.777157][ T40] bridge_slave_0: left allmulticast mode [ 55.782993][ T40] bridge_slave_0: left promiscuous mode [ 55.788628][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.936977][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.947677][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.958157][ T40] bond0 (unregistering): Released all slaves [ 55.967967][ T40] bond1 (unregistering): Released all slaves [ 56.003254][ T4996] team0: Port device team_slave_0 added [ 56.045687][ T4996] team0: Port device team_slave_1 added [ 56.072271][ T4996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.079253][ T4996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.105562][ T4996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.126299][ T5131] loop2: detected capacity change from 0 to 512 [ 56.131678][ T4996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.139516][ T4996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.153529][ T5131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.165473][ T4996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.190494][ T4933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.190701][ T5131] EXT4-fs (loop2): 1 truncate cleaned up [ 56.204393][ T5131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.239783][ T4933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.249107][ T4933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.260316][ T4933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.283538][ T40] hsr_slave_0: left promiscuous mode [ 56.290448][ T40] hsr_slave_1: left promiscuous mode [ 56.296691][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.304273][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.313203][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.320663][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.338986][ T40] veth1_macvtap: left promiscuous mode [ 56.344545][ T40] veth0_macvtap: left promiscuous mode [ 56.350127][ T40] veth1_vlan: left promiscuous mode [ 56.355466][ T40] veth0_vlan: left promiscuous mode [ 56.532360][ T40] team0 (unregistering): Port device team_slave_1 removed [ 56.547944][ T40] team0 (unregistering): Port device team_slave_0 removed [ 56.665486][ T4996] hsr_slave_0: entered promiscuous mode [ 56.690402][ T4996] hsr_slave_1: entered promiscuous mode [ 56.697675][ T4996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.698230][ T5166] __nla_validate_parse: 6 callbacks suppressed [ 56.698242][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 56.713700][ T4996] Cannot create hsr debugfs directory [ 56.745183][ T5144] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 56.757058][ T5144] File: /107/bus/bus PID: 5144 Comm: syz.2.508 [ 56.847954][ T4933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.868028][ T5187] FAULT_INJECTION: forcing a failure. [ 56.868028][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 56.880926][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.4.513 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 56.891513][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.901562][ T5187] Call Trace: [ 56.904901][ T5187] [ 56.907816][ T5187] dump_stack_lvl+0xf2/0x150 [ 56.912406][ T5187] dump_stack+0x15/0x20 [ 56.916555][ T5187] should_fail_ex+0x229/0x230 [ 56.921252][ T5187] ? sctp_add_bind_addr+0x6f/0x1e0 [ 56.926434][ T5187] should_failslab+0x8f/0xb0 [ 56.931161][ T5187] __kmalloc_cache_noprof+0x4b/0x2a0 [ 56.936450][ T5187] sctp_add_bind_addr+0x6f/0x1e0 [ 56.941649][ T5187] sctp_copy_local_addr_list+0x19b/0x220 [ 56.947291][ T5187] sctp_copy_one_addr+0x83/0x410 [ 56.952220][ T5187] sctp_bind_addr_copy+0x81/0x2b0 [ 56.957234][ T5187] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 56.963290][ T5187] sctp_connect_new_asoc+0x1d0/0x3b0 [ 56.968671][ T5187] sctp_sendmsg+0xf05/0x1920 [ 56.973319][ T5187] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.978335][ T5187] inet_sendmsg+0xc5/0xd0 [ 56.982657][ T5187] __sock_sendmsg+0x102/0x180 [ 56.987354][ T5187] __sys_sendto+0x1e5/0x260 [ 56.991860][ T5187] __x64_sys_sendto+0x78/0x90 [ 56.996529][ T5187] x64_sys_call+0x2959/0x2d60 [ 57.001274][ T5187] do_syscall_64+0xc9/0x1c0 [ 57.005793][ T5187] ? clear_bhb_loop+0x55/0xb0 [ 57.010603][ T5187] ? clear_bhb_loop+0x55/0xb0 [ 57.015367][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.021250][ T5187] RIP: 0033:0x7f405b379e79 [ 57.025650][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.045404][ T5187] RSP: 002b:00007f4059ff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 57.053802][ T5187] RAX: ffffffffffffffda RBX: 00007f405b515f80 RCX: 00007f405b379e79 [ 57.061840][ T5187] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 57.069799][ T5187] RBP: 00007f4059ff1090 R08: 000000002005ffe4 R09: 000000000000001c [ 57.077785][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.085821][ T5187] R13: 0000000000000000 R14: 00007f405b515f80 R15: 00007fff463f77f8 [ 57.093788][ T5187] [ 57.103098][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 57.112022][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.119645][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.151649][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.159251][ T5185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.184993][ T5201] netlink: 256 bytes leftover after parsing attributes in process `syz.4.517'. [ 57.194030][ T5201] netlink: 80 bytes leftover after parsing attributes in process `syz.4.517'. [ 57.232554][ T4933] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.257569][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.258176][ T5206] loop4: detected capacity change from 0 to 512 [ 57.264778][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.284185][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.291250][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.309879][ T5206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.326493][ T4933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.336965][ T4933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.351494][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.375834][ T5206] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.396271][ T5206] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 57.478218][ T5232] FAULT_INJECTION: forcing a failure. [ 57.478218][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 57.491024][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.0.522 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 57.501644][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.511692][ T5232] Call Trace: [ 57.515002][ T5232] [ 57.517914][ T5232] dump_stack_lvl+0xf2/0x150 [ 57.522554][ T5232] dump_stack+0x15/0x20 [ 57.526721][ T5232] should_fail_ex+0x229/0x230 [ 57.531451][ T5232] ? sctp_add_bind_addr+0x6f/0x1e0 [ 57.536633][ T5232] should_failslab+0x8f/0xb0 [ 57.541288][ T5232] __kmalloc_cache_noprof+0x4b/0x2a0 [ 57.546594][ T5232] sctp_add_bind_addr+0x6f/0x1e0 [ 57.551524][ T5232] sctp_copy_local_addr_list+0x19b/0x220 [ 57.557154][ T5232] sctp_copy_one_addr+0x83/0x410 [ 57.562104][ T5232] sctp_bind_addr_copy+0x81/0x2b0 [ 57.567107][ T5232] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 57.573227][ T5232] sctp_connect_new_asoc+0x1d0/0x3b0 [ 57.578617][ T5232] sctp_sendmsg+0xf05/0x1920 [ 57.583285][ T5232] ? __pfx_sctp_sendmsg+0x10/0x10 [ 57.588310][ T5232] inet_sendmsg+0xc5/0xd0 [ 57.592684][ T5232] __sock_sendmsg+0x102/0x180 [ 57.597355][ T5232] __sys_sendto+0x1e5/0x260 [ 57.601860][ T5232] __x64_sys_sendto+0x78/0x90 [ 57.606619][ T5232] x64_sys_call+0x2959/0x2d60 [ 57.611302][ T5232] do_syscall_64+0xc9/0x1c0 [ 57.615791][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.620504][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.625323][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.631199][ T5232] RIP: 0033:0x7f1126889e79 [ 57.635639][ T5232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.655271][ T5232] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 57.663685][ T5232] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 57.671652][ T5232] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 57.679605][ T5232] RBP: 00007f1125501090 R08: 000000002005ffe4 R09: 000000000000001c [ 57.687556][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.695506][ T5232] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 57.703465][ T5232] [ 57.729656][ T4933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.808352][ T4996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.810277][ T4996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.826806][ T4996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.843609][ T4996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.911009][ T4933] veth0_vlan: entered promiscuous mode [ 57.919939][ T4933] veth1_vlan: entered promiscuous mode [ 57.940501][ T4996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.959599][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.960774][ T4933] veth0_macvtap: entered promiscuous mode [ 57.980909][ T4933] veth1_macvtap: entered promiscuous mode [ 57.992696][ T4996] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.999058][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.008619][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.011076][ T4933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.021503][ T5248] random: crng reseeded on system resumption [ 58.026836][ T4933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.026851][ T4933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.053164][ T4933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.084831][ T4933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.105360][ T1737] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.112429][ T1737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.121369][ T1737] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.125738][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.128426][ T1737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.154115][ T4996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.164504][ T4996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.184918][ T4933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.195368][ T4933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.205186][ T4933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.215852][ T4933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.227936][ T4933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.241587][ T4933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.250320][ T4933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.259169][ T4933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.267884][ T4933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.300954][ T4996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.355039][ T5259] loop4: detected capacity change from 0 to 8192 [ 58.363454][ T4996] veth0_vlan: entered promiscuous mode [ 58.372618][ T4996] veth1_vlan: entered promiscuous mode [ 58.381806][ T5271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.528'. [ 58.413949][ T4996] veth0_macvtap: entered promiscuous mode [ 58.421722][ T4996] veth1_macvtap: entered promiscuous mode [ 58.432294][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.442778][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.452671][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.462237][ T5275] FAULT_INJECTION: forcing a failure. [ 58.462237][ T5275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.463165][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.476260][ T5275] CPU: 1 UID: 0 PID: 5275 Comm: syz.4.530 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 58.486062][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.496659][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.496673][ T5275] Call Trace: [ 58.496680][ T5275] [ 58.507138][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.517119][ T5275] dump_stack_lvl+0xf2/0x150 [ 58.522618][ T4996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.523312][ T5275] dump_stack+0x15/0x20 [ 58.540747][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.544877][ T5275] should_fail_ex+0x229/0x230 [ 58.544907][ T5275] should_fail_alloc_page+0xfd/0x110 [ 58.544935][ T5275] __alloc_pages_noprof+0x109/0x360 [ 58.549073][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.549084][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.549095][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.549104][ T4996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.559473][ T5275] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 58.559503][ T5275] folio_alloc_noprof+0xee/0x130 [ 58.564177][ T4996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.569410][ T5275] filemap_alloc_folio_noprof+0x69/0x220 [ 58.576692][ T4996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.584357][ T5275] __filemap_get_folio+0x298/0x5b0 [ 58.584389][ T5275] ? should_failslab+0x8f/0xb0 [ 58.598011][ T4996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.604565][ T5275] ? __kmalloc_noprof+0x165/0x370 [ 58.615063][ T4996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.620323][ T5275] aio_setup_ring+0x266/0x6b0 [ 58.625271][ T4996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.634992][ T5275] ioctx_alloc+0x2b2/0x4c0 [ 58.640610][ T4996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.647764][ T5275] __se_sys_io_setup+0x6b/0x1b0 [ 58.711424][ T5275] __x64_sys_io_setup+0x31/0x40 [ 58.716299][ T5275] x64_sys_call+0x2639/0x2d60 [ 58.720957][ T5275] do_syscall_64+0xc9/0x1c0 [ 58.725444][ T5275] ? clear_bhb_loop+0x55/0xb0 [ 58.730160][ T5275] ? clear_bhb_loop+0x55/0xb0 [ 58.734826][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.740703][ T5275] RIP: 0033:0x7f405b379e79 [ 58.745160][ T5275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.764954][ T5275] RSP: 002b:00007f4059ff1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 58.773365][ T5275] RAX: ffffffffffffffda RBX: 00007f405b515f80 RCX: 00007f405b379e79 [ 58.781423][ T5275] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 58.789415][ T5275] RBP: 00007f4059ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 58.797363][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.805473][ T5275] R13: 0000000000000000 R14: 00007f405b515f80 R15: 00007fff463f77f8 [ 58.813537][ T5275] [ 58.954551][ T5303] loop2: detected capacity change from 0 to 128 [ 58.963317][ T5303] EXT4-fs: Ignoring removed nobh option [ 58.978766][ T5303] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.004096][ T5303] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.062506][ T3261] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.182488][ T5327] FAULT_INJECTION: forcing a failure. [ 59.182488][ T5327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.195875][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.3.547 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 59.206517][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.216562][ T5327] Call Trace: [ 59.219961][ T5327] [ 59.222953][ T5327] dump_stack_lvl+0xf2/0x150 [ 59.227544][ T5327] dump_stack+0x15/0x20 [ 59.231697][ T5327] should_fail_ex+0x229/0x230 [ 59.236416][ T5327] should_fail_alloc_page+0xfd/0x110 [ 59.241694][ T5327] __alloc_pages_noprof+0x109/0x360 [ 59.246888][ T5327] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 59.252272][ T5327] folio_alloc_noprof+0xee/0x130 [ 59.257199][ T5327] filemap_alloc_folio_noprof+0x69/0x220 [ 59.262834][ T5327] __filemap_get_folio+0x298/0x5b0 [ 59.267937][ T5327] ? should_failslab+0x8f/0xb0 [ 59.272746][ T5327] ? __kmalloc_noprof+0x165/0x370 [ 59.277842][ T5327] aio_setup_ring+0x266/0x6b0 [ 59.282517][ T5327] ioctx_alloc+0x2b2/0x4c0 [ 59.286958][ T5327] __se_sys_io_setup+0x6b/0x1b0 [ 59.291848][ T5327] __x64_sys_io_setup+0x31/0x40 [ 59.296726][ T5327] x64_sys_call+0x2639/0x2d60 [ 59.301393][ T5327] do_syscall_64+0xc9/0x1c0 [ 59.305893][ T5327] ? clear_bhb_loop+0x55/0xb0 [ 59.310561][ T5327] ? clear_bhb_loop+0x55/0xb0 [ 59.315289][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.321176][ T5327] RIP: 0033:0x7f748bc89e79 [ 59.325652][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.345245][ T5327] RSP: 002b:00007f748a907038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 59.353695][ T5327] RAX: ffffffffffffffda RBX: 00007f748be25f80 RCX: 00007f748bc89e79 [ 59.361652][ T5327] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 59.369607][ T5327] RBP: 00007f748a907090 R08: 0000000000000000 R09: 0000000000000000 [ 59.377627][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.385584][ T5327] R13: 0000000000000000 R14: 00007f748be25f80 R15: 00007ffcaa3390e8 [ 59.393597][ T5327] [ 59.529960][ T5348] loop3: detected capacity change from 0 to 256 [ 59.555315][ T5348] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.595751][ T5350] program syz.4.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.621986][ T5348] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 59.646350][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 59.695848][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 59.695861][ T29] audit: type=1400 audit(1724347480.784:637): avc: denied { map } for pid=5351 comm="syz.4.553" path="socket:[10045]" dev="sockfs" ino=10045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.849303][ T5357] loop4: detected capacity change from 0 to 128 [ 59.863572][ T5357] netlink: 104 bytes leftover after parsing attributes in process `syz.4.555'. [ 59.900788][ T5357] tmpfs: Bad value for 'mpol' [ 59.901139][ T29] audit: type=1400 audit(1724347480.984:638): avc: denied { mounton } for pid=5355 comm="syz.4.555" path="/56/file0/file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 59.944643][ T5354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 59.955140][ T5354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 60.063478][ T5364] veth0_vlan: entered allmulticast mode [ 60.318321][ T5380] FAULT_INJECTION: forcing a failure. [ 60.318321][ T5380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.320304][ T5386] loop3: detected capacity change from 0 to 512 [ 60.331600][ T5380] CPU: 1 UID: 0 PID: 5380 Comm: syz.0.561 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 60.348371][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.358503][ T5380] Call Trace: [ 60.361777][ T5380] [ 60.364700][ T5380] dump_stack_lvl+0xf2/0x150 [ 60.369368][ T5380] dump_stack+0x15/0x20 [ 60.373601][ T5380] should_fail_ex+0x229/0x230 [ 60.378285][ T5380] should_fail_alloc_page+0xfd/0x110 [ 60.383655][ T5380] __alloc_pages_noprof+0x109/0x360 [ 60.384517][ T29] audit: type=1400 audit(1724347481.454:639): avc: denied { write } for pid=5381 comm="syz.3.565" name="map_files" dev="proc" ino=10992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.388858][ T5380] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 60.410749][ T29] audit: type=1400 audit(1724347481.454:640): avc: denied { add_name } for pid=5381 comm="syz.3.565" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.416037][ T5380] folio_alloc_noprof+0xee/0x130 [ 60.416066][ T5380] filemap_alloc_folio_noprof+0x69/0x220 [ 60.436665][ T29] audit: type=1400 audit(1724347481.454:641): avc: denied { create } for pid=5381 comm="syz.3.565" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 60.441519][ T5380] __filemap_get_folio+0x298/0x5b0 [ 60.447198][ T29] audit: type=1400 audit(1724347481.454:642): avc: denied { associate } for pid=5381 comm="syz.3.565" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.467623][ T5380] ? __kmalloc_noprof+0x165/0x370 [ 60.467648][ T5380] aio_setup_ring+0x266/0x6b0 [ 60.467675][ T5380] ioctx_alloc+0x2b2/0x4c0 [ 60.467710][ T5380] __se_sys_io_setup+0x6b/0x1b0 [ 60.467757][ T5380] __x64_sys_io_setup+0x31/0x40 [ 60.467780][ T5380] x64_sys_call+0x2639/0x2d60 [ 60.467805][ T5380] do_syscall_64+0xc9/0x1c0 [ 60.467890][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 60.467938][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 60.468112][ T5380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.468138][ T5380] RIP: 0033:0x7f1126889e79 [ 60.468153][ T5380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.483124][ T5385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5385 comm=syz.2.564 [ 60.494636][ T5380] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 60.499684][ T5385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5385 comm=syz.2.564 [ 60.504324][ T5380] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 60.504339][ T5380] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000008000 [ 60.504350][ T5380] RBP: 00007f1125501090 R08: 0000000000000000 R09: 0000000000000000 [ 60.531447][ T5385] 9pnet_fd: Insufficient options for proto=fd [ 60.532226][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.532239][ T5380] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 60.532254][ T5380] [ 60.618296][ T5388] mmap: syz.4.555 (5388) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.785119][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 60.804279][ T29] audit: type=1400 audit(1724347481.894:643): avc: denied { read } for pid=5399 comm="syz.2.569" name="file5" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.839788][ T5406] FAULT_INJECTION: forcing a failure. [ 60.839788][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 60.852427][ T5406] CPU: 1 UID: 0 PID: 5406 Comm: syz.0.581 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 60.863034][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.873221][ T5406] Call Trace: [ 60.876485][ T5406] [ 60.879405][ T5406] dump_stack_lvl+0xf2/0x150 [ 60.884091][ T5406] dump_stack+0x15/0x20 [ 60.888254][ T5406] should_fail_ex+0x229/0x230 [ 60.892938][ T5406] ? dst_alloc+0xc0/0x100 [ 60.897255][ T5406] should_failslab+0x8f/0xb0 [ 60.901983][ T5406] kmem_cache_alloc_noprof+0x4c/0x290 [ 60.907434][ T5406] dst_alloc+0xc0/0x100 [ 60.911585][ T5406] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 60.917561][ T5406] ip_route_output_flow+0x76/0x120 [ 60.922662][ T5406] raw_sendmsg+0x9e9/0xe50 [ 60.927121][ T5406] ? __pfx_raw_sendmsg+0x10/0x10 [ 60.932136][ T5406] inet_sendmsg+0xc5/0xd0 [ 60.934823][ T5402] block device autoloading is deprecated and will be removed. [ 60.936600][ T5406] __sock_sendmsg+0x102/0x180 [ 60.948702][ T5406] sock_sendmsg+0x96/0xe0 [ 60.953035][ T5406] splice_to_socket+0x657/0x9d0 [ 60.957894][ T5406] ? __pfx_splice_to_socket+0x10/0x10 [ 60.963303][ T5406] do_splice+0x99b/0x1150 [ 60.967636][ T5406] ? get_pid_task+0x8e/0xc0 [ 60.972134][ T5406] ? proc_fail_nth_write+0x130/0x160 [ 60.977464][ T5406] ? __fget_files+0x1da/0x210 [ 60.982138][ T5406] __se_sys_splice+0x24c/0x390 [ 60.986984][ T5406] __x64_sys_splice+0x78/0x90 [ 60.991667][ T5406] x64_sys_call+0x2945/0x2d60 [ 60.996363][ T5406] do_syscall_64+0xc9/0x1c0 [ 61.000882][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 61.005627][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 61.010390][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.016306][ T5406] RIP: 0033:0x7f1126889e79 [ 61.020710][ T5406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.040390][ T5406] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 61.048853][ T5406] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 61.056809][ T5406] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.064765][ T5406] RBP: 00007f1125501090 R08: 00000000000000e8 R09: 0000000000000000 [ 61.072824][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.080780][ T5406] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 61.088799][ T5406] [ 61.210528][ T29] audit: type=1400 audit(1724347482.294:644): avc: denied { read write } for pid=3264 comm="syz-executor" name="loop0" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.233747][ T29] audit: type=1400 audit(1724347482.294:645): avc: denied { open } for pid=3264 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.321893][ T29] audit: type=1400 audit(1724347482.294:646): avc: denied { ioctl } for pid=3264 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=542 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.355855][ T5427] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.738235][ T5462] loop4: detected capacity change from 0 to 512 [ 61.752919][ T5462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.765169][ T5462] EXT4-fs (loop4): 1 truncate cleaned up [ 61.771247][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.806146][ T5468] __nla_validate_parse: 3 callbacks suppressed [ 61.806162][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 61.925001][ T5476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'. [ 61.937553][ T5476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'. [ 62.040529][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 62.181632][ T5492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=5492 comm=syz.0.598 [ 62.246778][ T5492] netlink: 'syz.0.598': attribute type 2 has an invalid length. [ 62.277633][ T5496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.599'. [ 62.294997][ T5496] loop2: detected capacity change from 0 to 512 [ 62.301855][ T5496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.305991][ T5500] loop0: detected capacity change from 0 to 512 [ 62.313771][ T5496] EXT4-fs (loop2): 1 truncate cleaned up [ 62.324896][ T5496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.369351][ T5500] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 62.439238][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 62.482241][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.646053][ T5527] loop3: detected capacity change from 0 to 4096 [ 62.660447][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.671166][ T5529] loop2: detected capacity change from 0 to 164 [ 62.680659][ T5527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.698754][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 62.710680][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 62.746798][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.758985][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.899719][ T5544] FAULT_INJECTION: forcing a failure. [ 62.899719][ T5544] name failslab, interval 1, probability 0, space 0, times 0 [ 62.912446][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz.0.614 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 62.923107][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.933141][ T5544] Call Trace: [ 62.936406][ T5544] [ 62.939314][ T5544] dump_stack_lvl+0xf2/0x150 [ 62.943896][ T5544] dump_stack+0x15/0x20 [ 62.948031][ T5544] should_fail_ex+0x229/0x230 [ 62.952757][ T5544] ? sctp_add_bind_addr+0x6f/0x1e0 [ 62.957924][ T5544] should_failslab+0x8f/0xb0 [ 62.962502][ T5544] __kmalloc_cache_noprof+0x4b/0x2a0 [ 62.967774][ T5544] sctp_add_bind_addr+0x6f/0x1e0 [ 62.972825][ T5544] sctp_copy_local_addr_list+0x19b/0x220 [ 62.978455][ T5544] sctp_copy_one_addr+0x83/0x410 [ 62.983381][ T5544] sctp_bind_addr_copy+0x81/0x2b0 [ 62.988406][ T5544] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 62.994450][ T5544] sctp_connect_new_asoc+0x1d0/0x3b0 [ 62.999719][ T5544] sctp_sendmsg+0xf05/0x1920 [ 63.004293][ T5544] ? __pfx_sctp_sendmsg+0x10/0x10 [ 63.009401][ T5544] inet_sendmsg+0xc5/0xd0 [ 63.013712][ T5544] __sock_sendmsg+0x102/0x180 [ 63.018471][ T5544] __sys_sendto+0x1e5/0x260 [ 63.022956][ T5544] __x64_sys_sendto+0x78/0x90 [ 63.027651][ T5544] x64_sys_call+0x2959/0x2d60 [ 63.032364][ T5544] do_syscall_64+0xc9/0x1c0 [ 63.036850][ T5544] ? clear_bhb_loop+0x55/0xb0 [ 63.041577][ T5544] ? clear_bhb_loop+0x55/0xb0 [ 63.046255][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.052128][ T5544] RIP: 0033:0x7f1126889e79 [ 63.056572][ T5544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.076188][ T5544] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.084602][ T5544] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 63.092583][ T5544] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 63.100564][ T5544] RBP: 00007f1125501090 R08: 000000002005ffe4 R09: 000000000000001c [ 63.108567][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.116521][ T5544] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 63.124521][ T5544] [ 63.171744][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 63.245977][ T5556] loop0: detected capacity change from 0 to 128 [ 63.254119][ T5556] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.266522][ T5556] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.315064][ T4933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.404437][ T3264] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.707145][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 63.735614][ T5590] loop0: detected capacity change from 0 to 512 [ 63.742308][ T5590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.766992][ T5590] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.630: invalid indirect mapped block 512 (level 0) [ 63.790097][ T5590] EXT4-fs (loop0): Remounting filesystem read-only [ 63.815026][ T5590] EXT4-fs (loop0): 1 orphan inode deleted [ 63.820772][ T5590] EXT4-fs (loop0): 1 truncate cleaned up [ 63.860660][ T5590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.915450][ T5590] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 63.941457][ T5590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.996985][ T5608] 9pnet_fd: Insufficient options for proto=fd [ 64.126498][ T5625] loop0: detected capacity change from 0 to 512 [ 64.140507][ T5625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.153084][ T5625] EXT4-fs (loop0): 1 truncate cleaned up [ 64.161546][ T5625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.761910][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 64.761944][ T29] audit: type=1400 audit(1724347485.844:769): avc: denied { mounton } for pid=5649 comm="syz.4.647" path="/67/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 64.813254][ T29] audit: type=1400 audit(1724347485.894:770): avc: denied { map } for pid=5649 comm="syz.4.647" path="socket:[12403]" dev="sockfs" ino=12403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.861193][ T5654] loop4: detected capacity change from 0 to 1024 [ 64.884806][ T5654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0003] [ 64.893018][ T5654] System zones: 0-1, 3-12 [ 64.898441][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.001381][ T29] audit: type=1400 audit(1724347486.084:771): avc: denied { getopt } for pid=5666 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.043987][ T5672] loop2: detected capacity change from 0 to 512 [ 65.066254][ T5672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.089115][ T5672] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.140001][ T5679] serio: Serial port ptm1 [ 65.141923][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.236087][ T29] audit: type=1400 audit(1724347486.324:772): avc: denied { unmount } for pid=4996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.354501][ T5710] loop0: detected capacity change from 0 to 1024 [ 65.355541][ T5711] FAULT_INJECTION: forcing a failure. [ 65.355541][ T5711] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.361118][ T5710] EXT4-fs: Ignoring removed orlov option [ 65.373900][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: syz.1.661 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 65.379565][ T5710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.390048][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.390060][ T5711] Call Trace: [ 65.390067][ T5711] [ 65.413041][ T5711] dump_stack_lvl+0xf2/0x150 [ 65.417645][ T5711] dump_stack+0x15/0x20 [ 65.421898][ T5711] should_fail_ex+0x229/0x230 [ 65.426575][ T5711] should_fail+0xb/0x10 [ 65.430763][ T5711] should_fail_usercopy+0x1a/0x20 [ 65.435866][ T5711] _copy_from_user+0x1e/0xd0 [ 65.440529][ T5711] ptp_ioctl+0x64f/0x1530 [ 65.444869][ T5711] ? __pfx_ptp_ioctl+0x10/0x10 [ 65.449630][ T5711] posix_clock_ioctl+0xbd/0xe0 [ 65.454476][ T5711] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 65.459936][ T5711] __se_sys_ioctl+0xd3/0x150 [ 65.464532][ T5711] __x64_sys_ioctl+0x43/0x50 [ 65.469131][ T5711] x64_sys_call+0x15cc/0x2d60 [ 65.473894][ T5711] do_syscall_64+0xc9/0x1c0 [ 65.478455][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 65.483239][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 65.487982][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.493925][ T5711] RIP: 0033:0x7f4ed3e69e79 [ 65.498345][ T5711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.517951][ T5711] RSP: 002b:00007f4ed2ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.526393][ T5711] RAX: ffffffffffffffda RBX: 00007f4ed4005f80 RCX: 00007f4ed3e69e79 [ 65.534473][ T5711] RDX: 0000000020000000 RSI: 0000000040383d0c RDI: 0000000000000005 [ 65.542456][ T5711] RBP: 00007f4ed2ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.550423][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.558441][ T5711] R13: 0000000000000000 R14: 00007f4ed4005f80 R15: 00007ffd7ad062e8 [ 65.566454][ T5711] [ 65.576086][ T5710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.635028][ T4167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.645593][ T5715] Cannot find add_set index 0 as target [ 65.888556][ T29] audit: type=1400 audit(1724347486.974:773): avc: denied { ioctl } for pid=5717 comm="syz.4.664" path="socket:[11914]" dev="sockfs" ino=11914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.029925][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.108885][ T5732] FAULT_INJECTION: forcing a failure. [ 66.108885][ T5732] name failslab, interval 1, probability 0, space 0, times 0 [ 66.121624][ T5732] CPU: 1 UID: 0 PID: 5732 Comm: syz.0.667 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 66.132223][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.142272][ T5732] Call Trace: [ 66.145541][ T5732] [ 66.148532][ T5732] dump_stack_lvl+0xf2/0x150 [ 66.153214][ T5732] dump_stack+0x15/0x20 [ 66.157409][ T5732] should_fail_ex+0x229/0x230 [ 66.162138][ T5732] ? sctp_add_bind_addr+0x6f/0x1e0 [ 66.167330][ T5732] should_failslab+0x8f/0xb0 [ 66.171995][ T5732] __kmalloc_cache_noprof+0x4b/0x2a0 [ 66.177334][ T5732] sctp_add_bind_addr+0x6f/0x1e0 [ 66.182397][ T5732] sctp_copy_local_addr_list+0x19b/0x220 [ 66.188033][ T5732] sctp_copy_one_addr+0x83/0x410 [ 66.192971][ T5732] sctp_bind_addr_copy+0x81/0x2b0 [ 66.198015][ T5732] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 66.204167][ T5732] sctp_connect_new_asoc+0x1d0/0x3b0 [ 66.209463][ T5732] sctp_sendmsg+0xf05/0x1920 [ 66.214176][ T5732] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.219284][ T5732] inet_sendmsg+0xc5/0xd0 [ 66.223625][ T5732] __sock_sendmsg+0x102/0x180 [ 66.228310][ T5732] __sys_sendto+0x1e5/0x260 [ 66.232859][ T5732] __x64_sys_sendto+0x78/0x90 [ 66.237535][ T5732] x64_sys_call+0x2959/0x2d60 [ 66.242217][ T5732] do_syscall_64+0xc9/0x1c0 [ 66.246799][ T5732] ? clear_bhb_loop+0x55/0xb0 [ 66.251527][ T5732] ? clear_bhb_loop+0x55/0xb0 [ 66.256209][ T5732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.262112][ T5732] RIP: 0033:0x7f1126889e79 [ 66.266516][ T5732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.286121][ T5732] RSP: 002b:00007f1125501038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.294556][ T5732] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f1126889e79 [ 66.302597][ T5732] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 66.310625][ T5732] RBP: 00007f1125501090 R08: 000000002005ffe4 R09: 000000000000001c [ 66.318594][ T5732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.326560][ T5732] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 66.334529][ T5732] [ 66.506386][ T29] audit: type=1326 audit(1724347487.594:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.0.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1126889e79 code=0x0 [ 66.649254][ T5773] FAULT_INJECTION: forcing a failure. [ 66.649254][ T5773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.662333][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: syz.0.675 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 66.672962][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.683003][ T5773] Call Trace: [ 66.686269][ T5773] [ 66.689255][ T5773] dump_stack_lvl+0xf2/0x150 [ 66.693844][ T5773] dump_stack+0x15/0x20 [ 66.697999][ T5773] should_fail_ex+0x229/0x230 [ 66.702692][ T5773] should_fail+0xb/0x10 [ 66.706846][ T5773] should_fail_usercopy+0x1a/0x20 [ 66.711893][ T5773] _copy_to_user+0x1e/0xa0 [ 66.716350][ T5773] simple_read_from_buffer+0xa0/0x110 [ 66.721713][ T5773] proc_fail_nth_read+0xff/0x140 [ 66.726641][ T5773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.732197][ T5773] vfs_read+0x1a2/0x6e0 [ 66.736346][ T5773] ? __rcu_read_unlock+0x4e/0x70 [ 66.741269][ T5773] ? __fget_files+0x1da/0x210 [ 66.745931][ T5773] ksys_read+0xeb/0x1b0 [ 66.750101][ T5773] __x64_sys_read+0x42/0x50 [ 66.754729][ T5773] x64_sys_call+0x27d3/0x2d60 [ 66.759444][ T5773] do_syscall_64+0xc9/0x1c0 [ 66.763975][ T5773] ? clear_bhb_loop+0x55/0xb0 [ 66.768803][ T5773] ? clear_bhb_loop+0x55/0xb0 [ 66.773472][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.779456][ T5773] RIP: 0033:0x7f11268888bc [ 66.783923][ T5773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 66.803585][ T5773] RSP: 002b:00007f1125501030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.812007][ T5773] RAX: ffffffffffffffda RBX: 00007f1126a25f80 RCX: 00007f11268888bc [ 66.819964][ T5773] RDX: 000000000000000f RSI: 00007f11255010a0 RDI: 0000000000000006 [ 66.827952][ T5773] RBP: 00007f1125501090 R08: 0000000000000000 R09: 0000000000000000 [ 66.835906][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.843935][ T5773] R13: 0000000000000000 R14: 00007f1126a25f80 R15: 00007ffe8e0789d8 [ 66.851962][ T5773] [ 66.950024][ T5782] loop0: detected capacity change from 0 to 512 [ 66.954012][ T5780] FAULT_INJECTION: forcing a failure. [ 66.954012][ T5780] name failslab, interval 1, probability 0, space 0, times 0 [ 66.957051][ T5754] __nla_validate_parse: 7 callbacks suppressed [ 66.957063][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 66.968925][ T5780] CPU: 0 UID: 0 PID: 5780 Comm: syz.3.678 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 66.968948][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.968958][ T5780] Call Trace: [ 66.968963][ T5780] [ 67.010693][ T5780] dump_stack_lvl+0xf2/0x150 [ 67.015323][ T5780] dump_stack+0x15/0x20 [ 67.019487][ T5780] should_fail_ex+0x229/0x230 [ 67.024241][ T5780] ? sctp_add_bind_addr+0x6f/0x1e0 [ 67.029359][ T5780] should_failslab+0x8f/0xb0 [ 67.034034][ T5780] __kmalloc_cache_noprof+0x4b/0x2a0 [ 67.039325][ T5780] sctp_add_bind_addr+0x6f/0x1e0 [ 67.044296][ T5780] sctp_copy_local_addr_list+0x19b/0x220 [ 67.049992][ T5780] sctp_copy_one_addr+0x83/0x410 [ 67.054924][ T5780] sctp_bind_addr_copy+0x81/0x2b0 [ 67.059976][ T5780] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 67.066112][ T5780] sctp_connect_new_asoc+0x1d0/0x3b0 [ 67.071450][ T5780] sctp_sendmsg+0xf05/0x1920 [ 67.076037][ T5780] ? __pfx_sctp_sendmsg+0x10/0x10 [ 67.081053][ T5780] inet_sendmsg+0xc5/0xd0 [ 67.085430][ T5780] __sock_sendmsg+0x102/0x180 [ 67.090105][ T5780] __sys_sendto+0x1e5/0x260 [ 67.094631][ T5780] __x64_sys_sendto+0x78/0x90 [ 67.099304][ T5780] x64_sys_call+0x2959/0x2d60 [ 67.103975][ T5780] do_syscall_64+0xc9/0x1c0 [ 67.108506][ T5780] ? clear_bhb_loop+0x55/0xb0 [ 67.113172][ T5780] ? clear_bhb_loop+0x55/0xb0 [ 67.117899][ T5780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.123811][ T5780] RIP: 0033:0x7f748bc89e79 [ 67.128222][ T5780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.147816][ T5780] RSP: 002b:00007f748a907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.156211][ T5780] RAX: ffffffffffffffda RBX: 00007f748be25f80 RCX: 00007f748bc89e79 [ 67.164179][ T5780] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 67.172209][ T5780] RBP: 00007f748a907090 R08: 000000002005ffe4 R09: 000000000000001c [ 67.180164][ T5780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.188173][ T5780] R13: 0000000000000000 R14: 00007f748be25f80 R15: 00007ffcaa3390e8 [ 67.196134][ T5780] [ 67.201829][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 67.233638][ T5792] xt_NFQUEUE: number of queues (65530) out of range (got 66985) [ 67.351093][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 67.400696][ T5808] loop4: detected capacity change from 0 to 128 [ 67.419899][ T5812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5812 comm=syz.4.689 [ 67.449326][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.470994][ T29] audit: type=1400 audit(1724347488.554:775): avc: denied { create } for pid=5817 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.500734][ T29] audit: type=1400 audit(1724347488.584:776): avc: denied { ioctl } for pid=5817 comm="syz.4.692" path="socket:[12635]" dev="sockfs" ino=12635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.534162][ T5819] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 67.541817][ T5819] netlink: 67 bytes leftover after parsing attributes in process `syz.4.692'. [ 67.553479][ T29] audit: type=1400 audit(1724347488.634:777): avc: denied { listen } for pid=5817 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.588782][ T29] audit: type=1400 audit(1724347488.654:778): avc: denied { write } for pid=5817 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.601073][ T5826] FAULT_INJECTION: forcing a failure. [ 67.601073][ T5826] name failslab, interval 1, probability 0, space 0, times 0 [ 67.621837][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz.4.695 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 67.632413][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 67.642447][ T5826] Call Trace: [ 67.645705][ T5826] [ 67.648619][ T5826] dump_stack_lvl+0xf2/0x150 [ 67.653233][ T5826] dump_stack+0x15/0x20 [ 67.657372][ T5826] should_fail_ex+0x229/0x230 [ 67.662034][ T5826] ? sctp_add_bind_addr+0x6f/0x1e0 [ 67.667192][ T5826] should_failslab+0x8f/0xb0 [ 67.671792][ T5826] __kmalloc_cache_noprof+0x4b/0x2a0 [ 67.677087][ T5826] sctp_add_bind_addr+0x6f/0x1e0 [ 67.682033][ T5826] sctp_copy_local_addr_list+0x19b/0x220 [ 67.687670][ T5826] sctp_copy_one_addr+0x83/0x410 [ 67.692615][ T5826] sctp_bind_addr_copy+0x81/0x2b0 [ 67.697632][ T5826] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 67.703679][ T5826] sctp_connect_new_asoc+0x1d0/0x3b0 [ 67.708953][ T5826] sctp_sendmsg+0xf05/0x1920 [ 67.713532][ T5826] ? __pfx_sctp_sendmsg+0x10/0x10 [ 67.718549][ T5826] inet_sendmsg+0xc5/0xd0 [ 67.722864][ T5826] __sock_sendmsg+0x102/0x180 [ 67.727577][ T5826] __sys_sendto+0x1e5/0x260 [ 67.732063][ T5826] __x64_sys_sendto+0x78/0x90 [ 67.736761][ T5826] x64_sys_call+0x2959/0x2d60 [ 67.741563][ T5826] do_syscall_64+0xc9/0x1c0 [ 67.746088][ T5826] ? clear_bhb_loop+0x55/0xb0 [ 67.750790][ T5826] ? clear_bhb_loop+0x55/0xb0 [ 67.755529][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.761487][ T5826] RIP: 0033:0x7f405b379e79 [ 67.765888][ T5826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.785540][ T5826] RSP: 002b:00007f4059ff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.794001][ T5826] RAX: ffffffffffffffda RBX: 00007f405b515f80 RCX: 00007f405b379e79 [ 67.801971][ T5826] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003 [ 67.809957][ T5826] RBP: 00007f4059ff1090 R08: 000000002005ffe4 R09: 000000000000001c [ 67.818009][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.825960][ T5826] R13: 0000000000000000 R14: 00007f405b515f80 R15: 00007fff463f77f8 [ 67.833975][ T5826] [ 67.874962][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 67.884079][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 67.896429][ T5843] loop2: detected capacity change from 0 to 512 [ 67.904396][ T5843] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 16: comm syz.2.698: invalid block [ 67.915805][ T5843] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.698: couldn't read orphan inode 11 (err -117) [ 67.927838][ T5843] EXT4-fs (loop2): 1 truncate cleaned up [ 67.934066][ T5843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.955172][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.965934][ T3261] ================================================================== [ 67.974017][ T3261] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 67.981488][ T3261] [ 67.983799][ T3261] write to 0xffff888237d2b370 of 1 bytes by task 5850 on cpu 1: [ 67.991420][ T3261] folios_put_refs+0x266/0x2b0 [ 67.996188][ T3261] mlock_folio_batch+0x319d/0x31d0 [ 68.001306][ T3261] mlock_folio+0x1b7/0x210 [ 68.005726][ T3261] folio_add_file_rmap_ptes+0x1c2/0x1d0 [ 68.011279][ T3261] set_pte_range+0x206/0x430 [ 68.015866][ T3261] filemap_map_pages+0x643/0x9f0 [ 68.020803][ T3261] handle_mm_fault+0x10d4/0x2940 [ 68.025742][ T3261] __get_user_pages+0x499/0x10d0 [ 68.030686][ T3261] __mm_populate+0x25b/0x3b0 [ 68.035280][ T3261] __se_sys_mlockall+0x2c5/0x370 [ 68.040218][ T3261] __x64_sys_mlockall+0x1f/0x30 [ 68.045068][ T3261] x64_sys_call+0x1e3a/0x2d60 [ 68.049749][ T3261] do_syscall_64+0xc9/0x1c0 [ 68.054251][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.060151][ T3261] [ 68.062460][ T3261] read to 0xffff888237d2b370 of 1 bytes by task 3261 on cpu 0: [ 68.069989][ T3261] need_mlock_drain+0x30/0x50 [ 68.074668][ T3261] __lru_add_drain_all+0x235/0x410 [ 68.079779][ T3261] lru_add_drain_all+0x10/0x20 [ 68.084538][ T3261] invalidate_bdev+0x47/0x70 [ 68.089114][ T3261] ext4_put_super+0x571/0x840 [ 68.093780][ T3261] generic_shutdown_super+0xde/0x210 [ 68.099063][ T3261] kill_block_super+0x2a/0x70 [ 68.103734][ T3261] ext4_kill_sb+0x44/0x80 [ 68.108052][ T3261] deactivate_locked_super+0x7d/0x1c0 [ 68.113414][ T3261] deactivate_super+0x9f/0xb0 [ 68.118082][ T3261] cleanup_mnt+0x268/0x2e0 [ 68.122486][ T3261] __cleanup_mnt+0x19/0x20 [ 68.126887][ T3261] task_work_run+0x13a/0x1a0 [ 68.131462][ T3261] syscall_exit_to_user_mode+0xbe/0x130 [ 68.136998][ T3261] do_syscall_64+0xd6/0x1c0 [ 68.141492][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.147375][ T3261] [ 68.149677][ T3261] value changed: 0x1f -> 0x08 [ 68.154329][ T3261] [ 68.156630][ T3261] Reported by Kernel Concurrency Sanitizer on: [ 68.162762][ T3261] CPU: 0 UID: 0 PID: 3261 Comm: syz-executor Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 68.173592][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.183718][ T3261] ================================================================== [ 68.202808][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 68.206374][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'. [ 68.224178][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.